OTL logfile created on: 2012-07-02 10:35:40 - Run 1
OTL by OldTimer - Version 3.2.53.1     Folder = C:\Documents and Settings\Seba\Pulpit
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
1023,23 Mb Total Physical Memory | 354,18 Mb Available Physical Memory | 34,61% Memory free
3,83 Gb Paging File | 3,34 Gb Available in Paging File | 87,10% Paging File free
Paging file location(s): C:\pagefile.sys 3002 4002 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 232,93 Gb Total Space | 98,79 Gb Free Space | 42,41% Space Free | Partition Type: NTFS
Drive F: | 232,83 Gb Total Space | 23,40 Gb Free Space | 10,05% Space Free | Partition Type: NTFS
Drive I: | 701,38 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
 
Computer Name: SEBA | User Name: Seba | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-07-02 10:16:41 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Seba\Pulpit\OTL.exe
PRC - [2012-07-01 13:47:01 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2012-06-30 21:51:59 | 008,148,992 | ---- | M] () -- C:\UniServer\usr\local\mysql\bin\mysqld-opt.exe
PRC - [2012-06-01 17:37:13 | 000,913,888 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2012-04-24 16:01:55 | 000,161,664 | ---- | M] (Oracle Corporation) -- C:\Program Files\Java\jre7\bin\jqs.exe
PRC - [2012-04-04 15:56:40 | 000,654,408 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2011-12-23 11:06:37 | 000,172,032 | ---- | M] (HP) -- C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe
PRC - [2011-08-12 01:38:07 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SASCore.exe
PRC - [2010-09-30 20:58:18 | 003,249,504 | ---- | M] (Tonec Inc.) -- C:\Program Files\Internet Download Manager\IDMan.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2012-06-30 21:51:59 | 008,148,992 | ---- | M] () -- C:\UniServer\usr\local\mysql\bin\mysqld-opt.exe
MOD - [2012-06-23 20:43:18 | 009,459,912 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_3_300_262.dll
MOD - [2012-06-01 17:37:31 | 002,042,848 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2008-04-14 22:50:38 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [Auto | Stopped] --  -- (WSWNA1100)
SRV - File not found [Disabled | Stopped] --  -- (NoIPDUCService)
SRV - [2012-06-30 21:51:59 | 008,148,992 | ---- | M] () [Auto | Running] -- C:\UniServer\usr\local\mysql\bin\mysqld-opt.exe -- (MySQLS1)
SRV - [2012-06-30 21:51:48 | 000,018,944 | ---- | M] () [Auto | Stopped] -- C:\UniServer\usr\local\apache2\bin\Apache.exe -- (ApacheS1)
SRV - [2012-06-30 15:03:50 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2012-06-28 15:42:07 | 000,292,352 | ---- | M] () [On_Demand | Stopped] -- C:\WINDOWS\system32\vssvc.exe -- (VSS)
SRV - [2012-06-28 15:41:01 | 000,098,816 | ---- | M] () [On_Demand | Stopped] -- C:\WINDOWS\system32\scardsvr.exe -- (SCardSvr)
SRV - [2012-06-28 15:37:39 | 000,225,792 | ---- | M] () [On_Demand | Stopped] -- C:\WINDOWS\System32\dmadmin.exe -- (dmadmin)
SRV - [2012-06-23 20:43:51 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012-06-05 15:17:44 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012-06-01 17:37:22 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012-06-01 13:18:16 | 000,736,104 | ---- | M] (Tunngle.net GmbH) [On_Demand | Stopped] -- C:\Program Files\Tunngle\TnglCtrl.exe -- (TunngleService)
SRV - [2012-05-15 12:18:00 | 001,262,400 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2012-04-24 16:01:55 | 000,161,664 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\Program Files\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2012-04-04 15:56:40 | 000,654,408 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2011-09-04 23:43:00 | 004,770,728 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\WINDOWS\system32\GameMon.des -- (npggsvc)
SRV - [2011-08-12 01:38:07 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Program Files\SUPERAntiSpyware\SASCore.exe -- (!SASCORE)
SRV - [2010-09-10 16:50:28 | 000,411,432 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2010-02-19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2008-04-14 22:50:46 | 000,105,472 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\p2pgasvc.dll -- (p2pgasvc)
SRV - [2008-04-14 22:50:34 | 000,035,328 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\WINDOWS\system32\iprip.dll -- (Iprip)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WSIMD)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WPRO_40_1340) WinPcap Packet Driver (WPRO_40_1340)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)
DRV - File not found [Kernel | Auto | Stopped] --  -- (VMnetBridge)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (VMnetAdapter)
DRV - File not found [Kernel | Boot | Stopped] --  -- (vmci)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (upperdev)
DRV - File not found [File_System | On_Demand | Stopped] --  -- (TrojanKillerDriver)
DRV - File not found [Kernel | Boot | Stopped] --  -- (TFSysMon)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (TfNetMon)
DRV - File not found [Kernel | Boot | Stopped] --  -- (TfFsMon)
DRV - File not found [Kernel | Boot | Stopped] --  -- (szkgfs)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (sfcure01) StarForce Cure Driver (version 1.x)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (seehcri)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (rkhdrv40)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PCANDIS5_WIFISCAN.SYS)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PCANDIS5_RETWIFI)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\Seba\USTAWI~1\Temp\mfe_rr.sys -- (MFE_RR)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\32.tmp -- (MEMSWEEP2)
DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)
DRV - File not found [Kernel | Boot | Stopped] --  -- (is3srv)
DRV - File not found [Kernel | System | Stopped] --  -- (i2omgmt)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (esgiguard)
DRV - File not found [Kernel | System | Stopped] --  -- (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\ComboFix\catchme.sys -- (catchme)
DRV - File not found [Kernel | On_Demand | Unknown] --  -- (awxfzob9)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (AR9271)
DRV - File not found [Kernel | System | Stopped] --  -- (AmdPPM)
DRV - File not found [Kernel | On_Demand | Unknown] --  -- (aapooz2i)
DRV - File not found [Kernel | On_Demand | Unknown] --  -- (a9on3cm6)
DRV - File not found [Kernel | On_Demand | Unknown] --  -- (a1ch9kxk)
DRV - [2012-06-03 11:32:15 | 000,025,280 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi)
DRV - [2012-05-20 19:19:32 | 000,242,240 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2012-05-20 18:46:20 | 000,477,240 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sptd.sys -- (sptd)
DRV - [2012-04-04 15:56:40 | 000,022,344 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2012-01-25 19:56:46 | 000,051,144 | ---- | M] (Soluto LTD.) [File_System | Boot | Stopped] -- C:\WINDOWS\system32\drivers\Soluto.sys -- (Soluto)
DRV - [2011-08-17 09:56:22 | 000,018,176 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2011-07-22 18:27:02 | 000,012,880 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV)
DRV - [2011-07-12 23:55:22 | 000,067,664 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2011-05-14 16:09:27 | 000,027,656 | ---- | M] (Prevx) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\pxsec.sys -- (pxsec)
DRV - [2011-05-14 16:09:27 | 000,022,024 | ---- | M] (Prevx) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\pxscan.sys -- (pxscan)
DRV - [2011-05-12 14:05:32 | 000,018,816 | ---- | M] (Sophos Group) [Kernel | System | Running] -- C:\WINDOWS\system32\SAVRKBootTasks.sys -- (SAVRKBootTasks)
DRV - [2011-03-28 19:46:40 | 000,098,160 | ---- | M] (Tonec Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\idmtdi.sys -- (IDMTDI)
DRV - [2011-02-06 16:14:01 | 000,278,984 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt)
DRV - [2011-02-06 16:14:00 | 000,025,416 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2011-01-12 11:42:12 | 000,025,088 | ---- | M] (TeamViewer GmbH) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\teamviewervpn.sys -- (teamviewervpn)
DRV - [2010-09-01 08:00:24 | 000,025,512 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ggsemc.sys -- (ggsemc)
DRV - [2010-09-01 08:00:24 | 000,013,224 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ggflt.sys -- (ggflt)
DRV - [2010-04-12 10:44:34 | 000,059,388 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\scdemu.sys -- (SCDEmu)
DRV - [2010-03-31 00:00:00 | 000,027,760 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt -- (EverestDriver)
DRV - [2010-03-15 11:38:44 | 000,124,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1039mdm.sys -- (s1039mdm)
DRV - [2010-03-15 11:38:44 | 000,123,504 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1039unic.sys -- (s1039unic) Sony Ericsson Device 1039 USB Ethernet Emulation (WDM)
DRV - [2010-03-15 11:38:44 | 000,117,872 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1039mgmt.sys -- (s1039mgmt) Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM)
DRV - [2010-03-15 11:38:44 | 000,113,904 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1039obex.sys -- (s1039obex)
DRV - [2010-03-15 11:38:44 | 000,098,672 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1039bus.sys -- (s1039bus) Sony Ericsson Device 1039 driver (WDM)
DRV - [2010-03-15 11:38:44 | 000,025,456 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1039nd5.sys -- (s1039nd5) Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS)
DRV - [2010-03-15 11:38:44 | 000,014,960 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1039mdfl.sys -- (s1039mdfl)
DRV - [2010-02-11 14:02:15 | 000,226,880 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\tcpip6.sys -- (Tcpip6)
DRV - [2009-12-30 11:20:56 | 000,027,064 | ---- | M] (VS Revo Group) [File_System | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\revoflt.sys -- (Revoflt)
DRV - [2009-09-16 08:02:40 | 000,027,136 | ---- | M] (Tunngle.net) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\tap0901t.sys -- (tap0901t) TAP-Win32 Adapter V9 (Tunngle)
DRV - [2009-08-18 14:06:56 | 000,105,088 | R--- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ZTEusbser6k.sys -- (ZTEusbser6k)
DRV - [2009-08-18 14:06:56 | 000,105,088 | R--- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ZTEusbnmea.sys -- (ZTEusbnmea)
DRV - [2009-07-13 20:57:12 | 000,009,216 | ---- | M] (SNEG) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\FStarForce.sys -- (FStarForce)
DRV - [2009-05-20 07:22:44 | 001,872,192 | R--- | M] (C-Media Inc) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\cmudax3.sys -- (cmuda3)
DRV - [2009-03-25 17:48:00 | 000,114,728 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018mdm.sys -- (s1018mdm)
DRV - [2009-03-25 17:48:00 | 000,109,864 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018unic.sys -- (s1018unic) Sony Ericsson Device 1018 USB Ethernet Emulation (WDM)
DRV - [2009-03-25 17:48:00 | 000,106,208 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018mgmt.sys -- (s1018mgmt) Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM)
DRV - [2009-03-25 17:48:00 | 000,104,744 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018obex.sys -- (s1018obex)
DRV - [2009-03-25 17:48:00 | 000,086,824 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018bus.sys -- (s1018bus) Sony Ericsson Device 1018 driver (WDM)
DRV - [2009-03-25 17:48:00 | 000,026,024 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018nd5.sys -- (s1018nd5) Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS)
DRV - [2009-03-25 17:48:00 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018mdfl.sys -- (s1018mdfl)
DRV - [2008-12-26 13:56:04 | 000,017,792 | ---- | M] (Avnex) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\vcsvad.sys -- (VCSVADHWSer) Avnex Virtual Audio Device (WDM)
DRV - [2008-04-14 00:26:08 | 000,088,320 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnkipx.sys -- (NwlnkIpx)
DRV - [2008-04-14 00:23:10 | 000,040,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmnt.sys -- (nm)
DRV - [2008-03-25 05:48:08 | 000,022,016 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus)
DRV - [2008-03-25 05:48:06 | 000,054,400 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD)
DRV - [2008-02-15 09:15:26 | 000,014,336 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvsmu.sys -- (nvsmu)
DRV - [2008-02-12 03:42:38 | 000,232,472 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\VMM.sys -- (vmm)
DRV - [2008-01-25 14:01:06 | 000,132,096 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\nvgts.sys -- (nvgts)
DRV - [2007-06-29 14:47:34 | 000,034,304 | ---- | M] (AMD, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AmdLLD.sys -- (AmdLLD)
DRV - [2006-11-04 06:45:48 | 000,178,913 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\V0260Vid.sys -- (V0260VID)
DRV - [2006-07-01 23:32:26 | 000,043,520 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8)
DRV - [2005-12-06 17:11:18 | 000,035,328 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sfsync03.sys -- (sfsync03) StarForce Protection Synchronization Driver (version 3.x)
DRV - [2005-08-10 14:44:04 | 000,050,688 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sfdrv01.sys -- (sfdrv01) StarForce Protection Environment Driver (version 1.x)
DRV - [2005-05-16 15:20:39 | 000,006,656 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sfhlp02.sys -- (sfhlp02) StarForce Protection Helper Driver (version 2.x)
DRV - [2004-05-05 22:48:40 | 000,004,228 | ---- | M] (PowerQuest Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\PQNTDRV.sys -- (PQNTDrv)
DRV - [2003-09-06 15:37:22 | 000,062,656 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\prohlp02.sys -- (prohlp02)
DRV - [2003-09-06 14:27:06 | 000,004,832 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sfhlp01.sys -- (sfhlp01)
DRV - [2003-09-06 14:25:52 | 000,051,744 | ---- | M] (Protection Technology) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\prodrv06.sys -- (prodrv06)
DRV - [2003-09-06 14:22:08 | 000,006,944 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\prosync1.sys -- (prosync1)
DRV - [2002-07-17 08:53:02 | 000,016,877 | ---- | M] (Adaptec) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\ASPI32.SYS -- (Aspi32)
DRV - [2001-10-26 16:48:56 | 000,009,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\NtApm.sys -- (NtApm)
DRV - [2001-08-17 23:54:18 | 000,063,232 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnknb.sys -- (NwlnkNb)
DRV - [2001-08-17 23:54:18 | 000,055,936 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnkspx.sys -- (NwlnkSpx)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search bar = http://search.msn.com/spbasic.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-21-1715567821-299502267-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
IE - HKU\S-1-5-21-1715567821-299502267-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKU\S-1-5-21-1715567821-299502267-682003330-1003\..\SearchScopes,DefaultScope = ${searchCLSID}
IE - HKU\S-1-5-21-1715567821-299502267-682003330-1003\..\SearchScopes\${searchCLSID}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKU\S-1-5-21-1715567821-299502267-682003330-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-1715567821-299502267-682003330-1003\..\SearchScopes\{4CAB4CB5-0F19-4ED6-9D87-A7D6EA1D7D50}: "URL" = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
IE - HKU\S-1-5-21-1715567821-299502267-682003330-1003\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={sear
IE - HKU\S-1-5-21-1715567821-299502267-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1715567821-299502267-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultthis.engineName: "Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "about:home"
FF - prefs.js..extensions.enabledItems: mozilla_cc@internetdownloadmanager.com:6.8.2
FF - prefs.js..extensions.enabledItems: frameext@teesoft.info:1.0.0.4
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3
FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.1
FF - prefs.js..extensions.enabledItems: autofillForms@blueimp.net:0.9.8.0
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {3ED591BC-7CC7-495B-A526-B2431356EDC1}:2.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_3_300_262.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.3.1: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.3.0: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.0.61118.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5:  File not found
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin:  File not found
FF - HKLM\Software\MozillaPlugins\@playstation.com/PsndlCheck,version=1.00:  File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.69: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.69: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3:  File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9:  File not found
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Documents and Settings\Seba\Dane aplikacji\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Documents and Settings\Seba\Dane aplikacji\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3:  File not found
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=8:  File not found
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9:  File not found
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-06-07 23:33:25 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-04-24 16:14:58 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Documents and Settings\Seba\Dane aplikacji\IDM\idmmzcc3 [2012-07-01 23:46:53 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Documents and Settings\Seba\Dane aplikacji\IDM\idmmzcc3 [2012-07-01 23:46:53 | 000,000,000 | ---D | M]
 
[2010-12-19 15:41:05 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Seba\Dane aplikacji\Mozilla\Extensions
[2012-06-08 01:32:16 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Seba\Dane aplikacji\Mozilla\Firefox\Profiles\b84jkkr0.default\extensions
[2012-11-11 20:31:58 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Documents and Settings\Seba\Dane aplikacji\Mozilla\Firefox\Profiles\b84jkkr0.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2010-12-19 15:48:16 | 000,000,000 | ---D | M] (FrameExt) -- C:\Documents and Settings\Seba\Dane aplikacji\Mozilla\Firefox\Profiles\b84jkkr0.default\extensions\frameext@teesoft.info
[2011-03-12 13:40:22 | 000,002,071 | ---- | M] () -- C:\Documents and Settings\Seba\Dane aplikacji\Mozilla\Firefox\Profiles\b84jkkr0.default\searchplugins\absearch-search.xml
[2010-09-01 18:24:10 | 000,000,266 | ---- | M] () -- C:\Documents and Settings\Seba\Dane aplikacji\Mozilla\Firefox\Profiles\b84jkkr0.default\searchplugins\Search.xml
[2012-06-07 23:33:25 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012-06-01 17:38:43 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012-06-01 18:43:14 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2012-06-01 18:43:14 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2012-06-01 18:43:14 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2012-06-01 18:43:14 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2012-06-01 18:43:14 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2012-06-01 18:43:14 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2012-07-01 23:36:36 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeCS5ServiceManager] C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe ()
O4 - HKLM..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe (AMD)
O4 - HKLM..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe (HP)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\nvmctray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nview\nwiz.exe ()
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKU\S-1-5-21-1715567821-299502267-682003330-1003..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKU\S-1-5-21-1715567821-299502267-682003330-1003..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe (Tonec Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoBandCustomize = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Advanced\Folder\Hidden\SHOWALL: CheckedValue = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\NoDriveTypeAutoRun: NoDriveTypeAutoRun = 177
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SynchronousMachineGroupPolicy = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SynchronousUserGroupPolicy = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Advanced\Folder\Hidden\SHOWALL: CheckedValue = 1
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Advanced\Folder\Hidden\SHOWALL: CheckedValue = 1
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1715567821-299502267-682003330-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1715567821-299502267-682003330-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-1715567821-299502267-682003330-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-1715567821-299502267-682003330-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Ściągnij przez IDM - C:\Program Files\Internet Download Manager\IEExt.htm ()
O8 - Extra context menu item: Ściągnij wszystkie linki przez IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm ()
O8 - Extra context menu item: Ściągnij zawartość wideo FLV przez IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm ()
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation)
O15 - HKU\.DEFAULT\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\.DEFAULT\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\.DEFAULT\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\.DEFAULT\..Trusted Domains: sony.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: sony.com ([]* in Trusted sites)
O15 - HKU\S-1-5-19\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\S-1-5-19\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\S-1-5-19\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\S-1-5-19\..Trusted Domains: sony.com ([]* in Trusted sites)
O15 - HKU\S-1-5-20\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\S-1-5-20\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\S-1-5-20\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\S-1-5-20\..Trusted Domains: sony.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1715567821-299502267-682003330-1003\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1715567821-299502267-682003330-1003\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1715567821-299502267-682003330-1003\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1715567821-299502267-682003330-1003\..Trusted Domains: sony.com ([]* in Trusted sites)
O16 - DPF: {00000161-0000-0010-8000-00AA00389B71} http://codecs.microsoft.com/codecs/i386/msaudio.cab (Reg Error: Key error.)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab (MksSkanerOnline Class)
O16 - DPF: {6C269571-C6D7-4818-BCA4-32A035E8C884} http://ccfiles.creative.com/Web/softwareupdate/su/ocx/15101/CTSUEng.cab (Creative Software AutoUpdate)
O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} http://www.nvidia.com/content/DriverDownload/nforce/NvidiaSmartScan.cab (NVIDIA Smart Scan)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab (Java Plug-in 1.7.0_03)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab (Java Plug-in 1.7.0_03)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab (Java Plug-in 1.7.0_03)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} http://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab (Creative Software AutoUpdate Support Package 2)
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} http://ccfiles.creative.com/Web/softwareupdate/ocx/15117/CTPID.cab (Creative Software AutoUpdate Support Package)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{30295073-F137-4091-89AE-C0AD59AFF263}: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\cetihpz {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll (Hewlett-Packard Company)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe ()
O20 - Winlogon\Notify\!SASWinLogon: DllName - (C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL) - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O24 - Desktop WallPaper: C:\Documents and Settings\Seba\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Seba\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010-07-31 23:15:26 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2001-10-26 18:12:38 | 000,000,112 | R--- | M] () - I:\AUTORUN.INF -- [ CDFS ]
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012-11-10 14:38:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Seba\Dane aplikacji\GameRanger
[2012-07-02 10:19:56 | 000,186,880 | ---- | C] (CEXX.ORG) -- C:\Documents and Settings\Seba\Pulpit\LSPFix.exe
[2012-07-02 10:16:41 | 000,595,968 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Seba\Pulpit\OTL.exe
[2012-07-02 01:01:06 | 000,000,000 | ---D | C] -- C:\_OTL
[2012-07-02 00:57:17 | 000,000,000 | ---D | C] -- C:\FRST
[2012-07-02 00:05:01 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2012-07-01 23:18:32 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2012-07-01 23:18:32 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2012-07-01 23:18:32 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2012-07-01 23:18:32 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2012-07-01 23:17:19 | 004,568,829 | R--- | C] (Swearware) -- C:\Documents and Settings\Seba\Pulpit\ComboFix.exe
[2012-07-01 15:45:51 | 000,286,720 | ---- | C] (Asprate) -- C:\Documents and Settings\Seba\Pulpit\Tibia MULTI-ip changer.exe
[2012-07-01 15:44:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Seba\Dane aplikacji\Tibia
[2012-07-01 15:13:28 | 001,035,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
[2012-07-01 14:31:36 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\findstr.exe
[2012-07-01 13:57:54 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\regsvr32.exe
[2012-07-01 13:39:21 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sndvol32.exe
[2012-06-27 20:15:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Seba\Menu Start\Programy\Champions Online
[2012-06-27 20:11:01 | 000,000,000 | ---D | C] -- C:\Program Files\Cryptic Studios
[2012-06-27 20:06:29 | 000,000,000 | ---D | C] -- C:\Pliki
[2012-06-27 11:31:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Real Alternative
[2012-06-27 11:31:09 | 000,185,920 | ---- | C] (RealNetworks, Inc.) -- C:\WINDOWS\System32\rmoc3260.dll
[2012-06-27 11:31:08 | 000,000,000 | ---D | C] -- C:\Program Files\Real Alternative
[2012-06-27 11:31:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Seba\Ustawienia lokalne\Dane aplikacji\Real
[2012-06-27 11:31:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Seba\Dane aplikacji\Real
[2012-06-27 11:31:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Real
[2012-06-27 11:30:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Seba\Dane aplikacji\Media Player Classic
[2012-06-27 11:30:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\K-Lite Codec Pack
[2012-06-27 11:30:17 | 000,839,680 | ---- | C] (http://www.mp3dev.org/) -- C:\WINDOWS\System32\lameACM.acm
[2012-06-27 11:30:17 | 000,151,552 | ---- | C] (fccHandler) -- C:\WINDOWS\System32\ac3acm.acm
[2012-06-27 11:30:14 | 000,000,000 | ---D | C] -- C:\Program Files\K-Lite Codec Pack
[2012-06-26 22:55:09 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Seba\Recent
[2012-06-26 17:10:28 | 000,000,000 | ---D | C] -- C:\The_First_Templar-Razor1911
[2012-06-26 11:57:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Activision
[2012-06-25 00:46:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Seba\Dane aplikacji\The First Templar
[2012-06-25 00:39:26 | 000,000,000 | ---D | C] -- C:\Program Files\Kalypso Media
[2012-06-25 00:39:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Seba\Menu Start\Programy\Kalypso Media
[2012-06-22 11:27:54 | 000,954,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudioD2_7.dll
[2012-06-22 11:27:54 | 000,435,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XactEngineA3_7.dll
[2012-06-22 11:27:54 | 000,349,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XactEngineD3_7.dll
[2012-06-22 11:27:54 | 000,131,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFXD1_5.dll
[2012-06-22 11:27:54 | 000,045,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudioD1_7.dll
[2012-06-22 11:27:53 | 003,795,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9d_33.dll
[2012-06-22 11:27:53 | 002,261,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3dx9d_43.dll
[2012-06-22 11:27:53 | 000,514,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX10d_43.dll
[2012-06-22 11:27:53 | 000,358,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dinput8d.dll
[2012-06-22 11:27:53 | 000,348,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dref9.dll
[2012-06-22 11:27:53 | 000,268,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX11d_43.dll
[2012-06-22 11:27:52 | 003,083,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3d9d.dll
[2012-06-22 11:27:52 | 001,883,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCSXd_43.dll
[2012-06-22 11:27:51 | 000,525,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3D11Ref.dll
[2012-06-22 11:27:51 | 000,496,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3D11SDKLayers.dll
[2012-06-22 11:27:51 | 000,442,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3D10SDKLayers.DLL
[2012-06-22 11:27:51 | 000,367,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3D10Ref.DLL
[2012-06-22 11:27:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Microsoft DirectX SDK (June 2010)
[2012-06-22 11:24:25 | 000,111,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\dxsdkuninst.exe
[2012-06-22 10:48:33 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft DirectX SDK (June 2010)
[2012-06-21 23:54:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Seba\Ustawienia lokalne\Dane aplikacji\SCE
[2012-06-21 23:54:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Seba\Dane aplikacji\Sony Online Entertainment
[2012-06-21 23:27:57 | 002,323,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_28.dll
[2012-06-21 23:27:55 | 002,319,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_27.dll
[2012-06-21 23:27:54 | 002,297,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_26.dll
[2012-06-21 23:27:53 | 002,337,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_25.dll
[2012-06-21 23:27:50 | 002,222,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_24.dll
[2012-06-21 21:55:30 | 000,000,000 | ---D | C] -- C:\Program Files\Clownfish
[2012-06-21 21:55:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Clownfish
[2012-06-21 20:53:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Seba\Dane aplikacji\SkypeKit
[2012-06-20 21:58:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Seba\Moje dokumenty\Tunngle
[2012-06-20 21:58:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Seba\Dane aplikacji\Tunngle
[2012-06-20 21:58:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Tunngle
[2012-06-20 21:58:23 | 000,027,136 | ---- | C] (Tunngle.net) -- C:\WINDOWS\System32\drivers\tap0901t.sys
[2012-06-20 21:58:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Tunngle
[2012-06-20 21:58:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dokumenty\Tunngle
[2012-06-20 21:58:22 | 000,000,000 | ---D | C] -- C:\Program Files\Tunngle
[2012-06-17 23:11:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\YTD YouTube Downloader & Converter
[2012-06-17 23:11:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\YTD YouTube Downloader & Converter
[2012-06-16 22:58:55 | 000,000,000 | ---D | C] -- C:\Program Files\Batman Arkham City
[2012-06-16 21:28:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Seba\Menu Start\Programy\Clownfish
[2012-06-16 21:09:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Seba\Moje dokumenty\Skype Voice Records
[2012-06-16 21:09:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Seba\Moje dokumenty\Clownfish Avatars
[2012-06-15 21:13:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Batman Arkham City - Harley Quinn's Revenge
[2012-06-15 21:08:01 | 000,000,000 | ---D | C] -- C:\Program Files\Batmaniak
[2012-06-15 20:03:41 | 000,000,000 | ---D | C] -- C:\Program Files\Rocksteady
[2012-06-15 00:33:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\FlashBoot
[2012-06-15 00:33:22 | 000,000,000 | ---D | C] -- C:\Program Files\FlashBoot
[2012-06-14 13:44:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Seba\Dane aplikacji\EurekaLog
[2012-06-13 00:29:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Seba\Dane aplikacji\aerix
[2012-06-09 19:05:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Seba\Moje dokumenty\Games for Windows - LIVE Demos
[2012-06-07 23:33:28 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Maintenance Service
[2012-06-07 18:29:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Seba\Dane aplikacji\Free Sound Recorder
[2012-06-03 11:32:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Hamachi
[2012-06-02 23:51:29 | 000,000,000 | ---D | C] -- C:\Program Files\SIW
[2012-06-02 23:51:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\SIW
[2012-06-02 21:58:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\XP TCPIP Repair
[2012-06-02 21:58:00 | 000,000,000 | ---D | C] -- C:\Program Files\XP TCPIP Repair
[2012-06-02 21:27:37 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Virtual PC
[2012-06-02 21:02:57 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\VMware
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012-07-02 10:27:19 | 000,002,267 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk
[2012-07-02 10:24:49 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012-07-02 10:23:18 | 000,650,240 | ---- | M] () -- C:\Documents and Settings\Seba\Pulpit\MicrosoftFixit50203.msi
[2012-07-02 10:19:56 | 000,186,880 | ---- | M] (CEXX.ORG) -- C:\Documents and Settings\Seba\Pulpit\LSPFix.exe
[2012-07-02 10:16:41 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Seba\Pulpit\OTL.exe
[2012-07-02 01:42:16 | 000,000,930 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2012-07-02 01:21:16 | 000,137,464 | ---- | M] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2012-07-02 01:21:00 | 000,214,520 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrB.xtr
[2012-07-01 23:36:36 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2012-07-01 23:17:47 | 004,568,829 | R--- | M] (Swearware) -- C:\Documents and Settings\Seba\Pulpit\ComboFix.exe
[2012-07-01 20:35:09 | 000,131,402 | ---- | M] () -- C:\Documents and Settings\Seba\Pulpit\virutkiller.zip
[2012-07-01 17:09:34 | 000,000,403 | ---- | M] () -- C:\WINDOWS\System\Cmicnfg3.ini
[2012-07-01 16:41:01 | 003,908,800 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012-07-01 15:46:09 | 000,286,720 | ---- | M] (Asprate) -- C:\Documents and Settings\Seba\Pulpit\Tibia MULTI-ip changer.exe
[2012-07-01 15:21:38 | 000,220,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\logon.scr
[2012-07-01 14:31:47 | 000,028,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\findstr.exe
[2012-07-01 14:11:32 | 000,000,339 | RHS- | M] () -- C:\boot.ini
[2012-07-01 13:57:54 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\regsvr32.exe
[2012-07-01 13:47:01 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
[2012-07-01 13:39:34 | 000,139,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\sndvol32.exe
[2012-06-30 12:20:28 | 000,286,208 | ---- | M] () -- C:\WINDOWS\winhlp32.exe
[2012-06-30 12:20:27 | 000,398,336 | ---- | M] () -- C:\WINDOWS\unflash.exe
[2012-06-30 12:20:25 | 000,015,872 | ---- | M] () -- C:\WINDOWS\taskman.exe
[2012-06-30 12:20:23 | 000,036,352 | R--- | M] (Microsoft Corporation) -- C:\WINDOWS\qfecheck.exe
[2012-06-30 12:20:20 | 000,249,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Setup1.exe
[2012-06-30 12:20:20 | 000,032,768 | ---- | M] (Creative Technology Ltd.) -- C:\WINDOWS\V0260Cfg.exe
[2012-06-30 12:20:18 | 000,090,112 | ---- | M] (Software Design) -- C:\WINDOWS\SDUnInst.exe
[2012-06-30 12:20:18 | 000,073,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\ST6UNST.EXE
[2012-06-30 12:20:16 | 000,306,688 | ---- | M] (InstallShield Software Corporation) -- C:\WINDOWS\IsUninst.exe
[2012-06-30 12:20:15 | 000,090,112 | ---- | M] (Creative Technology Ltd.) -- C:\WINDOWS\CtDrvIns.exe
[2012-06-30 12:20:15 | 000,041,984 | ---- | M] (Creative Technology Ltd ) -- C:\WINDOWS\Ctregrun.exe
[2012-06-30 12:20:14 | 000,278,528 | ---- | M] (C-Media Corporation) -- C:\WINDOWS\CmiPCIUninstall.exe
[2012-06-28 15:42:50 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\xcopy.exe
[2012-06-28 15:42:44 | 000,032,768 | ---- | M] () -- C:\WINDOWS\System32\wupdmgr.exe
[2012-06-28 15:42:42 | 000,169,472 | ---- | M] () -- C:\WINDOWS\System32\wuauclt1.exe
[2012-06-28 15:42:35 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wpnpinst.exe
[2012-06-28 15:42:32 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wpdshextautoplay.exe
[2012-06-28 15:42:30 | 000,032,768 | ---- | M] () -- C:\WINDOWS\System32\wpabaln.exe
[2012-06-28 15:42:20 | 000,006,144 | ---- | M] () -- C:\WINDOWS\System32\winver.exe
[2012-06-28 15:42:18 | 000,012,288 | ---- | M] () -- C:\WINDOWS\System32\winmsd.exe
[2012-06-28 15:42:15 | 000,208,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\WinFXDocObj.exe
[2012-06-28 15:42:13 | 000,436,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\wiaacmgr.exe
[2012-06-28 15:42:12 | 000,066,560 | ---- | M] () -- C:\WINDOWS\System32\wextract.exe
[2012-06-28 15:42:08 | 000,051,712 | ---- | M] () -- C:\WINDOWS\System32\w32tm.exe
[2012-06-28 15:42:07 | 000,292,352 | ---- | M] () -- C:\WINDOWS\System32\vssvc.exe
[2012-06-28 15:42:06 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\vssadmin.exe
[2012-06-28 15:42:05 | 000,102,912 | ---- | M] () -- C:\WINDOWS\System32\verifier.exe
[2012-06-28 15:42:02 | 000,020,480 | ---- | M] (Creative Technology Ltd.) -- C:\WINDOWS\System32\V0260Srv.exe
[2012-06-28 15:42:00 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\uwdf.exe
[2012-06-28 15:41:58 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\utilman.exe
[2012-06-28 15:41:56 | 000,069,632 | ---- | M] ( U.S. Robotics Corporation) -- C:\WINDOWS\System32\usrshuta.exe
[2012-06-28 15:41:55 | 000,061,440 | ---- | M] (U.S. Robotics Corporation) -- C:\WINDOWS\System32\usrprbda.exe
[2012-06-28 15:41:54 | 000,077,824 | ---- | M] (U.S. Robotics Corporation) -- C:\WINDOWS\System32\usrmlnka.exe
[2012-06-28 15:41:53 | 000,027,136 | ---- | M] () -- C:\WINDOWS\System32\userinit.exe
[2012-06-28 15:41:51 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\upnpcont.exe
[2012-06-28 15:41:50 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\unlodctr.exe
[2012-06-28 15:41:49 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\typeperf.exe
[2012-06-28 15:41:48 | 000,018,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\tsshutdn.exe
[2012-06-28 15:41:47 | 000,016,896 | ---- | M] () -- C:\WINDOWS\System32\tskill.exe
[2012-06-28 15:41:47 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\tsdiscon.exe
[2012-06-28 15:41:47 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\tscon.exe
[2012-06-28 15:41:46 | 000,032,768 | ---- | M] () -- C:\WINDOWS\System32\tracert6.exe
[2012-06-28 15:41:46 | 000,013,312 | ---- | M] () -- C:\WINDOWS\System32\tracert.exe
[2012-06-28 15:41:45 | 000,347,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\tourstart.exe
[2012-06-28 15:41:45 | 000,260,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\tracerpt.exe
[2012-06-28 15:41:44 | 000,083,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\tlntsess.exe
[2012-06-28 15:41:44 | 000,064,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\tlntadmn.exe
[2012-06-28 15:41:43 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\tftp.exe
[2012-06-28 15:41:42 | 000,078,848 | ---- | M] () -- C:\WINDOWS\System32\telnet.exe
[2012-06-28 15:41:41 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\tcmsetup.exe
[2012-06-28 15:41:40 | 000,079,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\tasklist.exe
[2012-06-28 15:41:39 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\taskkill.exe
[2012-06-28 15:41:38 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\systeminfo.exe
[2012-06-28 15:41:38 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\systray.exe
[2012-06-28 15:41:36 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\syskey.exe
[2012-06-28 15:41:35 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\syncapp.exe
[2012-06-28 15:41:34 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\subst.exe
[2012-06-28 15:41:33 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\stimon.exe
[2012-06-28 15:41:32 | 000,679,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\sstext3d.scr
[2012-06-28 15:41:31 | 000,610,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\sspipes.scr
[2012-06-28 15:41:31 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\ssstars.scr
[2012-06-28 15:41:30 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\ssmyst.scr
[2012-06-28 15:41:28 | 000,047,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\ssmypics.scr
[2012-06-28 15:41:27 | 000,393,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\ssflwbox.scr
[2012-06-28 15:41:27 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\ssmarque.scr
[2012-06-28 15:41:26 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\ssbezier.scr
[2012-06-28 15:41:25 | 000,708,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\ss3dfo.scr
[2012-06-28 15:41:22 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\spiisupd.exe
[2012-06-28 15:41:22 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\spnpinst.exe
[2012-06-28 15:41:21 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\sort.exe
[2012-06-28 15:41:20 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\smbinst.exe
[2012-06-28 15:41:19 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\skeys.exe
[2012-06-28 15:41:17 | 000,070,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\sigverif.exe
[2012-06-28 15:41:16 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\shrpubw.exe
[2012-06-28 15:41:16 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\shutdown.exe
[2012-06-28 15:41:15 | 000,045,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\shmgrate.exe
[2012-06-28 15:41:13 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\shadow.exe
[2012-06-28 15:41:11 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\setupn.exe
[2012-06-28 15:41:09 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\setup.exe
[2012-06-28 15:41:08 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\sethc.exe
[2012-06-28 15:41:04 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\secedit.exe
[2012-06-28 15:41:02 | 000,128,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\schtasks.exe
[2012-06-28 15:41:02 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\scrnsave.scr
[2012-06-28 15:41:01 | 000,098,816 | ---- | M] () -- C:\WINDOWS\System32\scardsvr.exe
[2012-06-28 15:41:00 | 000,035,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\sc.exe
[2012-06-28 15:41:00 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\savedump.exe
[2012-06-28 15:40:59 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\rwinsta.exe
[2012-06-28 15:40:58 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\runas.exe
[2012-06-28 15:40:58 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\runonce.exe
[2012-06-28 15:40:57 | 000,078,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\rtcshare.exe
[2012-06-28 15:40:56 | 000,108,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\rsnotify.exe
[2012-06-28 15:40:56 | 000,063,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\rsopprov.exe
[2012-06-28 15:40:55 | 000,049,664 | ---- | M] () -- C:\WINDOWS\System32\rsmui.exe
[2012-06-28 15:40:54 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\rsmsink.exe
[2012-06-28 15:40:53 | 000,054,784 | ---- | M] () -- C:\WINDOWS\System32\rsm.exe
[2012-06-28 15:40:53 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\rsh.exe
[2012-06-28 15:40:52 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\routemon.exe
[2012-06-28 15:40:52 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\route.exe
[2012-06-28 15:40:51 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\rexec.exe
[2012-06-28 15:40:50 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\relog.exe
[2012-06-28 15:40:50 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\replace.exe
[2012-06-28 15:40:50 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\reset.exe
[2012-06-28 15:40:49 | 000,004,608 | ---- | M] (Microsoft) -- C:\WINDOWS\System32\regwiz.exe
[2012-06-28 15:40:48 | 000,053,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\reg.exe
[2012-06-28 15:40:48 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\regini.exe
[2012-06-28 15:40:48 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\regedt32.exe
[2012-06-28 15:40:47 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\rdshost.exe
[2012-06-28 15:40:47 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\rdsaddin.exe
[2012-06-28 15:40:47 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\recover.exe
[2012-06-28 15:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpclip.exe
[2012-06-28 15:40:45 | 000,036,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\rcimlby.exe
[2012-06-28 15:40:45 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\rcp.exe
[2012-06-28 15:40:43 | 000,056,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\rasphone.exe
[2012-06-28 15:40:42 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\rasdial.exe
[2012-06-28 15:40:42 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\rasautou.exe
[2012-06-28 15:40:41 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\qwinsta.exe
[2012-06-28 15:40:40 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\qprocess.exe
[2012-06-28 15:40:39 | 000,017,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\qappsrv.exe
[2012-06-28 15:40:37 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\proquota.exe
[2012-06-28 15:40:37 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\proxycfg.exe
[2012-06-28 15:40:36 | 000,109,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\progman.exe
[2012-06-28 15:40:35 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\print.exe
[2012-06-28 15:40:34 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\powercfg.exe
[2012-06-28 15:40:31 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\ping6.exe
[2012-06-28 15:40:31 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\ping.exe
[2012-06-28 15:40:30 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\perfmon.exe
[2012-06-28 15:40:29 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\pathping.exe
[2012-06-28 15:40:29 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\pentnt.exe
[2012-06-28 15:40:28 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\packager.exe
[2012-06-28 15:40:27 | 000,216,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\osk.exe
[2012-06-28 15:40:27 | 000,041,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\osuninst.exe
[2012-06-28 15:40:26 | 000,070,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\openfiles.exe
[2012-06-28 15:40:20 | 000,128,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\nwscript.exe
[2012-06-28 15:40:19 | 000,442,368 | R--- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvusmu.exe
[2012-06-28 15:40:18 | 000,442,368 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvunrm.exe
[2012-06-28 15:40:03 | 000,421,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\ntvdm.exe
[2012-06-28 15:39:59 | 001,222,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\ntbackup.exe
[2012-06-28 15:39:59 | 000,079,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\nslookup.exe
[2012-06-28 15:39:56 | 000,087,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\netsh.exe
[2012-06-28 15:39:56 | 000,038,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\netstat.exe
[2012-06-28 15:39:55 | 000,332,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\netsetup.exe
[2012-06-28 15:39:53 | 000,124,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\net1.exe
[2012-06-28 15:39:53 | 000,042,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\net.exe
[2012-06-28 15:39:52 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\nddeapir.exe
[2012-06-28 15:39:50 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\nbtstat.exe
[2012-06-28 15:39:49 | 000,176,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\napstat.exe
[2012-06-28 15:39:49 | 000,055,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\narrator.exe
[2012-06-28 15:39:38 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\mstinit.exe
[2012-06-28 15:39:37 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\msswchx.exe
[2012-06-28 15:39:33 | 000,345,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\mspaint.exe
[2012-06-28 15:39:25 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\msg.exe
[2012-06-28 15:39:25 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\msfeedssync.exe
[2012-06-28 15:39:14 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\mrinfo.exe
[2012-06-28 15:39:12 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\mqbkup.exe
[2012-06-28 15:39:11 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\mpnotify.exe
[2012-06-28 15:39:10 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\mountvol.exe
[2012-06-28 15:39:09 | 000,144,384 | ---- | M] () -- C:\WINDOWS\System32\mobsync.exe
[2012-06-28 15:39:07 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\mmcperf.exe
[2012-06-28 15:39:04 | 001,415,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\mmc.exe
[2012-06-28 15:38:55 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\magnify.exe
[2012-06-28 15:38:55 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\makecab.exe
[2012-06-28 15:38:54 | 000,008,704 | ---- | M] () -- C:\WINDOWS\System32\lpr.exe
[2012-06-28 15:38:54 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\lpq.exe
[2012-06-28 15:38:52 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\logman.exe
[2012-06-28 15:38:52 | 000,016,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\logoff.exe
[2012-06-28 15:38:51 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\lodctr.exe
[2012-06-28 15:38:50 | 000,027,136 | ---- | M] () -- C:\WINDOWS\System32\lnkstub.exe
[2012-06-28 15:38:48 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\label.exe
[2012-06-28 15:38:38 | 000,053,760 | ---- | M] () -- C:\WINDOWS\System32\ipv6.exe
[2012-06-28 15:38:38 | 000,024,576 | ---- | M] () -- C:\WINDOWS\System32\ipxroute.exe
[2012-06-28 15:38:37 | 000,045,568 | ---- | M] () -- C:\WINDOWS\System32\ipsec6.exe
[2012-06-28 15:38:36 | 000,056,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\ipconfig.exe
[2012-06-28 15:38:31 | 000,114,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\iexpress.exe
[2012-06-28 15:38:30 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\ieudinit.exe
[2012-06-28 15:38:27 | 000,174,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\ie4uinit.exe
[2012-06-28 15:38:22 | 000,065,536 | ---- | M] (HP) -- C:\WINDOWS\System32\HPZipm12.exe
[2012-06-28 15:38:20 | 000,061,440 | ---- | M] (HP) -- C:\WINDOWS\System32\HPZinw12.exe
[2012-06-28 15:38:17 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\hostname.exe
[2012-06-28 15:38:16 | 000,016,384 | ---- | M] () -- C:\WINDOWS\System32\help.exe
[2012-06-28 15:38:14 | 000,058,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\gpupdate.exe
[2012-06-28 15:38:14 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\grpconv.exe
[2012-06-28 15:38:13 | 000,123,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\gpresult.exe
[2012-06-28 15:38:12 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\getmac.exe
[2012-06-28 15:38:10 | 000,045,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\ftp.exe
[2012-06-28 15:38:09 | 000,193,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\fsquirt.exe
[2012-06-28 15:38:09 | 000,063,488 | ---- | M] () -- C:\WINDOWS\System32\fsutil.exe
[2012-06-28 15:38:08 | 000,022,016 | ---- | M] () -- C:\WINDOWS\System32\fontview.exe
[2012-06-28 15:38:08 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\forcedos.exe
[2012-06-28 15:38:06 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\fltmc.exe
[2012-06-28 15:38:06 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\fixmapi.exe
[2012-06-28 15:38:05 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\finger.exe
[2012-06-28 15:38:05 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\find.exe
[2012-06-28 15:38:04 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\fc.exe
[2012-06-28 15:38:03 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\extrac32.exe
[2012-06-28 15:38:02 | 000,016,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\expand.exe
[2012-06-28 15:38:01 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\eventvwr.exe
[2012-06-28 15:38:00 | 000,086,528 | ---- | M] () -- C:\WINDOWS\System32\eventtriggers.exe
[2012-06-28 15:38:00 | 000,053,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\eventcreate.exe
[2012-06-28 15:37:59 | 000,194,560 | ---- | M] () -- C:\WINDOWS\System32\eudcedit.exe
[2012-06-28 15:37:59 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\esentutl.exe
[2012-06-28 15:37:55 | 001,302,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dxdiag.exe
[2012-06-28 15:37:54 | 000,180,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dwwin.exe
[2012-06-28 15:37:53 | 000,018,432 | ---- | M] () -- C:\WINDOWS\System32\dvdupgrd.exe
[2012-06-28 15:37:49 | 000,047,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drwtsn32.exe
[2012-06-28 15:37:48 | 000,249,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drmupgds.exe
[2012-06-28 15:37:47 | 000,065,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\driverquery.exe
[2012-06-28 15:37:46 | 000,083,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dpvsetup.exe
[2012-06-28 15:37:45 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dpnsvr.exe
[2012-06-28 15:37:44 | 000,030,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dplaysvr.exe
[2012-06-28 15:37:42 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\doskey.exe
[2012-06-28 15:37:40 | 000,016,384 | ---- | M] (Microsoft Corp.) -- C:\WINDOWS\System32\dmremote.exe
[2012-06-28 15:37:39 | 000,225,792 | ---- | M] () -- C:\WINDOWS\System32\dmadmin.exe
[2012-06-28 15:37:38 | 000,018,944 | ---- | M] () -- C:\WINDOWS\System32\diskperf.exe
[2012-06-28 15:37:38 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllhst3g.exe
[2012-06-28 15:37:37 | 000,165,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\diskpart.exe
[2012-06-28 15:37:36 | 000,087,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\diantz.exe
[2012-06-28 15:37:34 | 000,105,984 | ---- | M] (Microsoft Corp. i Executive Software International, Inc.) -- C:\WINDOWS\System32\dfrgntfs.exe
[2012-06-28 15:37:33 | 000,082,944 | ---- | M] (Microsoft Corp. i Executive Software International, Inc.) -- C:\WINDOWS\System32\dfrgfat.exe
[2012-06-28 15:37:30 | 000,031,232 | ---- | M] () -- C:\WINDOWS\System32\ddeshare.exe
[2012-06-28 15:37:30 | 000,025,088 | ---- | M] (Microsoft Corp. and Executive Software International, Inc.) -- C:\WINDOWS\System32\defrag.exe
[2012-06-28 15:37:29 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dcomcnfg.exe
[2012-06-28 15:37:00 | 000,139,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\cscript.exe
[2012-06-28 15:36:59 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\convert.exe
[2012-06-28 15:36:59 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\control.exe
[2012-06-28 15:36:58 | 000,027,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\conime.exe
[2012-06-28 15:36:57 | 000,017,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\compact.exe
[2012-06-28 15:36:56 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\comp.exe
[2012-06-28 15:36:54 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\cmstp.exe
[2012-06-28 15:36:53 | 000,039,936 | ---- | M] () -- C:\WINDOWS\System32\cmmon32.exe
[2012-06-28 15:36:52 | 000,548,864 | R--- | M] () -- C:\WINDOWS\System32\Cmeaupci.exe
[2012-06-28 15:36:51 | 000,026,112 | ---- | M] () -- C:\WINDOWS\System32\cmdl32.exe
[2012-06-28 15:36:50 | 000,396,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\cmd.exe
[2012-06-28 15:36:48 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\cleanmgr.exe
[2012-06-28 15:36:47 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\ckcnv.exe
[2012-06-28 15:36:46 | 000,057,344 | ---- | M] () -- C:\WINDOWS\System32\cipher.exe
[2012-06-28 15:36:46 | 000,008,704 | ---- | M] () -- C:\WINDOWS\System32\cidaemon.exe
[2012-06-28 15:36:45 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\chkdsk.exe
[2012-06-28 15:36:45 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\chkntfs.exe
[2012-06-28 15:36:42 | 000,021,504 | ---- | M] () -- C:\WINDOWS\System32\cacls.exe
[2012-06-28 15:36:39 | 000,155,136 | ---- | M] () -- C:\WINDOWS\System32\bootcfg.exe
[2012-06-28 15:36:39 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\blastcln.exe
[2012-06-28 15:36:39 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\bootvrfy.exe
[2012-06-28 15:36:39 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\bootok.exe
[2012-06-28 15:36:35 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\auditusr.exe
[2012-06-28 15:36:34 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\attrib.exe
[2012-06-28 15:36:34 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\atmadm.exe
[2012-06-28 14:53:46 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012-06-28 02:00:17 | 000,000,340 | ---- | M] () -- C:\WINDOWS\tasks\AdobeAAMUpdater-1.0-SEBA-Seba.job
[2012-06-27 20:15:09 | 000,000,771 | ---- | M] () -- C:\Documents and Settings\Seba\Pulpit\Champions Online.lnk
[2012-06-27 13:58:32 | 000,002,228 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012-06-27 11:44:32 | 000,000,880 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Wise Registry Cleaner.lnk
[2012-06-27 11:31:10 | 000,000,931 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Media Player Classic.lnk
[2012-06-26 23:43:15 | 000,186,401 | ---- | M] () -- C:\Documents and Settings\Seba\Pulpit\cod 2.JPG
[2012-06-26 22:27:57 | 000,054,784 | ---- | M] () -- C:\Documents and Settings\Seba\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-06-26 17:07:28 | 000,001,012 | ---- | M] () -- C:\Documents and Settings\Seba\Pulpit\GameRanger.lnk
[2012-06-26 11:57:37 | 000,001,563 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Call of Duty(R) 2 Wielu graczy.lnk
[2012-06-26 11:57:37 | 000,001,563 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Call of Duty(R) 2 Jeden gracz.lnk
[2012-06-26 11:57:36 | 000,000,280 | ---- | M] () -- C:\WINDOWS\game.ini
[2012-06-25 00:39:26 | 000,000,858 | ---- | M] () -- C:\Documents and Settings\Seba\Pulpit\The First Templar.lnk
[2012-06-23 20:43:20 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2012-06-23 20:43:19 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012-06-22 11:24:25 | 000,111,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\dxsdkuninst.exe
[2012-06-21 23:27:49 | 000,000,925 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Revo Uninstaller Pro.lnk
[2012-06-21 21:55:30 | 000,001,564 | ---- | M] () -- C:\Documents and Settings\Seba\Pulpit\Clownfish.lnk
[2012-06-20 22:16:50 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\Access.dat
[2012-06-20 21:58:24 | 000,000,666 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Tunngle beta.lnk
[2012-06-17 23:55:36 | 000,000,945 | ---- | M] () -- C:\Documents and Settings\Seba\Pulpit\Batman Arkham City.lnk
[2012-06-17 23:11:52 | 000,000,721 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\YTD YouTube Downloader & Converter.lnk
[2012-06-17 14:05:54 | 000,629,007 | ---- | M] () -- C:\Documents and Settings\Seba\Moje dokumenty\DSC07631.JPG
[2012-06-15 00:33:26 | 000,000,623 | ---- | M] () -- C:\Documents and Settings\Seba\Pulpit\FlashBoot.lnk
[2012-06-13 14:11:18 | 000,000,692 | ---- | M] () -- C:\Documents and Settings\Seba\Pulpit\Virtual PC.lnk
[2012-06-07 23:33:30 | 000,000,724 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk
[2012-06-07 11:23:25 | 014,942,208 | ---- | M] () -- C:\Documents and Settings\Seba\ntuser.bak
[2012-06-03 11:32:15 | 000,025,280 | ---- | M] (LogMeIn, Inc.) -- C:\WINDOWS\System32\drivers\hamachi.sys
[2012-06-03 11:32:15 | 000,000,632 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\hamachi.lnk
[2012-06-02 23:51:29 | 000,000,610 | ---- | M] () -- C:\Documents and Settings\Seba\Pulpit\SIW.lnk
[2012-06-02 21:58:02 | 000,001,615 | ---- | M] () -- C:\Documents and Settings\Seba\Pulpit\Get XP Smoker Pro Free.lnk
[2012-06-02 21:58:02 | 000,000,670 | ---- | M] () -- C:\Documents and Settings\Seba\Pulpit\XP TCPIP Repair.lnk
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012-07-02 10:23:18 | 000,650,240 | ---- | C] () -- C:\Documents and Settings\Seba\Pulpit\MicrosoftFixit50203.msi
[2012-07-01 23:18:32 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2012-07-01 23:18:32 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2012-07-01 23:18:32 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2012-07-01 23:18:32 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2012-07-01 23:18:32 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2012-07-01 19:38:33 | 000,131,402 | ---- | C] () -- C:\Documents and Settings\Seba\Pulpit\virutkiller.zip
[2012-07-01 14:20:30 | 000,214,520 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe
[2012-07-01 14:19:59 | 000,075,064 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe
[2012-06-27 20:15:09 | 000,000,771 | ---- | C] () -- C:\Documents and Settings\Seba\Pulpit\Champions Online.lnk
[2012-06-27 11:30:18 | 000,000,931 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Media Player Classic.lnk
[2012-06-27 11:30:17 | 000,000,414 | ---- | C] () -- C:\WINDOWS\System32\lame_acm.xml
[2012-06-27 11:30:17 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2012-06-27 11:30:16 | 000,790,528 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2012-06-27 11:30:16 | 000,134,144 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2012-06-27 11:30:16 | 000,108,032 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2012-06-26 23:43:14 | 000,186,401 | ---- | C] () -- C:\Documents and Settings\Seba\Pulpit\cod 2.JPG
[2012-06-26 17:07:28 | 000,001,018 | ---- | C] () -- C:\Documents and Settings\Seba\Menu Start\Programy\GameRanger.lnk
[2012-06-26 17:07:28 | 000,001,012 | ---- | C] () -- C:\Documents and Settings\Seba\Pulpit\GameRanger.lnk
[2012-06-26 12:03:52 | 000,137,464 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2012-06-26 11:57:37 | 000,001,563 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Call of Duty(R) 2 Wielu graczy.lnk
[2012-06-26 11:57:37 | 000,001,563 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Call of Duty(R) 2 Jeden gracz.lnk
[2012-06-26 11:57:36 | 000,000,280 | ---- | C] () -- C:\WINDOWS\game.ini
[2012-06-25 00:39:26 | 000,000,858 | ---- | C] () -- C:\Documents and Settings\Seba\Pulpit\The First Templar.lnk
[2012-06-20 22:02:19 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\Access.dat
[2012-06-20 21:58:24 | 000,000,666 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Tunngle beta.lnk
[2012-06-17 23:11:26 | 000,000,721 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\YTD YouTube Downloader & Converter.lnk
[2012-06-17 14:05:55 | 000,629,007 | ---- | C] () -- C:\Documents and Settings\Seba\Moje dokumenty\DSC07631.JPG
[2012-06-16 21:28:17 | 000,001,564 | ---- | C] () -- C:\Documents and Settings\Seba\Pulpit\Clownfish.lnk
[2012-06-15 00:33:26 | 000,000,623 | ---- | C] () -- C:\Documents and Settings\Seba\Pulpit\FlashBoot.lnk
[2012-06-13 21:39:06 | 000,436,286 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-S-1-5-21-1715567821-299502267-682003330-1003-0.dat
[2012-06-13 21:21:35 | 000,001,077 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Windows Live ID.lnk
[2012-06-13 14:11:18 | 000,000,692 | ---- | C] () -- C:\Documents and Settings\Seba\Pulpit\Virtual PC.lnk
[2012-06-03 11:32:15 | 000,000,632 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\hamachi.lnk
[2012-06-02 23:51:29 | 000,000,610 | ---- | C] () -- C:\Documents and Settings\Seba\Pulpit\SIW.lnk
[2012-06-02 21:58:02 | 000,001,615 | ---- | C] () -- C:\Documents and Settings\Seba\Pulpit\Get XP Smoker Pro Free.lnk
[2012-06-02 21:58:02 | 000,000,670 | ---- | C] () -- C:\Documents and Settings\Seba\Pulpit\XP TCPIP Repair.lnk
[2012-06-02 21:27:41 | 000,001,630 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Microsoft Virtual PC.lnk
[2012-06-01 22:14:57 | 014,942,208 | ---- | C] () -- C:\Documents and Settings\Seba\ntuser.bak
[2012-05-22 11:32:33 | 078,905,335 | ---- | C] () -- C:\Program Files\Tibie.rar
[2012-05-20 19:33:49 | 001,074,636 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2012-05-20 19:33:48 | 001,074,636 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2012-05-20 19:33:48 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin
[2012-05-20 19:33:36 | 002,807,708 | ---- | C] () -- C:\WINDOWS\System32\nvdata.data
[2012-05-18 02:24:14 | 000,436,286 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-System.dat
[2012-05-08 14:12:20 | 000,004,653 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini
[2012-04-16 19:41:21 | 000,104,642 | ---- | C] () -- C:\WINDOWS\hpoins04.dat.temp
[2012-04-16 19:41:21 | 000,017,176 | ---- | C] () -- C:\WINDOWS\hpomdl04.dat.temp
[2012-03-28 19:17:41 | 003,908,800 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012-03-23 10:41:25 | 000,000,457 | ---- | C] () -- C:\WINDOWS\System32\MRT.INI
[2012-03-23 10:08:38 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012-03-22 16:31:49 | 000,178,176 | ---- | C] () -- C:\WINDOWS\System32\ztvunrar39.dll
[2012-03-22 16:31:49 | 000,162,304 | ---- | C] () -- C:\WINDOWS\System32\ztvunrar36.dll
[2012-03-22 16:31:49 | 000,153,088 | ---- | C] () -- C:\WINDOWS\System32\UNRAR3.dll
[2012-03-22 16:31:49 | 000,077,312 | ---- | C] () -- C:\WINDOWS\System32\ztvunace26.dll
[2012-03-22 16:31:49 | 000,075,264 | ---- | C] () -- C:\WINDOWS\System32\unacev2.dll
[2012-03-05 17:46:00 | 000,054,784 | ---- | C] () -- C:\Documents and Settings\Seba\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-02-25 21:55:14 | 000,022,328 | ---- | C] () -- C:\Documents and Settings\Seba\Dane aplikacji\PnkBstrK.sys
[2012-02-05 18:05:07 | 000,104,642 | ---- | C] () -- C:\WINDOWS\hpoins04.dat
[2012-02-05 18:05:07 | 000,017,176 | ---- | C] () -- C:\WINDOWS\hpomdl04.dat
[2011-12-23 18:32:14 | 000,548,864 | R--- | C] () -- C:\WINDOWS\System32\Cmeaupci.exe
[2011-12-23 18:31:53 | 000,299,008 | R--- | C] () -- C:\WINDOWS\System32\CmiInstallResAll.dll
[2011-11-13 21:32:00 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2011-09-25 20:35:51 | 000,000,134 | ---- | C] () -- C:\WINDOWS\Cmicnfg3.ini.imi
[2011-08-13 16:02:10 | 000,000,072 | ---- | C] () -- C:\WINDOWS\boxworld.ini
[2011-08-03 20:42:37 | 000,000,394 | ---- | C] () -- C:\WINDOWS\Cmicnfg3.ini.cfl
[2011-08-03 20:42:10 | 000,002,123 | R--- | C] () -- C:\WINDOWS\Cmicnfg3.ini.cfg
[2011-08-03 20:42:08 | 000,002,641 | R--- | C] () -- C:\WINDOWS\cmudax3.ini
[2011-07-24 14:37:20 | 000,000,058 | ---- | C] () -- C:\WINDOWS\nfsc_patch.ini
[2011-07-12 13:34:43 | 000,059,904 | ---- | C] () -- C:\WINDOWS\System32\zlib.dll
[2011-07-10 14:05:13 | 000,000,208 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2011-06-15 20:01:46 | 000,000,000 | ---- | C] () -- C:\WINDOWS\lgfwup.ini
[2011-06-15 13:58:13 | 000,000,552 | ---- | C] () -- C:\WINDOWS\System32\d3d8caps.dat
[2011-05-14 16:48:24 | 000,013,312 | ---- | C] () -- C:\WINDOWS\System32\drivers\vdk5mzi0.sys
[2011-05-05 23:34:42 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\CDR.exe
[2011-04-23 12:01:31 | 000,374,272 | ---- | C] () -- C:\WINDOWS\System32\mss32.dll
[2011-04-09 18:55:28 | 000,179,261 | ---- | C] () -- C:\WINDOWS\System32\xlive.dll.cat
[2011-03-25 21:45:07 | 000,398,336 | ---- | C] () -- C:\WINDOWS\unflash.exe
[2011-02-06 16:14:01 | 000,278,984 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys
[2011-02-06 16:14:00 | 000,025,416 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys
[2011-02-05 02:46:13 | 000,013,312 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll
[2011-01-09 15:33:07 | 000,108,217 | ---- | C] () -- C:\WINDOWS\os4.exe
[2011-01-09 15:33:06 | 000,059,904 | ---- | C] () -- C:\WINDOWS\zlib1.dll
[2011-01-09 15:33:05 | 000,249,461 | ---- | C] () -- C:\WINDOWS\Tibia.dat
[2010-12-27 21:05:04 | 000,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2010-12-18 13:43:01 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\spdg.dll
[2010-12-12 15:29:09 | 000,051,916 | ---- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2010-11-12 22:48:36 | 001,589,248 | ---- | C] () -- C:\WINDOWS\System32\libmysql_d.dll
[2010-08-11 13:27:17 | 000,000,008 | RHS- | C] () -- C:\Documents and Settings\Seba\ntuser.pol
[2010-08-11 13:26:55 | 000,000,008 | RHS- | C] () -- C:\Documents and Settings\All Users\ntuser.pol
[2010-08-07 13:35:28 | 000,001,044 | ---- | C] () -- C:\WINDOWS\VPlayer.INI
[2010-08-01 16:26:51 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI
[2010-08-01 01:28:53 | 000,000,056 | ---- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2010-08-01 01:07:29 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2010-08-01 01:07:08 | 000,015,872 | ---- | C] () -- C:\WINDOWS\taskman.exe
[2010-07-31 23:44:48 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2010-07-31 23:31:03 | 000,059,392 | R--- | C] () -- C:\WINDOWS\System32\streamhlp.dll
[2010-07-31 23:29:30 | 000,003,948 | R--- | C] () -- C:\WINDOWS\System32\drivers\nvphy.bin
[2010-07-31 23:26:34 | 000,010,288 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2010-07-31 23:17:09 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2010-07-31 23:13:51 | 000,169,472 | ---- | C] () -- C:\WINDOWS\System32\wuauclt1.exe
[2010-07-31 23:12:48 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2010-07-31 23:11:58 | 000,016,896 | ---- | C] () -- C:\WINDOWS\System32\tskill.exe
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2012-03-28 19:29:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Ashampoo
[2012-05-21 12:21:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\DAEMON Tools Lite
[2012-03-27 15:28:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\IObit
[2012-04-15 10:51:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Notepad++
[2010-12-19 14:00:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Nowe Gadu-Gadu
[2011-03-11 20:10:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Age of Empires 3
[2010-12-15 14:44:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AlawarWrapper
[2011-03-20 14:02:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ashampoo
[2011-04-23 15:45:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Astroburn Lite
[2012-03-22 16:32:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\BVRP Software
[2012-05-20 19:43:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite
[2012-05-06 18:22:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Pro
[2011-04-24 10:24:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\EA Core
[2011-04-24 10:24:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Electronic Arts
[2010-12-19 14:02:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10
[2010-10-13 18:05:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Innovative Solutions
[2012-02-18 15:24:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Intenium
[2011-07-26 01:57:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\InterVideo
[2011-12-04 13:36:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\IObit
[2010-12-15 14:45:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Islands
[2011-07-21 21:44:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\MumboJumbo
[2010-09-12 18:48:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\MySQL
[2010-11-21 12:52:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\NFS Underground
[2010-10-29 21:49:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM
[2012-03-25 18:26:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC1Data
[2011-07-12 13:46:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PrevxCSI
[2012-04-10 12:44:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\regid.1986-12.com.adobe
[2012-03-22 16:31:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Simply Super Software
[2012-03-22 01:38:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SmartSound Software Inc
[2012-03-12 15:32:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Soluto
[2012-02-18 15:50:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\STOPzilla!
[2012-02-18 15:50:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\tmp
[2010-09-10 18:44:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TuneUp Software
[2012-06-20 22:01:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Tunngle
[2011-12-28 02:43:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Ubisoft
[2011-08-05 20:05:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Ulead Systems
[2011-12-29 12:47:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Vodafone
[2012-06-17 23:11:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\YTD YouTube Downloader & Converter
[2010-09-10 18:44:04 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
[2011-12-29 12:47:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Vodafone
[2011-04-20 18:20:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\.minecraft
[2012-06-13 00:29:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\aerix
[2011-03-20 14:05:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\Ashampoo
[2012-03-07 20:55:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\Auslogics
[2011-04-09 19:46:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\Avnex
[2011-02-09 01:29:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\BTLS
[2012-04-10 12:57:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\CDRoller
[2011-08-03 17:00:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\Cool Record Edit Pro
[2010-07-31 23:36:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\DAEMON Tools
[2012-07-01 00:09:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\DAEMON Tools Lite
[2010-07-31 23:36:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\DAEMON Tools Pro
[2011-05-07 22:31:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\Dev-Cpp
[2012-04-30 12:22:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\DMCache
[2011-07-04 10:22:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\ElevatedDiagnostics
[2012-06-15 20:49:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\EurekaLog
[2012-06-21 23:08:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\Free Sound Recorder
[2010-12-19 14:02:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\Gadu-Gadu 10
[2012-06-26 17:07:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\GameRanger
[2012-03-24 22:11:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\GetRightToGo
[2012-03-12 23:48:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\GHISLER
[2011-04-03 12:51:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\gtk-2.0
[2012-03-12 15:50:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\HD Tune Pro
[2012-07-01 23:36:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\IDM
[2011-09-17 22:34:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\iFree
[2012-01-21 19:51:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\ImgBurn
[2012-02-18 15:40:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\IObit
[2010-10-02 22:09:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\Kana Solution
[2011-02-28 14:39:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\Lob
[2012-05-17 16:09:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\LogMeIn Rescue
[2011-08-12 13:17:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\LolClient
[2011-06-23 22:48:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\Mount&Blade
[2012-02-11 12:12:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\NeatImage SL 32
[2011-11-07 16:15:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\Notepad++
[2011-03-07 17:52:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\Nowe Gadu-Gadu
[2010-08-20 18:33:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\OpenFM
[2011-11-07 17:21:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\Opera
[2012-04-15 19:12:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\PCPro
[2011-03-23 00:43:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\PCToolsFirewallPlus
[2012-06-26 17:21:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\PhotoFiltre
[2012-02-18 16:12:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\Pointstone
[2011-05-07 17:28:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\Power
[2011-05-04 20:05:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\Powoo
[2012-03-14 20:32:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\Pruftechnik
[2011-05-14 23:41:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\PunkBuster
[2012-01-16 19:29:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\Qrix
[2011-01-21 20:23:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\Radmin
[2011-02-16 01:50:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\Remere's Map Editor
[2011-12-09 23:15:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\Rovio
[2011-04-26 18:27:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\SA-MP Audio Plugin
[2012-05-05 22:27:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\Scan2PDF
[2012-03-22 16:31:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\Simply Super Software
[2012-06-26 17:05:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\Sony Online Entertainment
[2011-06-30 21:55:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\T-D-B
[2012-03-26 23:28:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\TeamViewer
[2012-03-22 21:05:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\TeraCopy
[2012-06-27 19:25:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\The First Templar
[2011-07-22 12:01:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\Thinstall
[2012-07-01 15:48:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\Tibia
[2010-07-31 23:31:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\TrojanHunter
[2010-08-12 22:29:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\TS3Client
[2010-09-10 18:44:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\TuneUp Software
[2012-06-21 00:47:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\Tunngle
[2011-12-21 16:51:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\Ubisoft
[2011-07-26 02:01:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\Ulead Systems
[2012-06-25 01:39:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\uTorrent
[2010-08-18 11:27:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\VDownloader
[2011-10-16 11:33:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\vIP
[2012-05-21 11:56:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\VS Revo Group
[2012-05-30 15:50:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\Wise Registry Cleaner
[2012-02-18 15:51:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Seba\Dane aplikacji\XnView
[2012-04-27 22:27:04 | 000,000,460 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{BA4D5B2C-ABE9-4249-839F-24F4B8220A33}.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 48 bytes -> C:\Documents and Settings\All Users\DRM:مايكروسوفت

< End of report >