OTL logfile created on: 2012-07-03 19:20:17 - Run 1 OTL by OldTimer - Version 3.2.53.1 Folder = C:\Documents and Settings\Krystian\Pulpit\logi Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1023,53 Mb Total Physical Memory | 502,52 Mb Available Physical Memory | 49,10% Memory free 2,40 Gb Paging File | 2,00 Gb Available in Paging File | 83,25% Paging File free Paging file location(s): C:\pagefile.sys 1536 3072 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 19,08 Gb Total Space | 6,56 Gb Free Space | 34,39% Space Free | Partition Type: NTFS Drive D: | 19,08 Gb Total Space | 3,46 Gb Free Space | 18,15% Space Free | Partition Type: NTFS Drive E: | 38,16 Gb Total Space | 9,57 Gb Free Space | 25,08% Space Free | Partition Type: NTFS Drive F: | 76,33 Gb Total Space | 17,64 Gb Free Space | 23,11% Space Free | Partition Type: NTFS Computer Name: UNKNOWN | User Name: Krystian | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-07-03 19:06:45 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Krystian\Pulpit\logi\OTL.exe PRC - [2012-06-15 19:41:27 | 000,874,384 | ---- | M] (Opera Software) -- C:\Program Files\Opera\opera.exe PRC - [2012-06-15 19:41:27 | 000,800,656 | ---- | M] (Opera Software) -- C:\Program Files\Opera\pluginwrapper\opera_plugin_wrapper.exe PRC - [2011-09-22 13:03:30 | 000,974,944 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe PRC - [2011-09-22 13:03:02 | 003,080,264 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe PRC - [2008-04-15 14:00:00 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012-06-30 16:28:36 | 009,459,912 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_3_300_262.dll MOD - [2008-04-15 14:00:00 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll MOD - [2005-05-03 19:38:42 | 000,064,512 | ---- | M] () -- C:\WINDOWS\system32\P17.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ) SRV - [2012-06-16 13:33:17 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2011-09-22 13:03:30 | 000,974,944 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -- (ekrn) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - [2012-06-20 11:26:53 | 000,062,592 | ---- | M] (Chic Tech.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\moufiltr.sys -- (moufiltr) DRV - [2011-08-09 15:24:52 | 000,154,136 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\eamon.sys -- (eamon) DRV - [2011-08-04 10:20:38 | 000,103,112 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\epfwtdir.sys -- (epfwtdir) DRV - [2011-08-04 10:20:36 | 000,118,104 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ehdrv.sys -- (ehdrv) DRV - [2008-04-15 14:00:00 | 000,225,664 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\tcpip6.sys -- (Tcpip6) DRV - [2008-04-14 02:15:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum) DRV - [2008-04-13 23:05:40 | 000,032,768 | ---- | M] (SiS Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sisnic.sys -- (SISNIC) DRV - [2007-06-15 10:47:26 | 001,127,936 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\P17.sys -- (P17) DRV - [2006-05-03 19:50:42 | 001,540,608 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag) DRV - [2005-01-10 18:15:30 | 000,106,496 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ctoss2k.sys -- (ossrv) DRV - [2005-01-10 18:15:24 | 000,138,752 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ctsfm2k.sys -- (ctsfm2k) DRV - [2001-08-17 22:11:06 | 000,066,591 | ---- | M] (3Com Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\el90xbc5.sys -- (EL90XBC) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1085031214-1767777339-1547161642-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/ IE - HKU\S-1-5-21-1085031214-1767777339-1547161642-1003\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-1085031214-1767777339-1547161642-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC IE - HKU\S-1-5-21-1085031214-1767777339-1547161642-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "google.pl" FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_3_300_262.dll () FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.0.61118.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-06-16 13:33:19 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2012-02-29 19:19:30 | 000,000,000 | ---D | M] [2012-02-29 19:41:14 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Krystian\Dane aplikacji\Mozilla\Extensions [2012-06-04 21:25:01 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Krystian\Dane aplikacji\Mozilla\Firefox\Profiles\h6xe3lom.default\extensions [2012-04-11 12:06:33 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2012-04-11 12:06:33 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2012-06-16 13:33:18 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2012-02-16 13:12:03 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2012-02-16 13:12:03 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2012-02-16 13:12:03 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2012-02-16 13:12:03 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2012-02-16 13:12:03 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2012-02-16 13:12:03 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms} CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Documents and Settings\Krystian\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\17.0.963.56\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\Krystian\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\17.0.963.56\pdf.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\Krystian\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\17.0.963.56\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_3_300_262.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll CHR - plugin: Picasa (Enabled) = C:\Program Files\Google\Picasa3\npPicasa3.dll CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll CHR - plugin: Java(TM) Platform SE 6 U31 (Enabled) = C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\5.0.61118.0\npctrl.dll CHR - plugin: Default Plug-in (Enabled) = default_plugin CHR - Extension: YouTube = C:\Documents and Settings\Krystian\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: Szukaj w Google = C:\Documents and Settings\Krystian\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\ CHR - Extension: Gmail = C:\Documents and Settings\Krystian\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2008-04-15 14:00:00 | 000,000,783 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 mpa.one.microsoft.com O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O3 - HKU\S-1-5-21-1085031214-1767777339-1547161642-1003\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll File not found O4 - HKLM..\Run: [AtiPTA] C:\WINDOWS\System32\atiptaxx.exe (ATI Technologies, Inc.) O4 - HKLM..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd File not found O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET) O4 - HKLM..\Run: [P17Helper] C:\WINDOWS\System32\P17.dll () O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1085031214-1767777339-1547161642-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 78.31.159.225 78.31.159.227 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E9D66417-1EF0-4FE8-B133-49C5751E2E03}: DhcpNameServer = 78.31.159.225 78.31.159.227 O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\Krystian\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Krystian\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2012-02-29 18:47:55 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-07-03 19:16:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Krystian\Pulpit\logi [2012-07-03 18:53:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Krystian\Moje dokumenty\Pobieranie [2012-07-03 18:34:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Krystian\Dane aplikacji\vlc [2012-07-03 18:33:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\VideoLAN [2012-07-03 18:33:16 | 000,000,000 | ---D | C] -- C:\Program Files\VideoLAN [2012-07-01 19:26:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Krystian\Pulpit\Game of Thrones - Main Theme (Official Soundtrack Version) - YouTube_files [2012-07-01 11:38:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Krystian\Menu Start\Programy\HiJackThis [2012-07-01 11:38:44 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro [2012-07-01 11:10:09 | 000,603,648 | ---- | C] (iS3, Inc.) -- C:\Documents and Settings\Krystian\Pulpit\iexplore.exe [2012-06-29 12:46:32 | 001,458,176 | ---- | C] (C-Media Electronics Inc.) -- C:\WINDOWS\System\SmWizard.exe [2012-06-29 12:46:32 | 000,032,768 | ---- | C] (C-Media Corporation) -- C:\WINDOWS\System32\udaprop.dll [2012-06-29 12:46:31 | 000,167,936 | ---- | C] (C-Media) -- C:\WINDOWS\System32\cmuda.dll [2012-06-29 12:46:30 | 000,917,504 | ---- | C] (C-Media Electronics Inc.) -- C:\WINDOWS\System\cmids3d.dll [2012-06-29 12:46:29 | 002,596,864 | ---- | C] (C-Media Corporation) -- C:\WINDOWS\System\cmicnfg.cpl [2012-06-29 12:46:29 | 000,712,704 | ---- | C] (Sensaura Ltd) -- C:\WINDOWS\System32\Audio3D.dll [2012-06-29 12:46:28 | 000,000,000 | ---D | C] -- C:\Program Files\C-Media 3D Audio [2012-06-25 18:17:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\King Arthur's Gold [2012-06-25 18:16:33 | 000,000,000 | ---D | C] -- C:\Program Files\KAG [2012-06-25 17:59:21 | 000,409,600 | ---- | C] (Creative Labs) -- C:\WINDOWS\System32\wrap_oal.dll [2012-06-25 17:59:20 | 000,114,688 | ---- | C] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\WINDOWS\System32\OpenAL32.dll [2012-06-25 17:58:54 | 000,011,264 | ---- | C] (Creative Technology Limited) -- C:\WINDOWS\INRES.DLL [2012-06-25 17:58:54 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Data [2012-06-25 17:58:52 | 000,000,000 | ---D | C] -- C:\Program Files\Creative [2012-06-24 20:10:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Krystian\Pulpit\Project X Soundtrack - (2012) [MP3 320] [2012-06-23 19:29:33 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Krystian\Recent [2012-06-21 18:43:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Krystian\Pulpit\na plakat [2012-06-20 11:27:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Krystian\Menu Start\Programy\Trust [2012-06-18 00:39:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Krystian\Ustawienia lokalne\Dane aplikacji\CrashRpt [2012-06-17 20:27:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Soldat [2012-06-17 20:26:38 | 000,000,000 | ---D | C] -- C:\Program Files\Soldat [2012-06-17 20:26:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Krystian\Dane aplikacji\Soldat [3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-07-03 19:11:51 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2012-07-03 19:11:45 | 1073,319,936 | -HS- | M] () -- C:\hiberfil.sys [2012-07-03 17:43:42 | 022,657,136 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\vlc-2.0.2-win32.exe [2012-07-01 19:26:32 | 000,195,019 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\Game of Thrones - Main Theme (Official Soundtrack Version) - YouTube.htm [2012-07-01 18:39:24 | 009,840,792 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\Feel-The-Love-feat.-John-Newman.mp3 [2012-07-01 11:57:42 | 000,914,659 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\Fixitpc.pl.mht [2012-07-01 11:10:09 | 000,603,648 | ---- | M] (iS3, Inc.) -- C:\Documents and Settings\Krystian\Pulpit\iexplore.exe [2012-06-30 16:28:37 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe [2012-06-30 16:28:37 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl [2012-06-30 12:34:09 | 000,000,292 | ---- | M] () -- C:\WINDOWS\System\cmicnfg.ini [2012-06-29 12:49:34 | 000,000,326 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\MP3.lnk [2012-06-29 12:46:36 | 000,000,092 | ---- | M] () -- C:\WINDOWS\CMISETUP.INI [2012-06-29 12:46:33 | 000,000,026 | ---- | M] () -- C:\WINDOWS\CMCDPLAY.INI [2012-06-29 12:46:32 | 000,000,736 | ---- | M] () -- C:\WINDOWS\setup.ini [2012-06-29 00:05:56 | 000,663,191 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\NOWA lutownica pistoletowa zestaw.mht [2012-06-26 17:39:30 | 000,779,980 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..mht [2012-06-26 15:09:36 | 000,371,806 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\FAQ Diody LED - zasilanie..mht [2012-06-25 20:35:19 | 001,917,626 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\Jacobs Kawa Mrożona.mht [2012-06-25 18:03:23 | 000,000,584 | ---- | M] () -- C:\WINDOWS\System32\settingsbkup.sfm [2012-06-25 18:03:23 | 000,000,584 | ---- | M] () -- C:\WINDOWS\System32\settings.sfm [2012-06-25 17:59:21 | 000,409,600 | ---- | M] (Creative Labs) -- C:\WINDOWS\System32\wrap_oal.dll [2012-06-25 17:59:21 | 000,114,688 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\WINDOWS\System32\OpenAL32.dll [2012-06-25 05:06:01 | 000,001,024 | ---- | M] () -- C:\WINDOWS\System32\local.db [2012-06-22 18:46:33 | 000,203,071 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\20.06.2012 fanzone.jpg [2012-06-22 00:18:25 | 000,009,216 | ---- | M] () -- C:\Documents and Settings\Krystian\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-06-21 14:58:39 | 000,000,211 | -HS- | M] () -- C:\boot.ini [2012-06-20 11:26:53 | 000,062,592 | ---- | M] (Chic Tech.) -- C:\WINDOWS\System32\drivers\moufiltr.sys [2012-06-18 00:47:34 | 000,189,000 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2012-06-14 11:23:56 | 000,823,135 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\Nike Commercial _Ordinary People_ w_ Tidiani Sokoba - YouTube.mht [2012-06-13 23:46:37 | 000,008,127 | ---- | M] () -- C:\Documents and Settings\Krystian\Moje dokumenty\layout foobar.fcl [2012-06-13 23:46:22 | 000,001,100 | ---- | M] () -- C:\Documents and Settings\Krystian\Moje dokumenty\foo.fth [2012-06-09 22:20:39 | 000,027,035 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\Logitech X540 (2405311631) - Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..htm [2012-06-07 18:24:55 | 000,856,556 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\Disney Pick Up Lines - Get Her Number! - YouTube.mht [2012-06-06 09:47:46 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2012-06-06 00:30:51 | 000,847,944 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\822db4911556a4ad67e8d4919a6aad78.jpg [2012-06-05 11:38:07 | 001,654,863 | ---- | M] () -- C:\Documents and Settings\Krystian\Pulpit\CouchSurfing – The world’s largest travel community.mht [3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-07-03 17:37:10 | 022,657,136 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\vlc-2.0.2-win32.exe [2012-07-01 19:26:29 | 000,195,019 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\Game of Thrones - Main Theme (Official Soundtrack Version) - YouTube.htm [2012-07-01 18:36:52 | 009,840,792 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\Feel-The-Love-feat.-John-Newman.mp3 [2012-07-01 11:57:42 | 000,914,659 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\Fixitpc.pl.mht [2012-07-01 11:02:01 | 000,018,944 | ---- | C] () -- C:\WINDOWS\Installer\{db7362de-2ba2-a1dd-a562-426981373a95}\U\800000cb.@ [2012-07-01 11:02:01 | 000,001,696 | ---- | C] () -- C:\WINDOWS\Installer\{db7362de-2ba2-a1dd-a562-426981373a95}\U\00000001.@ [2012-07-01 11:02:00 | 000,013,312 | ---- | C] () -- C:\WINDOWS\Installer\{db7362de-2ba2-a1dd-a562-426981373a95}\U\80000000.@ [2012-06-29 12:49:34 | 000,000,326 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\MP3.lnk [2012-06-29 12:47:43 | 000,000,292 | ---- | C] () -- C:\WINDOWS\System\cmicnfg.ini [2012-06-29 12:46:37 | 000,000,736 | ---- | C] () -- C:\WINDOWS\setup.ini [2012-06-29 12:46:30 | 000,233,472 | ---- | C] () -- C:\WINDOWS\System32\cmirmdrv.exe [2012-06-29 12:46:30 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\cmirmdrv.dll [2012-06-29 12:46:28 | 000,225,280 | ---- | C] () -- C:\WINDOWS\CmiRmRedundDir.exe [2012-06-29 00:05:56 | 000,663,191 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\NOWA lutownica pistoletowa zestaw.mht [2012-06-26 17:39:29 | 000,779,980 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..mht [2012-06-26 15:09:36 | 000,371,806 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\FAQ Diody LED - zasilanie..mht [2012-06-25 20:35:19 | 001,917,626 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\Jacobs Kawa Mrożona.mht [2012-06-25 18:03:23 | 000,000,584 | ---- | C] () -- C:\WINDOWS\System32\settingsbkup.sfm [2012-06-25 18:03:23 | 000,000,584 | ---- | C] () -- C:\WINDOWS\System32\settings.sfm [2012-06-25 17:58:54 | 000,005,663 | ---- | C] () -- C:\WINDOWS\System32\ludap17.ini [2012-06-25 17:58:54 | 000,000,075 | ---- | C] () -- C:\WINDOWS\System32\ctzapxx.ini [2012-06-25 05:06:00 | 000,001,024 | ---- | C] () -- C:\WINDOWS\System32\local.db [2012-06-22 18:46:55 | 000,203,071 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\20.06.2012 fanzone.jpg [2012-06-22 12:39:32 | 730,863,616 | ---- | C] () -- C:\Documents and Settings\Krystian\Moje dokumenty\nympho-sexsuckhouse.avi [2012-06-14 11:23:56 | 000,823,135 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\Nike Commercial _Ordinary People_ w_ Tidiani Sokoba - YouTube.mht [2012-06-13 23:46:22 | 000,001,100 | ---- | C] () -- C:\Documents and Settings\Krystian\Moje dokumenty\foo.fth [2012-06-09 22:20:37 | 000,027,035 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\Logitech X540 (2405311631) - Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..htm [2012-06-07 18:24:55 | 000,856,556 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\Disney Pick Up Lines - Get Her Number! - YouTube.mht [2012-06-06 00:30:51 | 000,847,944 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\822db4911556a4ad67e8d4919a6aad78.jpg [2012-06-05 11:38:06 | 001,654,863 | ---- | C] () -- C:\Documents and Settings\Krystian\Pulpit\CouchSurfing – The world’s largest travel community.mht [2012-04-21 18:51:45 | 000,000,143 | ---- | C] () -- C:\WINDOWS\wlist.dll [2012-04-17 20:00:31 | 000,118,065 | ---- | C] () -- C:\WINDOWS\hpqins00.dat [2012-04-13 13:41:59 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2012-03-18 23:16:54 | 000,000,036 | ---- | C] () -- C:\WINDOWS\DTLite.INI [2012-03-18 18:08:14 | 000,106,807 | ---- | C] () -- C:\WINDOWS\hpqins05.dat [2012-03-13 21:06:04 | 000,122,884 | ---- | C] () -- C:\WINDOWS\UnGins.exe [2012-03-13 01:11:04 | 000,339,968 | ---- | C] () -- C:\WINDOWS\vsnpstd.exe [2012-03-13 01:11:04 | 000,015,541 | ---- | C] () -- C:\WINDOWS\snpstd.ini [2012-03-13 01:10:51 | 000,390,656 | ---- | C] () -- C:\WINDOWS\System32\drivers\snpstd.sys [2012-03-13 01:10:38 | 000,061,440 | ---- | C] ( ) -- C:\WINDOWS\System32\rsnpstd.dll [2012-03-13 01:10:38 | 000,061,440 | ---- | C] ( ) -- C:\WINDOWS\System32\csnpstd.dll [2012-03-13 01:10:38 | 000,036,864 | ---- | C] ( ) -- C:\WINDOWS\System32\vsnpstd.dll [2012-03-13 01:10:38 | 000,020,480 | ---- | C] () -- C:\WINDOWS\usnpstd.exe [2012-03-06 16:25:55 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat [2012-03-01 18:37:07 | 000,244,769 | ---- | C] () -- C:\WINDOWS\hpoins12.dat.temp [2012-03-01 18:37:07 | 000,001,470 | ---- | C] () -- C:\WINDOWS\hpomdl12.dat.temp [2012-03-01 18:33:14 | 000,141,273 | ---- | C] () -- C:\WINDOWS\hpoins12.dat [2012-03-01 18:33:14 | 000,001,470 | ---- | C] () -- C:\WINDOWS\hpomdl12.dat [2012-02-29 23:38:24 | 000,175,616 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2012-02-29 22:49:26 | 000,000,092 | ---- | C] () -- C:\WINDOWS\CMISETUP.INI [2012-02-29 22:49:23 | 000,000,026 | ---- | C] () -- C:\WINDOWS\CMCDPLAY.INI [2012-02-29 22:49:21 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Wininit.ini [2012-02-29 22:49:18 | 000,266,240 | ---- | C] () -- C:\WINDOWS\CMIUninstall.exe [2012-02-29 22:49:18 | 000,028,672 | ---- | C] () -- C:\WINDOWS\CMIRmDriver.dll [2012-02-29 19:26:26 | 000,516,096 | ---- | C] () -- C:\WINDOWS\System32\ati2sgag.exe [2012-02-29 19:23:44 | 000,451,072 | ---- | C] () -- C:\WINDOWS\Radeon Omega Drivers v3.8.252 Uninstall.exe [2012-02-29 19:09:01 | 000,009,216 | ---- | C] () -- C:\Documents and Settings\Krystian\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-02-29 18:54:57 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2012-02-29 18:43:21 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2012-02-27 02:10:27 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2012-02-27 02:07:35 | 000,189,000 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2008-04-15 14:00:00 | 000,002,048 | -HS- | C] () -- C:\WINDOWS\Installer\{db7362de-2ba2-a1dd-a562-426981373a95}\@ [2008-04-15 14:00:00 | 000,002,048 | -HS- | C] () -- C:\Documents and Settings\Krystian\Ustawienia lokalne\Dane aplikacji\{db7362de-2ba2-a1dd-a562-426981373a95}\@ [color=#E56717]========== LOP Check ==========[/color] [2012-03-11 11:22:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Agnieszka\Dane aplikacji\Foxit Software [2012-03-08 14:30:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite [2012-02-29 19:19:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ESET [2012-05-28 19:04:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Last.fm [2012-02-29 20:44:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Krystian\Dane aplikacji\BESTplayer [2012-04-17 16:13:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Krystian\Dane aplikacji\DAEMON Tools Lite [2012-03-02 00:30:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Krystian\Dane aplikacji\Dev-Cpp [2012-05-18 13:32:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Krystian\Dane aplikacji\EurekaLog [2012-07-03 19:10:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Krystian\Dane aplikacji\foobar2000 [2012-03-08 23:28:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Krystian\Dane aplikacji\Foxit Software [2012-02-29 23:40:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Krystian\Dane aplikacji\Gadu-Gadu [2012-03-13 01:17:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Krystian\Dane aplikacji\GetRightToGo [2012-04-21 18:50:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Krystian\Dane aplikacji\Mp3tag [2012-03-18 11:34:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Krystian\Dane aplikacji\My Games [2012-03-19 21:41:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Krystian\Dane aplikacji\NapiProjekt [2012-02-29 19:48:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Krystian\Dane aplikacji\NFS Underground 2 [2012-02-29 20:09:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Krystian\Dane aplikacji\Opera [2012-04-11 00:47:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Krystian\Dane aplikacji\pdfforge [2012-06-17 20:26:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Krystian\Dane aplikacji\Soldat [2012-02-29 23:50:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Krystian\Dane aplikacji\stamina [2012-07-03 18:32:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Krystian\Dane aplikacji\uTorrent [2012-04-13 20:41:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sławomir\Dane aplikacji\Foxit Software [color=#E56717]========== Purity Check ==========[/color] < End of report >