OTL logfile created on: 2012-07-06 18:48:18 - Run 1
OTL by OldTimer - Version 3.2.53.1     Folder = G:\
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
2,00 Gb Total Physical Memory | 1,76 Gb Available Physical Memory | 87,87% Memory free
3,85 Gb Paging File | 3,79 Gb Available in Paging File | 98,32% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 97,65 Gb Total Space | 23,36 Gb Free Space | 23,92% Space Free | Partition Type: NTFS
Drive D: | 185,55 Gb Total Space | 32,08 Gb Free Space | 17,29% Space Free | Partition Type: NTFS
Drive E: | 182,55 Gb Total Space | 93,11 Gb Free Space | 51,01% Space Free | Partition Type: NTFS
Drive G: | 1,88 Gb Total Space | 1,85 Gb Free Space | 98,10% Space Free | Partition Type: FAT
Drive H: | 25,37 Gb Total Space | 18,99 Gb Free Space | 74,85% Space Free | Partition Type: FAT32
Drive I: | 49,13 Gb Total Space | 3,68 Gb Free Space | 7,48% Space Free | Partition Type: NTFS
 
Computer Name: MMMM-4348D56BDA | User Name: MMMM | Logged in as Administrator.
Boot Mode: SafeMode | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-07-06 18:44:42 | 000,595,968 | ---- | M] (OldTimer Tools) -- G:\OTL.exe
PRC - [2008-04-14 22:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2012-04-04 07:54:04 | 000,300,544 | ---- | M] () -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.POL
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - [2012-06-27 12:27:39 | 000,113,120 | ---- | M] (Mozilla Foundation) [Disabled | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012-06-25 14:30:20 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012-03-07 02:15:14 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Stopped] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2011-08-03 13:49:00 | 002,255,464 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2010-11-28 00:40:31 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010-02-01 17:51:07 | 000,759,048 | ---- | M] (ABBYY) [Disabled | Stopped] -- C:\Program Files\ABBYY PDF Transformer 3.0\NetworkLicenseServer.exe -- (ABBYY.Licensing.PDFTransformer.Classic.3.0)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\CM108.sys -- (USBPNPA)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] --  -- (i2omgmt)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\EagleNT.sys -- (EagleNT)
DRV - File not found [Kernel | System | Stopped] --  -- (Changer)
DRV - [2012-03-07 02:03:51 | 000,612,184 | ---- | M] (AVAST Software) [File_System | System | Stopped] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2012-03-07 02:03:38 | 000,337,880 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2012-03-07 02:02:00 | 000,035,672 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2012-03-07 02:01:53 | 000,053,848 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2012-03-07 02:01:39 | 000,095,704 | ---- | M] (AVAST Software) [File_System | Auto | Stopped] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2012-03-07 02:01:30 | 000,020,696 | ---- | M] (AVAST Software) [File_System | Auto | Stopped] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2012-03-07 01:58:29 | 000,024,920 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2011-08-03 10:58:14 | 000,024,504 | ---- | M] (Turtle Entertainment GmbH) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ESLvnic.sys -- (ESLvnic1)
DRV - [2010-11-09 05:09:22 | 000,100,456 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nvhda32.sys -- (NVHDA)
DRV - [2010-07-28 12:27:36 | 006,108,776 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2010-05-03 08:49:18 | 000,225,232 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2009-11-18 01:17:00 | 001,395,800 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt)
DRV - [2009-11-18 01:16:00 | 001,691,480 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt)
DRV - [2009-10-12 04:10:54 | 000,029,440 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTLTEAMING.SYS -- (RTLTEAMING)
DRV - [2009-02-16 11:35:06 | 000,017,536 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTLVLAN.SYS -- (RTLVLAN)
DRV - [2008-07-09 08:11:34 | 000,022,016 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\RtNdPt5x.sys -- (RtNdPt5x)
DRV - [2004-04-01 17:30:46 | 000,010,368 | ---- | M] (Padus, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\pfc.sys -- (pfc)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKLM\..\SearchScopes\{AB03BA76-812D-4F5D-AB9B-DAE241F1F320}: "URL" = http://www.toggle.com/en/index.php?rvs=google
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://startsear.ch/?aff=1&src=sp&cf=96fd1179-166f-11e1-8097-00ff01000001&q={searchTerms}
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
IE - HKU\S-1-5-21-1644491937-1563985344-1177238915-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.toggle.com/en/index.php?rvs=google
IE - HKU\S-1-5-21-1644491937-1563985344-1177238915-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.gazeta.pl/0,0.html?p=128
IE - HKU\S-1-5-21-1644491937-1563985344-1177238915-1003\..\SearchScopes,DefaultScope = {afdbddaa-5d3f-42ee-b79c-185a7020515b}
IE - HKU\S-1-5-21-1644491937-1563985344-1177238915-1003\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=VD&o=14778&src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=VX&apn_dtid=YYYYYYYYPL&apn_uid=3A45B99A-9E44-4473-9585-A4B720D8A421&apn_sauid=E569BA60-E265-4197-9876-4487BC6D5DFD
IE - HKU\S-1-5-21-1644491937-1563985344-1177238915-1003\..\SearchScopes\{AB03BA76-812D-4F5D-AB9B-DAE241F1F320}: "URL" = http://www.toggle.com/en/index.php?rvs=google
IE - HKU\S-1-5-21-1644491937-1563985344-1177238915-1003\..\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}: "URL" = http://www.daemon-search.com/search/web?q={searchTerms}
IE - HKU\S-1-5-21-1644491937-1563985344-1177238915-1003\..\SearchScopes\{AE501A20-2DF1-4EF6-92DC-8FC98283F7A5}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2776682
IE - HKU\S-1-5-21-1644491937-1563985344-1177238915-1003\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://startsear.ch/?aff=1&src=sp&cf=96fd1179-166f-11e1-8097-00ff01000001&q={searchTerms}
IE - HKU\S-1-5-21-1644491937-1563985344-1177238915-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1644491937-1563985344-1177238915-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;127.0.0.1:9421;
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultengine: "Web Search"
FF - prefs.js..browser.search.defaultenginename: "Web Search"
FF - prefs.js..browser.search.defaultthis.engineName: "http://www.toggle.com/en/index.php?rvs=google"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2502813&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.order.1: "Web Search"
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=937811"
FF - prefs.js..browser.search.selectedEngine: "Web Search"
FF - prefs.js..browser.startup.homepage: "http://www.google.pl/"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: ffxtlbr@Facemoods.com:1.1.0
FF - prefs.js..extensions.enabledItems: {ce18769b-c7fa-42d2-860d-17c4662c70ad}:3.3.3.2
FF - prefs.js..extensions.enabledItems: {51a86bb3-6602-4c85-92a5-130ee4864f13}:3.3.3.2
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {afff23eb-f55d-439b-afc3-badf9c4108ce}:3.3.3.2
FF - prefs.js..extensions.enabledItems: {B042753D-F57E-4e8e-A01B-7379A6D4CEFB}:1.25
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.3.3.2
FF - prefs.js..keyword.URL: "http://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=937811&p="
FF - prefs.js..network.proxy.no_proxies_on: "*.local"
FF - prefs.js..network.proxy.type: 0
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_3_300_262.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products Ltd.)
FF - HKLM\Software\MozillaPlugins\@ganymede/BOARDS,version=1.0: C:\Program Files\Ganymede\Plugins\BOARDS\NPBOARDS.dll (Ganymede Technologies)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60310.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\MMMM\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\MMMM\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\wrc@avast.com: C:\Program Files\Alwil Software\Avast5\WebRep\FF [2012-03-23 20:47:54 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-06-27 12:27:44 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-05-10 16:30:44 | 000,000,000 | ---D | M]
 
[2010-08-17 19:57:34 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\MMMM\Dane aplikacji\Mozilla\Extensions
[2012-05-02 13:39:22 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\MMMM\Dane aplikacji\Mozilla\Firefox\Profiles\6nktpz6l.default\extensions
[2011-03-05 19:19:43 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\MMMM\Dane aplikacji\Mozilla\Firefox\Profiles\6nktpz6l.default\extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}-trash
[2010-05-26 15:18:50 | 000,002,333 | ---- | M] () -- C:\Documents and Settings\MMMM\Dane aplikacji\Mozilla\Firefox\Profiles\6nktpz6l.default\searchplugins\askcom.xml
[2010-08-18 14:27:40 | 000,000,923 | ---- | M] () -- C:\Documents and Settings\MMMM\Dane aplikacji\Mozilla\Firefox\Profiles\6nktpz6l.default\searchplugins\conduit.xml
[2011-01-30 14:12:49 | 000,002,059 | ---- | M] () -- C:\Documents and Settings\MMMM\Dane aplikacji\Mozilla\Firefox\Profiles\6nktpz6l.default\searchplugins\daemon-search.xml
[2011-07-11 20:04:02 | 000,000,633 | ---- | M] () -- C:\Documents and Settings\MMMM\Dane aplikacji\Mozilla\Firefox\Profiles\6nktpz6l.default\searchplugins\startsear.xml
[2012-05-07 19:48:35 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011-10-25 21:06:47 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2012-03-23 20:47:54 | 000,000,000 | ---D | M] (avast! WebRep) -- C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST5\WEBREP\FF
[2012-04-03 13:05:03 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2012-06-27 12:27:43 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2010-08-24 11:31:30 | 000,773,120 | ---- | M] (BitComet) -- C:\Program Files\mozilla firefox\plugins\npBitCometAgent.dll
[2011-07-15 13:24:52 | 000,932,008 | ---- | M] (Ganymede Technologies) -- C:\Program Files\mozilla firefox\plugins\NPBOARDS.dll
[2012-04-03 13:05:02 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2011-09-27 21:04:22 | 000,170,080 | ---- | M] (Tracker Software Products Ltd.) -- C:\Program Files\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll
[2011-12-09 19:23:32 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll
[2012-06-27 12:27:31 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2010-09-19 08:31:43 | 000,002,226 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml
[2012-06-27 12:27:31 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2010-03-28 18:56:18 | 000,002,035 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fcmdSrchFxt.xml
[2012-06-27 12:27:31 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2012-06-27 12:27:31 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2012-06-27 12:27:31 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2012-06-27 12:27:31 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Shockwave Flash (Disabled) = C:\Documents and Settings\MMMM\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\PepperFlash\11.1.31.203\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\MMMM\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\17.0.963.66\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Documents and Settings\MMMM\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\17.0.963.66\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\MMMM\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\17.0.963.66\pdf.dll
CHR - plugin: Skype Toolbars (Enabled) = C:\Documents and Settings\MMMM\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\npSkypeChromePlugin.dll
CHR - plugin: Ganymede Boards Plugin (Enabled) = C:\Documents and Settings\MMMM\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\plugins\NPBOARDS.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.290.11 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U29 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll
CHR - plugin: Google Update (Enabled) = C:\Documents and Settings\MMMM\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.99\npGoogleUpdate3.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\4.0.60310.0\npctrl.dll
CHR - plugin: Pando Web Plugin (Enabled) = C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll
CHR - plugin: PDF-XChange Viewer (Enabled) = C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\WINDOWS\system32\Adobe\Director\np32dsw.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: YouTube = C:\Documents and Settings\MMMM\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Szukaj w Google = C:\Documents and Settings\MMMM\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.17_0\
CHR - Extension: avast! WebRep = C:\Documents and Settings\MMMM\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1289_0\
CHR - Extension: Skype Click to Call = C:\Documents and Settings\MMMM\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\
CHR - Extension: Gmail = C:\Documents and Settings\MMMM\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
 
O1 HOSTS File: ([2011-09-15 14:57:16 | 000,001,082 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: 78.47.251.150    easyanticheat.se    # misleading site
O1 - Hosts: 78.47.251.150    www.easyanticheat.se    # misleading site
O1 - Hosts: 78.47.251.150    easyanticheat.com    # misleading site
O1 - Hosts: 78.47.251.150    www.easyanticheat.com    # misleading site
O1 - Hosts: 78.47.251.150    easyanticheat.org    # misleading site
O1 - Hosts: 78.47.251.150    www.easyanticheat.org    # misleading site
O2 - BHO: (no name) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - No CLSID value found.
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
O3 - HKU\S-1-5-21-1644491937-1563985344-1177238915-1003\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O3 - HKU\S-1-5-21-1644491937-1563985344-1177238915-1003\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: [avast] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe ()
O4 - HKLM..\Run: [tcpmonui] C:\Documents and Settings\MMMM\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\4759\tcpmonui.exe ()
O4 - HKU\S-1-5-21-1644491937-1563985344-1177238915-1003..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG)
O4 - HKU\S-1-5-21-1644491937-1563985344-1177238915-1003..\Run: [Pando Media Booster] C:\Program Files\Pando Networks\Media Booster\PMB.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1644491937-1563985344-1177238915-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O7 - HKU\S-1-5-21-1644491937-1563985344-1177238915-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O8 - Extra context menu item: &Download All using 4shared Desktop - E:\Program Files\4shared Desktop\down_all.htm File not found
O8 - Extra context menu item: &P&obierz &za pomocą BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm File not found
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - E:\Program Files\Microsoft Office 2003\OFFICE11\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Pobierz wszystko za pomocą BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm File not found
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\Program Files\Microsoft Office 2003\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.4.12.6.dll/206 File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Computer, Inc.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{6CD4612C-F17D-4066-AE97-BD12A0A5D42C}: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\mdhcp32: DllName - (mdhcp32.dll) -  File not found
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\MMMM\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\MMMM\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010-08-16 14:10:30 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2008-02-15 21:56:37 | 000,000,000 | ---- | M] () - I:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{38dd8ca2-2c6b-11e0-9139-00ff01000001}\Shell - "" = AutoRun
O33 - MountPoints2\{38dd8ca2-2c6b-11e0-9139-00ff01000001}\Shell\AutoRun\command - "" = I:\cdstart.exe
O33 - MountPoints2\{38dd8ca2-2c6b-11e0-9139-00ff01000001}\Shell\Name1\command - "" = I:\cdstart.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012-07-06 18:30:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\MMMM\Dane aplikacji\hellomoto
[2012-07-04 14:48:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\MMMM\Pulpit\Wazna Informacja
[2012-07-04 14:45:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\MMMM\Pulpit\Sprawozdania 2011.2012
[2012-07-02 18:37:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\MMMM\Pulpit\The.Son.of.No.One.2011.PL.DVDRip
[2012-07-02 18:03:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\MMMM\Pulpit\Salt 2010.avi
[2012-06-24 11:07:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\PTDD Super Fdisk 1.0
[2012-06-24 11:07:39 | 000,000,000 | ---D | C] -- C:\Program Files\PTDD Group
[2012-06-24 11:07:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\MMMM\Pulpit\sdisk
[2012-06-17 12:35:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\MMMM\Pulpit\foty
[2012-06-16 15:12:12 | 000,100,456 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\drivers\nvhda32.sys
[2012-06-16 15:12:12 | 000,026,216 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvhdap32.dll
[2012-06-16 15:12:11 | 000,837,224 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvgenco32hda.dll
[2012-06-16 15:12:03 | 000,813,672 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvgenco322030.dll
[2012-06-16 15:12:02 | 000,888,424 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvdispco322050.dll
[2012-06-16 14:21:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\MMMM\Pulpit\263.14_WinXP_32bit_WHQL
[2012-06-16 14:17:42 | 118,037,410 | ---- | C] (Igor Pavlov) -- C:\Documents and Settings\MMMM\Pulpit\vga_driver_nvidia_xp32_263.14.exe
[2012-06-14 08:19:03 | 000,521,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jsdbgui.dll
[2010-09-19 08:22:04 | 002,944,904 | ---- | C] (Ask) -- C:\Program Files\Common Files\AskToolbarInstaller.exe
[4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
File not found -- C:\Documents and Settings\MMMM\Pulpit\Limity podatkowe 2011r.
[2012-07-06 18:47:06 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012-07-06 18:30:15 | 000,000,930 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2012-07-06 17:15:03 | 000,001,128 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1644491937-1563985344-1177238915-1003UA.job
[2012-07-06 13:15:00 | 000,001,076 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1644491937-1563985344-1177238915-1003Core.job
[2012-07-03 00:14:48 | 730,192,886 | ---- | M] () -- C:\Documents and Settings\MMMM\Pulpit\OB1.rar
[2012-07-02 19:07:40 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2012-07-02 18:20:25 | 000,236,032 | ---- | M] () -- C:\Documents and Settings\MMMM\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-06-30 16:53:57 | 012,131,460 | ---- | M] () -- C:\Documents and Settings\MMMM\Pulpit\Col..rar.part
[2012-06-30 14:06:15 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012-06-25 14:30:19 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2012-06-25 14:30:19 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012-06-25 14:24:59 | 000,000,119 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\e-Świadectwa.url
[2012-06-25 14:24:54 | 000,000,904 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Świadectwa Technikum.lnk
[2012-06-24 11:07:48 | 000,001,742 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Create Bootable Disks of Super Fdisk 1.0.lnk
[2012-06-24 11:06:02 | 003,929,112 | ---- | M] () -- C:\Documents and Settings\MMMM\Pulpit\sdisk.zip
[2012-06-20 11:52:21 | 000,156,358 | ---- | M] () -- C:\Documents and Settings\MMMM\Pulpit\Obraz 001.jpg
[2012-06-20 10:54:47 | 000,474,416 | ---- | M] () -- C:\Documents and Settings\MMMM\Pulpit\Obraz.jpg
[2012-06-16 15:14:12 | 000,241,268 | ---- | M] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2012-06-16 15:14:12 | 000,000,001 | ---- | M] () -- C:\WINDOWS\System32\nvdrssel.bin
[2012-06-16 15:14:08 | 000,241,268 | ---- | M] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2012-06-16 14:21:04 | 118,037,410 | ---- | M] (Igor Pavlov) -- C:\Documents and Settings\MMMM\Pulpit\vga_driver_nvidia_xp32_263.14.exe
[2012-06-15 07:44:55 | 001,518,184 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012-06-14 10:33:50 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
File not found -- C:\Documents and Settings\MMMM\Pulpit\Limity podatkowe 2011r.
[2012-07-04 14:48:58 | 730,187,776 | ---- | C] () -- C:\Documents and Settings\MMMM\Pulpit\Ong Bak (2003) [Lektor PL] [DVDRip] [AVI] [XviD].avi
[2012-07-02 17:50:38 | 733,921,280 | ---- | C] () -- C:\Documents and Settings\MMMM\Pulpit\Gone.2011.PL.DVBRip.XviD.avi
[2012-07-02 17:29:01 | 730,192,886 | ---- | C] () -- C:\Documents and Settings\MMMM\Pulpit\OB1.rar
[2012-06-30 16:25:36 | 012,131,460 | ---- | C] () -- C:\Documents and Settings\MMMM\Pulpit\Col..rar.part
[2012-06-27 07:32:31 | 728,538,522 | ---- | C] () -- C:\Documents and Settings\MMMM\Pulpit\ks3.lektor-BiDA.avi
[2012-06-25 14:24:59 | 000,000,119 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\e-Świadectwa.url
[2012-06-25 14:24:54 | 000,000,904 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Świadectwa Technikum.lnk
[2012-06-24 11:07:48 | 000,001,742 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Create Bootable Disks of Super Fdisk 1.0.lnk
[2012-06-24 11:06:52 | 003,929,112 | ---- | C] () -- C:\Documents and Settings\MMMM\Pulpit\sdisk.zip
[2012-06-20 11:49:25 | 000,156,358 | ---- | C] () -- C:\Documents and Settings\MMMM\Pulpit\Obraz 001.jpg
[2012-06-20 10:54:06 | 000,474,416 | ---- | C] () -- C:\Documents and Settings\MMMM\Pulpit\Obraz.jpg
[2012-06-16 15:11:25 | 000,003,739 | ---- | C] () -- C:\WINDOWS\System32\nvinfo.pb
[2012-05-14 17:38:12 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012-03-29 20:04:18 | 000,294,018 | ---- | C] () -- C:\WINDOWS\System32\shimg.dll
[2011-09-07 20:29:07 | 000,000,016 | -H-- | C] () -- C:\Documents and Settings\MMMM\vaext
[2011-09-07 20:29:07 | 000,000,016 | -H-- | C] () -- C:\Documents and Settings\MMMM\.vsysd
[2011-08-28 00:51:03 | 000,265,120 | ---- | C] () -- C:\Program Files\Common Files\WireHelpSvc.exe
[2011-08-17 18:44:00 | 002,128,778 | ---- | C] () -- C:\WINDOWS\System32\nvdata.data
[2011-08-03 02:03:58 | 000,000,004 | ---- | C] () -- C:\WINDOWS\System32\proc-1830267680.bin
[2011-04-23 18:33:21 | 000,138,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2011-04-23 18:33:10 | 000,270,856 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe
[2011-04-23 18:32:52 | 000,075,136 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe
[2011-04-10 18:03:13 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2011-02-22 21:54:43 | 001,472,448 | ---- | C] () -- C:\Documents and Settings\MMMM\Dane aplikacji\brthardplay.22.2.11.Rand5622.ecp
[2011-02-05 13:14:52 | 000,129,024 | ---- | C] () -- C:\WINDOWS\System32\AVERM.dll
[2011-01-26 20:57:08 | 000,026,734 | ---- | C] () -- C:\Documents and Settings\MMMM\index.php
[2011-01-26 20:56:42 | 000,000,934 | ---- | C] () -- C:\Documents and Settings\MMMM\osiagniecia.php
[2011-01-26 20:56:28 | 000,002,324 | ---- | C] () -- C:\Documents and Settings\MMMM\sc_servers.php
[2011-01-26 20:56:18 | 000,002,828 | ---- | C] () -- C:\Documents and Settings\MMMM\server.php
[2011-01-26 20:56:13 | 000,000,560 | ---- | C] () -- C:\Documents and Settings\MMMM\serwery.php
[2011-01-15 23:21:51 | 000,000,414 | RHS- | C] () -- C:\Documents and Settings\All Users\ntuser.pol
[2011-01-14 15:43:04 | 000,000,350 | ---- | C] () -- C:\WINDOWS\RefreshLock.ini
[2011-01-12 19:13:27 | 000,000,012 | ---- | C] () -- C:\Documents and Settings\MMMM\intlname.ols
[2011-01-12 19:10:49 | 000,000,215 | ---- | C] () -- C:\WINDOWS\pdf2word.INI
[2010-12-29 23:23:19 | 000,000,316 | ---- | C] () -- C:\WINDOWS\game.ini
[2010-12-28 01:00:44 | 000,002,150 | ---- | C] () -- C:\Documents and Settings\MMMM\.recently-used.xbel
[2010-10-22 21:02:21 | 000,022,328 | ---- | C] () -- C:\Documents and Settings\MMMM\Dane aplikacji\PnkBstrK.sys
[2010-10-12 14:05:13 | 000,039,000 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2010-09-11 09:38:11 | 000,000,151 | ---- | C] () -- C:\WINDOWS\PhotoSnapViewer.INI
[2010-09-03 13:44:28 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2010-08-31 23:03:42 | 000,000,421 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2010-08-18 17:08:47 | 000,141,025 | ---- | C] () -- C:\WINDOWS\hpoins27.dat
[2010-08-18 17:08:47 | 000,000,932 | ---- | C] () -- C:\WINDOWS\hpomdl27.dat
[2010-08-18 13:21:01 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2010-08-17 22:57:56 | 000,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2010-08-17 21:48:56 | 000,236,032 | ---- | C] () -- C:\Documents and Settings\MMMM\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-08-17 19:57:32 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2010-08-17 19:54:30 | 000,080,416 | ---- | C] () -- C:\WINDOWS\System32\RtNicProp32.dll
[2010-08-17 19:42:30 | 000,241,268 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2010-08-17 19:42:28 | 000,241,268 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2010-08-17 19:42:28 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin
[2010-08-17 19:42:09 | 002,293,194 | ---- | C] () -- C:\WINDOWS\System32\nvdata.bin
[2010-08-16 16:02:31 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2010-08-16 16:01:31 | 001,518,184 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010-08-16 14:20:15 | 009,175,040 | -H-- | C] () -- C:\Documents and Settings\MMMM\NTUSER.bak
[2010-08-16 14:11:57 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2010-08-16 14:08:10 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 170 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:1AAB2E68

< End of report >