OTL logfile created on: 2012-07-09 17:10:53 - Run 1 OTL by OldTimer - Version 3.2.53.1 Folder = C:\Documents and Settings\Xp\Desktop Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.2180) Locale: 00000415 | Country: Poland | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 1,69 Gb Available Physical Memory | 84,68% Memory free 3,85 Gb Paging File | 3,76 Gb Available in Paging File | 97,57% Paging File free Paging file location(s): c:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 29,29 Gb Total Space | 2,38 Gb Free Space | 8,14% Space Free | Partition Type: NTFS Drive D: | 129,39 Gb Total Space | 39,39 Gb Free Space | 30,44% Space Free | Partition Type: NTFS Drive E: | 139,40 Gb Total Space | 3,31 Gb Free Space | 2,38% Space Free | Partition Type: NTFS Drive H: | 1,63 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS Drive I: | 17,59 Mb Total Space | 17,28 Mb Free Space | 98,23% Space Free | Partition Type: FAT Computer Name: XP-4F178865DB7F | User Name: Xp | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-07-09 17:08:48 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Xp\Desktop\OTL_[www.programosy.pl].exe PRC - [2004-08-04 14:00:00 | 001,032,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2009-02-28 04:04:20 | 000,311,296 | ---- | M] () -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\pdfshell.POL MOD - [2009-02-18 23:44:00 | 000,466,944 | ---- | M] () -- C:\WINDOWS\system32\nvshell.dll MOD - [2006-09-14 09:20:24 | 000,126,464 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Auto | Stopped] -- C:\Program Files\Acronis\DiskDirector\OSS\reinstall_svc.exe -- (OS Selector) SRV - [2012-06-27 17:01:34 | 000,791,488 | ---- | M] (Spigot, Inc.) [Auto | Stopped] -- C:\Program Files\Application Updater\ApplicationUpdater.exe -- (Application Updater) SRV - [2012-06-20 15:42:20 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2011-06-29 15:59:18 | 000,155,344 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe -- (Sony Ericsson PCCompanion) SRV - [2010-02-19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard) SRV - [2009-12-20 00:00:00 | 006,095,504 | ---- | M] (MySQL AB) [Auto | Stopped] -- C:\xampp\mysql\bin\mysqld.exe -- (MySQL) SRV - [2009-12-20 00:00:00 | 000,029,416 | ---- | M] (Apache Software Foundation) [Auto | Stopped] -- C:\xampp\apache\bin\httpd.exe -- (Apache2.2) SRV - [2009-08-19 11:08:22 | 000,908,056 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Stopped] -- C:\Program Files\AVG\AVG8\avgemc.exe -- (avg8emc) SRV - [2009-08-19 11:08:18 | 000,297,752 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Stopped] -- C:\Program Files\AVG\AVG8\avgwdsvc.exe -- (avg8wd) SRV - [2009-07-13 01:07:48 | 000,021,096 | ---- | M] (The Within Network, LLC) [Auto | Stopped] -- C:\WINDOWS\UnsignedThemesSvc.exe -- (UnsignedThemes) SRV - [2004-08-04 14:00:00 | 000,015,872 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\WINDOWS\system32\inetsrv\inetinfo.exe -- (W3SVC) SRV - [2004-08-04 14:00:00 | 000,015,872 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\WINDOWS\system32\inetsrv\inetinfo.exe -- (SMTPSVC) Simple Mail Transfer Protocol (SMTP) SRV - [2004-08-04 14:00:00 | 000,015,872 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\WINDOWS\system32\inetsrv\inetinfo.exe -- (IISADMIN) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\Xp\LOCALS~1\Temp\catchme.sys -- (catchme) DRV - File not found [Kernel | On_Demand | Unknown] -- -- (apcbug1t) DRV - [2011-12-01 08:15:54 | 000,025,512 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ggsemc.sys -- (ggsemc) DRV - [2011-12-01 08:15:54 | 000,013,224 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ggflt.sys -- (ggflt) DRV - [2011-10-29 06:12:59 | 000,166,976 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\snapman.sys -- (snapman) DRV - [2011-10-29 04:05:04 | 000,717,296 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sptd.sys -- (sptd) DRV - [2011-06-16 06:55:12 | 000,016,608 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\gdrv.sys -- (gdrv) DRV - [2009-08-19 11:08:25 | 000,335,240 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\avgldx86.sys -- (AvgLdx86) DRV - [2009-08-19 11:08:25 | 000,027,784 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Stopped] -- C:\WINDOWS\system32\drivers\avgmfx86.sys -- (AvgMfx86) DRV - [2009-07-13 01:07:46 | 000,025,448 | ---- | M] () [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\uxpatch.sys -- (uxpatch) DRV - [2009-06-26 15:31:22 | 000,137,888 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\PnkBstrK.sys -- (PnkBstrK) DRV - [2009-06-19 02:53:01 | 000,108,552 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgtdix.sys -- (AvgTdiX) DRV - [2008-10-21 11:22:48 | 000,114,600 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0017mdm.sys -- (s0017mdm) DRV - [2008-10-21 11:22:48 | 000,109,736 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0017unic.sys -- (s0017unic) Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (WDM) DRV - [2008-10-21 11:22:48 | 000,108,328 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0017mgmt.sys -- (s0017mgmt) Sony Ericsson Device 0017 USB WMC Device Management Drivers (WDM) DRV - [2008-10-21 11:22:48 | 000,104,616 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0017obex.sys -- (s0017obex) DRV - [2008-10-21 11:22:48 | 000,086,824 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0017bus.sys -- (s0017bus) Sony Ericsson Device 0017 driver (WDM) DRV - [2008-10-21 11:22:48 | 000,026,024 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0017nd5.sys -- (s0017nd5) Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (NDIS) DRV - [2008-10-21 11:22:48 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0017mdfl.sys -- (s0017mdfl) DRV - [2008-07-10 03:49:14 | 000,242,712 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\WINDOWS\system32\drivers\RsFx0102.sys -- (RsFx0102) DRV - [2008-06-08 09:37:56 | 000,132,904 | ---- | M] (Ahead Software AG) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\imagesrv.sys -- (imagesrv) DRV - [2008-06-08 09:37:46 | 000,011,304 | ---- | M] (Ahead Software AG) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\imagedrv.sys -- (imagedrv) DRV - [2008-02-14 11:04:06 | 004,676,096 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2008-01-09 12:28:34 | 000,027,632 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\seehcri.sys -- (seehcri) DRV - [2008-01-03 16:10:16 | 000,105,856 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp) DRV - [2007-12-10 15:22:22 | 000,110,120 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s3017unic.sys -- (s3017unic) Sony Ericsson Device 3017 USB Ethernet Emulation SEMC3017 (WDM) DRV - [2007-12-10 15:22:22 | 000,100,648 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s3017obex.sys -- (s3017obex) DRV - [2007-12-10 15:22:20 | 000,104,616 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s3017mgmt.sys -- (s3017mgmt) Sony Ericsson Device 3017 USB WMC Device Management Drivers (WDM) DRV - [2007-12-10 15:22:20 | 000,025,512 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s3017nd5.sys -- (s3017nd5) Sony Ericsson Device 3017 USB Ethernet Emulation SEMC3017 (NDIS) DRV - [2007-12-10 15:22:18 | 000,110,632 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s3017mdm.sys -- (s3017mdm) DRV - [2007-12-10 15:22:18 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s3017mdfl.sys -- (s3017mdfl) DRV - [2007-12-10 15:22:14 | 000,083,880 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s3017bus.sys -- (s3017bus) Sony Ericsson Device 3017 driver (WDM) DRV - [2006-09-24 15:28:46 | 000,005,248 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | Boot | Running] -- C:\WINDOWS\system32\speedfan.sys -- (speedfan) DRV - [2002-09-16 17:14:32 | 000,004,228 | ---- | M] (PowerQuest Corporation) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\PQNTDRV.sys -- (PQNTDrv) DRV - [1996-04-03 21:33:26 | 000,005,248 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\giveio.sys -- (giveio) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = about:blank IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = about:blank IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1085031214-2111687655-682003330-1003\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-1085031214-2111687655-682003330-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-21-1085031214-2111687655-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1085031214-2111687655-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;127.0.0.1:9421; [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultenginename: "Yahoo" FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=386496&ilc=12" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..keyword.URL: "http://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=386496&p=" FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX,Inc.) FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll (DivX, Inc) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.2.1: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.2.1: C:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\new_plugin\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2852: C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.46: C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1662: C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.46: C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\@real.com/RhapsodyPlayerEngine,version=1.0: C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll (RealNetworks, Inc.) FF - HKCU\Software\MozillaPlugins\@real.com/RhapsodyPlayerEngine: C:\Documents and Settings\Xp\Application Data\nprhapengine.dll File not found FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn2 [2010-04-02 06:40:14 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-06-20 15:42:21 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-01-22 16:34:22 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn2 [2010-04-02 06:40:14 | 000,000,000 | ---D | M] [2011-04-06 00:21:54 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Xp\Application Data\Mozilla\Extensions [2012-07-03 14:43:37 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Xp\Application Data\Mozilla\Firefox\Profiles\rn14t0q0.default\extensions [2012-01-09 18:35:22 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2011-01-03 19:50:23 | 000,000,000 | ---D | M] (Skype extension) -- C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2012-06-20 15:42:21 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2012-06-20 15:42:17 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml [2012-06-20 15:42:17 | 000,002,040 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\twitter.xml [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}sourceid=chrome&ie={inputEncoding}&q={searchTerms} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?client=chrome&hl={language}&q={searchTerms} CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\10.0.648.204\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll CHR - plugin: Java Deployment Toolkit 6.0.170.4 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeploytk.dll CHR - plugin: Java(TM) Platform SE 6 U17 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\npctrl.1.0.30401.0.dll CHR - plugin: Shockwave for Director (Enabled) = C:\WINDOWS\system32\Adobe\Director\np32dsw.dll CHR - plugin: DivX Web Player (Enabled) = C:\Program Files\DivX\DivX Web Player\npdivx32.dll CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\10.0.648.204\pdf.dll CHR - plugin: Google Gears 0.5.33.0 (Enabled) = C:\Program Files\Google\Chrome\Application\10.0.648.204\gears.dll CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll CHR - plugin: DivX Player Netscape Plugin (Enabled) = C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.2.183.23\npGoogleOneClick8.dll CHR - plugin: Pando Web Plugin (Enabled) = C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll CHR - plugin: RealNetworks Rhapsody Player Engine (Enabled) = C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll CHR - plugin: Windows Presentation Foundation (Enabled) = C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll CHR - plugin: Default Plug-in (Enabled) = default_plugin O1 HOSTS File: ([2012-07-09 16:17:27 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - D:\BitComet\tools\BitCometBHO_1.2.2.28.dll (BitComet) O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (AVG Technologies CZ, s.r.o.) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Documents and Settings\Xp\Application Data\Nowe Gadu-Gadu\_userdata\ggbho.1.dll (GG Network S.A.) O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O4 - HKLM..\Run: [AVG8_TRAY] C:\Program Files\AVG\AVG8\avgtray.exe (AVG Technologies CZ, s.r.o.) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe () O4 - HKLM..\Run: [SearchSettings] C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.) O4 - HKLM..\Run: [sqlncli] C:\Documents and Settings\Xp\Local Settings\Application Data\Microsoft\Windows\2175\sqlncli.exe () O4 - HKU\S-1-5-21-1085031214-2111687655-682003330-1003..\Run: [Akamai NetSession Interface] C:\Documents and Settings\Xp\Local Settings\Application Data\Akamai\netsession_win.exe (Akamai Technologies, Inc) O4 - HKU\S-1-5-21-1085031214-2111687655-682003330-1003..\Run: [AlcoholAutomount] C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe (Alcohol Soft Development Team) O4 - HKU\.DEFAULT..\RunOnce: [tscuninstall] C:\WINDOWS\system32\tscupgrd.exe (Microsoft Corporation) O4 - HKU\S-1-5-18..\RunOnce: [tscuninstall] C:\WINDOWS\system32\tscupgrd.exe (Microsoft Corporation) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1085031214-2111687655-682003330-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-1085031214-2111687655-682003330-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-21-1085031214-2111687655-682003330-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-21-1085031214-2111687655-682003330-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O8 - Extra context menu item: &D&ownload &with BitComet - D:\BitComet\BitComet.exe (www.BitComet.com) O8 - Extra context menu item: &D&ownload all video with BitComet - D:\BitComet\BitComet.exe (www.BitComet.com) O8 - Extra context menu item: &D&ownload all with BitComet - D:\BitComet\BitComet.exe (www.BitComet.com) O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - D:\BitComet\tools\BitCometBHO_1.2.2.28.dll (BitComet) O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O15 - HKU\S-1-5-21-1085031214-2111687655-682003330-1003\..Trusted Domains: mks.com.pl ([www] http in Trusted sites) O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab (Reg Error: Key error.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_02-windows-i586.cab (Java Plug-in 1.7.0_02) O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Value error.) O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_02-windows-i586.cab (Java Plug-in 1.7.0_02) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_02-windows-i586.cab (Java Plug-in 1.7.0_02) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3D54471A-39A5-4003-83F0-6F73E059854A}: DhcpNameServer = 192.168.1.1 O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll (AVG Technologies CZ, s.r.o.) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O20 - Winlogon\Notify\avgrsstarter: DllName - (avgrsstx.dll) - C:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.) O24 - Desktop WallPaper: C:\Documents and Settings\Xp\Local Settings\Application Data\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Xp\Local Settings\Application Data\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-06-19 02:30:16 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2008-06-21 19:50:34 | 000,000,000 | ---D | M] - D:\AutoUpdate -- [ NTFS ] O32 - AutoRun File - [2008-07-21 15:20:07 | 000,027,992 | R--- | M] (magicJack L.P.) - H:\autorun.exe -- [ CDFS ] O32 - AutoRun File - [2008-07-21 15:20:07 | 000,016,158 | R--- | M] () - H:\autorun.ico -- [ CDFS ] O32 - AutoRun File - [2008-07-21 15:20:07 | 000,000,308 | R--- | M] () - H:\autorun.inf -- [ CDFS ] O32 - AutoRun File - [2008-07-21 15:20:07 | 000,706,144 | R--- | M] (magicJack L.P.) - H:\autorunu.exe -- [ CDFS ] O32 - AutoRun File - [2009-08-07 13:46:38 | 000,000,270 | ---- | M] () - I:\autorun.inf -- [ FAT ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-07-09 17:08:47 | 000,595,968 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Xp\Desktop\OTL_[www.programosy.pl].exe [2012-07-09 16:27:14 | 000,000,000 | -HSD | C] -- C:\RECYCLER [2012-07-09 16:27:11 | 004,574,937 | R--- | C] (Swearware) -- C:\Documents and Settings\Xp\Desktop\ComboFix.exe [2012-07-09 16:15:55 | 000,000,000 | ---D | C] -- C:\WINDOWS\temp [2012-07-09 16:09:23 | 000,000,000 | RHSD | C] -- C:\cmdcons [2012-07-09 16:08:47 | 000,000,000 | ---D | C] -- C:\ComboFix [2012-07-09 15:42:01 | 000,000,000 | -HSD | C] -- C:\WINDOWS\CSC [2012-07-09 15:35:42 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe [2012-07-09 15:35:42 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe [2012-07-09 15:35:42 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe [2012-07-09 15:35:42 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe [2012-07-09 15:26:15 | 000,000,000 | ---D | C] -- C:\Qoobox [2012-07-09 15:25:35 | 000,000,000 | ---D | C] -- C:\WINDOWS\erdnt [2012-07-09 14:58:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Xp\Application Data\hellomoto [2012-07-03 14:43:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Xp\Application Data\Search Settings [2012-07-03 14:43:33 | 000,000,000 | ---D | C] -- C:\Program Files\Application Updater [2012-07-03 14:43:32 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Spigot [2012-07-03 14:43:32 | 000,000,000 | ---D | C] -- C:\Program Files\FreeRIP Toolbar [2012-06-12 14:14:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Xp\Desktop\rzeczy [7 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-07-09 17:08:52 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat [2012-07-09 17:08:48 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Xp\Desktop\OTL_[www.programosy.pl].exe [2012-07-09 16:23:37 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2012-07-09 16:18:07 | 000,207,417 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml [2012-07-09 16:17:27 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts [2012-07-09 16:09:28 | 000,000,327 | RHS- | M] () -- C:\boot.ini [2012-07-09 16:07:14 | 004,574,937 | R--- | M] (Swearware) -- C:\Documents and Settings\Xp\Desktop\ComboFix.exe [2012-07-09 12:49:52 | 000,000,987 | ---- | M] () -- C:\Documents and Settings\Xp\Desktop\magicJack.lnk [2012-07-09 12:48:44 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2012-07-08 10:06:34 | 000,519,268 | ---- | M] () -- C:\Documents and Settings\Xp\Desktop\LH_WEBCKI.US.STANDALONE.sa46WHeSu7DkoIhqZPXCl3.pdf [2012-07-08 02:00:00 | 000,000,336 | ---- | M] () -- C:\WINDOWS\tasks\AdobeAAMUpdater-1.0-XP-4F178865DB7F-Xp.job [2012-07-04 20:24:00 | 000,010,815 | ---- | M] () -- C:\Documents and Settings\Xp\Desktop\blank.gif [2012-06-23 07:11:01 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job [7 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-07-09 16:09:28 | 000,000,211 | ---- | C] () -- C:\Boot.bak [2012-07-09 16:09:24 | 000,262,400 | RHS- | C] () -- C:\cmldr [2012-07-09 15:35:42 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe [2012-07-09 15:35:42 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe [2012-07-09 15:35:42 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe [2012-07-09 15:35:42 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe [2012-07-09 15:35:42 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe [2012-07-08 10:06:33 | 000,519,268 | ---- | C] () -- C:\Documents and Settings\Xp\Desktop\LH_WEBCKI.US.STANDALONE.sa46WHeSu7DkoIhqZPXCl3.pdf [2012-07-04 20:24:00 | 000,010,815 | ---- | C] () -- C:\Documents and Settings\Xp\Desktop\blank.gif [2012-04-11 08:41:33 | 000,000,073 | ---- | C] () -- C:\WINDOWS\cdplayer.ini [2012-02-18 23:51:12 | 000,001,534 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\ss.ini [2012-01-21 22:04:17 | 000,000,313 | ---- | C] () -- C:\Documents and Settings\Xp\.JMAppsCfg [2012-01-21 22:02:42 | 000,413,696 | ---- | C] () -- C:\WINDOWS\System32\jsound.dll [2012-01-21 22:02:42 | 000,380,928 | ---- | C] () -- C:\WINDOWS\System32\jmmpa.dll [2012-01-21 22:02:42 | 000,184,320 | ---- | C] () -- C:\WINDOWS\System32\jmvh263.dll [2012-01-21 22:02:42 | 000,143,360 | ---- | C] () -- C:\WINDOWS\System32\jmjpeg.dll [2012-01-21 22:02:42 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\jmh263enc.dll [2012-01-21 22:02:42 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\jmmpegv.dll [2012-01-21 22:02:42 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\jmutil.dll [2012-01-21 22:02:42 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\jmvfw.dll [2012-01-21 22:02:42 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\jmvcm.dll [2012-01-21 22:02:42 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\jmmci.dll [2012-01-21 22:02:41 | 000,282,624 | ---- | C] () -- C:\WINDOWS\System32\jmh261.dll [2012-01-21 22:02:41 | 000,098,304 | ---- | C] () -- C:\WINDOWS\System32\jmg723.dll [2012-01-21 22:02:41 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\jmgsm.dll [2012-01-21 22:02:41 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\jmam.dll [2012-01-21 22:02:41 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\jmcvid.dll [2012-01-21 22:02:41 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\jmacm.dll [2012-01-21 22:02:41 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\jmdaud.dll [2012-01-21 22:02:41 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\jmgdi.dll [2012-01-21 22:02:41 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\jmfjawt.dll [2012-01-21 22:02:41 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\jmddraw.dll [2012-01-21 22:02:41 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\jmdaudc.dll [2011-06-14 17:41:46 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat [2011-06-03 22:42:48 | 000,000,806 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\cfg [2011-03-30 20:13:53 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll [2010-10-16 10:16:53 | 000,000,161 | ---- | C] () -- C:\WINDOWS\wcx_ftp.ini [2010-08-15 00:32:50 | 000,042,980 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat [2009-08-19 01:27:13 | 000,000,079 | ---- | C] () -- C:\Documents and Settings\Xp\Application Data\default.pls [2009-07-20 01:20:57 | 000,000,452 | RHS- | C] () -- C:\Documents and Settings\All Users\ntuser.pol [2009-07-08 16:36:16 | 000,001,024 | ---- | C] () -- C:\Documents and Settings\Xp\.rnd [2009-06-19 03:40:03 | 000,031,232 | ---- | C] () -- C:\Documents and Settings\Xp\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [color=#E56717]========== LOP Check ==========[/color] [2011-10-29 06:13:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Acronis [2009-06-19 04:59:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Blender Foundation [2009-09-12 15:56:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\BVRP Software [2010-04-30 04:46:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite [2009-08-18 19:48:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Electronic Arts [2012-02-18 23:50:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\FreeRIP [2011-10-26 00:47:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\IconTweaker [2009-10-07 20:24:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\iolo [2010-08-23 11:40:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\magicJack [2009-10-18 21:25:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\OpenFM [2011-10-29 18:00:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PMB Files [2012-01-14 14:45:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\regid.1986-12.com.adobe [2009-08-31 22:34:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Teleca [2010-08-14 20:08:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521} [2012-01-04 05:49:59 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\{C91B1BDF-78F8-4AA3-83F8-66E44B0E3F00} [2009-10-07 20:24:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Application Data\iolo [2010-08-20 12:23:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Xp\Application Data\AnvSoft [2009-06-19 04:59:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Xp\Application Data\Blender Foundation [2011-04-30 01:11:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Xp\Application Data\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 [2010-04-30 06:37:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Xp\Application Data\DAEMON Tools Lite [2010-10-25 16:53:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Xp\Application Data\DiskAid [2012-04-18 23:48:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Xp\Application Data\FileZilla [2012-04-11 08:57:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Xp\Application Data\foobar2000 [2012-02-19 00:57:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Xp\Application Data\FreeRIP [2010-08-20 01:25:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Xp\Application Data\HandBrake [2012-07-09 14:58:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Xp\Application Data\hellomoto [2009-10-07 20:22:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Xp\Application Data\iolo [2009-07-23 22:54:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Xp\Application Data\iZotope [2011-04-30 00:13:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Xp\Application Data\Leadertech [2011-02-25 22:22:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Xp\Application Data\LolClient [2012-07-09 15:46:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Xp\Application Data\mjusbsp [2009-11-19 17:38:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Xp\Application Data\Mumble [2010-10-08 21:39:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Xp\Application Data\Notepad++ [2010-11-01 13:27:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Xp\Application Data\Nowe Gadu-Gadu [2009-10-18 21:25:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Xp\Application Data\OpenFM [2011-10-27 00:29:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Xp\Application Data\Opera [2012-01-21 19:16:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Xp\Application Data\Oracle [2012-07-03 14:43:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Xp\Application Data\Search Settings [2012-01-11 01:47:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Xp\Application Data\Sony [2009-09-12 16:27:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Xp\Application Data\Sony Setup [2012-04-03 06:14:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Xp\Application Data\Subversion [2009-08-31 22:40:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Xp\Application Data\Teleca [color=#E56717]========== Purity Check ==========[/color] < End of report >