OTL logfile created on: 2012-07-17 19:08:37 - Run 1
OTL by OldTimer - Version 3.2.54.0     Folder = C:\Documents and Settings\Rudy\Moje dokumenty\Pobieranie
Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
1023,36 Mb Total Physical Memory | 578,04 Mb Available Physical Memory | 56,48% Memory free
2,40 Gb Paging File | 2,16 Gb Available in Paging File | 89,68% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 19,53 Gb Total Space | 2,68 Gb Free Space | 13,70% Space Free | Partition Type: NTFS
Drive D: | 54,99 Gb Total Space | 24,28 Gb Free Space | 44,16% Space Free | Partition Type: NTFS
 
Computer Name: RUDY-9056E5C95C | User Name: Rudy | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-07-17 18:34:15 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Rudy\Moje dokumenty\Pobieranie\OTL.exe
PRC - [2012-06-27 12:29:22 | 001,385,896 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
PRC - [2012-06-22 21:44:43 | 000,913,888 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2008-04-14 22:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2012-06-22 21:44:41 | 002,042,848 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2012-01-09 20:44:20 | 000,166,912 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ)
SRV - File not found [On_Demand | Stopped] -- %SystemRoot%\System32\appmgmts.dll -- (AppMgmt)
SRV - [2012-06-27 12:29:22 | 001,385,896 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2012-06-22 21:44:42 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012-06-20 22:31:51 | 000,529,232 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2012-01-12 10:07:32 | 000,695,640 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfeeScanAndRepair\McAfeeScanRepairSvc.exe -- (McAfee ScanAndRepair Svc)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\ZDNDIS5.SYS -- (ZDNDIS5)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\UIUSYS.SYS -- (UIUSys)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\smserial.sys -- (smserial)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\pccsmcfd.sys -- (pccsmcfd)
DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] --  -- (i2omgmt)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt -- (EverestDriver)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\EagleNT.sys -- (EagleNT)
DRV - File not found [Kernel | System | Stopped] --  -- (Changer)
DRV - [2012-07-09 00:26:31 | 000,242,240 | ---- | M] (DT Soft Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2012-04-06 20:15:10 | 000,033,512 | ---- | M] (AnchorFree Inc) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\taphss.sys -- (taphss)
DRV - [2011-08-17 09:56:32 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2011-08-17 09:56:30 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2011-08-17 09:56:26 | 000,023,168 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2011-08-17 09:56:22 | 000,018,176 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2009-11-18 07:17:00 | 001,395,800 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt)
DRV - [2009-11-18 07:16:00 | 001,691,480 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt)
DRV - [2009-03-18 17:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi)
DRV - [2008-12-26 13:56:04 | 000,017,792 | ---- | M] (Avnex) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\vcsvad.sys -- (VCSVADHWSer) Avnex Virtual Audio Device (WDM)
DRV - [2005-03-23 00:00:00 | 002,547,008 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RtkHDAud.Sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2004-12-02 17:36:08 | 000,070,912 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtlnicxp.sys -- (RTL8023xp)
DRV - [2004-10-29 18:48:10 | 003,222,784 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\w29n51.sys -- (w29n51) Sterownik karty Intel(R)
DRV - [2004-10-27 15:21:30 | 000,145,920 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Hdaudio.sys -- (HdAudAddService)
DRV - [2003-05-15 18:29:42 | 000,038,656 | ---- | M] (ZyDAS Technology Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ZD1201U.sys -- (ZD1201U) ZyDAS ZD1201 IEEE 802.11b Wireless LAN Driver (USB)
DRV - [2002-05-24 15:14:26 | 000,393,784 | ---- | M] (NVIDIA Corporation) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\dumant.sys -- (DumaNT)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\..\SearchScopes,Backup.Old.DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847}
IE - HKLM\..\SearchScopes,DefaultScope = {B7971660-A1CE-4FDD-B9E0-2C37D77AFB0B}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKLM\..\SearchScopes\{26FB72F2-F077-4061-8938-165C28861B63}: "URL" = http://search.sweetim.com/search.asp?src=6&q={searchTerms}
IE - HKLM\..\SearchScopes\{6BD63EF5-F376-4104-B390-F6E1E3BEDAAC}: "URL" = http://startsear.ch/?q={searchTerms}
IE - HKLM\..\SearchScopes\{B7971660-A1CE-4FDD-B9E0-2C37D77AFB0B}: "URL" = http://start.funmoods.com/results.php?f=4&q={searchTerms}&a=nv1&chnl=nv1&cd=2XzutAtN2Y1L1QzuyB0AyBzytDyDtCtDtA0B0E0CtCtCyC0AtN0D0TzutBtDtCtBtDyCtDzy&cr=213508744
IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&st=1&q={searchTerms}&barid={C66D09A2-C3F9-4DDD-928D-48B07B888B23}
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-776561741-329068152-1801674531-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Backup.Old.Start Page = http://search.babylon.com/?affID=112542&babsrc=HP_ss&mntrId=e02f116a00000000000000030d371eb7
IE - HKU\S-1-5-21-776561741-329068152-1801674531-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
IE - HKU\S-1-5-21-776561741-329068152-1801674531-1005\SOFTWARE\Microsoft\Internet Explorer\Main,DefaultNetworkProfile = 529649133
IE - HKU\S-1-5-21-776561741-329068152-1801674531-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = 
IE - HKU\S-1-5-21-776561741-329068152-1801674531-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = 
IE - HKU\S-1-5-21-776561741-329068152-1801674531-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [Binary data over 100 bytes]
IE - HKU\S-1-5-21-776561741-329068152-1801674531-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\S-1-5-21-776561741-329068152-1801674531-1005\..\SearchScopes,Backup.Old.DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKU\S-1-5-21-776561741-329068152-1801674531-1005\..\SearchScopes,DefaultScope = {B7971660-A1CE-4FDD-B9E0-2C37D77AFB0B}
IE - HKU\S-1-5-21-776561741-329068152-1801674531-1005\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKU\S-1-5-21-776561741-329068152-1801674531-1005\..\SearchScopes\{0D7562AE-8EF6-416d-A838-AB665251703A}: "URL" = http://start.facemoods.com/?a=ironto&s={searchTerms}&f=4
IE - HKU\S-1-5-21-776561741-329068152-1801674531-1005\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=112542&babsrc=SP_ss&mntrId=e02f116a00000000000000030d371eb7
IE - HKU\S-1-5-21-776561741-329068152-1801674531-1005\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=VDJ&o=41647960&src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=8R&apn_dtid=YYYYYYYYPL&apn_uid=A3E42D38-CE0B-428C-8624-3C391A33F1C4&apn_sauid=5A910FB5-519F-45BA-9869-83D3F67E2AA8&
IE - HKU\S-1-5-21-776561741-329068152-1801674531-1005\..\SearchScopes\{1F096B29-E9DA-4D64-8D63-936BE7762CC5}: "URL" = http://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=e02f116a000000000000001500248134&tlver=1.4.19.19&affID=17160
IE - HKU\S-1-5-21-776561741-329068152-1801674531-1005\..\SearchScopes\{26FB72F2-F077-4061-8938-165C28861B63}: "URL" = http://search.sweetim.com/search.asp?src=6&q={searchTerms}
IE - HKU\S-1-5-21-776561741-329068152-1801674531-1005\..\SearchScopes\{4BC67211-60CE-48D8-86F6-39C99DD9D47A}: "URL" = http://www.google.pl/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
IE - HKU\S-1-5-21-776561741-329068152-1801674531-1005\..\SearchScopes\{6BD63EF5-F376-4104-B390-F6E1E3BEDAAC}: "URL" = http://startsear.ch/?q={searchTerms}
IE - HKU\S-1-5-21-776561741-329068152-1801674531-1005\..\SearchScopes\{96bd48dd-741b-41ae-ac4a-aff96ba00f7e}: "URL" = http://www.bigseekpro.com/search/browser/hypercam/{4BC6E8AE-2870-47C2-A8C7-B8518AFA5DCB}?q={searchTerms}
IE - HKU\S-1-5-21-776561741-329068152-1801674531-1005\..\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}: "URL" = http://www.daemon-search.com/search/web?q={searchTerms}
IE - HKU\S-1-5-21-776561741-329068152-1801674531-1005\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1561552
IE - HKU\S-1-5-21-776561741-329068152-1801674531-1005\..\SearchScopes\{B7971660-A1CE-4FDD-B9E0-2C37D77AFB0B}: "URL" = http://start.funmoods.com/results.php?f=4&q={searchTerms}&a=nv1&chnl=nv1&cd=2XzutAtN2Y1L1QzuyB0AyBzytDyDtCtDtA0B0E0CtCtCyC0AtN0D0TzutBtDtCtBtDyCtDzy&cr=213508744
IE - HKU\S-1-5-21-776561741-329068152-1801674531-1005\..\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}: "URL" = http://mystart.incredimail.com/mb59/?search={searchTerms}&loc=search_box&u=92823356545683187
IE - HKU\S-1-5-21-776561741-329068152-1801674531-1005\..\SearchScopes\{E88E0043-C9D4-4e33-8555-FEE4F5B63060}: "URL" = http://go.mail.ru/search?q={searchTerms}&utf8in=1&fr=ietb
IE - HKU\S-1-5-21-776561741-329068152-1801674531-1005\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&st=1&q={searchTerms}&barid={C66D09A2-C3F9-4DDD-928D-48B07B888B23}
IE - HKU\S-1-5-21-776561741-329068152-1801674531-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultengine: "Web Search"
FF - prefs.js..browser.search.defaultthis.engineName: "BitTorrentBar Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://go.mail.ru/search?fr=fftb&utf8in&q="
FF - prefs.js..browser.search.order.1: "Search the web"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "www.google.pl"
FF - prefs.js..keyword.URL: "http://www.browsersafesearch.com?client=mozilla-firefox&cd=UTF-8&search=1&q="
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: "Search the web"
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaulturl: ""
FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: "Search the web"
 
FF - user.js..browser.search.order.1: "Search the web"
FF - user.js..keyword.URL: "http://www.browsersafesearch.com?client=mozilla-firefox&cd=UTF-8&search=1&q="
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{EB132DB0-A4CA-11DF-9732-0E29E0D72085}: C:\Program Files\OApps\firefoxaddon [2012-06-19 16:25:17 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-06-22 21:44:52 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-07-16 02:15:14 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{EB132DB0-A4CA-11DF-9732-0E29E0D72085}: C:\Program Files\OApps\firefoxaddon [2012-06-19 16:25:17 | 000,000,000 | ---D | M]
 
[2011-07-21 19:38:23 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Rudy\Dane aplikacji\Mozilla\Extensions
[2012-07-16 04:43:09 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Rudy\Dane aplikacji\Mozilla\Firefox\Profiles\e8fxoz98.default\extensions
[2012-04-24 23:38:06 | 000,000,929 | ---- | M] () -- C:\Documents and Settings\Rudy\Dane aplikacji\Mozilla\Firefox\Profiles\e8fxoz98.default\searchplugins\conduit.xml
[2012-06-05 13:02:30 | 000,001,533 | ---- | M] () -- C:\Documents and Settings\Rudy\Dane aplikacji\Mozilla\Firefox\Profiles\e8fxoz98.default\searchplugins\mailru---.xml
[2012-06-09 19:05:34 | 000,002,293 | ---- | M] () -- C:\Documents and Settings\Rudy\Dane aplikacji\Mozilla\Firefox\Profiles\e8fxoz98.default\searchplugins\Search.xml
[2012-01-25 22:31:52 | 000,000,792 | ---- | M] () -- C:\Documents and Settings\Rudy\Dane aplikacji\Mozilla\Firefox\Profiles\e8fxoz98.default\searchplugins\startsear.xml
[2011-11-19 17:37:47 | 000,003,910 | ---- | M] () -- C:\Documents and Settings\Rudy\Dane aplikacji\Mozilla\Firefox\Profiles\e8fxoz98.default\searchplugins\sweetim.xml
[2012-07-15 23:46:53 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012-06-22 21:44:49 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011-11-03 08:59:20 | 000,917,816 | ---- | M] (BitComet) -- C:\Program Files\mozilla firefox\plugins\npBitCometAgent.dll
[2012-04-08 16:36:19 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2012-01-12 10:07:32 | 000,183,200 | ---- | M] (McAfee, Inc.) -- C:\Program Files\mozilla firefox\plugins\npMcAfeeSRPlgn.dll
[2011-12-09 19:23:32 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll
[2012-06-22 21:44:24 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2012-05-23 16:05:49 | 000,002,313 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml
[2012-06-22 21:44:24 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2012-06-22 21:44:24 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2012-06-22 21:44:24 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2012-06-22 21:44:24 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2012-06-22 21:44:24 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - default_search_provider: Web Search ()
CHR - default_search_provider: search_url = http://start.funmoods.com/results.php?f=4&q={searchTerms}&a=nv1&chnl=nv1&cd=2XzutAtN2Y1L1QzuyB0AyBzytDyDtCtDtA0B0E0CtCtCyC0AtN0D0TzutBtDtCtBtDyCtDzy&cr=213508744
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?client=chrome&hl={language}&q={searchTerms}
CHR - homepage: http://start.funmoods.com/?f=1&a=nv1&chnl=nv1&cd=2XzutAtN2Y1L1QzuyB0AyBzytDyDtCtDtA0B0E0CtCtCyC0AtN0D0TzutBtDtCtBtDyCtDzy&cr=213508744
CHR - Extension: No name found = C:\Documents and Settings\Rudy\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.0_0\
CHR - Extension: No name found = C:\Documents and Settings\Rudy\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\ihflimipbcaljfnojhhknppphnnciiif\1.2.1_0\
 
O1 HOSTS File: ([2012-07-10 00:26:33 | 000,000,736 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll File not found
O2 - BHO: (XfireXO Toolbar) - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files\XfireXO\prxtbXfir.dll File not found
O2 - BHO: (Mario Forever Toolbar) - {707db484-2428-402d-afb5-d85b387544c7} - C:\Program Files\Mario_Forever\prxtbMar0.dll File not found
O2 - BHO: (Funmoods Helper Object) - {75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} - C:\PROGRA~1\Funmoods\1.5.23.22\bh\escort.dll File not found
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (IE5BarLauncherBHO Class) - {78F3A323-798E-4AEA-9A57-88F4B05FD5DD} - C:\Program Files\StartSearch plugin\BarLcher.dll File not found
O2 - BHO: (no name) - {8984B388-A5BB-4DF7-B274-77B879E179DB} - No CLSID value found.
O2 - BHO: (VideoFileDownload) - {e78a5c92-6a2b-4369-ab14-0ed3b2b18584} - C:\Program Files\OApps\bho_project.dll (InternetEngine)
O2 - BHO: (no name) - {EA5CA8B6-9B9C-4994-A7A1-947B6C631BE7} - No CLSID value found.
O2 - BHO: (Yontoo) - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files\Yontoo\YontooIEClient.dll (Yontoo LLC)
O3 - HKLM\..\Toolbar: (XfireXO Toolbar) - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files\XfireXO\prxtbXfir.dll File not found
O3 - HKLM\..\Toolbar: (Mario Forever Toolbar) - {707db484-2428-402d-afb5-d85b387544c7} - C:\Program Files\Mario_Forever\prxtbMar0.dll File not found
O3 - HKLM\..\Toolbar: (VShareToolBar) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files\StartSearch plugin\BarLcher.dll File not found
O3 - HKLM\..\Toolbar: (Funmoods Toolbar) - {A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} - C:\PROGRA~1\Funmoods\1.5.23.22\escorTlbr.dll File not found
O3 - HKLM\..\Toolbar: (toolplugin) - {DFEFCDEE-CF1A-4FC8-89AF-189327213627} - C:\Documents and Settings\Rudy\Dane aplikacji\toolplugin\toolbar.dll ()
O3 - HKU\S-1-5-21-776561741-329068152-1801674531-1005\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKU\S-1-5-21-776561741-329068152-1801674531-1005\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O3 - HKU\S-1-5-21-776561741-329068152-1801674531-1005\..\Toolbar\WebBrowser: (Mario Forever Toolbar) - {707DB484-2428-402D-AFB5-D85B387544C7} - C:\Program Files\Mario_Forever\prxtbMar0.dll File not found
O3 - HKU\S-1-5-21-776561741-329068152-1801674531-1005\..\Toolbar\WebBrowser: (VShareToolBar) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files\StartSearch plugin\BarLcher.dll File not found
O4 - HKLM..\Run: [EDI Start] C:\WINDOWS\system32\CPBNVS\EDI.exe ()
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [WinPrafik] C:\WINDOWS\Waprop.exe ()
O4 - HKLM..\Run: [WmiMgmt] C:\Documents and Settings\Rudy\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\3619\WmiMgmt.exe ()
O4 - HKU\S-1-5-21-776561741-329068152-1801674531-1005..\RunOnce: [UpdateN] C:\Documents and Settings\Rudy\Dane aplikacji\mservice32.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Policies = C:\WINDOWS\install\server.exe ()
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-776561741-329068152-1801674531-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 91 00 00 00  [binary data]
O7 - HKU\S-1-5-21-776561741-329068152-1801674531-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Policies = C:\WINDOWS\install\server.exe ()
O8 - Extra context menu item: &P&obierz &za pomocą BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm File not found
O8 - Extra context menu item: Pobierz wszystko za pomocą BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm File not found
O8 - Extra context menu item: Search the Web - C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\menuext.html File not found
O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll/206 File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation)
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} http://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab (System Requirements Lab Class)
O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {4BFD075D-C36E-4F28-BB0A-5D472795197A} http://download07.managerzone.com/soccer-3d/PowerLoader.cab (PowerLoader Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 85.128.107.242 213.134.134.134
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BF688B9D-DD28-4AD4-BCA8-D5F92C196BF5}: DhcpNameServer = 85.128.107.242 213.134.134.134
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Rudy\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Rudy\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011-03-27 13:52:27 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{a2067c9e-b081-11e0-b530-00030d371eb7}\Shell - "" = AutoRun
O33 - MountPoints2\{a2067c9e-b081-11e0-b530-00030d371eb7}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RECYCLER\S-1-5-21-1482476501-3352491937-682996330-1013\server.exe
O33 - MountPoints2\{a2067c9e-b081-11e0-b530-00030d371eb7}\Shell\Open\command - "" = G:\RECYCLER\S-1-5-21-1482476501-3352491937-682996330-1013\server.exe
O33 - MountPoints2\{a49c6733-5d26-11e0-b436-001500248134}\Shell - "" = AutoRun
O33 - MountPoints2\{a49c6733-5d26-11e0-b436-001500248134}\Shell\AutoRun\command - "" = F:\setup\rsrc\Autorun.exe
O33 - MountPoints2\{a49c6733-5d26-11e0-b436-001500248134}\Shell\dinstall\command - "" = F:\Directx\dxsetup.exe
O33 - MountPoints2\{dacb627c-99e5-11e0-b4cc-001500248134}\Shell - "" = AutoRun
O33 - MountPoints2\{dacb627c-99e5-11e0-b4cc-001500248134}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RECYCLER\S-1-5-21-1482476501-3352491937-682996330-1013\server.exe
O33 - MountPoints2\{dacb627c-99e5-11e0-b4cc-001500248134}\Shell\Open\command - "" = G:\RECYCLER\S-1-5-21-1482476501-3352491937-682996330-1013\server.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012-07-17 01:22:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rudy\Dane aplikacji\hellomoto
[2012-07-16 02:15:12 | 000,000,000 | ---D | C] -- C:\Program Files\McAfeeScanAndRepair
[2012-07-15 23:47:01 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2012-07-15 23:43:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\CCleaner
[2012-07-15 23:43:20 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2012-07-13 00:04:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Techland
[2012-07-11 02:44:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rudy\Ustawienia lokalne\Dane aplikacji\fontconfig
[2012-07-11 02:44:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rudy\.gimp-2.8
[2012-07-11 02:44:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rudy\Ustawienia lokalne\Dane aplikacji\gegl-0.2
[2012-07-11 02:26:42 | 000,000,000 | ---D | C] -- C:\Program Files\GIMP 2
[2012-07-09 02:05:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rudy\Moje dokumenty\Virtua Tennis 4
[2012-07-09 01:24:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rudy\Moje dokumenty\Games for Windows - LIVE Demos
[2012-07-09 01:17:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\xlive
[2012-07-09 01:17:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Microsoft Games for Windows Marketplace
[2012-07-09 01:17:20 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Games for Windows - LIVE
[2012-07-09 01:02:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\SEGA
[2012-07-09 00:26:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\DAEMON Tools Lite
[2012-07-09 00:26:31 | 000,242,240 | ---- | C] (DT Soft Ltd) -- C:\WINDOWS\System32\drivers\dtsoftbus01.sys
[2012-07-09 00:26:16 | 000,000,000 | ---D | C] -- C:\Program Files\DAEMON Tools Lite
[2012-07-08 22:05:35 | 000,000,000 | ---D | C] -- C:\Program Files\ExpressFiles
[2012-07-08 22:05:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rudy\Dane aplikacji\ExpressFiles
[2012-07-02 15:26:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rudy\Ustawienia lokalne\Dane aplikacji\LogMeIn Hamachi
[2012-07-02 15:24:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\LogMeIn Hamachi
[2012-07-02 15:23:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\LogMeIn Hamachi
[2012-07-02 15:23:32 | 000,000,000 | ---D | C] -- C:\Program Files\LogMeIn Hamachi
[2012-06-30 23:07:03 | 000,000,000 | ---D | C] -- C:\PESSFconv
[2012-06-30 23:02:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rudy\Dane aplikacji\AccurateRip
[2012-06-30 23:01:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\dBpoweramp Music Converter
[2012-06-30 23:01:42 | 000,000,000 | ---D | C] -- C:\Program Files\Illustrate
[2012-06-25 17:16:13 | 000,000,000 | ---D | C] -- C:\Program Files\Referee
[2012-06-25 17:16:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rudy\Menu Start\Programy\Referee
[2012-06-23 17:37:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rudy\Pulpit\Nieużywane skróty pulpitu
[2012-06-23 15:51:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\PESEdit.com 2012 Patch
[2012-06-23 15:31:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rudy\Moje dokumenty\KONAMI
[2012-06-22 22:40:45 | 000,000,000 | ---D | C] -- C:\Program Files\KONAMI
[2012-06-19 16:25:16 | 000,000,000 | ---D | C] -- C:\Program Files\OApps
[2012-06-19 16:25:15 | 000,000,000 | ---D | C] -- C:\Program Files\TorrentSearch
[2012-06-19 16:24:51 | 000,000,000 | ---D | C] -- C:\Program Files\intellidownload
[2012-06-19 12:36:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rudy\Dane aplikacji\eBayDesktopShortcut
[2012-06-19 12:34:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rudy\Ustawienia lokalne\Dane aplikacji\Proxure
[2012-06-19 12:34:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\ClubSanDisk
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[10 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012-07-17 19:09:46 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012-07-17 18:32:35 | 000,000,439 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.ics
[2012-07-17 18:31:18 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012-07-17 18:30:10 | 000,203,081 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2012-07-17 18:30:02 | 000,000,290 | ---- | M] () -- C:\WINDOWS\tasks\Express Files Updater.job
[2012-07-16 04:28:05 | 000,000,211 | -HS- | M] () -- C:\boot.ini
[2012-07-15 23:43:21 | 000,000,682 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\CCleaner.lnk
[2012-07-14 22:36:19 | 000,000,124 | ---- | M] () -- C:\Documents and Settings\Rudy\Pulpit\TIVERIA.PL
[2012-07-14 15:31:58 | 000,000,672 | ---- | M] () -- C:\Documents and Settings\Rudy\Pulpit\Counter Strike 1.6 Non Steam.lnk
[2012-07-14 15:30:13 | 000,000,572 | ---- | M] () -- C:\Documents and Settings\Rudy\Pulpit\Dedicated Server.lnk
[2012-07-12 19:26:34 | 000,086,016 | ---- | M] () -- C:\Documents and Settings\Rudy\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-07-12 13:00:10 | 000,103,032 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012-07-12 03:26:15 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2012-07-11 20:07:41 | 000,002,459 | ---- | M] () -- C:\Documents and Settings\Rudy\Ustawienia lokalne\Dane aplikacji\recently-used.xbel
[2012-07-10 00:26:33 | 000,000,736 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2012-07-09 23:52:32 | 000,560,312 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2012-07-09 23:52:32 | 000,496,840 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012-07-09 23:52:32 | 000,107,884 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2012-07-09 23:52:32 | 000,086,418 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012-07-09 01:02:36 | 000,001,377 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Virtua Tennis 4™.lnk
[2012-07-09 00:26:48 | 000,001,613 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\DAEMON Tools Lite.lnk
[2012-07-09 00:26:31 | 000,242,240 | ---- | M] (DT Soft Ltd) -- C:\WINDOWS\System32\drivers\dtsoftbus01.sys
[2012-07-02 20:54:44 | 000,000,448 | ---- | M] () -- C:\Documents and Settings\Rudy\Pulpit\Tiveria.lnk
[2012-06-30 23:01:58 | 000,017,680 | ---- | M] () -- C:\WINDOWS\System32\SpoonUninstall-dBpoweramp Music Converter.dat
[2012-06-30 23:01:26 | 000,033,846 | ---- | M] () -- C:\WINDOWS\System32\SpoonUninstall-dBpoweramp Music Converter.bmp
[2012-06-30 23:00:47 | 006,908,648 | ---- | M] () -- C:\WINDOWS\System32\SpoonUninstall.exe
[2012-06-25 14:03:47 | 000,000,557 | ---- | M] () -- C:\Documents and Settings\Rudy\Pulpit\UEFA EURO 2012.lnk
[2012-06-19 12:36:27 | 000,000,288 | ---- | M] () -- C:\Documents and Settings\Rudy\Dane aplikacji\.backup.dm
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[10 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012-07-15 23:43:21 | 000,000,682 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\CCleaner.lnk
[2012-07-14 14:58:03 | 000,000,572 | ---- | C] () -- C:\Documents and Settings\Rudy\Pulpit\Dedicated Server.lnk
[2012-07-14 14:58:02 | 000,000,672 | ---- | C] () -- C:\Documents and Settings\Rudy\Pulpit\Counter Strike 1.6 Non Steam.lnk
[2012-07-13 00:04:31 | 000,000,635 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\FIM Speedway Grand Prix 4.lnk
[2012-07-11 20:07:41 | 000,002,459 | ---- | C] () -- C:\Documents and Settings\Rudy\Ustawienia lokalne\Dane aplikacji\recently-used.xbel
[2012-07-11 02:33:35 | 000,000,734 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\GIMP 2.lnk
[2012-07-09 01:16:53 | 000,001,077 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Windows Live ID.lnk
[2012-07-09 01:02:36 | 000,001,377 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Virtua Tennis 4™.lnk
[2012-07-09 00:26:48 | 000,001,613 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\DAEMON Tools Lite.lnk
[2012-07-08 22:05:42 | 000,000,290 | ---- | C] () -- C:\WINDOWS\tasks\Express Files Updater.job
[2012-07-06 01:39:49 | 000,000,124 | ---- | C] () -- C:\Documents and Settings\Rudy\Pulpit\TIVERIA.PL
[2012-07-02 20:54:44 | 000,000,448 | ---- | C] () -- C:\Documents and Settings\Rudy\Pulpit\Tiveria.lnk
[2012-06-30 23:01:58 | 006,908,648 | ---- | C] () -- C:\WINDOWS\System32\SpoonUninstall.exe
[2012-06-30 23:01:58 | 000,033,846 | ---- | C] () -- C:\WINDOWS\System32\SpoonUninstall-dBpoweramp Music Converter.bmp
[2012-06-30 23:01:58 | 000,017,680 | ---- | C] () -- C:\WINDOWS\System32\SpoonUninstall-dBpoweramp Music Converter.dat
[2012-06-25 14:03:14 | 000,000,557 | ---- | C] () -- C:\Documents and Settings\Rudy\Pulpit\UEFA EURO 2012.lnk
[2012-06-19 22:19:47 | 000,065,144 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat
[2012-06-19 12:36:27 | 000,000,288 | ---- | C] () -- C:\Documents and Settings\Rudy\Dane aplikacji\.backup.dm
[2012-06-09 19:04:48 | 000,302,425 | ---- | C] () -- C:\Documents and Settings\Rudy\Ustawienia lokalne\Dane aplikacji\funmoods-speeddial.crx
[2012-06-09 19:04:48 | 000,031,470 | ---- | C] () -- C:\Documents and Settings\Rudy\Ustawienia lokalne\Dane aplikacji\funmoods.crx
[2012-05-23 18:04:01 | 000,156,672 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll
[2012-05-23 16:12:55 | 000,001,769 | ---- | C] () -- C:\WINDOWS\Language_trs.ini
[2012-05-18 14:03:00 | 000,021,736 | ---- | C] () -- C:\WINDOWS\System32\drivers\RTAIODAT.DAT
[2012-04-09 21:15:50 | 000,000,204 | ---- | C] () -- C:\WINDOWS\System32\secustat.dat
[2012-04-09 18:35:04 | 000,000,025 | ---- | C] () -- C:\WINDOWS\libem.INI
[2012-02-15 15:07:02 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012-01-26 05:09:45 | 000,141,200 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2012-01-26 05:09:45 | 000,138,056 | ---- | C] () -- C:\Documents and Settings\Rudy\Dane aplikacji\PnkBstrK.sys
[2012-01-26 05:09:28 | 000,281,656 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe
[2012-01-26 05:09:26 | 000,075,136 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe
[2011-12-27 01:16:02 | 001,077,248 | ---- | C] () -- C:\WINDOWS\Waprop.exe
[2011-12-26 03:19:34 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI
[2011-08-20 17:48:24 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\ImageSearchDLL.dll
[2011-08-19 01:00:51 | 000,679,022 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-S-1-5-21-776561741-329068152-1801674531-1005-0.dat
[2011-08-16 12:46:57 | 000,000,284 | ---- | C] () -- C:\Documents and Settings\Rudy\server.properties
[2011-08-13 12:12:55 | 000,463,872 | ---- | C] () -- C:\Documents and Settings\Rudy\Dane aplikacji\mservice32.exe
[2011-07-28 03:18:38 | 000,090,318 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-System.dat
[2011-07-21 19:38:16 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2011-07-18 17:36:50 | 000,061,440 | ---- | C] () -- C:\WINDOWS\System32\ZDTRLib.DLL
[2011-07-18 17:36:50 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\ZD12APP.dll
[2011-07-18 17:12:25 | 000,070,388 | ---- | C] () -- C:\WINDOWS\System32\drivers\WS01UPH.bin
[2011-06-24 20:51:18 | 000,036,352 | ---- | C] () -- C:\WINDOWS\System32\xfcodec.dll
[2011-05-14 12:06:28 | 000,000,023 | ---- | C] () -- C:\WINDOWS\clofghls.dll
[2011-04-24 19:18:14 | 000,086,016 | ---- | C] () -- C:\Documents and Settings\Rudy\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-04-09 18:55:28 | 000,179,261 | ---- | C] () -- C:\WINDOWS\System32\xlive.dll.cat
[2011-04-02 16:57:45 | 000,000,632 | ---- | C] () -- C:\WINDOWS\Thps3.INI
[2011-03-27 17:18:51 | 000,000,129 | ---- | C] () -- C:\Documents and Settings\Rudy\Ustawienia lokalne\Dane aplikacji\fusioncache.dat
[2011-03-27 17:05:30 | 001,442,304 | ---- | C] () -- C:\WINDOWS\ratua.exe
[2011-03-27 15:49:55 | 000,000,552 | ---- | C] () -- C:\WINDOWS\System32\d3d8caps.dat
[2011-03-27 15:45:35 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2011-03-27 15:44:27 | 000,103,032 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011-03-27 15:37:38 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2011-03-27 14:04:07 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2011-03-27 13:58:32 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2011-03-27 13:55:54 | 000,000,996 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2011-03-27 13:49:53 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2005-04-08 04:16:43 | 027,804,764 | -H-- | C] () -- C:\Documents and Settings\Rudy\Dane aplikacji\logs.dat
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2012-05-23 16:05:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Babylon
[2012-06-19 12:34:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ClubSanDisk
[2012-07-09 00:27:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite
[2011-03-29 16:41:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10
[2012-05-23 16:56:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Guard.Mail.Ru
[2011-11-19 17:13:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\IM
[2011-11-19 17:11:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\IncrediMail
[2012-06-23 12:37:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\KONAMI
[2012-05-23 21:49:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM
[2011-06-19 18:33:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OviInstallerCache
[2012-05-23 17:09:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Drivers HeadQuarters Inc
[2011-06-19 18:41:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Suite
[2011-08-23 15:32:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Sony
[2012-06-05 20:52:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SweetIM
[2012-06-09 19:04:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Tarma Installer
[2012-05-28 19:10:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP
[2012-05-23 15:46:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\{DCD48218-E972-4d0c-9E5F-43462BC13E3B}
[2012-06-06 13:38:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\.minecraft
[2012-05-18 17:37:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\avidemux
[2011-11-19 17:58:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\Avnex
[2012-05-23 16:05:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\Babylon
[2012-04-28 18:04:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\BitComet
[2012-06-06 10:03:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\BITS
[2012-07-16 01:25:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\BitTorrent
[2011-06-12 19:40:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\Blender Foundation
[2011-10-31 17:11:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\com.adobe.downloadassistant.AdobeDownloadAssistant
[2012-07-09 00:27:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\DAEMON Tools Lite
[2012-06-10 13:50:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\DRPSu
[2012-06-19 12:36:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\eBayDesktopShortcut
[2012-07-08 22:06:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\ExpressFiles
[2011-04-11 20:16:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\facemoods.com
[2012-06-10 13:51:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\FlashgetSetup
[2012-06-08 00:22:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\fltk.org
[2011-08-31 03:41:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\Gadu-Gadu
[2011-07-08 12:29:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\Gadu-Gadu 10
[2012-06-10 13:52:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\GameRanger
[2012-05-23 17:07:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\GetRightToGo
[2012-07-17 01:22:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\hellomoto
[2012-04-17 15:34:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\IcoFX
[2012-03-30 18:31:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\LolClient
[2011-06-24 19:52:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\Maxthon3
[2012-05-23 16:05:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\mypcdrivers
[2012-01-26 23:16:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\Need for Speed World
[2011-06-19 18:43:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\Nokia
[2011-05-16 20:10:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\OpenFM
[2011-09-13 10:38:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\Opera
[2012-05-13 02:40:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\Origin
[2011-06-19 18:41:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\PC Suite
[2011-07-27 13:33:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\PowerChallenge
[2012-06-05 20:48:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\PriceGong
[2011-10-31 01:12:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\Publish Providers
[2012-02-28 19:53:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\Soldat
[2011-10-31 00:34:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\Sony
[2012-03-22 20:53:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\TeamViewer
[2012-06-05 20:37:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\Toolbar4
[2011-11-04 19:00:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\toolplugin
[2012-05-16 12:48:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\TS3Client
[2011-04-12 14:00:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rudy\Dane aplikacji\UltraGet
[2012-07-17 18:30:02 | 000,000,290 | ---- | M] () -- C:\WINDOWS\Tasks\Express Files Updater.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 127 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:51E4CCAE

< End of report >