OTL logfile created on: 2012-07-20 18:52:31 - Run 1
OTL by OldTimer - Version 3.2.54.0     Folder = G:\
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
1014,36 Mb Total Physical Memory | 819,54 Mb Available Physical Memory | 80,79% Memory free
2,39 Gb Paging File | 2,33 Gb Available in Paging File | 97,59% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 149,04 Gb Total Space | 7,48 Gb Free Space | 5,02% Space Free | Partition Type: NTFS
Drive G: | 14,92 Gb Total Space | 2,43 Gb Free Space | 16,31% Space Free | Partition Type: FAT32
 
Computer Name: KAROLA | User Name: Karolina | Logged in as Administrator.
Boot Mode: SafeMode | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-07-20 18:47:14 | 000,596,480 | ---- | M] (OldTimer Tools) -- G:\OTL.exe
PRC - [2008-04-14 22:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2012-04-04 07:54:04 | 000,300,544 | ---- | M] () -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.POL
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ)
SRV - [2012-07-12 10:47:32 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2010-01-25 08:22:56 | 000,245,760 | ---- | M] (Brother Industries, Ltd.) [On_Demand | Stopped] -- C:\Program Files\Browny02\BrYNSvc.exe -- (BrYNSvc)
SRV - [2008-11-10 14:35:30 | 000,020,680 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe -- (EhttpSrv)
SRV - [2008-11-10 14:34:26 | 000,711,240 | ---- | M] (ESET) [Auto | Stopped] -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -- (ekrn)
SRV - [2006-11-17 20:45:26 | 000,118,784 | ---- | M] (Wistron Corp.) [On_Demand | Stopped] -- C:\Program Files\Launch Manager\WisLMSvc.exe -- (WisLMSvc)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] --  -- (mailKmd)
DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] --  -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] --  -- (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\KAROLI~1.KAR\USTAWI~1\Temp\catchme.sys -- (catchme)
DRV - [2008-11-10 14:34:46 | 000,092,168 | ---- | M] (ESET) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\epfwtdir.sys -- (epfwtdir)
DRV - [2008-11-10 14:34:22 | 000,104,456 | ---- | M] (ESET) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\ehdrv.sys -- (ehdrv)
DRV - [2008-11-10 14:33:28 | 000,110,600 | ---- | M] (ESET) [File_System | Auto | Stopped] -- C:\WINDOWS\system32\drivers\eamon.sys -- (eamon)
DRV - [2007-05-01 09:11:54 | 000,630,272 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CHDAud.sys -- (HdAudAddService)
DRV - [2007-02-25 00:00:00 | 002,203,520 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\NETw4x32.sys -- (NETw4x32) Sterownik karty Intel(R)
DRV - [2007-02-06 23:43:26 | 000,090,880 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2006-12-21 20:56:44 | 000,988,800 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HSF_DPV.sys -- (HSF_DPV)
DRV - [2006-12-21 20:56:00 | 000,209,664 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HSFHWAZL.sys -- (HSFHWAZL)
DRV - [2006-12-21 20:55:56 | 000,730,112 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf)
DRV - [2003-04-28 11:27:06 | 000,009,867 | ---- | M] () [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\HOTKEY.sys -- (Hotkey)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-21-861567501-1284227242-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\S-1-5-21-861567501-1284227242-725345543-1003\..\SearchScopes,DefaultScope = {633DFBDB-F78C-4286-8F21-81D8AE3CE7FC}
IE - HKU\S-1-5-21-861567501-1284227242-725345543-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-861567501-1284227242-725345543-1003\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=110000&tt=050412_30b&babsrc=SP_ss&mntrId=342626900000000000000016d38531ce
IE - HKU\S-1-5-21-861567501-1284227242-725345543-1003\..\SearchScopes\{633DFBDB-F78C-4286-8F21-81D8AE3CE7FC}: "URL" = http://start.funmoods.com/results.php?f=4&a=ironto&q={searchTerms}
IE - HKU\S-1-5-21-861567501-1284227242-725345543-1003\..\SearchScopes\{D27292CA-92F9-4452-AB5F-E3F37A47AAA1}: "URL" = http://www.google.pl/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
IE - HKU\S-1-5-21-861567501-1284227242-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_3_300_265.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2011-09-30 15:43:56 | 000,000,000 | ---D | M]
 
[2012-04-14 19:37:54 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
 
O1 HOSTS File: ([2001-10-26 19:45:16 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO)
O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.)
O4 - HKLM..\Run: [BluetoothAuthenticationAgent] C:\WINDOWS\System32\bthprops.cpl (Microsoft Corporation)
O4 - HKLM..\Run: [BrStsMon00] C:\Program Files\Browny02\Brother\BrStMonW.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [CtrlVol] C:\Program Files\Launch Manager\CtrlVol.exe File not found
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
O4 - HKLM..\Run: [HotkeyApp] C:\Program Files\Launch Manager\HotkeyApp.exe (Wistron)
O4 - HKLM..\Run: [LaunchAp] C:\Program Files\Launch Manager\LaunchAp.exe File not found
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [Wbutton] C:\Program Files\Launch Manager\WButton.exe File not found
O4 - HKLM..\Run: [WPDShServiceObj] C:\Documents and Settings\Karolina.KAROLA\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\3115\WPDShServiceObj.exe ()
O4 - HKU\S-1-5-21-861567501-1284227242-725345543-1003..\Run: [Gadu-Gadu 10] C:\Program Files\Gadu-Gadu 10\gg.exe (GG Network S.A.)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Bluetooth Manager.lnk = C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe (TOSHIBA CORPORATION.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-861567501-1284227242-725345543-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-861567501-1284227242-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-861567501-1284227242-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-861567501-1284227242-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1302035865828 (WUWebControl Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1302035932335 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.21.24.11 10.21.24.12 195.138.211.31 195.138.211.32
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{132D2AF4-830F-4ADC-98AC-6BF182CCDF37}: DhcpNameServer = 10.21.24.11 10.21.24.12 195.138.211.31 195.138.211.32
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011-04-05 19:11:07 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012-07-20 18:27:14 | 000,000,000 | ---D | C] -- C:\WINDOWS\temp
[2012-07-20 17:53:02 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Karolina.KAROLA\Menu Start\Programy\Narzędzia administracyjne
[2012-07-20 17:39:20 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2012-07-20 17:20:39 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2012-07-20 17:20:39 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2012-07-20 17:20:39 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2012-07-20 17:20:39 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2012-07-20 17:19:38 | 000,000,000 | ---D | C] -- C:\Qoobox
[2012-07-20 17:19:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\erdnt
[2012-07-20 17:15:26 | 000,000,000 | -HSD | C] -- C:\WINDOWS\CSC
[2012-07-13 21:49:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Karolina.KAROLA\Pulpit\Delta
[2012-07-13 16:46:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Karolina.KAROLA\Dane aplikacji\hellomoto
[2012-07-10 11:00:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Karolina.KAROLA\Pulpit\RAFAŁ 4
[2012-07-03 17:59:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Karolina.KAROLA\Pulpit\Szczecin 2012
[2012-07-03 13:04:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Karolina.KAROLA\Pulpit\Chorwacja
[2012-06-30 01:40:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Karolina.KAROLA\Pulpit\SWBL281908
[2012-06-29 17:07:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Karolina.KAROLA\Pulpit\spr AK
[2012-06-21 10:36:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Menu Start\Programy\VULCAN
[2012-06-21 10:36:56 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\VULCAN
[2012-06-21 10:36:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\VULCAN
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012-07-20 18:49:18 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012-07-20 18:46:32 | 000,000,468 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{BE2C056C-1FFF-400B-B69B-4079820457DB}.job
[2012-07-20 18:42:50 | 000,000,552 | ---- | M] () -- C:\WINDOWS\tasks\Microsoft Office Outlook 2007.job
[2012-07-20 17:39:26 | 000,000,327 | RHS- | M] () -- C:\boot.ini
[2012-07-20 17:06:45 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012-07-14 09:47:15 | 000,000,930 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2012-07-13 23:43:12 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2012-07-12 10:47:31 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2012-07-12 10:47:31 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012-07-11 09:19:49 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012-07-10 11:06:55 | 063,004,048 | ---- | M] () -- C:\Documents and Settings\Karolina.KAROLA\Pulpit\RAFAŁ 4.rar
[2012-07-05 22:16:24 | 076,921,253 | ---- | M] () -- C:\Documents and Settings\Karolina.KAROLA\Pulpit\Pacadi - Best Of Scooter 1994-2012 Megamix.mp3
[2012-06-30 00:15:14 | 009,158,555 | ---- | M] () -- C:\Documents and Settings\Karolina.KAROLA\Pulpit\Kay One feat. Shindy - Finale wir kommen [www.MARVIN-VIBEZ.to].mp3
[2012-06-26 21:41:07 | 000,057,344 | ---- | M] () -- C:\Documents and Settings\Karolina.KAROLA\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-06-26 18:35:04 | 000,002,431 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Pulpit\Świadectwa Optivum.lnk
[2012-06-25 13:47:11 | 000,063,706 | ---- | M] () -- C:\Documents and Settings\Karolina.KAROLA\Pulpit\strona.rar
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012-07-20 17:39:26 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2012-07-20 17:39:23 | 000,262,400 | RHS- | C] () -- C:\cmldr
[2012-07-20 17:20:39 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2012-07-20 17:20:39 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2012-07-20 17:20:39 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2012-07-20 17:20:39 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2012-07-20 17:20:39 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2012-07-10 11:06:31 | 063,004,048 | ---- | C] () -- C:\Documents and Settings\Karolina.KAROLA\Pulpit\RAFAŁ 4.rar
[2012-07-05 22:12:33 | 076,921,253 | ---- | C] () -- C:\Documents and Settings\Karolina.KAROLA\Pulpit\Pacadi - Best Of Scooter 1994-2012 Megamix.mp3
[2012-06-30 00:13:41 | 009,158,555 | ---- | C] () -- C:\Documents and Settings\Karolina.KAROLA\Pulpit\Kay One feat. Shindy - Finale wir kommen [www.MARVIN-VIBEZ.to].mp3
[2012-06-25 13:47:10 | 000,063,706 | ---- | C] () -- C:\Documents and Settings\Karolina.KAROLA\Pulpit\strona.rar
[2012-06-21 10:36:59 | 000,002,431 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Pulpit\Świadectwa Optivum.lnk
[2012-02-11 09:53:31 | 000,000,901 | ---- | C] () -- C:\Documents and Settings\Karolina.KAROLA\.recently-used.xbel
[2012-01-29 13:51:11 | 000,000,025 | ---- | C] () -- C:\WINDOWS\popcinfot.dat
[2011-09-18 12:29:00 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2011-07-18 18:47:13 | 000,000,012 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\ReminderNextRun
[2011-06-30 15:21:57 | 000,004,096 | ---- | C] () -- C:\WINDOWS\d3dx.dat
[2011-06-20 17:21:03 | 000,000,000 | RHS- | C] () -- C:\WINDOWS\FFSSET.BIN
[2011-06-20 17:10:29 | 000,000,404 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI
[2011-06-20 17:10:00 | 000,000,050 | ---- | C] () -- C:\WINDOWS\System32\BRIDF10A.DAT
[2011-04-06 23:18:35 | 000,057,344 | ---- | C] () -- C:\Documents and Settings\Karolina.KAROLA\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-04-06 16:38:50 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2011-04-06 15:28:07 | 000,000,140 | ---- | C] () -- C:\Documents and Settings\Karolina.KAROLA\Ustawienia lokalne\Dane aplikacji\fusioncache.dat
[2011-04-05 22:59:44 | 000,009,867 | ---- | C] () -- C:\WINDOWS\System32\drivers\HOTKEY.sys
[2011-04-05 22:59:19 | 001,060,424 | ---- | C] () -- C:\WINDOWS\System32\WdfCoInstaller01000.dll
[2011-04-05 22:56:48 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2011-04-05 22:55:37 | 000,270,984 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011-04-05 22:54:51 | 001,174,000 | ---- | C] () -- C:\WINDOWS\System32\igmedkrn.dll
[2011-04-05 22:54:51 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4864.dll
[2011-04-05 22:54:51 | 000,104,636 | ---- | C] () -- C:\WINDOWS\System32\igmedcompkrn.dll
[2011-04-05 22:43:04 | 000,323,072 | ---- | C] () -- C:\WINDOWS\System32\WgaTray.exe
[2011-04-05 22:43:03 | 000,190,976 | ---- | C] () -- C:\WINDOWS\System32\WgaLogon.dll
[2011-04-05 22:06:26 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2011-04-05 22:00:38 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2011-04-05 21:27:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite
[2011-04-05 19:52:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Fujitsu
[2012-04-16 22:18:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\AVAST Software
[2012-04-14 19:42:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Babylon
[2012-03-29 21:46:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Big Fish Games
[2011-09-30 15:43:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\ESET
[2011-04-05 22:51:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Fujitsu
[2011-04-06 19:26:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Gadu-Gadu 10
[2011-05-05 22:32:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\OpenFM
[2011-12-02 23:23:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\PopCap Games
[2012-04-14 19:37:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Tarma Installer
[2012-06-21 10:36:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\VULCAN
[2011-07-13 21:39:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Youdagames
[2011-04-05 21:27:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Karolina\Dane aplikacji\DAEMON Tools Lite
[2011-04-05 21:08:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Karolina\Dane aplikacji\TOSHIBA
[2012-04-14 19:42:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Karolina.KAROLA\Dane aplikacji\Babylon
[2012-04-19 18:57:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Karolina.KAROLA\Dane aplikacji\BabylonToolbar
[2011-04-05 19:24:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Karolina.KAROLA\Dane aplikacji\e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1
[2012-04-19 18:57:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Karolina.KAROLA\Dane aplikacji\Funmoods
[2011-04-05 19:24:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Karolina.KAROLA\Dane aplikacji\Gadu-Gadu
[2012-07-20 17:50:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Karolina.KAROLA\Dane aplikacji\Gadu-Gadu 10
[2011-04-06 16:07:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Karolina.KAROLA\Dane aplikacji\GHISLER
[2011-05-30 15:58:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Karolina.KAROLA\Dane aplikacji\gtk-2.0
[2012-07-14 08:00:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Karolina.KAROLA\Dane aplikacji\hellomoto
[2011-04-09 09:08:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Karolina.KAROLA\Dane aplikacji\OpenFM
[2011-09-01 20:11:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Karolina.KAROLA\Dane aplikacji\Opera
[2011-06-14 16:09:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Karolina.KAROLA\Dane aplikacji\VULCAN
[2011-06-30 15:22:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Karolina.KAROLA\Dane aplikacji\World-LooM
[2011-07-13 21:39:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Karolina.KAROLA\Dane aplikacji\YoudaGames
[2012-07-20 18:46:32 | 000,000,468 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{BE2C056C-1FFF-400B-B69B-4079820457DB}.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Files - Unicode (All) ==========[/color]
[2011-11-10 21:38:36 | 000,169,070 | ---- | M] ()(C:\Documents and Settings\Karolina.KAROLA\Moje dokumenty\=?UTF-8?Q?Zdj=C4=99cie0037=2Ejpg?=.jpg) -- C:\Documents and Settings\Karolina.KAROLA\Moje dokumenty\=UTF-8QZdj=C4=99cie0037=2Ejpg=.jpg
[2011-11-10 21:38:36 | 000,169,070 | ---- | C] ()(C:\Documents and Settings\Karolina.KAROLA\Moje dokumenty\=?UTF-8?Q?Zdj=C4=99cie0037=2Ejpg?=.jpg) -- C:\Documents and Settings\Karolina.KAROLA\Moje dokumenty\=UTF-8QZdj=C4=99cie0037=2Ejpg=.jpg

< End of report >