OTL logfile created on: 2012-07-26 05:44:57 - Run 2
OTL by OldTimer - Version 3.2.31.0     Folder = E:\Pliki\Softwares\Narzędzia
Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
1.50 Gb Total Physical Memory | 0.92 Gb Available Physical Memory | 61.41% Memory free
2.11 Gb Paging File | 1.76 Gb Available in Paging File | 83.55% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 37.26 Gb Total Space | 5.40 Gb Free Space | 14.49% Space Free | Partition Type: NTFS
Drive D: | 59.05 Gb Total Space | 22.83 Gb Free Space | 38.66% Space Free | Partition Type: NTFS
Drive E: | 76.17 Gb Total Space | 8.45 Gb Free Space | 11.10% Space Free | Partition Type: NTFS
Drive F: | 97.65 Gb Total Space | 73.67 Gb Free Space | 75.44% Space Free | Partition Type: NTFS
 
Computer Name: PJ | User Name: Piotr | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-07-03 13:46:42 | 000,973,488 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
PRC - [2012-01-04 02:27:28 | 000,584,192 | ---- | M] (OldTimer Tools) -- E:\Pliki\Softwares\Narzędzia\OTL.exe
PRC - [2011-11-23 12:27:04 | 001,052,472 | ---- | M] (COMODO) -- C:\Program Files\Comodo\COMODO GeekBuddy\CLPSLS.exe
PRC - [2008-04-14 19:21:16 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2004-09-08 19:51:54 | 000,121,344 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - [2012-07-19 16:18:09 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012-07-03 13:46:44 | 000,655,944 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2012-03-11 23:13:21 | 001,983,232 | ---- | M] (COMODO) [Auto | Stopped] -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe -- (cmdAgent)
SRV - [2011-11-23 12:27:04 | 001,052,472 | ---- | M] (COMODO) [Auto | Running] -- C:\Program Files\Comodo\COMODO GeekBuddy\CLPSLS.exe -- (CLPSLS)
SRV - [2011-06-29 15:59:18 | 000,155,344 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe -- (Sony Ericsson PCCompanion)
SRV - [2005-03-07 18:08:56 | 000,069,632 | ---- | M] (Macromedia) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe -- (Macromedia Licensing Service)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2012-07-26 01:48:40 | 000,040,776 | ---- | M] (Malwarebytes Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys -- (MBAMSwissArmy)
DRV - [2012-07-03 13:46:44 | 000,022,344 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2012-03-11 23:13:46 | 000,097,760 | ---- | M] (COMODO) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\inspect.sys -- (Inspect)
DRV - [2012-03-11 23:13:45 | 000,031,704 | ---- | M] (COMODO) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\cmdhlp.sys -- (cmdHlp)
DRV - [2012-03-11 23:13:44 | 000,494,968 | ---- | M] (COMODO) [File_System | System | Stopped] -- C:\WINDOWS\system32\drivers\cmdGuard.sys -- (cmdGuard)
DRV - [2012-03-11 23:13:43 | 000,018,056 | ---- | M] (COMODO) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\cmderd.sys -- (cmderd)
DRV - [2012-01-30 15:34:27 | 000,025,512 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ggsemc.sys -- (ggsemc)
DRV - [2012-01-30 15:34:27 | 000,013,224 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ggflt.sys -- (ggflt)
DRV - [2011-12-19 10:48:26 | 000,021,624 | ---- | M] (REALiX(tm)) [Kernel | System | Stopped] -- C:\Program Files\HWiNFO32\HWiNFO32.SYS -- (HWiNFO32)
DRV - [2010-02-11 09:38:10 | 003,565,056 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2009-11-16 18:33:38 | 000,050,704 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\npf.sys -- (npf)
DRV - [2009-06-19 03:45:02 | 004,172,832 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTKVAC.SYS -- (ALCXWDM) Service for Realtek AC97 Audio (WDM)
DRV - [2009-01-08 09:42:54 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2008-02-22 15:33:02 | 000,114,304 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdmdm.sys -- (sscdmdm)
DRV - [2008-02-22 15:33:02 | 000,014,976 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdmdfl.sys -- (sscdmdfl)
DRV - [2008-02-22 15:33:00 | 000,087,936 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdbus.sys -- (sscdbus) SAMSUNG USB Composite Device driver (WDM)
DRV - [2007-04-03 13:57:54 | 000,099,080 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s116unic.sys -- (s116unic) Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (WDM)
DRV - [2007-04-03 13:57:52 | 000,098,696 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s116obex.sys -- (s116obex)
DRV - [2007-04-03 13:57:52 | 000,023,176 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s116nd5.sys -- (s116nd5) Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (NDIS)
DRV - [2007-04-03 13:57:50 | 000,100,488 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s116mgmt.sys -- (s116mgmt) Sony Ericsson Device 116  USB WMC Device Management Drivers (WDM)
DRV - [2007-04-03 13:57:48 | 000,108,680 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s116mdm.sys -- (s116mdm)
DRV - [2007-04-03 13:57:48 | 000,015,112 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s116mdfl.sys -- (s116mdfl)
DRV - [2007-04-03 13:57:42 | 000,083,336 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s116bus.sys -- (s116bus) Sony Ericsson Device 116 driver (WDM)
DRV - [2003-11-13 13:25:26 | 000,391,680 | ---- | M] (Sensaura Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ALCXSENS.SYS -- (ALCXSENS)
DRV - [2002-10-04 04:04:10 | 000,046,976 | ---- | M] (Realtek Semiconductor Corporation       ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\R8139n51.sys -- (rtl8139)
DRV - [2000-04-27 14:09:12 | 000,024,476 | ---- | M] (Motorola) [Kernel | Auto | Stopped] -- C:\WINDOWS\System32\drivers\COMMSBEP.sys -- (CommSBEP)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-21-220523388-1078081533-839522115-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
IE - HKU\S-1-5-21-220523388-1078081533-839522115-1004\SOFTWARE\Microsoft\Internet Explorer\Main,DefaultNetworkProfile = 506182753
IE - HKU\S-1-5-21-220523388-1078081533-839522115-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://isearch.avg.com/?cid={BF86654C-413E-4FDD-A556-478AEB617273}&mid=97b18eb27a5147d1b0bdd145306b8e6e-b602d594afd2b0b327e07a06f36ca6a7e42546d0&lang=pl&ds=is015&pr=sa&d=2012-01-21 18:06:39&v=9.0.0.23&sap=hp
IE - HKU\S-1-5-21-220523388-1078081533-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-220523388-1078081533-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://onet.pl"
FF - prefs.js..network.proxy.type: 0
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_3_300_265.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@ngm.nexoneu.com/NxGame: C:\Documents and Settings\All Users\Dane aplikacji\NexonEU\NGM\npNxGameeu.dll File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2571: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1739: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKCU\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll File not found
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-07-19 16:18:10 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-04-19 10:39:35 | 000,000,000 | ---D | M]
 
[2008-06-18 22:40:43 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Piotr\Dane aplikacji\Mozilla\Extensions
[2012-07-09 23:03:56 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Piotr\Dane aplikacji\Mozilla\Firefox\Profiles\51m2wxc4.default\extensions
[2012-07-09 23:03:56 | 000,000,000 | ---D | M] (Flagfox) -- C:\Documents and Settings\Piotr\Dane aplikacji\Mozilla\Firefox\Profiles\51m2wxc4.default\extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}
[2012-05-20 00:11:04 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Documents and Settings\Piotr\Dane aplikacji\Mozilla\Firefox\Profiles\51m2wxc4.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2012-05-19 13:30:20 | 000,000,000 | ---D | M] (United States English Spellchecker) -- C:\Documents and Settings\Piotr\Dane aplikacji\Mozilla\Firefox\Profiles\51m2wxc4.default\extensions\en-US@dictionaries.addons.mozilla.org
[2012-04-21 17:37:50 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Piotr\Dane aplikacji\Mozilla\Firefox\Profiles\coor1zkk.Piotrek\extensions
[2005-08-31 16:26:54 | 000,000,000 | ---D | M] (Firefox (default)) -- C:\Documents and Settings\Piotr\Dane aplikacji\Mozilla\Firefox\Profiles\coor1zkk.Piotrek\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2008-06-21 03:25:04 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Piotr\Dane aplikacji\Mozilla\Webview\Profiles\68vpk4bc.default\extensions
[2012-07-23 21:21:40 | 000,002,299 | ---- | M] () -- C:\Documents and Settings\Piotr\Dane aplikacji\Mozilla\Firefox\Profiles\51m2wxc4.default\searchplugins\alexa.xml
[2008-05-25 17:23:35 | 000,001,340 | ---- | M] () -- C:\Documents and Settings\Piotr\Dane aplikacji\Mozilla\Firefox\Profiles\51m2wxc4.default\searchplugins\bbc-news.xml
[2012-07-23 21:21:42 | 000,005,941 | ---- | M] () -- C:\Documents and Settings\Piotr\Dane aplikacji\Mozilla\Firefox\Profiles\51m2wxc4.default\searchplugins\clipvn.xml
[2012-07-25 03:40:28 | 000,005,216 | ---- | M] () -- C:\Documents and Settings\Piotr\Dane aplikacji\Mozilla\Firefox\Profiles\51m2wxc4.default\searchplugins\linkedin.xml
[2006-08-02 23:01:29 | 000,001,057 | ---- | M] () -- C:\Documents and Settings\Piotr\Dane aplikacji\Mozilla\Firefox\Profiles\51m2wxc4.default\searchplugins\pwn-sjp.xml
[2006-08-02 23:01:38 | 000,001,039 | ---- | M] () -- C:\Documents and Settings\Piotr\Dane aplikacji\Mozilla\Firefox\Profiles\51m2wxc4.default\searchplugins\pwn-so.xml
[2006-08-02 23:01:40 | 000,001,115 | ---- | M] () -- C:\Documents and Settings\Piotr\Dane aplikacji\Mozilla\Firefox\Profiles\51m2wxc4.default\searchplugins\pwn-swo.xml
[2012-07-23 21:21:40 | 000,001,680 | ---- | M] () -- C:\Documents and Settings\Piotr\Dane aplikacji\Mozilla\Firefox\Profiles\51m2wxc4.default\searchplugins\whoisws.xml
[2009-09-27 23:39:29 | 000,001,738 | ---- | M] () -- C:\Documents and Settings\Piotr\Dane aplikacji\Mozilla\Firefox\Profiles\51m2wxc4.default\searchplugins\wyszukiwanie-filmw-wideo-w-youtube.xml
[2012-06-28 03:21:19 | 000,002,069 | ---- | M] () -- C:\Documents and Settings\Piotr\Dane aplikacji\Mozilla\Firefox\Profiles\51m2wxc4.default\searchplugins\wyszukiwarka-filmw-w-youtube.xml
[2012-04-25 14:50:04 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012-04-19 10:38:19 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions\{d6e3c517-dea0-46ae-1511-4b90ec8d420a}.del
() (No name found) -- C:\DOCUMENTS AND SETTINGS\PIOTR\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\51M2WXC4.DEFAULT\EXTENSIONS\{6D96BB5E-1175-4EBF-8AB5-5F56F1C79F65}.XPI
() (No name found) -- C:\DOCUMENTS AND SETTINGS\PIOTR\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\51M2WXC4.DEFAULT\EXTENSIONS\{D4DD63FA-01E4-46A7-B6B1-EDAB7D6AD389}.XPI
() (No name found) -- C:\DOCUMENTS AND SETTINGS\PIOTR\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\51M2WXC4.DEFAULT\EXTENSIONS\PERSONAS@CHRISTOPHER.BEARD.XPI
[2012-04-04 20:05:27 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2012-02-22 16:53:38 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION
[2012-07-19 16:18:10 | 000,136,672 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012-04-04 20:05:26 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2011-10-23 20:35:20 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2012-03-12 18:34:19 | 000,003,768 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\avg-secure-search.xml
[2011-10-23 20:35:20 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2011-10-23 20:35:20 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2011-10-23 20:35:20 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2011-10-23 20:35:20 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2011-10-23 20:35:20 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2009-09-19 16:42:58 | 000,000,734 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [COMODO] C:\Program Files\Comodo\COMODO GeekBuddy\CLPSLA.exe (COMODO)
O4 - HKLM..\Run: [COMODO Internet Security] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO)
O4 - HKLM..\Run: [CPA] C:\Program Files\Comodo\COMODO GeekBuddy\VALA.exe (COMODO)
O4 - HKU\S-1-5-21-220523388-1078081533-839522115-1004..\Run: [Xvid] C:\Program Files\Xvid\CheckUpdate.exe ()
O4 - HKLM..\RunOnce: [Malwarebytes Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - Startup: C:\Documents and Settings\Piotr\Menu Start\Programy\Autostart\AutorunsDisabled [2012-01-18 17:37:22 | 000,000,000 | -H-D | M]
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-220523388-1078081533-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-220523388-1078081533-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\system32\PrxerNsp.dll ()
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\WINDOWS\system32\PrxerDrv.dll (Initex)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\WINDOWS\system32\PrxerDrv.dll (Initex)
O10 - Protocol_Catalog9\Catalog_Entries\000000000030 - C:\WINDOWS\system32\PrxerDrv.dll (Initex)
O15 - HKU\S-1-5-21-220523388-1078081533-839522115-1004\..Trusted Domains:   ([]msn in My Computer)
O15 - HKU\S-1-5-21-220523388-1078081533-839522115-1004\..Trusted Domains: czat.pl ([www] https in Trusted sites)
O15 - HKU\S-1-5-21-220523388-1078081533-839522115-1004\..Trusted Domains: edu.pl ([www.gim40] https in Trusted sites)
O15 - HKU\S-1-5-21-220523388-1078081533-839522115-1004\..Trusted Domains: hotczat.pl ([]https in Trusted sites)
O15 - HKU\S-1-5-21-220523388-1078081533-839522115-1004\..Trusted Domains: onet.pl ([]https in Trusted sites)
O15 - HKU\S-1-5-21-220523388-1078081533-839522115-1004\..Trusted Domains: wp.pl ([]https in Trusted sites)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1183657854687 (WUWebControl Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1183657825187 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0E37B914-79AB-4101-9840-13CE0F874175}: NameServer = 8.26.56.26,156.154.70.22
O18 - Protocol\Handler\cetihpz {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll (Hewlett-Packard Company)
O20 - AppInit_DLLs: (C:\WINDOWS\system32\guard32.dll) -C:\WINDOWS\system32\guard32.dll (COMODO)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Piotr\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Piotr\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012-07-26 01:46:46 | 000,040,776 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2012-07-26 01:46:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Piotr\Dane aplikacji\Malwarebytes
[2012-07-26 01:46:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Malwarebytes' Anti-Malware
[2012-07-26 01:46:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes
[2012-07-26 01:46:27 | 000,022,344 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2012-07-26 01:46:27 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2012-07-26 00:24:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Piotr\Menu Start\Programy\Live Security Platinum
[2012-07-23 17:09:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Piotr\Pulpit\Nowy folder
[2012-07-22 01:25:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Piotr\Pulpit\Innerspace - The Village (2012)
[2012-07-20 18:19:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Piotr\Pulpit\Zduny
[2012-07-20 18:07:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Piotr\Pulpit\CV
[2012-07-11 02:17:23 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2012-07-04 20:51:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Piotr\Pulpit\DJ_Frank_White-Yelawolf_M16-Heart_Of_Dixie
[2012-06-27 19:02:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Piotr\Menu Start\Programy\TeamSpeak 3 Client
[2012-06-27 19:02:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Piotr\Moje dokumenty\TS3
[2012-06-27 01:30:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Piotr\Dane aplikacji\NapiProjekt
[2012-06-27 01:30:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\NapiProjekt
[2012-06-27 01:30:39 | 000,000,000 | ---D | C] -- C:\Program Files\NapiProjekt
[2012-06-26 22:01:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\VobSub
[2012-06-26 21:48:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Piotr\Menu Start\Programy\AVI ReComp
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012-07-26 02:37:04 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012-07-26 01:48:40 | 000,040,776 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2012-07-26 01:46:32 | 000,000,794 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Malwarebytes Anti-Malware.lnk
[2012-07-26 01:08:25 | 000,013,768 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012-07-26 01:07:44 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012-07-26 01:07:21 | 000,000,000 | ---- | M] () -- C:\WINDOWS\MEMORY.DMP
[2012-07-26 00:57:34 | 001,409,792 | ---- | M] () -- C:\WINDOWS\System32\drivers\sfi.dat
[2012-07-26 00:53:01 | 000,001,034 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2012-07-26 00:19:55 | 000,088,161 | ---- | M] () -- C:\Documents and Settings\Piotr\Pulpit\CV-MR.pdf
[2012-07-25 22:57:20 | 000,045,702 | ---- | M] () -- C:\Documents and Settings\Piotr\Pulpit\487955_349219615152118_1195389161_n.jpg
[2012-07-25 21:59:43 | 000,140,229 | ---- | M] () -- C:\Documents and Settings\Piotr\Pulpit\406291_10150978763271099_93167092_n.jpg
[2012-07-25 21:57:28 | 000,080,730 | ---- | M] () -- C:\Documents and Settings\Piotr\Pulpit\418718_428992007143683_987741994_n.jpg
[2012-07-25 21:57:11 | 000,057,770 | ---- | M] () -- C:\Documents and Settings\Piotr\Pulpit\526985_314989105264706_1562168512_n.jpg
[2012-07-25 21:56:54 | 000,035,276 | ---- | M] () -- C:\Documents and Settings\Piotr\Pulpit\553515_314988948598055_1624636551_n.jpg
[2012-07-25 21:56:42 | 000,018,720 | ---- | M] () -- C:\Documents and Settings\Piotr\Pulpit\251910_349202595153820_112467760_n.jpg
[2012-07-25 16:51:37 | 000,043,285 | ---- | M] () -- C:\Documents and Settings\Piotr\Pulpit\548939_349092581831488_163710700_n.jpg
[2012-07-25 16:50:29 | 000,083,683 | ---- | M] () -- C:\Documents and Settings\Piotr\Pulpit\524090_208052209323161_770121964_n.jpg
[2012-07-25 16:50:16 | 000,044,930 | ---- | M] () -- C:\Documents and Settings\Piotr\Pulpit\562695_349105411830205_827458096_n.jpg
[2012-07-25 16:49:27 | 000,028,082 | ---- | M] () -- C:\Documents and Settings\Piotr\Pulpit\547674_349044698502943_1301356933_n.jpg
[2012-07-25 16:49:13 | 000,070,605 | ---- | M] () -- C:\Documents and Settings\Piotr\Pulpit\182179_267632513345599_1022845626_n.jpg
[2012-07-25 03:09:41 | 000,192,000 | ---- | M] () -- C:\Documents and Settings\Piotr\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-07-24 22:04:35 | 000,001,050 | ---- | M] () -- C:\WINDOWS\wincmd.ini
[2012-07-24 22:04:20 | 000,000,613 | ---- | M] () -- C:\WINDOWS\wcx_ftp.ini
[2012-07-23 03:05:14 | 000,257,043 | ---- | M] () -- C:\Documents and Settings\Piotr\.recently-used.xbel
[2012-07-20 18:27:33 | 015,132,273 | ---- | M] () -- C:\Documents and Settings\Piotr\Pulpit\Zduny_m134.rar
[2012-07-17 13:23:48 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2012-07-17 13:23:48 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012-07-11 15:50:32 | 000,360,136 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012-07-11 02:18:02 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2012-07-03 13:46:44 | 000,022,344 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2012-06-27 19:02:52 | 000,000,717 | ---- | M] () -- C:\Documents and Settings\Piotr\Pulpit\TeamSpeak 3 Client.lnk
[2012-06-27 01:30:45 | 000,000,725 | ---- | M] () -- C:\Documents and Settings\Piotr\Pulpit\NapiProjekt.lnk
[2012-06-26 21:48:55 | 000,001,715 | ---- | M] () -- C:\Documents and Settings\Piotr\Pulpit\AVI ReComp.lnk
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012-07-26 02:37:04 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012-07-26 01:46:32 | 000,000,794 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Malwarebytes Anti-Malware.lnk
[2012-07-26 00:19:53 | 000,088,161 | ---- | C] () -- C:\Documents and Settings\Piotr\Pulpit\CV-MR.pdf
[2012-07-25 22:57:19 | 000,045,702 | ---- | C] () -- C:\Documents and Settings\Piotr\Pulpit\487955_349219615152118_1195389161_n.jpg
[2012-07-25 21:59:42 | 000,140,229 | ---- | C] () -- C:\Documents and Settings\Piotr\Pulpit\406291_10150978763271099_93167092_n.jpg
[2012-07-25 21:57:27 | 000,080,730 | ---- | C] () -- C:\Documents and Settings\Piotr\Pulpit\418718_428992007143683_987741994_n.jpg
[2012-07-25 21:57:10 | 000,057,770 | ---- | C] () -- C:\Documents and Settings\Piotr\Pulpit\526985_314989105264706_1562168512_n.jpg
[2012-07-25 21:56:52 | 000,035,276 | ---- | C] () -- C:\Documents and Settings\Piotr\Pulpit\553515_314988948598055_1624636551_n.jpg
[2012-07-25 21:56:39 | 000,018,720 | ---- | C] () -- C:\Documents and Settings\Piotr\Pulpit\251910_349202595153820_112467760_n.jpg
[2012-07-25 16:51:36 | 000,043,285 | ---- | C] () -- C:\Documents and Settings\Piotr\Pulpit\548939_349092581831488_163710700_n.jpg
[2012-07-25 16:50:28 | 000,083,683 | ---- | C] () -- C:\Documents and Settings\Piotr\Pulpit\524090_208052209323161_770121964_n.jpg
[2012-07-25 16:50:14 | 000,044,930 | ---- | C] () -- C:\Documents and Settings\Piotr\Pulpit\562695_349105411830205_827458096_n.jpg
[2012-07-25 16:49:25 | 000,028,082 | ---- | C] () -- C:\Documents and Settings\Piotr\Pulpit\547674_349044698502943_1301356933_n.jpg
[2012-07-25 16:49:11 | 000,070,605 | ---- | C] () -- C:\Documents and Settings\Piotr\Pulpit\182179_267632513345599_1022845626_n.jpg
[2012-07-23 03:05:14 | 000,257,043 | ---- | C] () -- C:\Documents and Settings\Piotr\.recently-used.xbel
[2012-07-20 18:27:20 | 015,132,273 | ---- | C] () -- C:\Documents and Settings\Piotr\Pulpit\Zduny_m134.rar
[2012-06-27 19:02:52 | 000,000,717 | ---- | C] () -- C:\Documents and Settings\Piotr\Pulpit\TeamSpeak 3 Client.lnk
[2012-06-27 01:30:45 | 000,000,725 | ---- | C] () -- C:\Documents and Settings\Piotr\Pulpit\NapiProjekt.lnk
[2012-06-26 21:48:54 | 000,001,715 | ---- | C] () -- C:\Documents and Settings\Piotr\Pulpit\AVI ReComp.lnk
[2012-06-21 20:08:01 | 000,716,813 | ---- | C] () -- C:\WINDOWS\unins000.exe
[2012-06-21 19:39:52 | 000,646,653 | ---- | C] () -- C:\WINDOWS\unins000.dat
[2012-04-08 19:06:07 | 000,056,424 | ---- | C] () -- C:\WINDOWS\System32\PrxerNsp.dll
[2012-02-27 00:40:14 | 000,079,360 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2012-01-28 16:18:26 | 001,409,792 | ---- | C] () -- C:\WINDOWS\System32\drivers\sfi.dat
[2011-09-29 15:21:06 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin
[2010-11-09 05:21:46 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2010-02-11 06:12:00 | 003,107,788 | ---- | C] () -- C:\WINDOWS\System32\ativva5x.dat
[2010-02-11 06:12:00 | 000,887,724 | ---- | C] () -- C:\WINDOWS\System32\ativva6x.dat
[2009-11-16 18:33:38 | 000,053,299 | ---- | C] () -- C:\WINDOWS\System32\pthreadVC.dll
[2009-09-30 14:59:28 | 000,000,600 | ---- | C] () -- C:\Documents and Settings\Piotr\Ustawienia lokalne\Dane aplikacji\PUTTY.RND
[2009-09-20 13:52:24 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\LauncherAccess.dt
[2009-06-07 13:27:20 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\vbzlib1.dll
[2009-05-25 02:43:54 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll
[2009-05-25 02:43:54 | 000,036,608 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys
[2009-05-25 02:43:34 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\Piotr\Dane aplikacji\$_hpcst$.hpc
[2009-04-24 00:29:16 | 000,189,051 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2009-01-28 20:50:44 | 000,153,088 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2008-03-24 04:06:09 | 000,383,238 | ---- | C] () -- C:\WINDOWS\System32\libmp3lame-0.dll
[2007-12-24 23:46:33 | 000,066,872 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe
[2007-12-24 23:46:32 | 000,022,328 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2007-12-24 23:46:27 | 000,103,736 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe
[2007-11-27 17:06:17 | 000,000,260 | ---- | C] () -- C:\WINDOWS\_delis32.ini
[2007-07-23 16:43:54 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI
[2007-05-13 20:14:17 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll
[2007-03-26 11:45:18 | 000,071,208 | ---- | C] () -- C:\WINDOWS\System32\PhysXLoader.dll
[2007-02-20 15:59:08 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll
[2007-02-20 15:59:06 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll
[2007-02-20 15:59:06 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll
[2007-02-20 15:59:06 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll
[2007-02-20 15:59:06 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll
[2007-02-20 15:59:06 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll
[2007-02-20 15:59:06 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll
[2007-02-20 15:59:06 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll
[2007-02-20 15:59:04 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll
[2006-12-25 18:08:04 | 000,043,520 | ---- | C] () -- C:\WINDOWS\System32\CmdLineExt03.dll
[2006-11-21 17:02:03 | 000,000,058 | ---- | C] () -- C:\WINDOWS\DeskToppers.ini
[2006-09-18 18:19:44 | 000,154,144 | ---- | C] () -- C:\WINDOWS\System32\RTLCPAPI.dll
[2006-09-18 18:19:44 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2006-09-10 13:25:36 | 000,000,411 | ---- | C] () -- C:\WINDOWS\tetuhau3.INI
[2006-08-17 22:09:58 | 000,001,061 | ---- | C] () -- C:\WINDOWS\dragon_cfg.ini
[2006-05-03 00:38:24 | 000,072,444 | ---- | C] () -- C:\WINDOWS\SetBrowser.exe
[2006-05-03 00:38:24 | 000,000,748 | ---- | C] () -- C:\WINDOWS\SetBrowser.ini
[2006-03-24 14:39:03 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2006-01-21 21:50:28 | 000,000,026 | ---- | C] () -- C:\WINDOWS\SW_Win2000X48.DLL
[2006-01-21 21:48:59 | 000,009,146 | ---- | C] () -- C:\WINDOWS\CI_SearchHistory.INI
[2006-01-21 21:48:34 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\RegisterExe.exe
[2006-01-19 22:54:25 | 000,024,575 | ---- | C] () -- C:\WINDOWS\System32\Sengwinsyspios.dll
[2005-11-24 23:07:28 | 000,000,019 | ---- | C] () -- C:\WINDOWS\SoundConverter.INI
[2005-10-19 23:54:49 | 000,000,208 | ---- | C] () -- C:\WINDOWS\GTA-SA_Trn_Settings.ini
[2005-08-13 00:12:42 | 000,015,360 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll
[2005-08-03 22:34:39 | 000,004,212 | -H-- | C] () -- C:\WINDOWS\System32\zllictbl.dat
[2005-06-24 15:11:58 | 000,100,482 | ---- | C] () -- C:\WINDOWS\UninstallFirefox.exe
[2005-06-20 19:09:50 | 000,000,046 | ---- | C] () -- C:\WINDOWS\mix-fx.ini
[2005-06-09 23:52:24 | 000,000,596 | ---- | C] () -- C:\WINDOWS\u3dedit4.INI
[2005-06-09 23:46:48 | 000,000,074 | -H-- | C] () -- C:\WINDOWS\koo.dat
[2005-05-26 18:56:11 | 000,006,550 | ---- | C] () -- C:\WINDOWS\jautoexp.dat
[2005-05-25 19:37:17 | 000,000,313 | ---- | C] () -- C:\WINDOWS\option.dat
[2005-05-07 18:11:30 | 000,000,208 | ---- | C] () -- C:\WINDOWS\VOGEL.INI
[2005-04-28 06:22:34 | 000,831,488 | ---- | C] () -- C:\WINDOWS\System32\libeay32.dll
[2005-04-28 06:22:34 | 000,159,744 | ---- | C] () -- C:\WINDOWS\System32\ssleay32.dll
[2005-04-24 22:21:53 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2005-04-24 22:21:31 | 000,011,749 | ---- | C] () -- C:\WINDOWS\mozver.dat
[2005-04-24 15:00:05 | 000,014,211 | ---- | C] () -- C:\WINDOWS\twacker.ini
[2005-02-28 17:21:01 | 000,069,632 | R--- | C] () -- C:\WINDOWS\System32\xmltok.dll
[2005-02-28 17:21:01 | 000,036,864 | R--- | C] () -- C:\WINDOWS\System32\xmlparse.dll
[2005-01-21 20:16:10 | 000,000,474 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2005-01-13 22:31:06 | 000,000,000 | ---- | C] () -- C:\WINDOWS\synteza_DDE_klient.INI
[2005-01-07 23:45:24 | 000,000,059 | ---- | C] () -- C:\WINDOWS\RUNAWAY.INI
[2005-01-07 22:51:17 | 000,002,560 | ---- | C] () -- C:\WINDOWS\_MSRSTRT.EXE
[2004-12-31 17:44:27 | 000,024,575 | ---- | C] () -- C:\WINDOWS\System32\Usengwinsyspios.dll
[2004-12-11 23:07:18 | 000,051,200 | ---- | C] () -- C:\WINDOWS\tbat_del.exe
[2004-10-10 16:21:42 | 000,000,142 | ---- | C] () -- C:\WINDOWS\SyriusAttacher.ini
[2004-10-04 21:46:33 | 000,019,958 | ---- | C] () -- C:\WINDOWS\HPHins02.dat
[2004-10-04 21:46:33 | 000,004,308 | ---- | C] () -- C:\WINDOWS\hphmdl02.dat
[2004-09-25 21:50:04 | 000,000,045 | ---- | C] () -- C:\WINDOWS\GJJLGHL.ini
[2004-09-17 23:50:23 | 000,000,073 | ---- | C] () -- C:\WINDOWS\EurekaLog.ini
[2004-08-22 15:01:14 | 000,000,056 | ---- | C] () -- C:\WINDOWS\kgt2k.INI
[2004-08-20 21:32:17 | 000,000,083 | ---- | C] () -- C:\WINDOWS\EXCEL4.INI
[2004-08-02 15:20:40 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004-07-31 15:38:59 | 000,112,640 | ---- | C] () -- C:\WINDOWS\lsb_un20.exe
[2004-07-23 21:18:02 | 000,000,533 | ---- | C] () -- C:\WINDOWS\Tcsofla.INI
[2004-07-22 20:14:45 | 000,000,490 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2004-07-22 19:40:51 | 000,000,083 | ---- | C] () -- C:\WINDOWS\TBPlugin.INI
[2004-07-22 19:40:51 | 000,000,058 | ---- | C] () -- C:\WINDOWS\avconfig.ini
[2004-07-05 21:33:22 | 000,083,968 | ---- | C] () -- C:\WINDOWS\UnGins.exe
[2004-06-29 18:17:49 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\vidx16.dll
[2004-06-17 19:15:35 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\iyvu9_32.dll
[2004-06-09 17:05:36 | 000,319,488 | R--- | C] () -- C:\WINDOWS\System32\MafiaSetup.exe
[2004-06-05 21:53:29 | 000,000,684 | ---- | C] () -- C:\WINDOWS\syshcin1.ini
[2004-06-02 16:05:04 | 000,000,862 | ---- | C] () -- C:\WINDOWS\eReg.dat
[2004-06-01 22:33:33 | 000,000,613 | ---- | C] () -- C:\WINDOWS\wcx_ftp.ini
[2004-06-01 22:07:27 | 000,001,050 | ---- | C] () -- C:\WINDOWS\wincmd.ini
[2004-05-31 19:15:43 | 000,000,083 | ---- | C] () -- C:\WINDOWS\wwp.INI
[2004-05-31 01:15:11 | 000,001,080 | ---- | C] () -- C:\WINDOWS\winamp.ini
[2004-05-30 16:39:29 | 000,000,232 | ---- | C] () -- C:\WINDOWS\SIERRA.INI
[2004-05-29 19:27:27 | 000,192,000 | ---- | C] () -- C:\Documents and Settings\Piotr\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2004-05-29 14:24:51 | 000,000,204 | ---- | C] () -- C:\WINDOWS\RtlRack.ini
[2004-05-28 22:22:41 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2004-05-28 22:21:44 | 000,360,136 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2004-05-28 21:47:54 | 000,593,920 | ---- | C] () -- C:\WINDOWS\System32\ati2sgag.exe
[2004-05-28 21:35:33 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2004-05-28 21:31:39 | 000,023,016 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2004-05-05 10:43:02 | 000,006,478 | ---- | C] () -- C:\WINDOWS\System32\hphmon05.dat
[2004-04-01 20:22:10 | 000,364,544 | ---- | C] () -- C:\WINDOWS\System32\hphped05.exe
[2003-04-16 14:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2003-04-16 14:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2003-04-16 14:00:00 | 000,494,444 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat
[2003-04-16 14:00:00 | 000,436,436 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2003-04-16 14:00:00 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat
[2003-04-16 14:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2003-04-16 14:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2003-04-16 14:00:00 | 000,085,702 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat
[2003-04-16 14:00:00 | 000,063,280 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2003-04-16 14:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2003-04-16 14:00:00 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat
[2003-04-16 14:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2003-04-16 14:00:00 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2003-04-16 14:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2003-04-16 14:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2002-01-20 15:26:36 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\SimpleResize.dll
[2001-03-31 14:00:06 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\winhp260.exe
[1999-12-07 00:00:00 | 000,024,957 | ---- | C] () -- C:\WINDOWS\twain_16.dll
[1999-04-23 22:22:00 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\DVDRGN.EXE
[1998-06-13 23:53:26 | 000,044,544 | ---- | C] () -- C:\WINDOWS\System32\Gif89.dll
[1996-04-03 21:33:26 | 000,005,248 | ---- | C] () -- C:\WINDOWS\System32\giveio.sys
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2012-01-21 19:06:27 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Common Files
[2012-01-29 13:21:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\CPA_VA
[2009-08-23 18:40:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Fighters
[2012-06-21 21:40:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\GpsMapping
[2012-01-17 15:37:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\NexonEU
[2012-01-17 04:04:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Panda Security
[2012-01-17 03:19:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SecTaskMan
[2010-01-21 02:36:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP
[2005-08-05 16:47:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Opera
[2012-06-14 19:56:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Piotr\Dane aplikacji\.wtw
[2010-08-03 23:11:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Piotr\Dane aplikacji\AnvSoft
[2009-11-05 04:28:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Piotr\Dane aplikacji\AVI ReComp
[2012-07-16 02:16:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Piotr\Dane aplikacji\Azureus
[2012-04-06 19:46:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Piotr\Dane aplikacji\CoreFTP
[2010-05-01 15:29:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Piotr\Dane aplikacji\EurekaLog
[2012-07-24 23:40:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Piotr\Dane aplikacji\foobar2000
[2012-05-20 18:21:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Piotr\Dane aplikacji\Foxit Software
[2012-07-10 00:39:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Piotr\Dane aplikacji\gtk-2.0
[2005-08-17 21:15:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Piotr\Dane aplikacji\Jasc
[2012-01-17 18:49:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Piotr\Dane aplikacji\Kadu-history
[2012-06-27 01:32:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Piotr\Dane aplikacji\NapiProjekt
[2006-12-31 03:03:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Piotr\Dane aplikacji\NCH Swift Sound
[2012-02-15 23:22:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Piotr\Dane aplikacji\Need for Speed World
[2012-04-08 19:06:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Piotr\Dane aplikacji\Proxifier
[2012-02-14 15:53:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Piotr\Dane aplikacji\Rovio
[2006-08-07 20:16:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Piotr\Dane aplikacji\VoipDiscount
[2009-01-28 19:43:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Piotr\Dane aplikacji\XnView
[2011-05-18 02:26:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Piotr\Dane aplikacji\Youtube Downloader HD
[2011-06-19 16:17:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Piotr\Dane aplikacji\Youtube to MP3 Converter
[2010-04-17 13:26:58 | 000,000,522 | ---- | M] () -- C:\WINDOWS\Tasks\Install.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 134 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:671329E4

< End of report >