OTL logfile created on: 2012-07-26 21:55:37 - Run 2 OTL by OldTimer - Version 3.2.53.1 Folder = C:\Documents and Settings\ADMIN\Pulpit\logi itd dysk Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 1,42 Gb Available Physical Memory | 70,78% Memory free 3,85 Gb Paging File | 3,32 Gb Available in Paging File | 86,36% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 48,83 Gb Total Space | 21,73 Gb Free Space | 44,50% Space Free | Partition Type: NTFS Drive D: | 184,05 Gb Total Space | 22,02 Gb Free Space | 11,97% Space Free | Partition Type: NTFS Computer Name: ADMIN | User Name: ADMIN | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-07-25 20:26:38 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\ADMIN\Pulpit\logi itd dysk\OTL.exe PRC - [2012-07-15 15:53:26 | 000,186,832 | ---- | M] (Google Inc.) -- C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.115\GoogleCrashHandler.exe PRC - [2012-07-10 06:09:02 | 001,250,328 | ---- | M] (Google Inc.) -- C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe PRC - [2012-04-04 18:47:32 | 000,161,664 | ---- | M] (Oracle Corporation) -- C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe PRC - [2011-02-28 22:28:54 | 000,958,464 | ---- | M] () -- C:\Program Files\Labtec\Desktop\V5.1\MOffice.exe PRC - [2011-02-28 22:28:54 | 000,387,584 | ---- | M] () -- C:\Program Files\Labtec\Desktop\V5.1\KBDAP32A.EXE PRC - [2011-02-28 22:28:54 | 000,356,352 | ---- | M] () -- C:\Program Files\Labtec\Desktop\V5.1\mouse32a.exe PRC - [2010-04-01 11:16:20 | 000,357,696 | ---- | M] (DT Soft Ltd) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe PRC - [2009-07-16 23:33:00 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2008-06-13 18:04:02 | 000,025,256 | ---- | M] () -- C:\Program Files\Lexmark 3600-4600 Series\lxdxmsdmon.exe PRC - [2008-06-13 18:04:01 | 000,668,328 | ---- | M] () -- C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe PRC - [2008-02-28 02:53:25 | 000,594,600 | ---- | M] ( ) -- C:\WINDOWS\system32\lxdxcoms.exe PRC - [2008-02-28 02:53:22 | 000,098,984 | ---- | M] (Lexmark International, Inc.) -- C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdxserv.exe PRC - [2007-06-01 11:21:30 | 001,209,904 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe PRC - [2007-06-01 11:21:08 | 000,153,136 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe PRC - [2004-12-13 02:05:20 | 001,527,893 | ---- | M] (The Firebird Project) -- C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe PRC - [2004-12-13 02:05:20 | 000,065,536 | ---- | M] (The Firebird Project) -- C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012-07-10 06:09:00 | 000,438,296 | ---- | M] () -- C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\20.0.1132.57\ppgooglenaclpluginchrome.dll MOD - [2012-07-10 06:08:59 | 003,972,120 | ---- | M] () -- C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\20.0.1132.57\pdf.dll MOD - [2012-07-10 06:07:22 | 000,140,328 | ---- | M] () -- C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\20.0.1132.57\avutil-51.dll MOD - [2012-07-10 06:07:21 | 000,262,184 | ---- | M] () -- C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\20.0.1132.57\avformat-54.dll MOD - [2012-07-10 06:07:19 | 002,386,984 | ---- | M] () -- C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\20.0.1132.57\avcodec-54.dll MOD - [2012-07-10 04:17:27 | 009,255,112 | ---- | M] () -- C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\20.0.1132.57\gcswf32.dll MOD - [2012-07-01 12:13:11 | 004,051,456 | ---- | M] () -- C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\SwiftShader\1.0.0.3\libGLESv2.dll MOD - [2012-07-01 12:13:11 | 000,100,864 | ---- | M] () -- C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\SwiftShader\1.0.0.3\libEGL.dll MOD - [2012-02-19 15:23:45 | 000,971,264 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\94a40f415bfa947e251888bbe88bb973\System.Configuration.ni.dll MOD - [2012-02-15 15:32:04 | 005,450,752 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\77e1279cbf4eecfb0284b63316fe43fe\System.Xml.ni.dll MOD - [2012-02-15 15:31:59 | 012,430,848 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\ad99ac6b5666edb8ee742dd64f9578af\System.Windows.Forms.ni.dll MOD - [2012-02-15 15:31:45 | 001,587,200 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\9351cf29bb1ba951e45a9b3b0edab937\System.Drawing.ni.dll MOD - [2012-02-15 15:30:07 | 007,953,408 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\9e3803cd2a11f056291862e306a8e2b2\System.ni.dll MOD - [2011-10-16 01:57:56 | 011,490,816 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\ca87ba84221991839abbe7d4bc9c6721\mscorlib.ni.dll MOD - [2011-02-28 22:28:56 | 000,012,288 | ---- | M] () -- C:\Program Files\Labtec\Desktop\V5.1\kbd32s.dll MOD - [2011-02-28 22:28:54 | 000,958,464 | ---- | M] () -- C:\Program Files\Labtec\Desktop\V5.1\MOffice.exe MOD - [2011-02-28 22:28:54 | 000,387,584 | ---- | M] () -- C:\Program Files\Labtec\Desktop\V5.1\KBDAP32A.EXE MOD - [2011-02-28 22:28:54 | 000,356,352 | ---- | M] () -- C:\Program Files\Labtec\Desktop\V5.1\mouse32a.exe MOD - [2011-02-28 22:28:54 | 000,135,168 | ---- | M] () -- C:\Program Files\Labtec\Desktop\V5.1\ofmdll.dll MOD - [2011-02-28 22:28:54 | 000,057,344 | ---- | M] () -- C:\Program Files\Labtec\Desktop\V5.1\mouDL32A.dll MOD - [2011-02-28 22:28:54 | 000,053,248 | ---- | M] () -- C:\Program Files\Labtec\Desktop\V5.1\KBDDL32A.DLL MOD - [2011-02-28 22:28:52 | 000,032,768 | ---- | M] () -- C:\Program Files\Labtec\Desktop\V5.1\kbd32g.dll MOD - [2008-06-13 18:04:02 | 000,025,256 | ---- | M] () -- C:\Program Files\Lexmark 3600-4600 Series\lxdxmsdmon.exe MOD - [2008-06-13 18:04:01 | 000,668,328 | ---- | M] () -- C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe MOD - [2008-06-13 17:11:51 | 000,081,920 | ---- | M] () -- C:\Program Files\Lexmark 3600-4600 Series\lxdxcaps.dll MOD - [2008-06-13 17:11:44 | 000,380,928 | ---- | M] () -- C:\Program Files\Lexmark 3600-4600 Series\lxdxscw.dll MOD - [2008-06-13 17:11:43 | 000,782,336 | ---- | M] () -- C:\Program Files\Lexmark 3600-4600 Series\lxdxdrs.dll MOD - [2008-06-13 17:03:03 | 000,069,632 | ---- | M] () -- C:\Program Files\Lexmark 3600-4600 Series\lxdxcnv4.dll MOD - [2008-02-28 02:15:28 | 000,115,200 | ---- | M] () -- C:\WINDOWS\system32\spool\prtprocs\w32x86\lxdxdrpp.dll MOD - [2008-02-28 02:02:22 | 000,589,824 | ---- | M] () -- C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdxdatr.dll MOD - [2008-02-28 02:02:10 | 000,073,728 | ---- | M] () -- C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdxcats.dll MOD - [2008-02-28 01:40:55 | 000,036,864 | ---- | M] () -- C:\Program Files\Lexmark 3600-4600 Series\app4r.monitor.core.dll MOD - [2008-02-28 01:40:54 | 000,028,672 | ---- | M] () -- C:\Program Files\Lexmark 3600-4600 Series\app4r.monitor.common.dll MOD - [2008-02-28 01:40:02 | 000,061,440 | ---- | M] () -- C:\Program Files\Lexmark 3600-4600 Series\app4r.devmons.mcmdevmon.dll MOD - [2007-11-22 18:55:48 | 000,011,776 | ---- | M] () -- C:\Program Files\Lexmark 3600-4600 Series\app4r.devmons.mcmdevmon.autoplayutil.dll MOD - [2001-10-28 17:42:30 | 000,116,224 | ---- | M] () -- C:\WINDOWS\system32\pdfcmnnt.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ) SRV - [2012-07-14 02:13:54 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2012-07-12 21:48:53 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2012-04-04 18:47:32 | 000,161,664 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe -- (JavaQuickStarterService) SRV - [2011-11-08 14:50:00 | 004,321,976 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\WINDOWS\system32\GameMon.des -- (npggsvc) SRV - [2011-03-21 14:21:24 | 000,632,832 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2008-02-28 02:53:25 | 000,594,600 | ---- | M] ( ) [Auto | Running] -- C:\WINDOWS\system32\lxdxcoms.exe -- (lxdx_device) SRV - [2008-02-28 02:53:22 | 000,098,984 | ---- | M] () [Auto | Running] -- C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxdxserv.exe -- (lxdxCATSCustConnectService) SRV - [2004-12-13 02:05:20 | 001,527,893 | ---- | M] (The Firebird Project) [On_Demand | Running] -- C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe -- (FirebirdServerDefaultInstance) SRV - [2004-12-13 02:05:20 | 000,065,536 | ---- | M] (The Firebird Project) [Auto | Running] -- C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe -- (FirebirdGuardianDefaultInstance) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - File not found [Kernel | On_Demand | Unknown] -- -- (az942got) DRV - [2011-05-18 11:12:38 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt) DRV - [2011-05-18 11:12:36 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev) DRV - [2011-05-18 11:12:32 | 000,023,168 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc) DRV - [2011-05-18 11:12:28 | 000,018,176 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd) DRV - [2011-05-18 11:09:48 | 000,137,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdnsu.sys -- (nmwcdnsu) DRV - [2011-05-18 11:09:48 | 000,008,576 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdnsuc.sys -- (nmwcdnsuc) DRV - [2011-03-19 20:24:50 | 000,010,578 | ---- | M] (Applied Networking Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi) DRV - [2011-02-15 23:52:16 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sptd.sys -- (sptd) DRV - [2010-04-03 12:02:54 | 000,240,608 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\WINDOWS\system32\drivers\RsFx0150.sys -- (RsFx0150) DRV - [2009-07-16 23:33:00 | 000,215,856 | ---- | M] (Silicon Image, Inc) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\Si3132r5.sys -- (Si3132r5) DRV - [2009-07-16 23:33:00 | 000,212,520 | ---- | M] (Silicon Image, Inc) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\Si3531.sys -- (Si3531) DRV - [2009-07-16 23:33:00 | 000,195,072 | ---- | M] (Silicon Image, Inc) [Kernel | Boot | Stopped] -- C:\WINDOWS\System32\drivers\Si3114r5.sys -- (Si3114r5) DRV - [2009-07-16 23:33:00 | 000,074,672 | ---- | M] (Silicon Image, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\si3132.sys -- (Si3132) DRV - [2009-07-16 23:33:00 | 000,069,248 | ---- | M] (Silicon Image, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\si3124.sys -- (Si3124) DRV - [2009-07-16 23:33:00 | 000,062,336 | ---- | M] (Silicon Image, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\si3112.sys -- (Si3112) DRV - [2008-08-26 11:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2007-11-01 08:38:56 | 004,620,288 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2007-10-17 14:12:00 | 000,030,720 | R--- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\l251x86.sys -- (AtcL002) DRV - [2006-10-18 21:12:16 | 000,012,664 | R--- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AsIO.sys -- (AsIO) DRV - [2006-08-29 16:56:19 | 000,032,377 | ---- | M] (B-phreaks) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\prodigy.sys -- (PRODIGY) DRV - [2004-09-03 19:23:10 | 000,115,680 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\prohlp02.sys -- (prohlp02) DRV - [2004-09-03 19:19:07 | 000,054,368 | ---- | M] (Protection Technology) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\prodrv06.sys -- (prodrv06) DRV - [2004-08-13 04:56:20 | 000,005,810 | R--- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ASACPI.sys -- (MTsensor) DRV - [2004-07-19 16:49:54 | 000,007,040 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\prosync1.sys -- (prosync1) DRV - [2003-12-01 17:20:52 | 000,004,832 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sfhlp01.sys -- (sfhlp01) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2000478354-1677128483-1801674531-500\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = IE - HKU\S-1-5-21-2000478354-1677128483-1801674531-500\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKU\S-1-5-21-2000478354-1677128483-1801674531-500\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-2000478354-1677128483-1801674531-500\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-21-2000478354-1677128483-1801674531-500\..\SearchScopes\{8D937999-F143-43AA-A4AE-AA971C23F667}: "URL" = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=827316&p={searchTerms} IE - HKU\S-1-5-21-2000478354-1677128483-1801674531-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultthis.engineName: "" FF - prefs.js..browser.search.defaulturl: "" FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=827316&ilc=12" FF - prefs.js..browser.search.selectedEngine: "" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.google.pl/" FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {5A6E6A22-7615-476B-8D49-CCD5E5D7F936}:1.0.2 FF - prefs.js..extensions.enabledItems: personas@christopher.beard:1.6.2 FF - prefs.js..extensions.enabledItems: pdfforge@mybrowserbar.com:4.9 FF - prefs.js..extensions.enabledItems: wtxpcom@mybrowserbar.com:4.9 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26 FF - prefs.js..extensions.enabledItems: {db9d7a78-a76c-4bf2-97c6-258925ee1542}:3.7.0.6 FF - prefs.js..extensions.enabledItems: {dd05fd3d-18df-4ce4-ae53-e795339c5f01}:1.21 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}:6.0.29 FF - prefs.js..network.proxy.type: 0 FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_3_300_265.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.4.1: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.4.1: C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2852: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.46: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1662: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.46: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=1.1.11: C:\Program Files\VideoLAN\VLC\npvlc.dll (the VideoLAN Team) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-07-26 18:32:03 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-02-05 00:46:18 | 000,000,000 | ---D | M] [2011-03-02 12:56:19 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\ADMIN\Dane aplikacji\Mozilla\Extensions [2012-07-26 18:36:03 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\ADMIN\Dane aplikacji\Mozilla\Firefox\Profiles\r95g1c2b.default\extensions [2012-01-25 22:36:01 | 000,000,000 | ---D | M] (Reklamojad) -- C:\Documents and Settings\ADMIN\Dane aplikacji\Mozilla\Firefox\Profiles\r95g1c2b.default\extensions\{5A6E6A22-7615-476B-8D49-CCD5E5D7F936} [2011-04-03 11:46:19 | 000,000,000 | ---D | M] (Personas) -- C:\Documents and Settings\ADMIN\Dane aplikacji\Mozilla\Firefox\Profiles\r95g1c2b.default\extensions\personas@christopher.beard [2012-07-26 18:32:01 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2012-07-14 02:15:45 | 000,136,672 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2011-07-15 13:22:16 | 000,637,096 | ---- | M] (Ganymede Technologies) -- C:\Program Files\mozilla firefox\plugins\NPBILLARD8.dll [2010-08-20 11:05:26 | 000,681,464 | ---- | M] (Ganymede Technologies) -- C:\Program Files\mozilla firefox\plugins\NPBREAKOUT.dll [2011-07-15 13:24:28 | 000,886,952 | ---- | M] (Ganymede Technologies) -- C:\Program Files\mozilla firefox\plugins\NPDARTS.dll [2011-10-03 06:06:04 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2010-08-20 11:05:58 | 000,546,296 | ---- | M] (Ganymede Technologies) -- C:\Program Files\mozilla firefox\plugins\NPDOMINO.dll [2011-01-31 16:41:24 | 000,120,296 | ---- | M] ( ) -- C:\Program Files\mozilla firefox\plugins\npganymedenet.dll [2011-07-15 13:24:10 | 000,460,960 | ---- | M] (Ganymede Technologies) -- C:\Program Files\mozilla firefox\plugins\NPMAHJONG.dll [2010-08-20 11:07:34 | 000,685,552 | ---- | M] (Ganymede Technologies) -- C:\Program Files\mozilla firefox\plugins\NPMAKAOV2.dll [2010-08-20 11:06:56 | 000,665,096 | ---- | M] (Ganymede Technologies) -- C:\Program Files\mozilla firefox\plugins\NPMARBLES.dll [2011-07-15 13:22:52 | 000,981,168 | ---- | M] (Ganymede Technologies) -- C:\Program Files\mozilla firefox\plugins\NPPIRATE.dll [2010-08-20 11:07:02 | 000,603,648 | ---- | M] (Ganymede Technologies) -- C:\Program Files\mozilla firefox\plugins\NPPOKER.dll [2012-07-14 03:22:43 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2012-07-14 03:22:43 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2012-07-14 03:22:43 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2012-07-14 03:22:43 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2012-07-14 03:22:43 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2012-07-14 03:22:43 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms} CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\20.0.1132.57\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\20.0.1132.57\pdf.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\20.0.1132.57\gcswf32.dll CHR - plugin: Shockwave Flash (Disabled) = C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_2_202_235.dll CHR - plugin: 20-20 3D Viewer for IKEA (Enabled) = C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nnbjlpbcjbhgeeloohnpbcfblhnkhffm\5.0.93.0_0\NP_2020Player_IKEA.dll CHR - plugin: Intel(R) Threading Building Blocks for Windows (Enabled) = C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nnbjlpbcjbhgeeloohnpbcfblhnkhffm\5.0.93.0_0\tbb.dll CHR - plugin: Intel(R) Threading Building Blocks for Windows (Enabled) = C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nnbjlpbcjbhgeeloohnpbcfblhnkhffm\5.0.93.0_0\tbbmalloc.dll CHR - plugin: Ganymede Billard8 Plugin (Enabled) = C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\plugins\NPBILLARD8.dll CHR - plugin: Ganymede Darts Plugin (Enabled) = C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\plugins\NPDARTS.dll CHR - plugin: GanymedeNet.Detector (Enabled) = C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\plugins\npganymedenet.dll CHR - plugin: Ganymede Mahjong Plugin (Enabled) = C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\plugins\NPMAHJONG.dll CHR - plugin: Ganymede Pirate Plugin (Enabled) = C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\plugins\NPPIRATE.dll CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll CHR - plugin: Google Update (Enabled) = C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.111\npGoogleUpdate3.dll CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll CHR - plugin: Java(TM) Platform SE 7 U4 (Enabled) = C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll CHR - plugin: Java Deployment Toolkit 7.0.40.255 (Enabled) = C:\WINDOWS\system32\npDeployJava1.dll CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll CHR - plugin: VLC Multimedia Plug-in (Enabled) = C:\Program Files\VideoLAN\VLC\npvlc.dll CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll CHR - plugin: Windows Presentation Foundation (Enabled) = C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll CHR - plugin: Shockwave for Director (Enabled) = C:\WINDOWS\system32\Adobe\Director\np32dsw.dll CHR - Extension: Facebook! = C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\ainkhhbgcdbenmmbaoacambbhjfgnmmm\2.0.0.4_0\ CHR - Extension: YouTube = C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: Szukaj w Google = C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\ CHR - Extension: Website Blocker (Beta) = C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\hclgegipaehbigmbhdpfapmjadbaldib\0.1.9_0\ CHR - Extension: New Tab Redirect! = C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\icpgjfneehieebagbmdbhnlpiopdcmna\1.0.5_0\ CHR - Extension: 20-20 3D Viewer for IKEA = C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nnbjlpbcjbhgeeloohnpbcfblhnkhffm\5.0.93.0_0\ CHR - Extension: Gmail = C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2011-11-15 18:37:29 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Documents and Settings\ADMIN\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll (GG Network S.A.) O4 - HKLM..\Run: [FLMOFFICE4DMOUSE] C:\Program Files\Labtec\Desktop\V5.1\MOffice.exe () O4 - HKLM..\Run: [lxdxamon] C:\Program Files\Lexmark 3600-4600 Series\lxdxamon.exe () O4 - HKLM..\Run: [lxdxmon.exe] C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe () O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe () O4 - HKLM..\Run: [OFFICEKB] C:\Program Files\Labtec\Desktop\V5.1\KBDAP32A.EXE () O4 - HKU\S-1-5-21-2000478354-1677128483-1801674531-500..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG) O4 - HKU\S-1-5-21-2000478354-1677128483-1801674531-500..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-2000478354-1677128483-1801674531-500\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-2000478354-1677128483-1801674531-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0 O7 - HKU\S-1-5-21-2000478354-1677128483-1801674531-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 3 O7 - HKU\S-1-5-21-2000478354-1677128483-1801674531-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{FF4F5558-5E92-44B0-B2B6-B6DC31DDD8CF}: DhcpNameServer = 192.168.1.1 O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2011-02-15 19:26:35 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-07-26 18:32:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Mozilla [2012-07-26 18:32:08 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Maintenance Service [2012-07-26 18:18:05 | 000,000,000 | -HSD | C] -- C:\RECYCLER [2012-07-26 18:17:09 | 000,000,000 | ---D | C] -- C:\_OTL [2012-07-25 22:09:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Pulpit\logi itd dysk [2012-07-25 20:55:46 | 000,000,000 | ---D | C] -- C:\UsbFix [2012-07-19 23:22:03 | 000,000,000 | ---D | C] -- C:\Program Files\NIGHTSTUD2 Vv1.0b Shareware [2012-07-14 00:06:35 | 000,050,896 | ---- | C] (TegoSoft Inc. Web Site: http://www.tegosoft.com) -- C:\WINDOWS\System32\TEGODS.OCX [2012-07-14 00:06:34 | 000,188,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WINGDE.DLL [2012-07-14 00:06:34 | 000,092,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WING.DLL [2012-07-14 00:06:34 | 000,075,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\PICCLP32.OCX [2012-07-14 00:06:34 | 000,036,864 | ---- | C] (Superscape VR plc) -- C:\WINDOWS\System32\SCLVideo.ax [2012-07-14 00:06:34 | 000,028,672 | ---- | C] (Superscape VR plc) -- C:\WINDOWS\System32\SCLAudio.ax [2012-07-14 00:06:34 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WING32.DLL [2012-07-14 00:06:34 | 000,006,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WINGDIB.DRV [2012-07-14 00:06:34 | 000,005,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WINGPAL.WND [2012-07-14 00:06:24 | 000,304,640 | ---- | C] (InstallShield Software Corporation) -- C:\WINDOWS\IsUn0415.exe [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-07-26 21:58:01 | 000,001,132 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2000478354-1677128483-1801674531-500UA.job [2012-07-26 21:50:54 | 000,175,846 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml [2012-07-26 21:50:52 | 000,001,030 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2012-07-26 21:50:49 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2012-07-26 21:48:00 | 000,001,034 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2012-07-26 21:47:26 | 000,632,049 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\adwcleaner.exe [2012-07-26 21:47:15 | 000,000,930 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job [2012-07-26 18:32:11 | 000,000,724 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk [2012-07-26 01:20:48 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2012-07-25 21:20:48 | 000,274,968 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2012-07-24 21:46:14 | 000,099,840 | ---- | M] () -- C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-07-24 20:22:21 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2012-07-15 15:58:00 | 000,001,080 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2000478354-1677128483-1801674531-500Core.job [2012-07-12 21:48:53 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe [2012-07-12 21:48:52 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl [2012-07-12 18:09:58 | 000,560,584 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2012-07-12 18:09:58 | 000,502,004 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2012-07-12 18:09:58 | 000,110,674 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2012-07-12 18:09:58 | 000,093,830 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2012-07-07 16:23:00 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job [2012-07-07 11:05:33 | 006,626,496 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\Monstrum - Hymn Stali Rzeszow.mp3 [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-07-26 21:47:26 | 000,632,049 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\adwcleaner.exe [2012-07-26 18:32:11 | 000,000,730 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Mozilla Firefox.lnk [2012-07-26 18:32:11 | 000,000,724 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk [2012-07-14 00:06:34 | 000,005,195 | ---- | C] () -- C:\WINDOWS\System32\DVA.386 [2012-07-07 11:01:26 | 006,626,496 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\Monstrum - Hymn Stali Rzeszow.mp3 [2012-06-04 22:34:40 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\GkSui18.EXE [2012-06-04 22:34:29 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\GkSui20.EXE [2012-03-29 21:27:57 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\ADMIN\Sumptuastic - bo to wszystko jest dla ciebie - 06[1]. niebo bez ciebie.mp3 [2012-03-24 00:48:29 | 000,022,328 | ---- | C] () -- C:\Documents and Settings\ADMIN\Dane aplikacji\PnkBstrK.sys [2012-03-10 21:50:39 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\ADMIN\08 Ścieżka 8.wma [2012-03-10 21:31:06 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\ADMIN\07 Ścieżka 7.wma [2012-02-26 16:18:18 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\ADMIN\4p i Onil - Mielno pobrano z ulub_pl.mp3 [2012-02-15 12:38:25 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll [2012-02-10 18:33:34 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\Access.dat [2012-01-20 15:07:36 | 000,000,532 | ---- | C] () -- C:\WINDOWS\eReg.dat [2011-11-15 18:32:34 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe [2011-11-15 18:32:34 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe [2011-11-15 18:32:34 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe [2011-11-15 18:32:34 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe [2011-11-15 18:32:34 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe [2011-06-03 18:33:35 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll [2011-06-03 18:24:55 | 000,098,304 | ---- | C] () -- C:\WINDOWS\System32\redmonnt.dll [2011-03-17 20:18:57 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\ETCoInst.dll [2011-03-10 11:18:49 | 000,810,496 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2011-03-10 11:18:49 | 000,258,048 | ---- | C] () -- C:\WINDOWS\System32\libFLAC.dll [2011-03-02 13:06:42 | 000,000,004 | ---- | C] () -- C:\WINDOWS\System32\proc-1037709799.bin [2011-03-02 12:56:11 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat [2011-02-20 22:27:15 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2011-02-20 21:11:19 | 000,099,840 | ---- | C] () -- C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-02-20 15:16:17 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\lxdxvs.dll [2011-02-20 15:16:14 | 000,360,448 | ---- | C] () -- C:\WINDOWS\System32\lxdxcoin.dll [2011-02-20 15:15:38 | 000,782,336 | ---- | C] () -- C:\WINDOWS\System32\lxdxdrs.dll [2011-02-20 15:15:38 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\lxdxcaps.dll [2011-02-20 15:15:38 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\lxdxcnv4.dll [2011-02-20 15:12:36 | 000,000,044 | ---- | C] () -- C:\WINDOWS\System32\lxdxrwrd.ini [2011-02-20 15:12:14 | 000,348,160 | ---- | C] () -- C:\WINDOWS\System32\LXDXinst.dll [2011-02-20 15:12:13 | 000,438,272 | ---- | C] ( ) -- C:\WINDOWS\System32\LXDXhcp.dll [2011-02-20 15:12:12 | 000,364,544 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdxinpa.dll [2011-02-20 15:12:12 | 000,339,968 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdxiesc.dll [2011-02-20 15:12:11 | 000,843,776 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdxusb1.dll [2011-02-20 15:12:10 | 001,105,920 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdxserv.dll [2011-02-20 15:12:10 | 000,647,168 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdxpmui.dll [2011-02-20 15:12:10 | 000,053,248 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdxprox.dll [2011-02-20 15:12:09 | 000,569,344 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdxlmpm.dll [2011-02-20 15:12:08 | 000,663,552 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdxhbn3.dll [2011-02-20 15:12:08 | 000,320,168 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdxih.exe [2011-02-20 15:12:07 | 000,208,896 | ---- | C] () -- C:\WINDOWS\System32\lxdxgrd.dll [2011-02-20 15:12:05 | 000,851,968 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdxcomc.dll [2011-02-20 15:12:05 | 000,594,600 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdxcoms.exe [2011-02-20 15:12:05 | 000,376,832 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdxcomm.dll [2011-02-20 15:12:04 | 000,365,224 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdxcfg.exe [2011-02-16 18:41:52 | 000,138,160 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys [2011-02-16 18:41:39 | 000,271,200 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe [2011-02-16 18:41:28 | 000,075,136 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe [2011-02-16 00:01:43 | 000,000,000 | ---- | C] () -- C:\WINDOWS\WinInit.ini [2011-02-15 23:38:15 | 000,034,308 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll [2011-02-15 23:32:30 | 000,000,142 | ---- | C] () -- C:\Documents and Settings\ADMIN\default.pls [2011-02-15 22:52:53 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2011-02-15 22:26:19 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat [2011-02-15 20:19:04 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2011-02-15 20:18:44 | 000,001,324 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat [2011-02-15 20:16:12 | 000,274,968 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2011-02-15 20:06:32 | 000,000,427 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2011-02-15 19:53:25 | 000,024,576 | R--- | C] () -- C:\WINDOWS\System32\AsIO.dll [2011-02-15 19:53:24 | 000,012,664 | R--- | C] () -- C:\WINDOWS\System32\drivers\AsIO.sys [2011-02-15 19:48:57 | 000,049,152 | R--- | C] () -- C:\WINDOWS\System32\ChCfg.exe [2011-02-15 19:47:25 | 000,013,270 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini [2011-02-15 19:47:25 | 000,005,810 | R--- | C] () -- C:\WINDOWS\System32\drivers\ASACPI.sys [2011-02-15 19:47:12 | 000,012,536 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS [2011-02-15 19:28:56 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2011-02-15 19:23:35 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [color=#E56717]========== LOP Check ==========[/color] [2012-07-02 20:45:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ADMIN\Dane aplikacji\AIMP3 [2011-06-14 22:21:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ADMIN\Dane aplikacji\Autodesk [2011-02-15 23:59:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ADMIN\Dane aplikacji\DAEMON Tools Lite [2011-02-16 23:50:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ADMIN\Dane aplikacji\Gadu-Gadu [2011-12-18 01:07:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ADMIN\Dane aplikacji\Gadu-Gadu 10 [2011-02-20 15:25:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ADMIN\Dane aplikacji\Lexmark Productivity Studio [2012-03-11 22:46:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ADMIN\Dane aplikacji\Mumble [2012-03-25 11:41:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ADMIN\Dane aplikacji\Nowe Gadu-Gadu [2012-05-10 23:22:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ADMIN\Dane aplikacji\Oracle [2011-11-28 20:39:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ADMIN\Dane aplikacji\PC Suite [2012-03-06 22:22:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ADMIN\Dane aplikacji\YoudaGames [2011-06-14 22:21:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Autodesk [2011-02-15 23:51:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite [2012-03-05 08:44:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\firebird [2011-02-20 22:03:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10 [2011-11-28 20:31:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Installations [2012-05-22 23:38:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\NFS Underground [2011-11-28 20:58:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Suite [2011-09-17 15:15:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{429CAD59-35B1-4DBC-BB6D-1DB246563521} [2011-10-16 11:37:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\GameTracker [color=#E56717]========== Purity Check ==========[/color] < End of report >