OTL logfile created on: 2012-07-27 11:48:37 - Run 1 OTL by OldTimer - Version 3.2.54.1 Folder = D:\ Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 8.0.7601.17514) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1,75 Gb Total Physical Memory | 1,11 Gb Available Physical Memory | 63,46% Memory free 3,50 Gb Paging File | 3,01 Gb Available in Paging File | 86,04% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 90,25 Gb Total Space | 23,02 Gb Free Space | 25,51% Space Free | Partition Type: NTFS Drive D: | 11,72 Gb Total Space | 11,63 Gb Free Space | 99,26% Space Free | Partition Type: NTFS Drive E: | 45,12 Gb Total Space | 6,13 Gb Free Space | 13,58% Space Free | Partition Type: NTFS Drive G: | 14,89 Gb Total Space | 14,89 Gb Free Space | 100,00% Space Free | Partition Type: FAT32 Computer Name: ADM-KOMPUTER | User Name: adm | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-07-26 12:43:04 | 000,596,480 | ---- | M] (OldTimer Tools) -- D:\OTL.exe PRC - [2011-02-26 07:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2006-09-14 00:20:24 | 000,126,464 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2012-07-24 17:43:48 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc) SRV - [2012-01-13 14:53:18 | 000,652,360 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService) SRV - [2009-07-14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc) SRV - [2009-07-14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc) SRV - [2009-07-14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2006-11-17 20:45:26 | 000,118,784 | ---- | M] (Wistron Corp.) [On_Demand | Stopped] -- C:\Program Files\Launch Manager\WisLMSvc.exe -- (WisLMSvc) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU) DRV - File not found [Kernel | System | Stopped] -- -- (mailKmd) DRV - [2011-12-10 15:24:06 | 000,020,464 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector) DRV - [2011-03-27 02:01:27 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV - [2011-03-27 02:01:13 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV - [2011-03-27 02:00:38 | 000,112,640 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tsusbhub.sys -- (tsusbhub) DRV - [2011-03-27 02:00:38 | 000,077,184 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Synth3dVsc.sys -- (Synth3dVsc) DRV - [2011-03-27 02:00:38 | 000,025,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\terminpt.sys -- (terminpt) DRV - [2011-03-27 02:00:37 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus) DRV - [2011-03-27 02:00:37 | 000,062,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\dmvsc.sys -- (dmvsc) DRV - [2011-03-27 02:00:37 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt) DRV - [2011-03-27 02:00:37 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc) DRV - [2011-03-27 02:00:37 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID) DRV - [2011-03-27 02:00:37 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap) DRV - [2011-03-27 02:00:35 | 000,027,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbGD.sys -- (TsUsbGD) DRV - [2009-07-14 00:02:52 | 000,043,008 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtnicxp.sys -- (RTL8023xp) DRV - [2009-07-14 00:02:46 | 001,096,704 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr) DRV - [2007-01-08 13:16:50 | 002,313,216 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (R300) DRV - [2006-12-21 16:26:00 | 004,405,248 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) DRV - [2003-04-28 11:27:06 | 000,009,867 | ---- | M] () [Kernel | System | Stopped] -- C:\Windows\System32\drivers\HOTKEY.sys -- (Hotkey) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = www.bing.com IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = www.bing.com IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.3088: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.11.3006: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 2.0.0.12\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-07-25 17:50:20 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 2.0.0.12\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-07-24 17:42:14 | 000,000,000 | ---D | M] [2012-07-24 17:38:59 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2012-07-24 17:38:59 | 000,000,000 | ---D | M] (Talkback) -- C:\Program Files\Mozilla Firefox\extensions\talkback@mozilla.org [2008-02-02 13:15:11 | 000,067,696 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\jar50.dll [2008-02-02 13:15:11 | 000,054,376 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\jsd3250.dll [2008-02-02 13:15:11 | 000,034,952 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\myspell.dll [2008-02-02 13:15:11 | 000,046,720 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\spellchk.dll [2008-02-02 13:15:11 | 000,172,144 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\xpinstal.dll [2006-06-03 18:39:49 | 000,000,904 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2007-03-31 19:10:44 | 000,000,926 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2006-06-03 18:39:49 | 000,001,300 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pbi-pl.xml [2006-06-03 18:39:49 | 000,000,866 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2008-01-15 20:59:08 | 000,001,193 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2007-01-05 13:40:09 | 000,001,693 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2009-06-10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O4 - HKLM..\Run: [Alcmtr] C:\Windows\Alcmtr.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [CtrlVol] C:\Program Files\Launch Manager\CtrlVol.exe File not found O4 - HKLM..\Run: [HotkeyApp] C:\Program Files\Launch Manager\HotkeyApp.exe (Wistron) O4 - HKLM..\Run: [LaunchAp] C:\Program Files\Launch Manager\LaunchAp.exe () O4 - HKLM..\Run: [LMgrOSD] C:\Program Files\Launch Manager\OSDCtrl.exe () O4 - HKLM..\Run: [LMgrVolOSD] C:\Program Files\Launch Manager\OSD.exe (Wistron Corp.) O4 - HKLM..\Run: [Wbutton] C:\Program Files\Launch Manager\Wbutton.exe () O4 - HKLM..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe () O4 - HKCU..\Run: [BOS] C:\BOS\bos.exe () O4 - HKCU..\Run: [Gadu-Gadu 10] C:\Program Files\Gadu-Gadu 10\gg.exe (GG Network S.A.) O4 - HKLM..\RunOnce: [Malwarebytes Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.168.68 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B2A49039-42A7-4A13-8E96-DE2F0DF4E03D}: DhcpNameServer = 192.168.168.68 O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-06-10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{fcec9dab-d58e-11e1-8d7e-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{fcec9dab-d58e-11e1-8d7e-806e6f6e6963}\Shell\AutoRun\command - "" = F:\setup.exe O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-07-26 16:18:49 | 000,000,000 | ---D | C] -- C:\Users\adm\AppData\Roaming\Malwarebytes [2012-07-26 16:18:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware [2012-07-26 16:18:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2012-07-26 16:18:35 | 000,020,464 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2012-07-26 16:18:35 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2012-07-26 10:02:29 | 000,000,000 | ---D | C] -- C:\7879a9a3913a98388c [2012-07-26 10:02:14 | 000,000,000 | ---D | C] -- C:\Windows\CheckSur [2012-07-25 22:02:19 | 000,000,000 | ---D | C] -- C:\BOS [2012-07-25 22:01:49 | 000,000,000 | ---D | C] -- C:\Windows\Sun [2012-07-25 21:55:22 | 000,000,000 | ---D | C] -- C:\Users\adm\AppData\Roaming\Gadu-Gadu 10 [2012-07-25 21:54:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Gadu-Gadu 10 [2012-07-25 21:52:36 | 000,000,000 | ---D | C] -- C:\Program Files\Gadu-Gadu 10 [2012-07-25 17:50:20 | 000,000,000 | ---D | C] -- C:\Users\adm\AppData\Roaming\Mozilla [2012-07-25 17:50:20 | 000,000,000 | ---D | C] -- C:\Users\adm\AppData\Local\Mozilla [2012-07-25 12:29:08 | 000,284,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbport.sys [2012-07-25 12:29:08 | 000,005,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbd.sys [2012-07-25 12:29:04 | 000,148,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\storport.sys [2012-07-25 12:29:04 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fsutil.exe [2012-07-25 10:16:57 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET [2012-07-25 10:07:49 | 000,000,000 | ---D | C] -- C:\Windows\System32\Wat [2012-07-24 17:48:19 | 002,345,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys [2012-07-24 17:45:47 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\browserchoice.exe [2012-07-24 17:42:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Real Alternative [2012-07-24 17:42:13 | 000,278,528 | ---- | C] (Real Networks, Inc) -- C:\Windows\System32\pncrt.dll [2012-07-24 17:42:13 | 000,185,688 | ---- | C] (RealNetworks, Inc.) -- C:\Windows\System32\rmoc3260.dll [2012-07-24 17:42:13 | 000,006,656 | ---- | C] (RealNetworks, Inc.) -- C:\Windows\System32\pndx5016.dll [2012-07-24 17:42:13 | 000,005,632 | ---- | C] (RealNetworks, Inc.) -- C:\Windows\System32\pndx5032.dll [2012-07-24 17:42:12 | 000,000,000 | ---D | C] -- C:\Program Files\Real Alternative [2012-07-24 17:42:12 | 000,000,000 | ---D | C] -- C:\Users\adm\AppData\Roaming\Real [2012-07-24 17:42:12 | 000,000,000 | ---D | C] -- C:\Users\adm\AppData\Local\Real [2012-07-24 17:42:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Real [2012-07-24 17:41:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp [2012-07-24 17:41:35 | 001,628,920 | ---- | C] (Sonic Solutions) -- C:\Windows\System32\pxsfs.dll [2012-07-24 17:41:35 | 000,547,576 | ---- | C] (Sonic Solutions) -- C:\Windows\System32\px.dll [2012-07-24 17:41:35 | 000,510,712 | ---- | C] (Sonic Solutions) -- C:\Windows\System32\pxdrv.dll [2012-07-24 17:41:35 | 000,379,640 | ---- | C] (Sonic Solutions) -- C:\Windows\System32\pxwave.dll [2012-07-24 17:41:35 | 000,187,128 | ---- | C] (Sonic Solutions) -- C:\Windows\System32\pxmas.dll [2012-07-24 17:41:35 | 000,129,784 | ---- | C] (Sonic Solutions) -- C:\Windows\System32\pxafs.dll [2012-07-24 17:41:35 | 000,072,440 | ---- | C] (Sonic Solutions) -- C:\Windows\System32\pxhpinst.exe [2012-07-24 17:41:35 | 000,064,760 | ---- | C] (Sonic Solutions) -- C:\Windows\System32\pxinsa64.exe [2012-07-24 17:41:35 | 000,064,760 | ---- | C] (Sonic Solutions) -- C:\Windows\System32\pxcpya64.exe [2012-07-24 17:41:35 | 000,039,672 | ---- | C] (Sonic Solutions) -- C:\Windows\System32\vxblock.dll [2012-07-24 17:41:32 | 000,000,000 | ---D | C] -- C:\Users\adm\AppData\Roaming\Winamp [2012-07-24 17:41:32 | 000,000,000 | ---D | C] -- C:\Program Files\Winamp [2012-07-24 17:41:10 | 000,000,000 | ---D | C] -- C:\Users\adm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR [2012-07-24 17:41:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR [2012-07-24 17:41:06 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR [2012-07-24 17:41:01 | 000,000,000 | --SD | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.0 [2012-07-24 17:40:12 | 000,000,000 | ---D | C] -- C:\Program Files\OpenOffice.org 3 [2012-07-24 17:39:37 | 000,000,000 | ---D | C] -- C:\Users\adm\Desktop\OpenOffice.org 3.0 (pl) Installation Files [2012-07-24 17:39:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack [2012-07-24 17:39:22 | 000,389,120 | ---- | C] (http://www.mp3dev.org/) -- C:\Windows\System32\lameACM.acm [2012-07-24 17:39:22 | 000,118,784 | ---- | C] (fccHandler) -- C:\Windows\System32\ac3acm.acm [2012-07-24 17:39:21 | 000,217,088 | ---- | C] (www.helixcommunity.org) -- C:\Windows\System32\yv12vfw.dll [2012-07-24 17:39:20 | 000,682,496 | ---- | C] (DivX, Inc.) -- C:\Windows\System32\divx.dll [2012-07-24 17:39:20 | 000,081,920 | ---- | C] (DivX, Inc.) -- C:\Windows\System32\dpl100.dll [2012-07-24 17:39:18 | 000,000,000 | ---D | C] -- C:\Program Files\K-Lite Codec Pack [2012-07-24 17:38:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox [2012-07-24 17:38:56 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox [2012-07-24 17:37:54 | 000,000,000 | ---D | C] -- C:\Users\adm\AppData\Local\Adobe [2012-07-24 17:37:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe [2012-07-24 17:37:02 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe [2012-07-24 17:37:01 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe [2012-07-24 17:25:32 | 000,000,000 | ---D | C] -- C:\Users\adm\Desktop\paka [2012-07-24 16:57:53 | 000,000,000 | ---D | C] -- C:\Users\adm\AppData\Roaming\Macromedia [2012-07-24 16:57:49 | 000,000,000 | ---D | C] -- C:\Users\adm\AppData\Roaming\Adobe [2012-07-24 16:48:47 | 000,000,000 | ---D | C] -- C:\Windows\System32\Lang [2012-07-24 16:43:39 | 000,000,000 | ---D | C] -- C:\Windows\System32\RTCOM [2012-07-24 16:42:03 | 000,319,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\DIFxAPI.dll [2012-07-24 16:42:01 | 000,282,624 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RTSndMgr.cpl [2012-07-24 16:42:01 | 000,086,016 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SoundMan.exe [2012-07-24 16:42:00 | 009,709,568 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RTLCPL.exe [2012-07-24 16:42:00 | 004,405,248 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\drivers\RtkHDAud.sys [2012-07-24 16:42:00 | 001,191,936 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlUpd.exe [2012-07-24 16:41:58 | 002,157,568 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\MicCal.exe [2012-07-24 16:41:57 | 002,808,832 | ---- | C] (RealTek Semicoductor Corp.) -- C:\Windows\alcwzrd.exe [2012-07-24 16:41:57 | 000,299,008 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\ALSndMgr.cpl [2012-07-24 16:41:57 | 000,069,632 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\Alcmtr.exe [2012-07-24 16:41:57 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek [2012-07-24 16:39:58 | 000,499,712 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll [2012-07-24 16:39:10 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield [2012-07-24 16:39:08 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll [2012-07-24 16:38:52 | 000,627,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2012-07-24 16:38:49 | 001,638,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2012-07-24 16:38:49 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2012-07-24 16:38:49 | 000,132,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll [2012-07-24 16:38:49 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2012-07-24 16:38:25 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe [2012-07-24 16:38:25 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll [2012-07-24 16:38:25 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll [2012-07-24 16:38:25 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll [2012-07-24 16:38:25 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll [2012-07-24 16:38:25 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll [2012-07-24 16:38:24 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll [2012-07-24 16:38:24 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll [2012-07-24 16:38:24 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll [2012-07-24 16:38:24 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll [2012-07-24 16:38:24 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll [2012-07-24 16:38:24 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll [2012-07-24 16:38:24 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll [2012-07-24 16:38:24 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll [2012-07-24 16:38:24 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll [2012-07-24 16:38:24 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll [2012-07-24 16:38:24 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll [2012-07-24 16:38:24 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll [2012-07-24 16:38:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll [2012-07-24 16:38:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll [2012-07-24 16:38:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll [2012-07-24 16:38:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll [2012-07-24 16:38:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll [2012-07-24 16:38:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll [2012-07-24 16:38:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll [2012-07-24 16:38:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll [2012-07-24 16:38:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll [2012-07-24 16:38:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll [2012-07-24 16:38:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll [2012-07-24 16:38:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll [2012-07-24 16:37:58 | 000,219,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncrypt.dll [2012-07-24 16:37:58 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sspisrv.dll [2012-07-24 16:37:50 | 001,549,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tquery.dll [2012-07-24 16:37:50 | 001,401,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssrch.dll [2012-07-24 16:37:50 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssph.dll [2012-07-24 16:37:49 | 000,666,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssvp.dll [2012-07-24 16:37:49 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssphtb.dll [2012-07-24 16:37:49 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msscntrs.dll [2012-07-24 16:37:46 | 000,805,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdosys.dll [2012-07-24 16:37:43 | 001,328,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\quartz.dll [2012-07-24 16:37:43 | 000,514,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qdvd.dll [2012-07-24 16:37:40 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisdecd.dll [2012-07-24 16:37:40 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisrndr.ax [2012-07-24 16:37:31 | 003,971,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe [2012-07-24 16:37:31 | 003,916,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe [2012-07-24 16:37:29 | 000,534,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\EncDec.dll [2012-07-24 16:37:28 | 000,187,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\FWPKCLNT.SYS [2012-07-24 16:37:26 | 000,294,912 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll [2012-07-24 16:37:26 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll [2012-07-24 16:37:15 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml3r.dll [2012-07-24 16:37:10 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnscacheugc.exe [2012-07-24 16:37:09 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\prevhost.exe [2012-07-24 16:37:08 | 000,826,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcore.dll [2012-07-24 16:37:02 | 000,919,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcorets.dll [2012-07-24 16:36:55 | 000,478,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\timedate.cpl [2012-07-24 16:36:50 | 001,077,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll [2012-07-24 16:36:47 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\poqexec.exe [2012-07-24 16:36:42 | 000,319,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbcjt32.dll [2012-07-24 16:36:42 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbccu32.dll [2012-07-24 16:36:42 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbccr32.dll [2012-07-24 16:36:41 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbctrac.dll [2012-07-24 16:36:41 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbccp32.dll [2012-07-24 16:36:35 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\webio.dll [2012-07-24 16:36:26 | 002,616,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe [2012-07-24 16:36:22 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll [2012-07-24 16:36:18 | 001,164,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42u.dll [2012-07-24 16:36:18 | 001,137,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42.dll [2012-07-24 16:36:15 | 000,191,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSCOVER.exe [2012-07-24 16:36:11 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\packager.dll [2012-07-24 16:36:07 | 000,027,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\Diskdump.sys [2012-07-24 16:36:02 | 000,237,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MpSigStub.exe [2012-07-24 16:35:53 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\csrsrv.dll [2012-07-24 16:35:50 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcorekmts.dll [2012-07-24 16:35:50 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpwsx.dll [2012-07-24 16:35:50 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdrmemptylst.exe [2012-07-24 16:19:41 | 000,045,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups2.dll [2012-07-24 16:19:40 | 002,422,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wucltux.dll [2012-07-24 16:19:32 | 000,577,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapi.dll [2012-07-24 16:19:32 | 000,088,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wudriver.dll [2012-07-24 16:19:32 | 000,035,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups.dll [2012-07-24 16:19:22 | 000,171,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuwebv.dll [2012-07-24 16:19:22 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapp.exe [2012-07-24 16:14:26 | 000,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information [2012-07-24 16:14:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Launch Manager [2012-07-24 16:14:26 | 000,000,000 | ---D | C] -- C:\Program Files\Launch Manager [2012-07-24 16:14:12 | 000,000,000 | ---D | C] -- C:\Users\adm\AppData\Roaming\InstallShield [2012-07-24 15:55:27 | 000,000,000 | ---D | C] -- C:\Windows\Panther [2012-07-24 15:43:45 | 000,000,000 | ---D | C] -- C:\Windows.old.001 [2012-07-24 15:13:10 | 000,000,000 | R--D | C] -- C:\Users\adm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup [2012-07-24 15:13:10 | 000,000,000 | R--D | C] -- C:\Users\adm\Searches [2012-07-24 15:13:10 | 000,000,000 | R--D | C] -- C:\Users\adm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools [2012-07-24 15:12:59 | 000,000,000 | ---D | C] -- C:\Users\adm\AppData\Roaming\Identities [2012-07-24 15:12:57 | 000,000,000 | R--D | C] -- C:\Users\adm\Contacts [2012-07-24 15:10:21 | 000,000,000 | -HSD | C] -- C:\Users\adm\Ustawienia lokalne [2012-07-24 15:10:21 | 000,000,000 | -HSD | C] -- C:\Users\adm\AppData\Local\Temporary Internet Files [2012-07-24 15:10:21 | 000,000,000 | -HSD | C] -- C:\Users\adm\Szablony [2012-07-24 15:10:21 | 000,000,000 | -HSD | C] -- C:\Users\adm\SendTo [2012-07-24 15:10:21 | 000,000,000 | -HSD | C] -- C:\Users\adm\Recent [2012-07-24 15:10:21 | 000,000,000 | -HSD | C] -- C:\Users\adm\PrintHood [2012-07-24 15:10:21 | 000,000,000 | -HSD | C] -- C:\Users\adm\NetHood [2012-07-24 15:10:21 | 000,000,000 | -HSD | C] -- C:\Users\adm\Documents\Moje wideo [2012-07-24 15:10:21 | 000,000,000 | -HSD | C] -- C:\Users\adm\Documents\Moje obrazy [2012-07-24 15:10:21 | 000,000,000 | -HSD | C] -- C:\Users\adm\Moje dokumenty [2012-07-24 15:10:21 | 000,000,000 | -HSD | C] -- C:\Users\adm\Documents\Moja muzyka [2012-07-24 15:10:21 | 000,000,000 | -HSD | C] -- C:\Users\adm\Menu Start [2012-07-24 15:10:21 | 000,000,000 | -HSD | C] -- C:\Users\adm\AppData\Local\Historia [2012-07-24 15:10:21 | 000,000,000 | -HSD | C] -- C:\Users\adm\Dane aplikacji [2012-07-24 15:10:21 | 000,000,000 | -HSD | C] -- C:\Users\adm\AppData\Local\Dane aplikacji [2012-07-24 15:10:21 | 000,000,000 | -HSD | C] -- C:\Users\adm\Cookies [2012-07-24 15:10:20 | 000,000,000 | --SD | C] -- C:\Users\adm\AppData\Roaming\Microsoft [2012-07-24 15:10:20 | 000,000,000 | R--D | C] -- C:\Users\adm\Videos [2012-07-24 15:10:20 | 000,000,000 | R--D | C] -- C:\Users\adm\Saved Games [2012-07-24 15:10:20 | 000,000,000 | R--D | C] -- C:\Users\adm\Pictures [2012-07-24 15:10:20 | 000,000,000 | R--D | C] -- C:\Users\adm\Music [2012-07-24 15:10:20 | 000,000,000 | R--D | C] -- C:\Users\adm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance [2012-07-24 15:10:20 | 000,000,000 | R--D | C] -- C:\Users\adm\Links [2012-07-24 15:10:20 | 000,000,000 | R--D | C] -- C:\Users\adm\Favorites [2012-07-24 15:10:20 | 000,000,000 | R--D | C] -- C:\Users\adm\Downloads [2012-07-24 15:10:20 | 000,000,000 | R--D | C] -- C:\Users\adm\Documents [2012-07-24 15:10:20 | 000,000,000 | R--D | C] -- C:\Users\adm\Desktop [2012-07-24 15:10:20 | 000,000,000 | R--D | C] -- C:\Users\adm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories [2012-07-24 15:10:20 | 000,000,000 | -H-D | C] -- C:\Users\adm\AppData [2012-07-24 15:10:20 | 000,000,000 | ---D | C] -- C:\Users\adm\AppData\Local\Temp [2012-07-24 15:10:20 | 000,000,000 | ---D | C] -- C:\Users\adm\AppData\Local\Microsoft [2012-07-24 15:10:20 | 000,000,000 | ---D | C] -- C:\Users\adm\AppData\Roaming\Media Center Programs [2012-07-24 15:08:44 | 000,000,000 | -HSD | C] -- C:\ProgramData\Ulubione [2012-07-24 15:08:44 | 000,000,000 | -HSD | C] -- C:\ProgramData\Szablony [2012-07-24 15:08:44 | 000,000,000 | -HSD | C] -- C:\ProgramData\Pulpit [2012-07-24 15:08:44 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moje wideo [2012-07-24 15:08:44 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moje obrazy [2012-07-24 15:08:44 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moja muzyka [2012-07-24 15:08:44 | 000,000,000 | -HSD | C] -- C:\ProgramData\Menu Start [2012-07-24 15:08:44 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumenty [2012-07-24 15:08:44 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dane aplikacji [2012-07-24 15:01:26 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution [2012-07-24 14:57:10 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch [2012-07-23 17:17:38 | 000,000,000 | -HSD | C] -- C:\System Volume Information [2012-07-23 14:44:33 | 000,000,000 | ---D | C] -- C:\Windows.old.000 [2012-07-23 13:00:58 | 000,000,000 | -HSD | C] -- C:\Recovery [2012-07-23 13:00:23 | 000,000,000 | ---D | C] -- C:\Windows.old [2012-07-18 18:41:05 | 000,000,000 | ---D | C] -- C:\Download [1 C:\*.tmp files -> C:\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-07-27 11:50:23 | 000,833,870 | ---- | M] () -- C:\Windows\System32\perfh015.dat [2012-07-27 11:50:23 | 000,662,120 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2012-07-27 11:50:23 | 000,180,600 | ---- | M] () -- C:\Windows\System32\perfc015.dat [2012-07-27 11:50:23 | 000,150,388 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2012-07-26 16:18:39 | 000,001,081 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk [2012-07-26 16:16:42 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012-07-26 16:16:18 | 1407,897,600 | -HS- | M] () -- C:\hiberfil.sys [2012-07-26 16:14:11 | 000,000,029 | ---- | M] () -- C:\Windows\MacG.INI [2012-07-26 13:59:22 | 000,020,704 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012-07-26 13:59:22 | 000,020,704 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012-07-25 21:54:19 | 000,001,016 | ---- | M] () -- C:\Users\Public\Desktop\OpenFM.lnk [2012-07-25 21:54:19 | 000,000,987 | ---- | M] () -- C:\Users\Public\Desktop\Gadu-Gadu 10.lnk [2012-07-25 17:49:48 | 000,000,215 | ---- | M] () -- C:\Users\adm\Desktop\hasło do grupy domowej.rtf [2012-07-25 10:13:06 | 000,001,760 | ---- | M] () -- C:\Users\Public\Desktop\Wybór przeglądarki.lnk [2012-07-25 10:10:36 | 000,189,000 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2012-07-24 17:41:37 | 000,000,951 | ---- | M] () -- C:\Users\Public\Desktop\Winamp.lnk [2012-07-24 17:41:01 | 000,001,160 | ---- | M] () -- C:\Users\Public\Desktop\OpenOffice.org 3.0.lnk [2012-07-24 17:38:59 | 000,001,899 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2012-07-24 17:37:24 | 000,001,994 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 8.lnk [2012-07-24 16:42:06 | 000,319,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\DIFxAPI.dll [2012-07-24 16:14:01 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf [2012-07-24 15:55:14 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK [2012-07-24 15:05:21 | 000,067,908 | ---- | M] () -- C:\Windows\System32\license.rtf [2012-07-01 21:40:06 | 273,899,447 | ---- | M] () -- C:\Users\adm\Desktop\zdjecia.zip [1 C:\*.tmp files -> C:\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-07-26 16:18:39 | 000,001,081 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk [2012-07-25 21:54:19 | 000,001,016 | ---- | C] () -- C:\Users\Public\Desktop\OpenFM.lnk [2012-07-25 21:54:19 | 000,000,987 | ---- | C] () -- C:\Users\Public\Desktop\Gadu-Gadu 10.lnk [2012-07-25 21:52:39 | 000,000,983 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gadu-Gadu 10.lnk [2012-07-25 17:49:07 | 000,000,215 | ---- | C] () -- C:\Users\adm\Desktop\hasło do grupy domowej.rtf [2012-07-25 10:13:06 | 000,001,760 | ---- | C] () -- C:\Users\Public\Desktop\Wybór przeglądarki.lnk [2012-07-24 17:41:37 | 000,000,951 | ---- | C] () -- C:\Users\Public\Desktop\Winamp.lnk [2012-07-24 17:41:01 | 000,001,160 | ---- | C] () -- C:\Users\Public\Desktop\OpenOffice.org 3.0.lnk [2012-07-24 17:39:23 | 000,164,352 | ---- | C] () -- C:\Windows\System32\unrar.dll [2012-07-24 17:39:22 | 000,000,414 | ---- | C] () -- C:\Windows\System32\lame_acm.xml [2012-07-24 17:39:21 | 000,755,027 | ---- | C] () -- C:\Windows\System32\xvidcore.dll [2012-07-24 17:39:21 | 000,159,839 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll [2012-07-24 17:39:20 | 003,596,288 | ---- | C] () -- C:\Windows\System32\qt-dx331.dll [2012-07-24 17:39:19 | 000,007,680 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll [2012-07-24 17:38:59 | 000,001,899 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2012-07-24 17:37:24 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader 8.lnk [2012-07-24 17:37:24 | 000,001,994 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader 8.lnk [2012-07-24 16:44:00 | 000,049,152 | ---- | C] () -- C:\Windows\System32\ChCfg.exe [2012-07-24 16:14:26 | 000,009,867 | ---- | C] () -- C:\Windows\System32\drivers\HOTKEY.sys [2012-07-24 16:14:01 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf [2012-07-24 15:54:48 | 000,206,312 | RHS- | C] () -- C:\grldr [2012-07-24 15:13:25 | 000,000,029 | ---- | C] () -- C:\Windows\MacG.INI [2012-07-24 15:13:12 | 000,001,443 | ---- | C] () -- C:\Users\adm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk [2012-07-24 15:04:54 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk [2012-07-24 15:04:28 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk [2012-07-24 14:57:21 | 000,189,000 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT [2012-07-20 16:12:00 | 1407,897,600 | -HS- | C] () -- C:\hiberfil.sys [2012-07-01 20:57:55 | 273,899,447 | ---- | C] () -- C:\Users\adm\Desktop\zdjecia.zip [2011-03-28 00:12:30 | 000,002,345 | ---- | C] () -- C:\Windows\System32\RTSLCS.dll [2011-03-27 02:01:27 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe [2011-03-27 02:01:25 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe < End of report >