OTL logfile created on: 2010-11-16 15:00:35 - Run 11
OTL by OldTimer - Version 3.2.17.1     Folder = E:\Spolszczenie
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
2,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 77,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 85,00% Paging File free
Paging file location(s): D:\pagefile.sys 256 256 [binary data]
 
%SystemDrive% = D: | %SystemRoot% = D:\WINDOWS | %ProgramFiles% = D:\Program Files
Drive C: | 48,83 Gb Total Space | 17,96 Gb Free Space | 36,78% Space Free | Partition Type: NTFS
Drive D: | 39,07 Gb Total Space | 19,91 Gb Free Space | 50,97% Space Free | Partition Type: NTFS
Drive E: | 39,06 Gb Total Space | 4,43 Gb Free Space | 11,34% Space Free | Partition Type: NTFS
Drive F: | 103,43 Gb Total Space | 46,98 Gb Free Space | 45,42% Space Free | Partition Type: NTFS
 
Computer Name: ADMINISTRATOR | User Name: SysOp | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2010-11-10 19:23:41 | 000,274,608 | ---- | M] (RealNetworks, Inc.) -- D:\Program Files\Real\RealPlayer\Update\realsched.exe
PRC - [2010-10-28 19:31:18 | 000,575,488 | ---- | M] (OldTimer Tools) -- E:\Spolszczenie\OTL.exe
PRC - [2010-10-03 10:58:55 | 000,742,776 | ---- | M] (BitTorrent, Inc.) -- D:\Program Files\BitTorrent\bittorrent.exe
PRC - [2010-07-23 06:05:56 | 000,126,904 | R--- | M] (Symantec Corporation) -- D:\Program Files\Norton Internet Security\Engine\18.1.0.37\ccSvcHst.exe
PRC - [2008-04-14 21:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- D:\WINDOWS\explorer.exe
PRC - [2007-09-26 15:23:26 | 000,554,352 | ---- | M] (Symantec Corporation) -- D:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
PRC - [2006-06-09 10:24:06 | 000,618,496 | ---- | M] (Ralink Technology, Corp.) -- D:\Program Files\RALINK\Common\RaUI.exe
PRC - [2004-12-13 04:34:32 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) -- D:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - [2010-10-28 19:31:18 | 000,575,488 | ---- | M] (OldTimer Tools) -- E:\Spolszczenie\OTL.exe
MOD - [2010-08-17 04:39:11 | 000,413,552 | R--- | M] (Symantec Corporation) -- D:\Program Files\Norton Internet Security\Engine\18.1.0.37\asOEHook.dll
MOD - [2009-07-12 08:02:02 | 000,653,120 | R--- | M] (Microsoft Corporation) -- D:\Program Files\Norton Internet Security\Engine\18.1.0.37\Microsoft.VC90.CRT\msvcr90.dll
MOD - [2009-07-12 08:02:00 | 000,569,664 | R--- | M] (Microsoft Corporation) -- D:\Program Files\Norton Internet Security\Engine\18.1.0.37\Microsoft.VC90.CRT\msvcp90.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [On_Demand | Stopped] --  -- (Norton Ghost)
SRV - File not found [Auto | Stopped] --  -- (JavaQuickStarterService)
SRV - File not found [Disabled | Stopped] -- D:\WINDOWS\System32\hidserv.dll -- (HidServ)
SRV - File not found [Auto | Stopped] --  -- (GEARSecurity)
SRV - File not found [On_Demand | Stopped] --  -- (ALG)
SRV - [2010-10-08 21:01:24 | 000,651,720 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- D:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010-07-23 06:05:56 | 000,126,904 | R--- | M] (Symantec Corporation) [Unknown | Running] -- D:\Program Files\Norton Internet Security\Engine\18.1.0.37\ccSvcHst.exe -- (NIS)
SRV - [2009-03-04 11:25:12 | 000,621,056 | ---- | M] (Nokia.) [On_Demand | Stopped] -- D:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2007-09-26 15:23:26 | 002,999,664 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- D:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE -- (LiveUpdate)
SRV - [2007-09-26 15:23:26 | 000,554,352 | ---- | M] (Symantec Corporation) [Auto | Running] -- D:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe -- (Harmonogram automatycznej usługi LiveUpdate)
SRV - [2005-11-14 01:06:04 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- D:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe -- (IDriverT)
SRV - [2004-12-13 04:34:32 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) [Auto | Running] -- D:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | Boot | Stopped] -- D:\WINDOWS\System32\drivers\Combo-Fix.sys -- (vkquwexg)
DRV - File not found [Kernel | On_Demand | Stopped] -- D:\WINDOWS\System32\DRIVERS\usbser_lowerflt.sys -- (upperdev)
DRV - File not found [Kernel | Boot | Stopped] -- D:\WINDOWS\System32\DRIVERS\inspect.sys -- (Inspect)
DRV - File not found [Kernel | On_Demand | Stopped] -- D:\PROGRA~1\K!TV\Plugins\S_Bt8x8\DSDrv4.sys -- (DSDrv4)
DRV - File not found [Kernel | On_Demand | Stopped] -- D:\DOCUME~1\SysOp\USTAWI~1\Temp\catchme.sys -- (catchme)
DRV - [2010-11-11 22:13:02 | 001,371,184 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- D:\Documents and Settings\All Users\Dane aplikacji\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\VirusDefs\20101115.002\NAVEX15.SYS -- (NAVEX15)
DRV - [2010-11-11 22:13:02 | 000,371,248 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- D:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)
DRV - [2010-11-11 22:13:02 | 000,102,448 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- D:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2010-11-11 22:13:02 | 000,086,064 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- D:\Documents and Settings\All Users\Dane aplikacji\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\VirusDefs\20101115.002\NAVENG.SYS -- (NAVENG)
DRV - [2010-11-11 22:01:19 | 000,126,512 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\SYMEVENT.SYS -- (SymEvent)
DRV - [2010-11-04 01:07:06 | 000,691,248 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- D:\Documents and Settings\All Users\Dane aplikacji\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\BASHDefs\20101104.001\BHDrvx86.sys -- (BHDrvx86)
DRV - [2010-10-19 21:36:22 | 000,341,880 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- D:\Documents and Settings\All Users\Dane aplikacji\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\IPSDefs\20101112.001\IDSXpx86.sys -- (IDSxpx86)
DRV - [2010-08-23 20:17:34 | 000,697,328 | ---- | M] () [Kernel | Boot | Running] -- D:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2010-08-07 22:08:02 | 000,005,810 | ---- | M] () [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\ASACPI.sys -- (MTsensor)
DRV - [2010-08-07 22:08:01 | 000,023,456 | ---- | M] (Phoenix Technologies) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\DrvAgent32.sys -- (DrvAgent32)
DRV - [2010-07-29 04:33:05 | 000,666,672 | R--- | M] (Symantec Corporation) [File_System | Boot | Running] -- D:\WINDOWS\system32\drivers\NIS\1201000.025\SYMEFA.SYS -- (SymEFA)
DRV - [2010-07-29 03:54:36 | 000,489,008 | R--- | M] (Symantec Corporation) [File_System | On_Demand | Running] -- D:\WINDOWS\system32\drivers\NIS\1201000.025\SRTSP.SYS -- (SRTSP)
DRV - [2010-07-29 03:54:36 | 000,050,096 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- D:\WINDOWS\system32\drivers\NIS\1201000.025\SRTSPX.SYS -- (SRTSPX) Symantec Real Time Storage Protection (PEL)
DRV - [2010-07-22 02:27:14 | 000,043,952 | R--- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\SymIM.sys -- (SymIMMP)
DRV - [2010-07-22 02:27:14 | 000,043,952 | R--- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\SymIM.sys -- (SymIM)
DRV - [2010-07-13 02:20:22 | 000,369,072 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- D:\WINDOWS\system32\drivers\NIS\1201000.025\SYMTDI.SYS -- (SYMTDI)
DRV - [2010-06-27 05:05:55 | 000,134,704 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- D:\WINDOWS\system32\drivers\NIS\1201000.025\Ironx86.SYS -- (SymIRON)
DRV - [2010-06-13 11:50:57 | 000,339,504 | R--- | M] (Symantec Corporation) [Kernel | Boot | Running] -- D:\WINDOWS\system32\drivers\NIS\1201000.025\SYMDS.SYS -- (SymDS)
DRV - [2010-03-22 18:04:30 | 000,015,872 | ---- | M] () [Kernel | System | Running] -- D:\WINDOWS\system32\drivers\HMFAxCore56d706f6725c732df006697fd5ec3381.sys -- (HMFAxCore56d706f6725c732df006697fd5ec3381)
DRV - [2010-01-29 11:40:04 | 000,082,320 | ---- | M] (EZB Systems, Inc.) [File_System | System | Running] -- D:\Program Files\UltraISO\drivers\ISODrive.sys -- (ISODrive)
DRV - [2009-11-03 12:39:04 | 005,940,736 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2009-06-01 15:23:00 | 008,087,520 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2008-12-31 17:40:38 | 000,062,208 | ---- | M] (Silicon Image, Inc.) [Kernel | Boot | Running] -- D:\WINDOWS\System32\drivers\si3112.sys -- (Si3112)
DRV - [2008-08-05 13:10:12 | 001,684,736 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt)
DRV - [2008-04-13 20:06:06 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2006-10-18 11:38:38 | 000,009,728 | ---- | M] (Leadtek Research Inc.) [Kernel | Auto | Running] -- D:\WINDOWS\system32\drivers\cxavxbar.sys -- (CXAVXBAR)
DRV - [2006-10-18 11:37:56 | 000,050,816 | ---- | M] (Leadtek Research Inc.) [Kernel | Auto | Running] -- D:\WINDOWS\system32\drivers\cx88tune.sys -- (CXTUNE)
DRV - [2006-10-18 11:37:26 | 000,162,944 | ---- | M] (Leadtek Research Inc.) [Kernel | Auto | Running] -- D:\WINDOWS\system32\drivers\cx88vid.sys -- (CX23880)
DRV - [2006-06-08 10:49:50 | 000,344,064 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\rt73.sys -- (RT73)
DRV - [2006-01-04 08:41:48 | 001,389,056 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt)
DRV - [2005-01-06 16:55:38 | 000,009,446 | ---- | M] (Leadtek Research Inc.) [Kernel | On_Demand | Stopped] -- D:\Program Files\WinFast\WFTVFM\WFIOCTL.sys -- (WFIOCTL)
DRV - [2004-12-23 17:27:56 | 000,027,392 | ---- | M] (Ulead Systems, Inc.) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\ULCDRHlp.sys -- (ULCDRHlp)
DRV - [2002-04-14 16:23:00 | 000,016,588 | ---- | M] (The freeware company) [Kernel | On_Demand | Stopped] -- E:\Spolszczenie\DEKODERY\moretv353pl[www.instalki.pl]\Hwiont.sys -- (HWIONT)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchURL\g, = http://www.google.com/search?q=%s
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchURL\g, = http://www.google.com/search?q=%s
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchURL\g, = http://www.google.com/search?q=%s
 
IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchURL\g, = http://www.google.com/search?q=%s
 
IE - HKU\S-1-5-21-2052111302-1580436667-1801674531-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = 5B 01 18 00 AC 20 7C 00 44 01 88 00 01 00 10 00 0C 00 00 00 00 00  [binary data]
IE - HKU\S-1-5-21-2052111302-1580436667-1801674531-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.mydtzone.com/
IE - HKU\S-1-5-21-2052111302-1580436667-1801674531-1001\Software\Microsoft\Internet Explorer\SearchURL\g, = http://www.google.com/search?q=%s
IE - HKU\S-1-5-21-2052111302-1580436667-1801674531-1001\..\URLSearchHook: {CFBFAEA6-B9D4-11D0-9C78-00C04FD64497} - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-2052111302-1580436667-1801674531-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultengine: ""
FF - prefs.js..browser.search.defaultenginename: ""
FF - prefs.js..browser.search.order.1: ""
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.wp.pl/"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.1
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {BBDA0591-3099-440a-AA10-41764D9DB4DB}:2.0
FF - prefs.js..extensions.enabledItems: {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}:5.1
FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:14.0.0
 
FF - HKLM\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: D:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010-05-22 00:05:24 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: D:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2010-11-10 19:23:58 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: D:\Documents and Settings\All Users\Dane aplikacji\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\IPSFFPlgn\ [2010-11-11 22:01:45 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: D:\Documents and Settings\All Users\Dane aplikacji\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\coFFPlgn\ [2010-11-11 22:00:46 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0\extensions\\Components: \components
FF - HKLM\software\mozilla\Mozilla Firefox 3.0\extensions\\Plugins: \plugins
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.4\extensions\\Components: I:\components
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.4\extensions\\Plugins: I:\plugins
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Components: D:\Program Files\Mozilla Firefox\components [2010-11-10 19:23:52 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Plugins: D:\Program Files\Mozilla Firefox\plugins [2010-11-10 19:24:09 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 2.0.0.24\extensions\\Components: D:\Program Files\Mozilla Thunderbird\components [2010-11-10 19:23:52 | 000,000,000 | ---D | M]
 
[2010-04-12 18:19:56 | 000,000,000 | ---D | M] -- D:\Documents and Settings\SysOp\Dane aplikacji\Mozilla\Extensions
[2009-12-13 21:06:04 | 000,000,000 | ---D | M] (No name found) -- D:\Documents and Settings\SysOp\Dane aplikacji\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2010-11-15 16:37:19 | 000,000,000 | ---D | M] -- D:\Documents and Settings\SysOp\Dane aplikacji\Mozilla\Firefox\Profiles\exlfjnv7.default\extensions
[2010-11-04 20:37:48 | 000,000,000 | ---D | M] (Adblock Plus) -- D:\Documents and Settings\SysOp\Dane aplikacji\Mozilla\Firefox\Profiles\exlfjnv7.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010-10-08 20:01:37 | 000,002,059 | ---- | M] () -- D:\Documents and Settings\SysOp\Dane aplikacji\Mozilla\Firefox\Profiles\exlfjnv7.default\searchplugins\daemon-search.xml
[2010-11-13 22:16:03 | 000,000,000 | ---D | M] -- D:\Program Files\Mozilla Firefox\extensions
[2010-06-13 17:19:18 | 000,000,000 | ---D | M] (Java Console) -- D:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010-06-13 17:19:08 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- D:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2010-09-19 15:34:27 | 000,002,767 | ---- | M] () -- D:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml
[2010-09-19 15:34:27 | 000,001,406 | ---- | M] () -- D:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml
[2010-09-19 15:34:27 | 000,000,917 | ---- | M] () -- D:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml
[2010-09-19 15:34:27 | 000,000,858 | ---- | M] () -- D:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml
[2010-09-19 15:34:27 | 000,001,183 | ---- | M] () -- D:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml
[2010-09-19 15:34:27 | 000,001,683 | ---- | M] () -- D:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2010-06-03 13:37:31 | 000,000,686 | ---- | M]) - D:\WINDOWS\system32\drivers\etc\HOSTS
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - D:\Program Files\HP\Digital Imaging\smart web printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - D:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - D:\Program Files\Norton Internet Security\Engine\18.1.0.37\CoIEPlg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - D:\Program Files\Norton Internet Security\Engine\18.1.0.37\IPSBHO.dll (Symantec Corporation)
O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - D:\Program Files\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - D:\Program Files\Norton Internet Security\Engine\18.1.0.37\CoIEPlg.dll (Symantec Corporation)
O3 - HKU\S-1-5-21-2052111302-1580436667-1801674531-1001\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O3 - HKU\S-1-5-21-2052111302-1580436667-1801674531-1001\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - D:\Program Files\Norton Internet Security\Engine\18.1.0.37\CoIEPlg.dll (Symantec Corporation)
O4 - HKLM..\Run: [NvCplDaemon] D:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [TkBellExe] D:\Program Files\Real\RealPlayer\update\realsched.exe (RealNetworks, Inc.)
O4 - HKU\.DEFAULT..\RunOnce: [_nltide_2]  File not found
O4 - HKU\S-1-5-18..\RunOnce: [_nltide_2]  File not found
O4 - Startup: D:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Ralink Wireless Utility.lnk = D:\Program Files\RALINK\Common\RaUI.exe (Ralink Technology, Corp.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 177
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoInternetOpenWith = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableCAD = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1
O7 - HKU\S-1-5-21-2052111302-1580436667-1801674531-1001\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2052111302-1580436667-1801674531-1001\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-21-2052111302-1580436667-1801674531-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 36
O7 - HKU\S-1-5-21-2052111302-1580436667-1801674531-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1
O7 - HKU\S-1-5-21-2052111302-1580436667-1801674531-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = FF FF FF FF  [binary data]
O7 - HKU\S-1-5-21-2052111302-1580436667-1801674531-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 0
O7 - HKU\S-1-5-21-2052111302-1580436667-1801674531-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O9 - Extra Button: Pokaż lub ukryj HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - D:\Program Files\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - D:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: D:\Documents and Settings\SysOp\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: D:\Documents and Settings\SysOp\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-06-10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2010-06-12 08:56:14 | 000,000,000 | RHSD | M] - C:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2010-06-12 08:56:14 | 000,000,000 | RHSD | M] - D:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2010-06-12 08:56:14 | 000,000,000 | RHSD | M] - E:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2009-09-04 16:44:38 | 000,000,000 | R--D | M] - F:\autorun.inf -- [ NTFS ]
O33 - MountPoints2\{bae3c4d4-81d8-11df-9aca-001f1f0aced6}\Shell\AutoRun\command - "" = I:\Launcher.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2010-11-16 09:10:31 | 000,000,000 | -HSD | C] -- D:\Documents and Settings\SysOp\Recent
[2010-11-13 16:52:17 | 000,000,000 | -HSD | C] -- D:\Documents and Settings\SysOp\PrivacIE
[2010-11-13 16:36:50 | 000,000,000 | -HSD | C] -- D:\Documents and Settings\SysOp\IETldCache
[2010-11-13 14:51:02 | 000,000,000 | ---D | C] -- D:\WINDOWS\ie8updates
[2010-11-13 14:49:05 | 000,000,000 | -H-D | C] -- D:\WINDOWS\ie8
[2010-11-13 14:43:30 | 000,743,424 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\dllcache\iedvtool.dll
[2010-11-12 18:32:57 | 000,043,952 | R--- | C] (Symantec Corporation) -- D:\WINDOWS\System32\drivers\SymIM.sys
[2010-11-12 17:10:18 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Uniblue
[2010-11-12 17:10:13 | 000,000,000 | ---D | C] -- D:\Documents and Settings\SysOp\Dane aplikacji\Uniblue
[2010-11-11 22:01:12 | 000,666,672 | R--- | C] (Symantec Corporation) -- D:\WINDOWS\System32\drivers\NIS\1201000.025\SymEFA.sys
[2010-11-11 22:01:12 | 000,489,008 | R--- | C] (Symantec Corporation) -- D:\WINDOWS\System32\drivers\NIS\1201000.025\srtsp.sys
[2010-11-11 22:01:12 | 000,369,072 | R--- | C] (Symantec Corporation) -- D:\WINDOWS\System32\drivers\NIS\1201000.025\symtdi.sys
[2010-11-11 22:01:12 | 000,339,504 | R--- | C] (Symantec Corporation) -- D:\WINDOWS\System32\drivers\NIS\1201000.025\SymDS.sys
[2010-11-11 22:01:12 | 000,331,312 | R--- | C] (Symantec Corporation) -- D:\WINDOWS\System32\drivers\NIS\1201000.025\symtdiv.sys
[2010-11-11 22:01:12 | 000,294,448 | R--- | C] (Symantec Corporation) -- D:\WINDOWS\System32\drivers\NIS\1201000.025\symnets.sys
[2010-11-11 22:01:12 | 000,134,704 | R--- | C] (Symantec Corporation) -- D:\WINDOWS\System32\drivers\NIS\1201000.025\Ironx86.sys
[2010-11-11 22:01:12 | 000,050,096 | R--- | C] (Symantec Corporation) -- D:\WINDOWS\System32\drivers\NIS\1201000.025\srtspx.sys
[2010-11-11 22:00:52 | 000,000,000 | ---D | C] -- D:\WINDOWS\System32\drivers\NIS
[2010-11-11 22:00:52 | 000,000,000 | ---D | C] -- D:\WINDOWS\System32\drivers\NIS\1201000.025
[2010-11-11 22:00:46 | 000,000,000 | ---D | C] -- D:\Program Files\Norton Internet Security
[2010-11-11 21:57:14 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Dane aplikacji\PCSettings
[2010-11-10 19:24:00 | 000,000,000 | ---D | C] -- D:\Program Files\Common Files\xing shared
[2010-11-10 19:23:52 | 000,199,904 | ---- | C] (RealNetworks, Inc.) -- D:\WINDOWS\System32\rmoc3260.dll
[2010-11-10 19:23:45 | 000,006,656 | ---- | C] (RealNetworks, Inc.) -- D:\WINDOWS\System32\pndx5016.dll
[2010-11-10 19:23:45 | 000,005,632 | ---- | C] (RealNetworks, Inc.) -- D:\WINDOWS\System32\pndx5032.dll
[2010-11-10 19:23:44 | 000,272,896 | ---- | C] (Progressive Networks) -- D:\WINDOWS\System32\pncrt.dll
[2010-11-10 19:23:37 | 000,000,000 | ---D | C] -- D:\Program Files\Real
[2010-11-10 19:23:36 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Dane aplikacji\Real
[2010-11-10 19:23:33 | 000,000,000 | ---D | C] -- D:\Documents and Settings\SysOp\Dane aplikacji\Real
[2010-11-07 18:22:33 | 000,000,000 | ---D | C] -- D:\Documents and Settings\SysOp\Moje dokumenty\{NIS_prod_UPG_1.5.30_18.1.0.37}
[2010-11-03 21:38:58 | 000,000,000 | ---D | C] -- D:\Documents and Settings\SysOp\Dane aplikacji\WinRAR
[2010-11-03 21:37:37 | 000,000,000 | ---D | C] -- D:\Program Files\WinRAR
[2010-11-03 21:29:27 | 000,000,000 | ---D | C] -- D:\Program Files\Easersoft
[2010-11-01 14:10:35 | 000,000,000 | ---D | C] -- D:\Program Files\ffdshow
[2010-10-31 15:29:45 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Dane aplikacji\Innovative Solutions
[2010-10-21 19:25:00 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Dane aplikacji\McAfee
[2009-05-05 21:20:40 | 041,162,008 | ---- | C] (NVIDIA Corporation) -- D:\Program Files\PhysX_9.09.0408_SystemSoftware.exe
[2009-04-30 22:02:00 | 047,228,224 | ---- | C] (NVIDIA Corporation     ) -- D:\Program Files\NvCplSetupInt.exe
[2009-04-30 22:02:00 | 003,873,537 | ---- | C] (NVIDIA Corporation                                             ) -- D:\Program Files\PDsetup.exe
[2009-04-30 22:02:00 | 000,535,552 | ---- | C] (Macrovision Corporation) -- D:\Program Files\ISSetup.dll
[2009-04-30 22:02:00 | 000,457,248 | ---- | C] (NVIDIA Corporation) -- D:\Program Files\nvudisp.exe
[2009-04-30 22:02:00 | 000,324,552 | ---- | C] (Macrovision Corporation) -- D:\Program Files\_setup.dll
[2009-04-30 18:58:44 | 041,168,152 | R--- | C] (NVIDIA Corporation) -- D:\Program Files\PhysX_9.09.0428_SystemSoftware.exe
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2010-11-16 15:00:27 | 006,553,600 | ---- | M] () -- D:\Documents and Settings\SysOp\ntuser.dat
[2010-11-16 15:00:23 | 000,000,286 | ---- | M] () -- D:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-2052111302-1580436667-1801674531-1001.job
[2010-11-16 15:00:23 | 000,000,278 | ---- | M] () -- D:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-2052111302-1580436667-1801674531-1001.job
[2010-11-16 14:46:04 | 000,235,289 | ---- | M] () -- D:\WINDOWS\System32\NvApps.xml
[2010-11-16 14:45:05 | 000,002,048 | --S- | M] () -- D:\WINDOWS\bootstat.dat
[2010-11-16 09:10:35 | 000,000,188 | -HS- | M] () -- D:\Documents and Settings\SysOp\ntuser.ini
[2010-11-15 21:39:41 | 000,000,069 | ---- | M] () -- D:\WINDOWS\NeroDigital.ini
[2010-11-15 21:08:07 | 000,077,824 | ---- | M] () -- D:\Documents and Settings\SysOp\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-11-13 22:14:39 | 000,071,393 | ---- | M] () -- D:\Documents and Settings\SysOp\Moje dokumenty\włącznik elektryczny.jpg
[2010-11-13 21:58:42 | 001,708,539 | ---- | M] () -- D:\Documents and Settings\SysOp\Moje dokumenty\gnazdko elektryczne.pdf
[2010-11-13 14:51:29 | 000,585,048 | ---- | M] () -- D:\WINDOWS\System32\drivers\NIS\1201000.025\Cat.DB
[2010-11-11 22:01:19 | 000,126,512 | ---- | M] (Symantec Corporation) -- D:\WINDOWS\System32\drivers\SYMEVENT.SYS
[2010-11-11 22:01:19 | 000,060,808 | ---- | M] (Symantec Corporation) -- D:\WINDOWS\System32\S32EVNT1.DLL
[2010-11-11 22:01:19 | 000,007,456 | ---- | M] () -- D:\WINDOWS\System32\drivers\SYMEVENT.CAT
[2010-11-11 22:01:19 | 000,000,805 | ---- | M] () -- D:\WINDOWS\System32\drivers\SYMEVENT.INF
[2010-11-11 22:01:14 | 000,001,973 | ---- | M] () -- D:\Documents and Settings\All Users\Pulpit\Norton Internet Security.LNK
[2010-11-11 19:20:01 | 005,018,252 | -H-- | M] () -- D:\Documents and Settings\SysOp\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2010-11-10 19:24:05 | 000,001,601 | ---- | M] () -- D:\Documents and Settings\All Users\Pulpit\Free Offers.lnk
[2010-11-10 19:24:05 | 000,000,929 | ---- | M] () -- D:\Documents and Settings\All Users\Pulpit\RealPlayer.lnk
[2010-11-10 19:23:52 | 000,199,904 | ---- | M] (RealNetworks, Inc.) -- D:\WINDOWS\System32\rmoc3260.dll
[2010-11-10 19:23:45 | 000,006,656 | ---- | M] (RealNetworks, Inc.) -- D:\WINDOWS\System32\pndx5016.dll
[2010-11-10 19:23:45 | 000,005,632 | ---- | M] (RealNetworks, Inc.) -- D:\WINDOWS\System32\pndx5032.dll
[2010-11-10 19:23:44 | 000,272,896 | ---- | M] (Progressive Networks) -- D:\WINDOWS\System32\pncrt.dll
[2010-11-10 10:18:56 | 000,000,006 | -H-- | M] () -- D:\WINDOWS\tasks\SA.DAT
[2010-11-07 09:17:56 | 000,000,002 | ---- | M] () -- D:\WINDOWS\System32\Dvbpws.dll
[2010-11-03 21:29:28 | 000,001,764 | ---- | M] () -- D:\Documents and Settings\All Users\Pulpit\ExtremeCopy.lnk
[2010-11-01 17:37:35 | 000,002,206 | ---- | M] () -- D:\WINDOWS\System32\wpa.dbl
[2010-11-01 16:24:49 | 001,078,760 | ---- | M] () -- D:\WINDOWS\System32\PerfStringBackup.INI
[2010-11-01 16:24:49 | 000,487,912 | ---- | M] () -- D:\WINDOWS\System32\perfh015.dat
[2010-11-01 16:24:49 | 000,429,982 | ---- | M] () -- D:\WINDOWS\System32\perfh009.dat
[2010-11-01 16:24:49 | 000,082,286 | ---- | M] () -- D:\WINDOWS\System32\perfc015.dat
[2010-11-01 16:24:49 | 000,066,178 | ---- | M] () -- D:\WINDOWS\System32\perfc009.dat
[2010-11-01 14:37:35 | 000,000,151 | ---- | M] () -- D:\Documents and Settings\SysOp\default.pls
[2010-11-01 13:31:51 | 000,000,058 | ---- | M] () -- D:\WINDOWS\hcs.dat
[2010-11-01 13:31:26 | 000,000,037 | ---- | M] () -- D:\WINDOWS\hlistHMFAxCore56d706f6725c732df006697fd5ec3381
[2010-10-31 18:48:57 | 000,013,312 | ---- | M] () -- D:\WINDOWS\buninst.exe
[2010-10-28 18:36:13 | 000,245,512 | ---- | M] () -- D:\WINDOWS\System32\FNTCACHE.DAT
[2010-10-18 21:48:08 | 000,000,682 | ---- | M] () -- D:\Documents and Settings\SysOp\Pulpit\CCleaner.lnk
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2010-11-13 22:14:39 | 000,071,393 | ---- | C] () -- D:\Documents and Settings\SysOp\Moje dokumenty\włącznik elektryczny.jpg
[2010-11-13 21:58:42 | 001,708,539 | ---- | C] () -- D:\Documents and Settings\SysOp\Moje dokumenty\gnazdko elektryczne.pdf
[2010-11-11 22:01:30 | 000,585,048 | ---- | C] () -- D:\WINDOWS\System32\drivers\NIS\1201000.025\Cat.DB
[2010-11-11 22:01:14 | 000,001,973 | ---- | C] () -- D:\Documents and Settings\All Users\Pulpit\Norton Internet Security.LNK
[2010-11-11 22:01:03 | 000,003,373 | R--- | C] () -- D:\WINDOWS\System32\drivers\NIS\1201000.025\SymEFA.inf
[2010-11-11 22:01:03 | 000,002,792 | R--- | C] () -- D:\WINDOWS\System32\drivers\NIS\1201000.025\SymDS.inf
[2010-11-11 22:01:03 | 000,001,473 | R--- | C] () -- D:\WINDOWS\System32\drivers\NIS\1201000.025\SymNetV.inf
[2010-11-11 22:01:03 | 000,001,445 | R--- | C] () -- D:\WINDOWS\System32\drivers\NIS\1201000.025\SymNet.inf
[2010-11-11 22:01:03 | 000,001,389 | R--- | C] () -- D:\WINDOWS\System32\drivers\NIS\1201000.025\srtspx.inf
[2010-11-11 22:01:03 | 000,001,383 | R--- | C] () -- D:\WINDOWS\System32\drivers\NIS\1201000.025\srtsp.inf
[2010-11-11 22:01:03 | 000,000,741 | R--- | C] () -- D:\WINDOWS\System32\drivers\NIS\1201000.025\Iron.inf
[2010-11-11 22:00:52 | 000,007,787 | R--- | C] () -- D:\WINDOWS\System32\drivers\NIS\1201000.025\symnetv.cat
[2010-11-11 22:00:52 | 000,007,446 | R--- | C] () -- D:\WINDOWS\System32\drivers\NIS\1201000.025\SymNet.cat
[2010-11-11 22:00:52 | 000,007,444 | R--- | C] () -- D:\WINDOWS\System32\drivers\NIS\1201000.025\SymEFA.cat
[2010-11-11 22:00:52 | 000,007,442 | R--- | C] () -- D:\WINDOWS\System32\drivers\NIS\1201000.025\srtspx.cat
[2010-11-11 22:00:52 | 000,007,438 | R--- | C] () -- D:\WINDOWS\System32\drivers\NIS\1201000.025\SymDS.cat
[2010-11-11 22:00:52 | 000,007,438 | R--- | C] () -- D:\WINDOWS\System32\drivers\NIS\1201000.025\srtsp.cat
[2010-11-11 22:00:52 | 000,007,438 | R--- | C] () -- D:\WINDOWS\System32\drivers\NIS\1201000.025\iron.cat
[2010-11-11 22:00:52 | 000,000,172 | ---- | C] () -- D:\WINDOWS\System32\drivers\NIS\1201000.025\isolate.ini
[2010-11-11 19:20:01 | 005,018,252 | -H-- | C] () -- D:\Documents and Settings\SysOp\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2010-11-10 19:24:22 | 000,000,286 | ---- | C] () -- D:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-2052111302-1580436667-1801674531-1001.job
[2010-11-10 19:24:22 | 000,000,278 | ---- | C] () -- D:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-2052111302-1580436667-1801674531-1001.job
[2010-11-10 19:24:05 | 000,001,601 | ---- | C] () -- D:\Documents and Settings\All Users\Pulpit\Free Offers.lnk
[2010-11-10 19:24:05 | 000,000,929 | ---- | C] () -- D:\Documents and Settings\All Users\Pulpit\RealPlayer.lnk
[2010-11-03 21:29:28 | 000,001,764 | ---- | C] () -- D:\Documents and Settings\All Users\Pulpit\ExtremeCopy.lnk
[2010-11-01 17:48:05 | 000,050,688 | ---- | C] () -- D:\WINDOWS\System32\ff_acm.acm
[2010-11-01 14:10:36 | 000,085,504 | ---- | C] () -- D:\WINDOWS\System32\ff_vfw.dll
[2010-11-01 14:10:36 | 000,000,547 | ---- | C] () -- D:\WINDOWS\System32\ff_vfw.dll.manifest
[2010-10-31 21:19:47 | 000,000,002 | ---- | C] () -- D:\WINDOWS\System32\Dvbpws.dll
[2010-10-31 18:48:57 | 000,013,312 | ---- | C] () -- D:\WINDOWS\buninst.exe
[2010-10-09 12:37:04 | 000,986,264 | ---- | C] () -- D:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat
[2010-08-23 20:17:34 | 000,697,328 | ---- | C] () -- D:\WINDOWS\System32\drivers\sptd.sys
[2010-08-22 18:05:07 | 000,002,782 | ---- | C] () -- D:\Documents and Settings\All Users\Dane aplikacji\LUUnInstall.LiveUpdate
[2010-08-07 22:08:02 | 000,005,810 | ---- | C] () -- D:\WINDOWS\System32\drivers\ASACPI.sys
[2010-06-02 20:00:06 | 000,000,048 | ---- | C] () -- D:\WINDOWS\wininit.ini
[2010-03-22 18:04:30 | 000,015,872 | ---- | C] () -- D:\WINDOWS\System32\drivers\HMFAxCore56d706f6725c732df006697fd5ec3381.sys
[2010-03-06 23:59:56 | 000,000,754 | ---- | C] () -- D:\WINDOWS\WORDPAD.INI
[2010-03-04 22:40:01 | 000,000,391 | ---- | C] () -- D:\WINDOWS\COVERE~1.INI
[2010-03-03 18:59:42 | 000,000,069 | ---- | C] () -- D:\WINDOWS\NeroDigital.ini
[2010-01-27 20:07:59 | 000,008,117 | ---- | C] () -- D:\Documents and Settings\All Users\Dane aplikacji\hpzinstall.log
[2009-12-13 13:55:18 | 000,077,824 | ---- | C] () -- D:\Documents and Settings\SysOp\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009-12-12 19:23:29 | 000,060,304 | ---- | C] () -- D:\Documents and Settings\SysOp\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
[2009-12-12 19:00:30 | 001,078,760 | ---- | C] () -- D:\WINDOWS\System32\PerfStringBackup.INI
[2009-12-12 19:00:29 | 000,004,293 | ---- | C] () -- D:\WINDOWS\ODBCINST.INI
[2009-12-12 19:00:09 | 000,000,062 | -HS- | C] () -- D:\Documents and Settings\All Users\Dane aplikacji\desktop.ini
[2009-12-12 18:39:25 | 000,295,018 | ---- | C] () -- D:\WINDOWS\System32\Install7x.dll
[2009-12-12 18:08:47 | 000,000,062 | -HS- | C] () -- D:\Documents and Settings\SysOp\Dane aplikacji\desktop.ini
[2009-12-12 18:07:03 | 000,000,000 | ---- | C] () -- D:\WINDOWS\control.ini
[2009-12-12 18:04:53 | 000,000,037 | ---- | C] () -- D:\WINDOWS\vbaddin.ini
[2009-12-12 18:04:53 | 000,000,036 | ---- | C] () -- D:\WINDOWS\vb.ini
[2009-12-12 18:04:01 | 000,026,717 | ---- | C] () -- D:\WINDOWS\System32\tslabels.ini
[2009-12-12 18:04:00 | 000,003,813 | ---- | C] () -- D:\WINDOWS\System32\msdtcprf.ini
[2009-06-01 17:09:22 | 001,724,416 | ---- | C] () -- D:\WINDOWS\System32\nvwdmcpl.dll
[2009-06-01 17:09:22 | 001,507,328 | ---- | C] () -- D:\WINDOWS\System32\nview.dll
[2009-06-01 17:09:22 | 001,101,824 | ---- | C] () -- D:\WINDOWS\System32\nvwimg.dll
[2009-06-01 17:09:22 | 000,466,944 | ---- | C] () -- D:\WINDOWS\System32\nvshell.dll
[2009-05-06 01:45:34 | 000,037,889 | ---- | C] () -- D:\Program Files\nv4_disp.cat
[2009-04-30 22:02:00 | 005,479,782 | ---- | C] () -- D:\Program Files\data1.cab
[2009-04-30 22:02:00 | 004,692,444 | ---- | C] () -- D:\Program Files\nvoglnt.dl_
[2009-04-30 22:02:00 | 004,031,909 | ---- | C] () -- D:\Program Files\nv4_mini.sy_
[2009-04-30 22:02:00 | 003,426,924 | ---- | C] () -- D:\Program Files\nv4_disp.dl_
[2009-04-30 22:02:00 | 001,069,141 | ---- | C] () -- D:\Program Files\nvcuda.dl_
[2009-04-30 22:02:00 | 000,977,932 | ---- | C] () -- D:\Program Files\NVDATA.BI_
[2009-04-30 22:02:00 | 000,581,734 | ---- | C] () -- D:\Program Files\nvcuvenc.dl_
[2009-04-30 22:02:00 | 000,378,757 | ---- | C] () -- D:\Program Files\nvapi.dl_
[2009-04-30 22:02:00 | 000,368,197 | ---- | C] () -- D:\Program Files\setup.inx
[2009-04-30 22:02:00 | 000,280,983 | ---- | C] () -- D:\Program Files\nvcuvid.dl_
[2009-04-30 22:02:00 | 000,176,756 | ---- | C] () -- D:\Program Files\setup.bmp
[2009-04-30 22:02:00 | 000,079,578 | ---- | C] () -- D:\Program Files\nv4_disp.inf
[2009-04-30 22:02:00 | 000,077,185 | ---- | C] () -- D:\Program Files\nvcod.dl_
[2009-04-30 22:02:00 | 000,076,009 | ---- | C] () -- D:\Program Files\setup.isn
[2009-04-30 22:02:00 | 000,034,077 | ---- | C] () -- D:\Program Files\data1.hdr
[2009-04-30 22:02:00 | 000,019,731 | ---- | C] () -- D:\Program Files\modes.txt
[2009-04-30 22:02:00 | 000,019,207 | ---- | C] () -- D:\Program Files\nvdisp.nvu
[2009-04-30 22:02:00 | 000,003,593 | ---- | C] () -- D:\Program Files\Readme.txt
[2009-04-30 22:02:00 | 000,000,861 | ---- | C] () -- D:\Program Files\setup.ini
[2009-04-30 22:02:00 | 000,000,512 | ---- | C] () -- D:\Program Files\data2.cab
[2009-04-30 22:02:00 | 000,000,509 | ---- | C] () -- D:\Program Files\layout.bin
[2009-04-30 22:02:00 | 000,000,431 | ---- | C] () -- D:\Program Files\setup.iss
[2009-04-30 22:02:00 | 000,000,087 | ---- | C] () -- D:\Program Files\nvuninst.ba_
[2008-12-31 17:58:02 | 000,253,440 | ---- | C] () -- D:\WINDOWS\System32\compatui.dll
[2008-10-07 09:13:30 | 000,197,912 | ---- | C] () -- D:\WINDOWS\System32\physxcudart_20.dll
[2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- D:\WINDOWS\System32\AgCPanelSwedish.dll
[2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- D:\WINDOWS\System32\AgCPanelSpanish.dll
[2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- D:\WINDOWS\System32\AgCPanelPortugese.dll
[2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- D:\WINDOWS\System32\AgCPanelGerman.dll
[2008-10-07 09:13:20 | 000,058,648 | ---- | C] () -- D:\WINDOWS\System32\AgCPanelFrench.dll
[2008-04-14 20:50:46 | 000,270,848 | ---- | C] () -- D:\WINDOWS\System32\sbe.dll
[2008-04-14 20:50:38 | 000,014,336 | ---- | C] () -- D:\WINDOWS\System32\msdmo.dll
[2008-04-14 20:50:32 | 000,186,880 | ---- | C] () -- D:\WINDOWS\System32\encdec.dll
[2008-04-14 20:50:00 | 000,070,656 | ---- | C] () -- D:\WINDOWS\System32\amstream.dll
[2008-04-13 20:51:34 | 000,733,696 | ---- | C] () -- D:\WINDOWS\System32\qedwipes.dll
[2008-04-13 20:20:56 | 000,042,537 | ---- | C] () -- D:\WINDOWS\System32\keyboard.sys
[2008-04-13 20:19:58 | 000,033,936 | ---- | C] () -- D:\WINDOWS\System32\ntio.sys
[2008-04-13 20:19:44 | 000,035,424 | ---- | C] () -- D:\WINDOWS\System32\ntio412.sys
[2008-04-13 20:19:44 | 000,034,560 | ---- | C] () -- D:\WINDOWS\System32\ntio404.sys
[2008-04-13 20:19:42 | 000,034,560 | ---- | C] () -- D:\WINDOWS\System32\ntio804.sys
[2008-04-13 20:19:40 | 000,035,648 | ---- | C] () -- D:\WINDOWS\System32\ntio411.sys
[2007-04-02 21:04:28 | 000,053,478 | ---- | C] () -- D:\WINDOWS\System32\tcpmon.ini
[2001-10-26 19:29:40 | 000,010,240 | ---- | C] () -- D:\WINDOWS\System32\scriptpw.dll
[2001-10-26 19:29:32 | 000,199,168 | ---- | C] () -- D:\WINDOWS\System32\ir32_32.dll
[2001-10-26 19:28:34 | 000,094,282 | ---- | C] () -- D:\WINDOWS\System32\msencode.dll
[2001-10-26 19:27:02 | 000,015,360 | ---- | C] () -- D:\WINDOWS\System32\tsd32.dll
[2001-10-26 18:15:04 | 000,027,898 | ---- | C] () -- D:\WINDOWS\System32\ntdos.sys
[2001-10-26 18:14:52 | 000,004,976 | ---- | C] () -- D:\WINDOWS\System32\himem.sys
[2001-10-26 18:14:32 | 000,009,043 | ---- | C] () -- D:\WINDOWS\System32\ansi.sys
[2001-10-26 18:12:52 | 000,000,359 | ---- | C] () -- D:\WINDOWS\System32\prodspec.ini
[2001-10-26 17:45:26 | 000,016,024 | ---- | C] () -- D:\WINDOWS\System32\rsvp.ini
[2001-10-26 17:45:26 | 000,006,074 | ---- | C] () -- D:\WINDOWS\System32\rasctrs.ini
[2001-10-26 17:45:24 | 000,013,819 | ---- | C] () -- D:\WINDOWS\System32\pschdprf.ini
[2001-10-26 17:42:08 | 000,020,629 | ---- | C] () -- D:\WINDOWS\System32\mqperf.ini
[2001-10-26 17:29:42 | 000,157,696 | ---- | C] () -- D:\WINDOWS\System32\paqsp.dll
[2001-08-17 23:31:56 | 000,042,809 | ---- | C] () -- D:\WINDOWS\System32\key01.sys
[2001-08-17 23:31:56 | 000,027,097 | ---- | C] () -- D:\WINDOWS\System32\country.sys
[2001-08-17 23:31:50 | 000,029,274 | ---- | C] () -- D:\WINDOWS\System32\ntdos412.sys
[2001-08-17 23:31:46 | 000,029,370 | ---- | C] () -- D:\WINDOWS\System32\ntdos411.sys
[2001-08-17 23:31:46 | 000,029,146 | ---- | C] () -- D:\WINDOWS\System32\ntdos404.sys
[2001-08-17 23:31:44 | 000,029,146 | ---- | C] () -- D:\WINDOWS\System32\ntdos804.sys
[2001-08-17 23:13:24 | 000,002,656 | ---- | C] () -- D:\WINDOWS\System32\netware.drv
[2001-08-17 21:55:06 | 001,015,477 | ---- | C] () -- D:\WINDOWS\System32\esentprf.ini
[2001-07-22 04:25:18 | 000,001,405 | ---- | C] () -- D:\WINDOWS\msdfmap.ini
[2001-07-22 00:36:06 | 000,355,112 | ---- | C] () -- D:\WINDOWS\System32\msjetoledb40.dll
[2001-07-22 00:16:20 | 000,000,542 | ---- | C] () -- D:\WINDOWS\win.ini
[2001-07-22 00:15:52 | 000,000,246 | ---- | C] () -- D:\WINDOWS\system.ini
[2001-07-22 00:15:50 | 000,013,312 | ---- | C] () -- D:\WINDOWS\System32\win87em.dll
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2010-10-08 20:59:56 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\Autodesk
[2010-10-03 18:55:42 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\Canneverbe Limited
[2010-10-08 20:01:14 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite
[2010-10-31 15:29:45 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\Innovative Solutions
[2009-12-25 12:16:54 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\Installations
[2010-03-03 18:04:55 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\LightScribe
[2009-12-25 12:23:17 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\PC Suite
[2010-11-11 21:57:14 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\PCSettings
[2010-04-14 15:12:01 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\TEMP
[2009-12-12 18:56:07 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\Ulead Systems
[2010-10-09 12:34:02 | 000,000,000 | ---D | M] -- D:\Documents and Settings\SysOp\Dane aplikacji\Autodesk
[2010-11-16 15:01:52 | 000,000,000 | ---D | M] -- D:\Documents and Settings\SysOp\Dane aplikacji\BitTorrent
[2010-03-20 21:52:22 | 000,000,000 | ---D | M] -- D:\Documents and Settings\SysOp\Dane aplikacji\Canneverbe Limited
[2010-10-08 20:03:34 | 000,000,000 | ---D | M] -- D:\Documents and Settings\SysOp\Dane aplikacji\DAEMON Tools Lite
[2010-05-30 18:02:59 | 000,000,000 | ---D | M] -- D:\Documents and Settings\SysOp\Dane aplikacji\EFSoftware
[2010-04-20 19:13:06 | 000,000,000 | ---D | M] -- D:\Documents and Settings\SysOp\Dane aplikacji\GHISLER
[2010-10-31 15:54:23 | 000,000,000 | ---D | M] -- D:\Documents and Settings\SysOp\Dane aplikacji\ImgBurn
[2010-07-04 13:49:45 | 000,000,000 | ---D | M] -- D:\Documents and Settings\SysOp\Dane aplikacji\Light StartUp
[2009-12-25 12:33:39 | 000,000,000 | ---D | M] -- D:\Documents and Settings\SysOp\Dane aplikacji\Nokia
[2010-08-22 21:09:10 | 000,000,000 | ---D | M] -- D:\Documents and Settings\SysOp\Dane aplikacji\OpenCandy
[2009-12-25 12:23:28 | 000,000,000 | ---D | M] -- D:\Documents and Settings\SysOp\Dane aplikacji\PC Suite
[2009-12-13 21:06:03 | 000,000,000 | ---D | M] -- D:\Documents and Settings\SysOp\Dane aplikacji\Thunderbird
[2009-12-14 16:35:19 | 000,000,000 | ---D | M] -- D:\Documents and Settings\SysOp\Dane aplikacji\Tific
[2010-11-12 17:10:13 | 000,000,000 | ---D | M] -- D:\Documents and Settings\SysOp\Dane aplikacji\Uniblue
[2009-12-23 21:28:38 | 000,000,000 | ---D | M] -- D:\Documents and Settings\TEMP\Dane aplikacji\Thunderbird
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Files - Unicode (All) ==========[/color]
[2010-03-04 22:45:08 | 000,000,000 | ---D | M](D:\Documents and Settings\SysOp\Dane aplikacji\???????sAppData) -- D:\Documents and Settings\SysOp\Dane aplikacji\敎潲䍄敔灭慬整sAppData
[2010-03-04 22:45:08 | 000,000,000 | ---D | M](D:\Documents and Settings\SysOp\Dane aplikacji\???????sAppData) -- D:\Documents and Settings\SysOp\Dane aplikacji\敎潲䍄敔灭慬整sAppData
(D:\Documents and Settings\SysOp\Dane aplikacji\???????sAppData) -- D:\Documents and Settings\SysOp\Dane aplikacji\敎潲䍄敔灭慬整sAppData
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 100 bytes -> D:\Documents and Settings\All Users\Dane aplikacji\TEMP:C31F31E6

< End of report >