OTL logfile created on: 2012-07-31 22:08:55 - Run 1
OTL by OldTimer - Version 3.2.55.0     Folder = C:\Users\oem\Downloads
Windows Vista Home Basic Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6001.18000)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
2,00 Gb Total Physical Memory | 0,86 Gb Available Physical Memory | 43,19% Memory free
2,53 Gb Paging File | 0,98 Gb Available in Paging File | 38,65% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 78,12 Gb Total Space | 1,21 Gb Free Space | 1,55% Space Free | Partition Type: NTFS
Drive D: | 154,76 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: NTFS
 
Computer Name: OEM-PC | User Name: oem | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-07-31 22:06:20 | 000,597,504 | ---- | M] (OldTimer Tools) -- C:\Users\oem\Downloads\OTL.com
PRC - [2012-06-17 19:35:51 | 000,913,888 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2012-01-03 15:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2011-12-09 19:22:26 | 000,074,752 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\Winamp\winampa.exe
PRC - [2011-10-01 09:30:42 | 000,219,496 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
PRC - [2011-10-01 09:30:36 | 000,508,776 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
PRC - [2011-07-29 12:31:22 | 017,361,032 | R--- | M] (Skype Technologies S.A.) -- C:\Program Files\Phone\Skype.exe
PRC - [2011-07-06 09:33:58 | 005,264,384 | ---- | M] () -- C:\Program Files\VodBurner\vodburner.exe
PRC - [2011-01-17 19:50:30 | 011,322,880 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.exe
PRC - [2011-01-17 19:50:30 | 011,314,688 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.bin
PRC - [2010-11-16 04:05:58 | 002,452,992 | ---- | M] (HDSoft) -- C:\Program Files\iFree Skype Recorder\irecorder.exe
PRC - [2009-12-15 12:20:48 | 000,081,920 | R--- | M] (Microsoft) -- C:\Program Files\Pc Camera\3288.exe
PRC - [2009-01-08 12:04:57 | 000,581,632 | ---- | M] (THOMSON Telecom Belgium) -- C:\Program Files\Thomson\ST330\service\st330service.exe
PRC - [2009-01-08 12:04:37 | 000,557,149 | ---- | M] (THOMSON Telecom Belgium) -- C:\Program Files\Thomson\ST330\diagnostics\diagnostics.exe
PRC - [2008-10-29 08:29:41 | 002,927,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2008-09-09 18:32:00 | 006,281,760 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe
PRC - [2008-06-25 17:28:24 | 000,174,688 | ---- | M] (F-Secure Corporation) -- C:\Program Files\F-Secure Internet Security\FSAUA\program\fsus.exe
PRC - [2008-06-25 15:43:10 | 000,055,904 | ---- | M] (F-Secure Corporation) -- C:\Program Files\F-Secure Internet Security\ORSP Client\fsorsp.exe
PRC - [2008-06-25 15:42:56 | 000,686,688 | ---- | M] (F-Secure Corporation) -- C:\Program Files\F-Secure Internet Security\FSPC\fspc.exe
PRC - [2008-06-25 15:42:50 | 000,232,088 | ---- | M] (F-Secure Corporation) -- C:\Program Files\F-Secure Internet Security\Common\FSMB32.EXE
PRC - [2008-06-25 15:42:48 | 000,404,064 | ---- | M] (F-Secure Corporation) -- C:\Program Files\F-Secure Internet Security\Common\FAMEH32.EXE
PRC - [2008-06-25 15:42:48 | 000,182,936 | ---- | M] (F-Secure Corporation) -- C:\Program Files\F-Secure Internet Security\Common\FSM32.EXE
PRC - [2008-06-25 15:42:48 | 000,125,592 | ---- | M] (F-Secure Corporation) -- C:\Program Files\F-Secure Internet Security\Common\FCH32.EXE
PRC - [2008-06-25 15:42:48 | 000,117,400 | ---- | M] (F-Secure Corporation) -- C:\Program Files\F-Secure Internet Security\Common\FSMA32.EXE
PRC - [2008-06-25 15:42:32 | 000,604,768 | ---- | M] (F-Secure Corporation) -- C:\Program Files\F-Secure Internet Security\FSGUI\fsguidll.exe
PRC - [2008-06-25 15:41:54 | 000,510,560 | ---- | M] (F-Secure Corporation) -- C:\Program Files\F-Secure Internet Security\FWES\program\fsdfwd.exe
PRC - [2008-06-25 15:41:34 | 000,512,096 | ---- | M] (F-Secure Corp.) -- C:\Program Files\F-Secure Internet Security\Anti-Virus\fssm32.exe
PRC - [2008-06-25 15:41:34 | 000,425,568 | ---- | M] (F-Secure Corp.) -- C:\Program Files\F-Secure Internet Security\Anti-Virus\fsgk32.exe
PRC - [2008-06-25 15:41:34 | 000,215,648 | ---- | M] (F-Secure Corporation) -- C:\Program Files\F-Secure Internet Security\Anti-Virus\fsgk32st.exe
PRC - [2008-06-25 15:41:34 | 000,043,680 | ---- | M] (F-Secure Corporation) -- C:\Program Files\F-Secure Internet Security\Anti-Virus\fsqh.exe
PRC - [2008-06-25 15:41:32 | 000,344,160 | ---- | M] (F-Secure Corporation) -- C:\Program Files\F-Secure Internet Security\Anti-Virus\fsav32.exe
PRC - [2008-06-25 15:41:04 | 000,490,080 | ---- | M] (F-Secure Corporation) -- C:\Program Files\F-Secure Internet Security\FSAUA\program\fsaua.exe
PRC - [2008-02-28 17:07:58 | 001,828,136 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
PRC - [2008-02-18 16:29:02 | 002,221,352 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe
PRC - [2008-01-21 04:33:52 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conime.exe
PRC - [2008-01-21 04:33:00 | 001,008,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\MSASCui.exe
PRC - [2007-07-19 15:40:45 | 001,224,704 | ---- | M] (Cafe News sp. z o.o.  www.cafenews.pl, Multimedia Cafe www.mmcafe.pl) -- C:\Program Files\CafeNews\CN.exe
PRC - [2007-03-21 18:50:00 | 000,163,840 | ---- | M] (Syntek Ltd.) -- C:\Windows\STK02N\STK02NM.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2012-07-29 18:12:46 | 000,279,464 | ---- | M] () -- C:\Users\oem\AppData\Local\Temp\g7i0ol_kaz.exe
MOD - [2012-06-17 19:35:50 | 002,042,848 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2011-10-13 20:54:57 | 000,985,088 | ---- | M] () -- C:\Program Files\OpenOffice.org 3\program\libxml2.dll
MOD - [2011-07-06 09:37:10 | 000,040,960 | ---- | M] () -- C:\Program Files\VodBurner\vbintel.dll
MOD - [2011-07-06 09:35:22 | 000,702,976 | ---- | M] () -- C:\Program Files\VodBurner\SLHook.dll
MOD - [2011-07-06 09:33:58 | 005,264,384 | ---- | M] () -- C:\Program Files\VodBurner\vodburner.exe
MOD - [2009-09-09 06:07:58 | 000,399,872 | ---- | M] () -- C:\Program Files\iFree Skype Recorder\lame_enc.dll
MOD - [2009-02-27 15:34:12 | 000,029,696 | ---- | M] () -- C:\Program Files\VodBurner\sl_wmf.dll
MOD - [2009-01-08 12:04:44 | 000,364,544 | ---- | M] () -- C:\Program Files\Thomson\ST330\diagnostics\qwt.dll
MOD - [2009-01-08 12:04:43 | 004,222,976 | ---- | M] () -- C:\Program Files\Thomson\ST330\diagnostics\qt-mt332.dll
MOD - [2008-06-25 15:42:56 | 000,001,536 | ---- | M] () -- C:\Program Files\F-Secure Internet Security\FSPC\fspcfsm.eng
MOD - [2008-06-25 15:42:36 | 000,077,824 | ---- | M] () -- C:\Program Files\F-Secure Internet Security\FSGUI\strres.eng
MOD - [2008-06-25 15:42:34 | 000,174,688 | ---- | M] () -- C:\Program Files\F-Secure Internet Security\FSGUI\gres.dll
MOD - [2008-06-25 15:42:30 | 000,155,648 | ---- | M] () -- C:\Program Files\F-Secure Internet Security\FSGUI\flyerres.eng
MOD - [2008-06-25 15:42:28 | 000,825,952 | ---- | M] () -- C:\Program Files\F-Secure Internet Security\FSGUI\about.dll
MOD - [2008-06-25 15:42:28 | 000,195,168 | ---- | M] () -- C:\Program Files\F-Secure Internet Security\FSGUI\aboutres.dll
MOD - [2007-08-14 12:59:54 | 006,365,184 | ---- | M] () -- C:\Program Files\Common Files\LightScribe\QtGui4.dll
MOD - [2007-07-12 12:55:52 | 000,131,072 | ---- | M] () -- C:\Program Files\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll
MOD - [2007-07-12 12:55:28 | 001,581,056 | ---- | M] () -- C:\Program Files\Common Files\LightScribe\QtCore4.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - [2012-06-17 19:35:50 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012-01-03 15:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011-10-01 09:30:42 | 000,219,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
SRV - [2011-10-01 09:30:36 | 000,508,776 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
SRV - [2009-01-08 12:04:57 | 000,581,632 | ---- | M] () [Auto | Running] -- C:\Program Files/Thomson/ST330/service/st330service.exe -- (st330service)
SRV - [2008-06-25 15:43:10 | 000,055,904 | ---- | M] (F-Secure Corporation) [On_Demand | Running] -- C:\Program Files\F-Secure Internet Security\ORSP Client\fsorsp.exe -- (FSORSPClient)
SRV - [2008-06-25 15:42:48 | 000,117,400 | ---- | M] (F-Secure Corporation) [Auto | Running] -- C:\Program Files\F-Secure Internet Security\Common\FSMA32.EXE -- (FSMA)
SRV - [2008-06-25 15:41:54 | 000,510,560 | ---- | M] (F-Secure Corporation) [On_Demand | Running] -- C:\Program Files\F-Secure Internet Security\FWES\program\fsdfwd.exe -- (FSDFWD)
SRV - [2008-06-25 15:41:34 | 000,215,648 | ---- | M] (F-Secure Corporation) [Auto | Running] -- C:\Program Files\F-Secure Internet Security\Anti-Virus\fsgk32st.exe -- (F-Secure Gatekeeper Handler Starter)
SRV - [2008-06-25 15:41:04 | 000,490,080 | ---- | M] (F-Secure Corporation) [On_Demand | Running] -- C:\Program Files\F-Secure Internet Security\FSAUA\program\fsaua.exe -- (FSAUA)
SRV - [2008-01-21 04:33:00 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - [2011-10-01 09:30:42 | 000,019,304 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Sftvollh.sys -- (Sftvol)
DRV - [2011-10-01 09:30:40 | 000,021,864 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\Sftredirlh.sys -- (Sftredir)
DRV - [2011-10-01 09:30:38 | 000,194,408 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Sftplaylh.sys -- (Sftplay)
DRV - [2011-10-01 09:30:36 | 000,579,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Sftfslh.sys -- (Sftfs)
DRV - [2010-03-02 07:45:36 | 000,030,976 | R--- | M] (usb camera) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbcamcl.sys -- (usbcamcl)
DRV - [2009-01-08 12:04:48 | 000,032,000 | ---- | M] (THOMSON Telecom Belgium) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\stppp.sys -- (stppp)
DRV - [2009-01-07 00:22:49 | 000,040,320 | ---- | M] (THOMSON Telecom Belgium) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\steth.sys -- (STETH)
DRV - [2008-09-17 09:55:00 | 007,379,872 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2008-08-06 16:26:08 | 000,124,928 | ---- | M] (Realtek Corporation                                            ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)
DRV - [2008-06-25 15:42:40 | 000,066,720 | ---- | M] (F-Secure Corporation) [Kernel | System | Running] -- C:\Program Files\F-Secure Internet Security\HIPS\drivers\fshs.sys -- (F-Secure HIPS)
DRV - [2008-06-25 15:41:54 | 000,070,944 | ---- | M] (F-Secure Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\fsdfw.sys -- (FSFW)
DRV - [2008-06-25 15:41:48 | 000,035,552 | ---- | M] (F-Secure Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\fses.sys -- (FSES)
DRV - [2008-06-25 15:41:36 | 000,039,776 | ---- | M] () [Kernel | Disabled | Stopped] -- C:\Program Files\F-Secure Internet Security\Anti-Virus\win2k\fsfilter.sys -- (F-Secure Filter)
DRV - [2008-06-25 15:41:36 | 000,025,184 | ---- | M] () [Kernel | Disabled | Stopped] -- C:\Program Files\F-Secure Internet Security\Anti-Virus\win2k\fsrec.sys -- (F-Secure Recognizer)
DRV - [2008-06-25 15:41:34 | 000,072,288 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Program Files\F-Secure Internet Security\Anti-Virus\minifilter\fsgk.sys -- (F-Secure Gatekeeper)
DRV - [2008-06-25 15:41:34 | 000,012,384 | ---- | M] () [Kernel | System | Running] -- C:\Program Files\F-Secure Internet Security\Anti-Virus\minifilter\fsvista.sys -- (fsvista)
DRV - [2008-04-28 15:26:42 | 000,014,352 | ---- | M] (ATI Technologies Inc.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\AtiPcie.sys -- (AtiPcie)
DRV - [2007-10-12 03:40:14 | 000,010,632 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\amdide.sys -- (amdide)
DRV - [2007-03-19 20:58:00 | 000,030,464 | ---- | M] (THOMSON Telecom Belgium) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\st330.sys -- (ST330)
DRV - [2007-03-19 20:58:00 | 000,012,672 | ---- | M] (THOMSON Telecom Belgium) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\stbus.sys -- (STBUS)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = c:/oem/podziekowania/podziekowania.html
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\..\URLSearchHook: {5c5b9468-d672-4eb7-b52f-b5afabf28c5b} - C:\Program Files\SFT_Polska\prxtbSFT_.dll (Conduit Ltd.)
IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3031817
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-1135872359-3151058387-967142895-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = c:/oem/podziekowania/podziekowania.html
IE - HKU\S-1-5-21-1135872359-3151058387-967142895-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
IE - HKU\S-1-5-21-1135872359-3151058387-967142895-1001\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 2
IE - HKU\S-1-5-21-1135872359-3151058387-967142895-1001\..\URLSearchHook: {5c5b9468-d672-4eb7-b52f-b5afabf28c5b} - C:\Program Files\SFT_Polska\prxtbSFT_.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-1135872359-3151058387-967142895-1001\..\URLSearchHook: {CA3EB689-8F09-4026-AA10-B9534C691CE0} - C:\Program Files\Hyperionics DB Toolbar\tbhelper.dll ()
IE - HKU\S-1-5-21-1135872359-3151058387-967142895-1001\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKU\S-1-5-21-1135872359-3151058387-967142895-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKU\S-1-5-21-1135872359-3151058387-967142895-1001\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7ADFA_plPL439
IE - HKU\S-1-5-21-1135872359-3151058387-967142895-1001\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3031817
IE - HKU\S-1-5-21-1135872359-3151058387-967142895-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..network.proxy.type: 0
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-06-17 19:35:51 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-04-29 12:12:00 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-06-17 19:35:51 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-04-29 12:12:00 | 000,000,000 | ---D | M]
 
[2011-10-18 18:11:41 | 000,000,000 | ---D | M] (No name found) -- C:\Users\oem\AppData\Roaming\mozilla\Extensions
[2012-06-27 11:17:20 | 000,000,000 | ---D | M] (No name found) -- C:\Users\oem\AppData\Roaming\mozilla\Firefox\Profiles\wymv4ecn.default\extensions
[2012-03-19 13:20:20 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012-06-17 19:35:51 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011-12-09 19:23:32 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll
[2012-02-13 15:11:42 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2012-02-13 15:11:42 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2012-02-13 15:11:42 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2012-02-13 15:11:42 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2012-02-13 15:11:42 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2012-02-13 15:11:42 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2006-09-18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O2 - BHO: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (SFT_Polska Toolbar) - {5c5b9468-d672-4eb7-b52f-b5afabf28c5b} - C:\Program Files\SFT_Polska\prxtbSFT_.dll (Conduit Ltd.)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - No CLSID value found.
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll (Google Inc.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Windows Live Toolbar Helper) - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll (Microsoft Corporation)
O2 - BHO: (SMTTB2009 Class) - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files\Hyperionics DB Toolbar\tbcore3.dll ()
O3 - HKLM\..\Toolbar: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Hyperionics DB Toolbar) - {338B4DFE-2E2C-4338-9E41-E176D497299E} - C:\Program Files\Hyperionics DB Toolbar\tbcore3.dll ()
O3 - HKLM\..\Toolbar: (SFT_Polska Toolbar) - {5c5b9468-d672-4eb7-b52f-b5afabf28c5b} - C:\Program Files\SFT_Polska\prxtbSFT_.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Windows Live Toolbar) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll (Microsoft Corporation)
O3 - HKU\S-1-5-21-1135872359-3151058387-967142895-1001\..\Toolbar\WebBrowser: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-1135872359-3151058387-967142895-1001\..\Toolbar\WebBrowser: (Hyperionics DB Toolbar) - {338B4DFE-2E2C-4338-9E41-E176D497299E} - C:\Program Files\Hyperionics DB Toolbar\tbcore3.dll ()
O3 - HKU\S-1-5-21-1135872359-3151058387-967142895-1001\..\Toolbar\WebBrowser: (SFT_Polska Toolbar) - {5C5B9468-D672-4EB7-B52F-B5AFABF28C5B} - C:\Program Files\SFT_Polska\prxtbSFT_.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-1135872359-3151058387-967142895-1001\..\Toolbar\WebBrowser: (Windows Live Toolbar) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll (Microsoft Corporation)
O4 - HKLM..\Run: [3288] C:\Program Files\Pc Camera\3288.exe (Microsoft)
O4 - HKLM..\Run: [BCSSync] C:\Program Files\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation)
O4 - HKLM..\Run: [CafeNews] C:\Program Files\CafeNews\CN.exe (Cafe News sp. z o.o.  www.cafenews.pl, Multimedia Cafe www.mmcafe.pl)
O4 - HKLM..\Run: [diagnostics] C:\Program Files\Thomson\ST330\diagnostics\diagnostics.exe (THOMSON Telecom Belgium)
O4 - HKLM..\Run: [F-Secure Manager] C:\Program Files\F-Secure Internet Security\Common\FSM32.EXE (F-Secure Corporation)
O4 - HKLM..\Run: [F-Secure TNB] C:\Program Files\F-Secure Internet Security\FSGUI\TNBUtil.exe (F-Secure Corporation)
O4 - HKLM..\Run: [NBKeyScan] C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe (Nero AG)
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe (Nullsoft, Inc.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-1135872359-3151058387-967142895-1001..\Run: [AppVodBurner] C:\Program Files\VodBurner\vodburner.exe ()
O4 - HKU\S-1-5-21-1135872359-3151058387-967142895-1001..\Run: [avichannel] "C:\Program Files\Evaer\videochannel.exe" File not found
O4 - HKU\S-1-5-21-1135872359-3151058387-967142895-1001..\Run: [HDSoft] C:\Program Files\iFree Skype Recorder\irecorder.exe (HDSoft)
O4 - HKU\S-1-5-21-1135872359-3151058387-967142895-1001..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe (Nero AG)
O4 - HKU\S-1-5-21-1135872359-3151058387-967142895-1001..\Run: [Skype] C:\Program Files\Phone\Skype.exe (Skype Technologies S.A.)
O4 - HKU\S-1-5-21-1135872359-3151058387-967142895-1001..\Run: [supertintin_skype] C:\Program Files\Supertintin for Skype\supertintin_skype.exe (Imtiger Software Inc.)
O4 - HKU\S-1-5-21-1135872359-3151058387-967142895-1001..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - Startup: C:\Users\oem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
O7 - HKU\S-1-5-21-1135872359-3151058387-967142895-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 95 00 00 00  [binary data]
O8 - Extra context menu item: &Windows Live Search - C:\Program Files\Windows Live Toolbar\msntb.dll (Microsoft Corporation)
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Wyślij &do programu OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Kontrola rodzicielska... - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll (F-Secure Corporation)
O9 - Extra 'Tools' menuitem : Kontrola rodzicielska... - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll (F-Secure Corporation)
O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\F-Secure Internet Security\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\F-Secure Internet Security\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\F-Secure Internet Security\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files\F-Secure Internet Security\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files\F-Secure Internet Security\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files\F-Secure Internet Security\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Program Files\F-Secure Internet Security\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Program Files\F-Secure Internet Security\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Program Files\F-Secure Internet Security\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Program Files\F-Secure Internet Security\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\Program Files\F-Secure Internet Security\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{102491AB-5F1F-4F7C-B354-6909E3E08276}: NameServer = 194.204.152.34 194.204.159.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{24BC2444-CC11-4F8A-B7E4-6F5E6DE92223}: DhcpNameServer = 194.204.159.1
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\oem\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O24 - Desktop BackupWallPaper: C:\Users\oem\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006-09-18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2 C:\Users\oem\Desktop\*.tmp files -> C:\Users\oem\Desktop\*.tmp -> ]
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012-07-31 22:09:00 | 000,001,030 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012-07-31 22:07:18 | 005,505,024 | -HS- | M] () -- C:\Users\oem\NTUSER.DAT
[2012-07-31 21:53:02 | 000,001,720 | ---- | M] () -- C:\Users\oem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk
[2012-07-31 21:50:23 | 000,001,026 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012-07-31 21:50:20 | 000,003,664 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012-07-31 21:50:20 | 000,003,664 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012-07-31 21:50:19 | 000,065,536 | ---- | M] () -- C:\Windows\System32\Ikeext.etl
[2012-07-31 21:50:16 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2012-07-31 21:50:06 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012-07-31 21:49:58 | 2145,902,592 | -HS- | M] () -- C:\hiberfil.sys
[2012-07-31 21:48:07 | 004,503,728 | ---- | M] () -- C:\ProgramData\zak_lo0i7g.pad
[2012-07-31 20:36:21 | 000,524,288 | -HS- | M] () -- C:\Users\oem\NTUSER.DAT{d8932e6d-6a6f-11db-b6ab-a038f15a5785}.TMContainer00000000000000000002.regtrans-ms
[2012-07-31 20:36:21 | 000,065,536 | -HS- | M] () -- C:\Users\oem\NTUSER.DAT{d8932e6d-6a6f-11db-b6ab-a038f15a5785}.TM.blf
[2012-07-31 20:35:18 | 002,960,790 | -H-- | M] () -- C:\Users\oem\AppData\Local\IconCache.db
[2012-07-31 20:16:00 | 000,000,270 | ---- | M] () -- C:\Windows\tasks\Sprawdź aktualizacje paska narzędzi Windows Live Toolbar.job
[2012-07-31 19:44:44 | 004,827,392 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012-07-31 19:44:44 | 004,125,540 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012-07-31 19:44:44 | 000,093,700 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
[2012-07-31 19:44:44 | 000,079,816 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2012-07-31 19:44:44 | 000,023,786 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2012-07-31 17:45:36 | 000,000,420 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{CE19F781-A043-4739-BD28-E3A4763D96AA}.job
[2012-07-31 17:30:27 | 000,000,680 | ---- | M] () -- C:\Users\oem\AppData\Local\d3d9caps.dat
[2012-07-31 17:25:57 | 000,000,556 | ---- | M] () -- C:\Windows\tasks\Scheduled scanning task.job
[2012-07-31 00:40:17 | 033,185,118 | ---- | M] () -- C:\Users\oem\Documents\grahamek cya0001.avi
[2012-07-30 23:55:30 | 000,139,264 | ---- | M] () -- C:\Users\oem\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-07-29 21:31:34 | 000,000,206 | ---- | M] () -- C:\Windows\win.ini
[2012-07-27 20:44:25 | 000,164,217 | ---- | M] () -- C:\Users\oem\Documents\lipiec 27 166.jpg
[2012-07-27 20:26:53 | 000,153,102 | ---- | M] () -- C:\Users\oem\Documents\facebook 27 lipiec.jpg
[2012-07-24 20:09:48 | 000,096,537 | ---- | M] () -- C:\Users\oem\IMG_0116 - Kopia (1).JPG
[2012-07-23 21:31:23 | 030,983,154 | ---- | M] () -- C:\Users\oem\Documents\grahamek lipiec0008.avi
[2012-07-23 21:30:17 | 050,003,410 | ---- | M] () -- C:\Users\oem\Documents\grahamek lipiec0007.avi
[2012-07-23 21:27:54 | 044,301,524 | ---- | M] () -- C:\Users\oem\Documents\grahamek lipiec0006.avi
[2012-07-23 21:20:33 | 076,794,682 | ---- | M] () -- C:\Users\oem\Documents\grahamek lipiec0005.avi
[2012-07-23 21:17:11 | 070,492,780 | ---- | M] () -- C:\Users\oem\Documents\grahamek lipiec0004.avi
[2012-07-23 21:12:50 | 080,725,362 | ---- | M] () -- C:\Users\oem\Documents\grahamek lipiec0003.avi
[2012-07-23 21:11:13 | 077,040,340 | ---- | M] () -- C:\Users\oem\Documents\grahamek lipiec0002.avi
[2012-07-23 21:10:06 | 111,278,202 | ---- | M] () -- C:\Users\oem\Documents\grahamek lipiec0001.avi
[2012-07-22 19:50:07 | 000,008,653 | ---- | M] () -- C:\Users\oem\Desktop\fb 20 lipiec.odt
[2012-07-22 18:46:04 | 000,009,062 | ---- | M] () -- C:\Users\oem\Desktop\fb 6 lipiec hell.odt
[2012-07-03 20:40:41 | 000,422,941 | ---- | M] () -- C:\Users\oem\IMG_0723.JPG
[2012-07-03 20:39:11 | 000,295,415 | ---- | M] () -- C:\Users\oem\IMG_0767.JPG
[2012-07-03 13:46:32 | 000,369,918 | ---- | M] () -- C:\Users\oem\IMG_0116.JPG
[2012-07-03 13:44:04 | 000,745,799 | ---- | M] () -- C:\Users\oem\IMG_0584.JPG
[2 C:\Users\oem\Desktop\*.tmp files -> C:\Users\oem\Desktop\*.tmp -> ]
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012-07-31 00:40:04 | 033,185,118 | ---- | C] () -- C:\Users\oem\Documents\grahamek cya0001.avi
[2012-07-29 18:12:49 | 004,503,728 | ---- | C] () -- C:\ProgramData\zak_lo0i7g.pad
[2012-07-29 18:12:49 | 000,001,720 | ---- | C] () -- C:\Users\oem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk
[2012-07-27 20:44:25 | 000,164,217 | ---- | C] () -- C:\Users\oem\Documents\lipiec 27 166.jpg
[2012-07-27 20:26:52 | 000,153,102 | ---- | C] () -- C:\Users\oem\Documents\facebook 27 lipiec.jpg
[2012-07-24 20:09:02 | 000,096,537 | ---- | C] () -- C:\Users\oem\IMG_0116 - Kopia (1).JPG
[2012-07-23 21:31:12 | 030,983,154 | ---- | C] () -- C:\Users\oem\Documents\grahamek lipiec0008.avi
[2012-07-23 21:29:59 | 050,003,410 | ---- | C] () -- C:\Users\oem\Documents\grahamek lipiec0007.avi
[2012-07-23 21:27:38 | 044,301,524 | ---- | C] () -- C:\Users\oem\Documents\grahamek lipiec0006.avi
[2012-07-23 21:20:07 | 076,794,682 | ---- | C] () -- C:\Users\oem\Documents\grahamek lipiec0005.avi
[2012-07-23 21:16:44 | 070,492,780 | ---- | C] () -- C:\Users\oem\Documents\grahamek lipiec0004.avi
[2012-07-23 21:12:18 | 080,725,362 | ---- | C] () -- C:\Users\oem\Documents\grahamek lipiec0003.avi
[2012-07-23 21:10:43 | 077,040,340 | ---- | C] () -- C:\Users\oem\Documents\grahamek lipiec0002.avi
[2012-07-23 21:09:23 | 111,278,202 | ---- | C] () -- C:\Users\oem\Documents\grahamek lipiec0001.avi
[2012-07-20 16:15:21 | 000,008,653 | ---- | C] () -- C:\Users\oem\Desktop\fb 20 lipiec.odt
[2012-07-06 01:34:53 | 000,009,062 | ---- | C] () -- C:\Users\oem\Desktop\fb 6 lipiec hell.odt
[2012-07-03 20:40:09 | 000,422,941 | ---- | C] () -- C:\Users\oem\IMG_0723.JPG
[2012-07-03 20:38:40 | 000,295,415 | ---- | C] () -- C:\Users\oem\IMG_0767.JPG
[2012-07-03 13:42:38 | 000,369,918 | ---- | C] () -- C:\Users\oem\IMG_0116.JPG
[2012-07-03 13:42:12 | 000,745,799 | ---- | C] () -- C:\Users\oem\IMG_0584.JPG
[2012-07-01 19:45:57 | 000,026,518 | ---- | C] () -- C:\Users\oem\lody z rozna.jpg
[2012-01-31 12:15:09 | 000,106,605 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2012-01-31 12:15:09 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2011-08-18 12:57:30 | 000,169,236 | ---- | C] () -- C:\Windows\hpoins27.dat
[2011-07-14 19:37:33 | 000,000,680 | ---- | C] () -- C:\Users\oem\AppData\Local\d3d9caps.dat
[2011-07-09 14:50:53 | 000,765,952 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2011-07-09 14:50:53 | 000,180,224 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2011-07-07 22:32:16 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini
[2011-07-07 20:50:20 | 000,000,021 | ---- | C] () -- C:\Windows\System32\camera.ini
[2011-07-07 20:50:07 | 000,028,672 | R--- | C] () -- C:\Windows\System32\CoUninstall.dll
[2008-12-24 03:08:58 | 000,139,264 | ---- | C] () -- C:\Users\oem\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008-12-16 15:46:34 | 002,960,790 | -H-- | C] () -- C:\Users\oem\AppData\Local\IconCache.db
[2008-12-16 15:41:54 | 000,083,432 | ---- | C] () -- C:\Users\oem\AppData\Local\GDIPFONTCACHEV1.DAT
[2008-12-16 15:41:33 | 005,505,024 | -HS- | C] () -- C:\Users\oem\NTUSER.DAT
[2008-12-16 15:41:33 | 000,524,288 | -HS- | C] () -- C:\Users\oem\NTUSER.DAT{d8932e6d-6a6f-11db-b6ab-a038f15a5785}.TMContainer00000000000000000002.regtrans-ms
[2008-12-16 15:41:33 | 000,524,288 | -HS- | C] () -- C:\Users\oem\NTUSER.DAT{d8932e6d-6a6f-11db-b6ab-a038f15a5785}.TMContainer00000000000000000001.regtrans-ms
[2008-12-16 15:41:33 | 000,065,536 | -HS- | C] () -- C:\Users\oem\NTUSER.DAT{d8932e6d-6a6f-11db-b6ab-a038f15a5785}.TM.blf
[2008-12-16 15:41:33 | 000,000,020 | -HS- | C] () -- C:\Users\oem\ntuser.ini
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2012-01-19 15:20:14 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\e-pity
[2011-07-09 15:07:11 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\Evaer
[2011-07-09 13:11:07 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\F-Secure
[2011-07-09 19:32:10 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\iFree
[2011-07-09 14:52:24 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\IMCapture for Skype
[2011-08-25 22:12:44 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\MP3SkypeRecorder
[2011-10-13 20:57:56 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\OpenOffice.org
[2011-07-09 19:00:28 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\Pamela
[2012-05-02 14:23:08 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\SoftGrid Client
[2011-10-05 21:15:29 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\streamripper
[2012-01-30 20:38:16 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\TP
[2012-07-31 20:36:02 | 000,032,576 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2012-07-31 17:25:57 | 000,000,556 | ---- | M] () -- C:\Windows\Tasks\Scheduled scanning task.job
[2012-07-31 20:16:00 | 000,000,270 | ---- | M] () -- C:\Windows\Tasks\Sprawdź aktualizacje paska narzędzi Windows Live Toolbar.job
[2012-07-31 17:45:36 | 000,000,420 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{CE19F781-A043-4739-BD28-E3A4763D96AA}.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 

< End of report >