OTL logfile created on: 8/4/2012 9:24:42 PM - Run 
OTLPE by OldTimer - Version 3.1.48.0     Folder = X:\Programs\OTLPE
Microsoft Windows XP Dodatek Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
1,015.00 Mb Total Physical Memory | 828.00 Mb Available Physical Memory | 82.00% Memory free
903.00 Mb Paging File | 849.00 Mb Available in Paging File | 94.00% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 100.71 Gb Total Space | 67.29 Gb Free Space | 66.81% Space Free | Partition Type: NTFS
Drive D: | 132.17 Gb Total Space | 127.63 Gb Free Space | 96.56% Space Free | Partition Type: NTFS
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet001
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [Disabled] --  -- (HidServ)
SRV - File not found [On_Demand] --  -- (CPUCooLServer)
SRV - File not found [On_Demand] --  -- (AppMgmt)
SRV - [2012/08/03 08:34:54 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012/07/19 02:41:55 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2010/01/15 08:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand] -- C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService)
SRV - [2006/03/03 16:03:10 | 000,069,632 | ---- | M] (HP) [Auto] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)
SRV - [2004/02/19 00:03:00 | 000,065,536 | ---- | M] (SEIKO EPSON CORPORATION) [Auto] -- C:\WINDOWS\system32\E_S00RP1.EXE -- (EPSON_PM_RPCV2_01) EPSON V3 Service2(03)
SRV - [2003/07/08 10:57:08 | 001,519,616 | ---- | M] (FirebirdSQL Project) [Auto] -- C:\Program Files\Firebird\bin\fbserver.exe -- (FirebirdServer)
SRV - [2003/07/08 10:55:36 | 000,073,728 | ---- | M] (FirebirdSQL Project) [Auto] -- C:\Program Files\Firebird\bin\fbguard.exe -- (FirebirdGuardian)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand] --  -- (upperdev)
DRV - File not found [Kernel | System] --  -- (PCIDump)
DRV - File not found [Kernel | On_Demand] --  -- (catchme)
DRV - File not found [Kernel | On_Demand] --  -- (abp470n5)
DRV - [2012/04/19 02:38:28 | 000,242,240 | ---- | M] (DT Soft Ltd) [Kernel | System] -- C:\WINDOWS\system32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2010/03/10 13:28:40 | 000,602,912 | R--- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\RTL8192su.sys -- (RTL8192su)
DRV - [2008/09/24 04:40:22 | 004,122,368 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\alcxwdm.sys -- (ALCXWDM) Service for Realtek AC97 Audio (WDM)
DRV - [2007/03/22 20:00:14 | 000,030,032 | ---- | M] () [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\XPVCOM.sys -- (xpvcom)
DRV - [2005/03/03 23:10:26 | 000,074,496 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\Rtlnicxp.sys -- (RTL8023xp)
DRV - [2005/01/03 11:04:36 | 000,009,408 | ---- | M] () [Kernel | System] -- C:\WINDOWS\System32\drivers\ntiowp.sys -- (ntiowp)
DRV - [2003/12/18 06:20:50 | 000,147,192 | ---- | M] (Microsoft Corporation) [Kernel | System] -- C:\WINDOWS\system32\drivers\VMM.sys -- (vmm)
DRV - [2003/12/08 06:53:48 | 000,053,600 | ---- | M] (THOMSON) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\alcan5wn.sys -- (alcan5wn) SpeedTouch USB ADSL PPP Networking Driver (NDISWAN)
DRV - [2003/12/08 06:53:46 | 000,070,688 | ---- | M] (THOMSON) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\alcaudsl.sys -- (alcaudsl)
DRV - [2003/09/19 13:23:40 | 000,045,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\VMNetSrv.sys -- (VPCNetS2)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=ironto&s={searchTerms}&f=4
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\Admin_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\Admin_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultenginename: "Facemoods Search"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "http://pl.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:pl:official"
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_3_300_270.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/07/19 02:41:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/04/11 05:24:02 | 000,000,000 | ---D | M]
 
[2010/11/26 07:07:26 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Admin\Dane aplikacji\mozilla\Extensions
[2012/05/04 03:13:51 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Admin\Dane aplikacji\mozilla\Firefox\Profiles\zwnk52l0.default\extensions
[2010/11/27 08:37:45 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Admin\Dane aplikacji\mozilla\Firefox\Profiles\zwnk52l0.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2012/04/07 09:54:56 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
File not found (No name found) -- 
[2012/07/19 02:41:55 | 000,136,672 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012/04/04 10:29:52 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2012/06/25 08:17:54 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2012/06/25 08:17:54 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2011/04/05 05:36:36 | 000,002,049 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fcmdSrch.xml
[2012/06/25 08:17:54 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2012/06/25 08:17:54 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2012/06/25 08:17:54 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2012/06/25 08:17:54 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2010/06/25 17:39:23 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [\\Witold-komp\EPSON Stylus DX3800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE (SEIKO EPSON CORPORATION)
O4 - HKLM..\Run: [Auto EPSON Stylus DX3800 Series na WITOLD-KOMP] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE (SEIKO EPSON CORPORATION)
O4 - HKLM..\Run: [ckbcasguvfrakdx] C:\Documents and Settings\All Users\Dane aplikacji\ckbcasgu.exe (Hyundai)
O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\soundman.exe (Realtek Semiconductor Corp.)
O4 - HKU\Admin_ON_C..\Run: [ALLUpdate]  File not found
O4 - HKU\Admin_ON_C..\Run: [ares] C:\Program Files\Ares\Ares.exe (Ares Development Group)
O4 - HKU\Admin_ON_C..\Run: [ckbcasguvfrakdx] C:\Documents and Settings\All Users\Dane aplikacji\ckbcasgu.exe (Hyundai)
O4 - HKU\Admin_ON_C..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\AutorunsDisabled [2010/06/25 17:13:27 | 000,000,000 | -H-D | M]
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe (McAfee, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\REALTEK 11n USB Wireless LAN Utility.lnk = C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtWLan.exe (Realtek Semiconductor Corp.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer:  = 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWinKeys = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoChangeStartMenu = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuPinnedList = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoUserNameInStartMenu = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoToolbarsOnTaskbar = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoPropertiesMyComputer = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LockTaskbar = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoBandCustomize = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFavoritesMenu = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System:  = 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideFastUserSwitching = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\Admin_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\Admin_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\Admin_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\Admin_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\LocalService_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\LocalService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\NetworkService_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\NetworkService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\systemprofile_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} http://office.microsoft.com/officeupdate/content/opuc3.cab (Office Update Installation Engine)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {92ECE6FA-AC2E-4042-BFAE-0C8608E52A41} https://www.pekaobiznes24.pl/sme/static/components/1,3,0,82/SignActivXPEKAO.cab (SignActivX Control)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.100
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop Components:AutorunsDisabled () - 
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/05/29 02:45:18 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012/08/04 07:30:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Menu Start\Programy\Live Security Platinum
[2012/08/04 07:28:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\036E18CD0045EF49E7D7945681CB3F95
[2012/08/04 07:26:59 | 000,083,456 | ---- | C] (Hyundai) -- C:\Documents and Settings\All Users\Dane aplikacji\dcjsueum.exe
[2012/08/04 07:26:58 | 000,083,456 | -HS- | C] (Hyundai) -- C:\Documents and Settings\All Users\Dane aplikacji\ckbcasgu.exe
[2012/08/04 07:26:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\xxvkejocvakzvds
[2012/07/23 02:33:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Menu Start\Programy\Ares
[2012/07/23 02:33:12 | 000,000,000 | ---D | C] -- C:\Program Files\Ares
[2012/07/20 07:33:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Pulpit\My Shared Folder
[5 C:\Documents and Settings\Admin\Pulpit\*.tmp files -> C:\Documents and Settings\Admin\Pulpit\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012/08/04 13:41:00 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012/08/04 13:36:46 | 000,012,668 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012/08/04 13:36:42 | 000,001,030 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2012/08/04 13:36:38 | 1064,882,176 | -HS- | M] () -- C:\hiberfil.sys
[2012/08/04 13:18:10 | 000,001,034 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2012/08/04 07:35:11 | 000,012,146 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\AVGIDSAgent
[2012/08/04 07:34:00 | 000,000,930 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2012/08/04 07:30:33 | 000,002,242 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\Live Security Platinum.lnk
[2012/08/04 07:26:59 | 000,000,051 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\eprfxomhrrpaqaa
[2012/08/04 07:26:49 | 000,083,456 | -HS- | M] (Hyundai) -- C:\Documents and Settings\All Users\Dane aplikacji\ckbcasgu.exe
[2012/08/04 07:26:49 | 000,083,456 | ---- | M] (Hyundai) -- C:\Documents and Settings\All Users\Dane aplikacji\dcjsueum.exe
[2012/08/04 06:00:00 | 000,000,362 | ---- | M] () -- C:\WINDOWS\tasks\PerfectOptimizer_home.job
[2012/08/03 09:32:41 | 000,088,064 | ---- | M] () -- C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/08/03 08:34:54 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2012/08/03 08:34:54 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012/08/03 02:35:45 | 000,494,838 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2012/08/03 02:35:45 | 000,436,006 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012/08/03 02:35:45 | 000,085,672 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2012/08/03 02:35:45 | 000,068,902 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012/08/02 08:44:56 | 000,001,813 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk
[2012/07/23 02:33:14 | 000,000,626 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\Ares.lnk
[2012/07/17 07:39:41 | 000,002,539 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\Microsoft Office Word 2003.lnk
[2012/07/12 04:23:46 | 000,267,800 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012/07/11 11:27:59 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[5 C:\Documents and Settings\Admin\Pulpit\*.tmp files -> C:\Documents and Settings\Admin\Pulpit\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012/08/04 07:35:11 | 000,012,146 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\AVGIDSAgent
[2012/08/04 07:30:33 | 000,002,242 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\Live Security Platinum.lnk
[2012/08/04 07:26:53 | 000,000,051 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\eprfxomhrrpaqaa
[2012/07/23 02:33:14 | 000,000,626 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\Ares.lnk
[2012/02/15 03:31:38 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2011/08/03 07:29:31 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2011/08/03 07:29:14 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll
[2011/07/05 03:21:59 | 000,000,130 | ---- | C] () -- C:\WINDOWS\pr.ini
[2011/04/05 05:36:39 | 000,098,304 | ---- | C] () -- C:\WINDOWS\System32\redmonnt.dll
[2011/02/01 10:50:26 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2011/02/01 07:22:08 | 000,088,064 | ---- | C] () -- C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/12/04 12:58:15 | 000,376,832 | ---- | C] () -- C:\WINDOWS\System32\AegisI5Installer.exe
[2010/12/04 12:57:28 | 000,451,072 | ---- | C] () -- C:\WINDOWS\System32\ISSRemoveSP.exe
[2010/11/27 08:14:54 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\Admin\Dane aplikacji\$_hpcst$.hpc
[2010/11/20 08:55:33 | 000,000,051 | ---- | C] () -- C:\WINDOWS\LDS.INI
[2010/11/20 08:48:16 | 000,000,170 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2010/06/23 06:29:46 | 000,256,512 | ---- | C] () -- C:\WINDOWS\_PEV.exe
[2010/06/23 06:29:46 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2010/06/23 06:29:46 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2010/06/23 06:29:46 | 000,077,312 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2010/06/23 06:29:46 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2010/06/09 01:09:06 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2009/11/19 17:18:10 | 000,117,237 | ---- | C] () -- C:\WINDOWS\hpoins11.dat.temp
[2009/11/19 17:18:10 | 000,011,634 | ---- | C] () -- C:\WINDOWS\hpomdl11.dat.temp
[2008/06/21 06:43:29 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2008/01/10 10:02:11 | 000,005,606 | ---- | C] () -- C:\WINDOWS\System32\stci.dll
[2007/04/20 02:04:57 | 000,011,634 | ---- | C] () -- C:\WINDOWS\hpomdl11.dat
[2007/03/22 20:00:14 | 000,030,032 | ---- | C] () -- C:\WINDOWS\System32\drivers\XPVCOM.sys
[2006/06/09 03:43:39 | 000,001,156 | ---- | C] () -- C:\WINDOWS\bestplayer.ini
[2006/06/02 11:07:59 | 000,000,037 | ---- | C] () -- C:\WINDOWS\acroread.ini
[2006/06/02 10:56:30 | 000,000,700 | ---- | C] () -- C:\WINDOWS\braunics.ini
[2006/06/01 08:02:05 | 000,000,056 | ---- | C] () -- C:\WINDOWS\Kulki.ini
[2006/05/30 17:22:59 | 000,000,099 | ---- | C] () -- C:\WINDOWS\System32\PICSDK.ini
[2006/05/30 17:22:58 | 000,092,240 | ---- | C] () -- C:\WINDOWS\System32\EPPICPrinterDB.dat
[2006/05/30 17:22:58 | 000,026,154 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern1.dat
[2006/05/30 17:22:58 | 000,024,903 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern3.dat
[2006/05/30 17:22:58 | 000,021,390 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern5.dat
[2006/05/30 17:22:58 | 000,020,148 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern2.dat
[2006/05/30 17:22:58 | 000,011,811 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern4.dat
[2006/05/30 17:22:58 | 000,004,943 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern6.dat
[2006/05/30 17:22:58 | 000,001,146 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_DU.dat
[2006/05/30 17:22:58 | 000,001,139 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_PT.dat
[2006/05/30 17:22:58 | 000,001,139 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_BP.dat
[2006/05/30 17:22:58 | 000,001,136 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_ES.dat
[2006/05/30 17:22:58 | 000,001,129 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_FR.dat
[2006/05/30 17:22:58 | 000,001,129 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_CF.dat
[2006/05/30 17:22:58 | 000,001,120 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_IT.dat
[2006/05/30 17:22:58 | 000,001,107 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_GE.dat
[2006/05/30 17:22:58 | 000,001,104 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_EN.dat
[2006/05/30 17:20:16 | 000,000,026 | ---- | C] () -- C:\WINDOWS\CDE DX3800EDFNSCHPGT.ini
[2006/05/30 17:04:49 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2006/05/30 16:58:59 | 000,003,067 | ---- | C] () -- C:\WINDOWS\mozver.dat
[2006/05/30 16:06:25 | 000,000,663 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2006/05/29 06:15:54 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2006/05/29 06:10:07 | 000,000,046 | ---- | C] () -- C:\WINDOWS\Apollo.ini
[2006/05/29 06:09:58 | 000,000,090 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2006/05/29 03:41:48 | 000,040,960 | ---- | C] () -- C:\Program Files\Uninstall_CDS.exe
[2006/05/29 02:47:03 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2006/05/29 02:42:55 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2006/05/27 16:13:30 | 000,004,722 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2006/05/27 16:12:25 | 000,267,800 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2006/01/04 05:12:04 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\HPZIDS01.dll
[2005/01/03 11:04:36 | 000,009,408 | ---- | C] () -- C:\WINDOWS\System32\drivers\ntiowp.sys
[2004/08/04 08:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2004/08/04 08:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2004/08/04 08:00:00 | 000,494,838 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat
[2004/08/04 08:00:00 | 000,436,006 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2004/08/04 08:00:00 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat
[2004/08/04 08:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2004/08/04 08:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2004/08/04 08:00:00 | 000,085,672 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat
[2004/08/04 08:00:00 | 000,068,902 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2004/08/04 08:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2004/08/04 08:00:00 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat
[2004/08/04 08:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2004/08/04 08:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004/08/04 08:00:00 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2004/08/04 08:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2004/08/04 08:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2003/04/08 06:40:22 | 000,005,679 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI
[2001/07/06 22:00:00 | 000,003,399 | ---- | C] () -- C:\WINDOWS\System32\hptcpmon.ini
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2012/06/18 02:45:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\DAEMON Tools Lite
[2010/12/06 08:47:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\DVDSAV
[2011/04/05 05:52:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\facemoods.com
[2012/04/27 08:14:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\NapiProjekt
[2012/08/02 10:55:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\RTE Technologies
[2010/06/25 17:08:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\Simply Super Software
[2011/04/08 08:09:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\WebProject
[2012/08/04 07:30:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\036E18CD0045EF49E7D7945681CB3F95
[2011/07/05 07:46:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Alwil Software
[2012/06/18 02:45:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite
[2010/12/06 08:47:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DVDSAV
[2009/10/03 06:35:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\MSScanAppDataDir
[2010/11/27 08:45:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\RegCure
[2011/04/02 05:05:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\RTE Technologies
[2010/06/25 15:41:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP
[2006/05/30 17:25:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\UDL
[2012/08/04 07:26:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\xxvkejocvakzvds
[2012/08/04 06:00:00 | 000,000,362 | ---- | M] () -- C:\WINDOWS\Tasks\PerfectOptimizer_home.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 124 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:CB0AACC9
< End of report >