OTL logfile created on: 2012-08-07 16:29:04 - Run 1 OTL by OldTimer - Version 3.2.56.0 Folder = C:\Documents and Settings\WKS\Pulpit Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 7.0.5730.13) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 1,71 Gb Available Physical Memory | 85,36% Memory free 3,85 Gb Paging File | 3,77 Gb Available in Paging File | 97,80% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 37,11 Gb Total Space | 4,22 Gb Free Space | 11,39% Space Free | Partition Type: NTFS Drive D: | 97,65 Gb Total Space | 93,51 Gb Free Space | 95,75% Space Free | Partition Type: NTFS Drive E: | 98,11 Gb Total Space | 75,24 Gb Free Space | 76,69% Space Free | Partition Type: NTFS Drive H: | 993,72 Mb Total Space | 286,91 Mb Free Space | 28,87% Space Free | Partition Type: FAT Computer Name: SERWER | User Name: WKS | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-08-07 15:57:40 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\WKS\Pulpit\OTL.exe PRC - [2008-04-14 19:21:16 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2008-12-30 21:00:44 | 002,628,096 | ---- | M] () -- C:\Program Files\K-Lite Codec Pack\ffdshow\ffdshow.ax MOD - [2008-04-14 19:20:37 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll MOD - [2006-09-14 00:20:24 | 000,126,464 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2012-05-24 15:40:27 | 000,129,976 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2009-11-25 01:51:35 | 000,138,680 | ---- | M] (ALWIL Software) [Auto | Stopped] -- C:\Program Files\Alwil Software\Avast4\ashServ.exe -- (avast! Antivirus) SRV - [2009-11-25 01:51:21 | 000,254,040 | ---- | M] (ALWIL Software) [On_Demand | Stopped] -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe -- (avast! Mail Scanner) SRV - [2009-11-25 01:48:48 | 000,352,920 | ---- | M] (ALWIL Software) [On_Demand | Stopped] -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe -- (avast! Web Scanner) SRV - [2009-11-25 01:43:56 | 000,018,752 | ---- | M] (ALWIL Software) [Auto | Stopped] -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe -- (aswUpdSv) SRV - [2006-09-04 14:49:52 | 000,241,664 | ---- | M] (ASUSTeK COMPUTER INC.) [Auto | Stopped] -- C:\WINDOWS\ATKKBService.exe -- (ATKKeyboardService) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - File not found [Kernel | System | Stopped] -- -- (Cdaudio) DRV - File not found [Kernel | On_Demand | Unknown] -- -- (a7z2m0sw) DRV - File not found [Kernel | Auto | Stopped] -- C:\DOCUME~1\WKS\USTAWI~1\Temp\3019.sys -- (3019) DRV - [2011-01-14 09:06:40 | 000,277,352 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp) DRV - [2010-11-02 13:36:26 | 006,188,648 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) DRV - [2009-11-25 01:50:59 | 000,094,160 | ---- | M] (ALWIL Software) [File_System | Auto | Stopped] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2) DRV - [2009-11-25 01:50:12 | 000,114,768 | ---- | M] (ALWIL Software) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP) DRV - [2009-11-25 01:50:00 | 000,020,560 | ---- | M] (ALWIL Software) [File_System | Auto | Stopped] -- C:\WINDOWS\system32\drivers\aswFsBlk.sys -- (aswFsBlk) DRV - [2009-11-25 01:49:07 | 000,048,560 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi) DRV - [2009-11-25 01:48:57 | 000,023,120 | ---- | M] (ALWIL Software) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr) DRV - [2009-11-25 01:47:54 | 000,027,408 | ---- | M] (ALWIL Software) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4) DRV - [2009-11-18 01:17:00 | 001,395,800 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt) DRV - [2009-11-18 01:16:00 | 001,691,480 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt) DRV - [2009-05-22 23:19:10 | 000,721,904 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sptd.sys -- (sptd) DRV - [2008-08-21 06:52:41 | 003,299,840 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag) DRV - [2008-05-02 11:58:28 | 000,008,064 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt) DRV - [2008-05-02 11:58:14 | 000,020,864 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc) DRV - [2008-05-02 11:58:14 | 000,008,064 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev) DRV - [2008-05-02 11:58:12 | 000,017,536 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd) DRV - [2008-04-13 21:00:05 | 000,019,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\tdi.sys -- (AVPsys) DRV - [2008-04-13 20:56:06 | 000,088,320 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\nwlnkipx.sys -- (NwlnkIpx) DRV - [2007-07-12 21:49:16 | 000,096,384 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtnicxp.sys -- (RTL8023xp) DRV - [2006-06-14 07:56:00 | 000,012,288 | R--- | M] (ASUSTeK Computer Inc.) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\EIO.sys -- (EIO) DRV - [2005-12-21 22:32:02 | 000,009,060 | ---- | M] (Waytech Development, Inc.) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\MUsbFltr.sys -- (MUsbFltr) DRV - [2005-12-21 22:31:42 | 000,008,963 | ---- | M] (Waytech Development, Inc.) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\UsbFltr.sys -- (UsbFltr) DRV - [2005-12-06 17:11:18 | 000,035,328 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sfsync03.sys -- (sfsync03) DRV - [2005-11-03 16:40:07 | 000,063,488 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sfvfs02.sys -- (sfvfs02) DRV - [2005-10-18 16:01:00 | 000,011,008 | ---- | M] (ASUSTeK COMPUTER INC.) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\atkkbnt.sys -- (asuskbnt) DRV - [2005-08-10 14:44:04 | 000,050,688 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sfdrv01.sys -- (sfdrv01) DRV - [2005-05-16 15:20:39 | 000,006,656 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sfhlp02.sys -- (sfhlp02) DRV - [2004-10-11 16:28:32 | 000,008,448 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\moufiltr.sys -- (moufiltr) DRV - [2004-08-04 00:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) DRV - [2003-03-27 14:55:48 | 000,011,776 | ---- | M] (WayTech Development, Inc.) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\kbfilter.sys -- (kbfilter) DRV - [2001-08-18 01:54:18 | 000,063,232 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\nwlnknb.sys -- (NwlnkNb) DRV - [2001-08-18 01:54:18 | 000,055,936 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\nwlnkspx.sys -- (NwlnkSpx) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://pl.v9.com/?utm_source=b&utm_medium=cor IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://pl.v9.com/?utm_source=b&utm_medium=cor IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.funmoods.com/results.php?f=4&a=ironto&q={searchTerms} IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKLM\..\SearchScopes\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}: "URL" = http://search.iminent.com/?appId=&ref=toolbox&q={searchTerms} IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://pl.v9.com/?utm_source=b&utm_medium=cor IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [Binary data over 100 bytes] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?babsrc=HP_Prot IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKCU\..\URLSearchHook: {0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL (Ask.com) IE - HKCU\..\URLSearchHook: {124d001a-bdcb-472f-aa59-bbe7e4bc3204} - C:\Program Files\Ashampoo_US\prxtbAsh1.dll (Conduit Ltd.) IE - HKCU\..\URLSearchHook: {51a86bb3-6602-4c85-92a5-130ee4864f13} - C:\Program Files\BrotherSoft_Extreme\prxtbBro1.dll (Conduit Ltd.) IE - HKCU\..\URLSearchHook: {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - C:\Program Files\Iminent\SearchTheWeb\Iminent.BHO.NavigationError.dll (Iminent) IE - HKCU\..\URLSearchHook: {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files\IncrediMail_MediaBar_2\prxtbInc0.dll (Conduit Ltd.) IE - HKCU\..\SearchScopes,DefaultScope = {BFFED5CA-8BDF-47CC-AED0-23F4E6D77732} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKCU\..\SearchScopes\{077E3255-3808-4E46-A8CB-0A946D95A4F1}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{0841EB71-A440-4B95-BB3F-7242E20CCE46}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{086E14DD-CA7D-49D5-A76C-C7A5D89B7BBA}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{09DEB191-B751-4DD0-A323-277FEB2D008A}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{0A567CD8-69B7-40B8-BA52-DD718C48A556}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{0B61E28F-E904-484C-BADC-93558494A28E}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{0C66647F-F08A-4DFC-A03C-3C0EEB2049D3}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{0D5B89FA-D62A-4A0D-8293-E09EDAE98ABE}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{0D7562AE-8EF6-416d-A838-AB665251703A}: "URL" = http://start.funmoods.com/?a=ironto&s={searchTerms}&f=4 IE - HKCU\..\SearchScopes\{0DE44354-2219-4D8F-8FF1-43AEB29B824B}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&AF=110004&babsrc=SP_ss&mntrId=e80c368d0000000000000016e6de871e IE - HKCU\..\SearchScopes\{0F0F2737-CB62-4B05-8711-EACD4CE07DBB}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{11394D01-43B4-4AFF-867E-2414F03B8753}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{14A6AAA6-7223-4DF0-9C0F-CD25935D4CF8}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{1619CA72-B29D-4078-9C14-4407A1392E8B}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{16E72CF8-DEF7-4D05-89E8-909E65D67672}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{16F53554-CC21-45BA-9181-2F6425454C49}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{17B87F31-81F4-4E75-A473-77392FD81B40}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{1EE67719-3AF8-4650-BAA6-C1598696EDE7}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{209496C4-017F-47B7-98DC-1C2F09C2DD3D}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{21C22B6C-0156-4838-AE39-4D89B04BD4AD}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{220F6C05-F96D-4833-8F3C-37D471136D7F}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{22C92670-726F-4D6C-BD10-481EE7F751C7}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{2773470C-A794-4DB9-A0A9-F9F8BE4B77E0}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{27D60EFF-4DEB-4773-A164-0C60837A6EF9}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{29696388-DA5C-4DF4-91E8-A146824CA448}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{2DBA8236-FEF8-4713-9936-50F81A908CFA}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{2DEC95B2-2200-473A-8C72-351AF247374A}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{2E6AD464-1788-4382-8339-1449A37B4AC9}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{310C9F04-3856-4911-AE9E-9BC72B7AE860}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{3189829F-5B5F-4E4D-92B2-9D90744CC5E4}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{32FCFF00-1248-41B9-A291-18D6535A2CB6}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{338F1746-CD8B-4E4C-A111-256416C85586}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{33AFB432-C192-4F64-AE26-C3A97665413E}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{345CB1C0-9FBD-4615-951F-D6777C3E99A4}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{351B6A61-18CB-47C8-9951-EA71BDEAD0CF}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{36F6AFB7-D09A-41BA-99E2-2B9800A140D3}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{37418A71-47B3-4B95-B933-A9B437F33F5D}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{380543EA-B866-4B32-BFDC-DFFE2FFC1371}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{38A2C151-75E2-4800-A8B5-1CBB20325F48}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{3902ACC1-83DF-4529-A2C3-3D2D5D2CC482}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{3EB88937-1442-4CC1-A337-E82C7259307F}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{4148E056-BFDC-48CE-8A28-01D9387F719D}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{42BBD0B2-9D44-4C6F-85B7-002D3523C65E}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{43068F77-41AD-46FB-AFF7-F7C5D096230C}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{442446C7-D740-4DD3-9F51-D7266C4ED03B}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{46B033A2-A806-4E04-AE7F-49E46080E3E2}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{47223107-74A0-40E9-81F9-1B2693ED84D7}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{479F495A-85E0-4E7A-B3D1-DF955578B65B}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{482B1C6A-E07F-40DA-9945-B1781B8931FE}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{4BDCB415-D369-4EDC-B451-F3F306A9F57D}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{4D44A313-1F0E-4772-B250-AD4ACBF86DAB}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{4E7F4997-05FE-43B4-8693-35CD57A95B1C}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{51782880-9869-45F1-B1CA-9C022063C677}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{530FD70D-749F-4346-BCCE-A658C1FE7A86}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{545A8DA3-9E15-4F2D-8D2A-DB39BE256A76}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{54E43799-5A3A-42D5-B2CC-27306AC3EC05}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{570BACB5-39C9-4A10-834B-8155B86A6F0C}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{57E2B914-756F-4401-AA3E-6DD007348751}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{5A59F331-0E22-4FFF-ABD1-27531967BA52}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{5D2CCDD1-E161-4C0E-8F97-55E63CF0AF9A}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{63774209-22EF-4673-8854-FDC867A972BD}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{6A336075-601B-4940-B1D6-AAF6FD36C807}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{6BE2009E-C3D6-4C34-8A69-3283D5B83DB8}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{6CB84524-F7B6-489F-92A9-0436DB2CA857}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{6D36A2DE-994F-4C46-8782-5B95437AFE2B}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{72796C43-B318-468E-965B-9AB589EDD642}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{77F42E6E-DCCE-4800-9CD8-658EB973FA34}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{7B30E3FB-0871-4353-9EAF-4285E563004E}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{7BE053E1-84D5-4A4E-9415-9ADD75BD5A78}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{7D4A4D44-9FEB-44BE-8807-4FA457B4E9A3}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{9F4BC814-971B-4AC5-B591-55139BA5E331}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2776682 IE - HKCU\..\SearchScopes\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}: "URL" = http://search.iminent.com/?appId=&ref=toolbox&q={searchTerms} IE - HKCU\..\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}: "URL" = http://mystart.incredimail.com/mb68/?search={searchTerms}&loc=search_box&u=92823282618100061 IE - HKCU\..\SearchScopes\{DF906146-F7AF-4801-AF9D-B83A5E8E21B9}: "URL" = http://www26.yoog.com/search.php?q={searchTerms} IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.0.198: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.0.198: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.0.198: C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.0.198: C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=15.0.0.198: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\WKS\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\WKS\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-12-12 20:29:14 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-05-24 15:40:28 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009-12-13 21:02:06 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\WKS\Dane aplikacji\Mozilla\Extensions [2009-12-13 21:02:06 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\WKS\Dane aplikacji\Mozilla\Extensions\maxtv@developer.max-tv.be [2012-05-17 20:16:39 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\WKS\Dane aplikacji\Mozilla\Firefox\Profiles\czxwhdyb.default\extensions [2012-05-17 20:16:39 | 000,000,000 | ---D | M] (Funmoods.com) -- C:\Documents and Settings\WKS\Dane aplikacji\Mozilla\Firefox\Profiles\czxwhdyb.default\extensions\ffxtlbr@funmoods.com [2012-04-14 20:16:03 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2010-07-04 14:49:16 | 000,000,000 | ---D | M] (Firefox security) -- C:\Program Files\Mozilla Firefox\extensions\{9CE11043-9A15-4207-A565-0C94C42D590D} [2012-05-24 15:40:27 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2012-03-13 07:36:36 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2012-03-13 07:36:36 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2011-04-26 13:16:44 | 000,002,049 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fcmdSrch.xml [2012-03-13 07:36:36 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2012-03-13 07:36:36 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2012-05-07 18:23:41 | 000,000,428 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\v9.xml [2012-03-13 07:36:36 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2012-03-13 07:36:36 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - homepage: http://www.gazeta.pl/0,0.html?p=128 CHR - default_search_provider: Search the web (Babylon) (Enabled) CHR - default_search_provider: search_url = http://search.babylon.com/web/{searchTerms}?babsrc=SP_ss&affID=100474&mntrId=e80c368d0000000000000016e6de871e CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms} CHR - homepage: http://www.gazeta.pl/0,0.html?p=128 CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Documents and Settings\WKS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\21.0.1180.60\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\WKS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\21.0.1180.60\pdf.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\WKS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\21.0.1180.60\gcswf32.dll CHR - plugin: Shockwave Flash (Disabled) = C:\Documents and Settings\WKS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll CHR - plugin: Java Deployment Toolkit 6.0.290.11 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 6 U29 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll CHR - plugin: RealNetworks(tm) Chrome Background Extension Plug-In (32-bit) (Enabled) = C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll CHR - plugin: RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) (Enabled) = C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll CHR - plugin: Google Update (Enabled) = C:\Documents and Settings\WKS\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.111\npGoogleUpdate3.dll CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll CHR - plugin: Picasa (Enabled) = C:\Program Files\Google\Picasa3\npPicasa3.dll CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll CHR - plugin: Windows Presentation Foundation (Enabled) = C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll CHR - plugin: Shockwave for Director (Enabled) = C:\WINDOWS\system32\Adobe\Director\np32dsw.dll CHR - Extension: YouTube = C:\Documents and Settings\WKS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: Szukaj w Google = C:\Documents and Settings\WKS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\ CHR - Extension: Complitly plugin for chrome = C:\Documents and Settings\WKS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda\1.1_0\ CHR - Extension: Funmoods = C:\Documents and Settings\WKS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\fdloijijlkoblmigdofommgnheckmaki\1.6.0_0\ CHR - Extension: Funmoods = C:\Documents and Settings\WKS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\fdloijijlkoblmigdofommgnheckmaki\1.6.0_0\funmoods\ CHR - Extension: DealPly = C:\Documents and Settings\WKS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\gaiilaahiahdejapggenmdmafpmbipje\3.0.7.2_0\ CHR - Extension: Facemoods = C:\Documents and Settings\WKS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\ihflimipbcaljfnojhhknppphnnciiif\1.6.0_0\ CHR - Extension: Facemoods = C:\Documents and Settings\WKS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\ihflimipbcaljfnojhhknppphnnciiif\1.6.0_0\facemoods\ CHR - Extension: RealPlayer HTML5Video Downloader Extension = C:\Documents and Settings\WKS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0\ CHR - Extension: Gmail = C:\Documents and Settings\WKS\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2012-08-05 16:11:18 | 000,000,761 | RHS- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (Ask Search Assistant BHO) - {0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL (Ask.com) O2 - BHO: (Complitly) - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Documents and Settings\WKS\Dane aplikacji\Complitly\Complitly.dll (SimplyGen) O2 - BHO: (Ashampoo US Toolbar) - {124d001a-bdcb-472f-aa59-bbe7e4bc3204} - C:\Program Files\Ashampoo_US\prxtbAsh1.dll (Conduit Ltd.) O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO) O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer) O2 - BHO: (BrotherSoft Extreme Toolbar) - {51a86bb3-6602-4c85-92a5-130ee4864f13} - C:\Program Files\BrotherSoft_Extreme\prxtbBro1.dll (Conduit Ltd.) O2 - BHO: (TBSB01620 Class) - {58124A0B-DC32-4180-9BFF-E0E21AE34026} - C:\Program Files\IMinent Toolbar\tbcore3.dll () O2 - BHO: (CescrtHlpr Object) - {64182481-4F71-486b-A045-B233BD0DA8FC} - C:\Program Files\facemoods.com\facemoods\1.4.17.7\bh\facemoods.dll (facemoods.com BHO) O2 - BHO: (Funmoods Helper Object) - {75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} - C:\Program Files\Funmoods\funmoods\1.5.19.3\bh\funmoods.dll (Funmoods BHO) O2 - BHO: (Iminent.BHO.NavigationError) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - C:\Program Files\Iminent\SearchTheWeb\Iminent.BHO.NavigationError.dll (Iminent) O2 - BHO: (IMinent WebBooster (BHO)) - {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} - C:\Program Files\Iminent\IMBooster4Web\Iminent.WebBooster.dll (Iminent) O2 - BHO: (no name) - {A18C4BF0-4300-D1BB-6B54-BBDF555BE107} - No CLSID value found. O2 - BHO: (DealPly) - {A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} - C:\Program Files\DealPly\DealPlyIE.dll (DealPly Technologies Ltd) O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll () O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll (Google Inc.) O2 - BHO: (thesuperads browser enhancer) - {BFF7BC00-1EC6-C0EA-829A-8F2EAE8A5478} - C:\WINDOWS\system32\lykqluqmeryxynbo.dll () O2 - BHO: (Google Dictionary Compression sdch) - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll (Google Inc.) O2 - BHO: (IncrediMail MediaBar 2 Toolbar) - {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files\IncrediMail_MediaBar_2\prxtbInc0.dll (Conduit Ltd.) O2 - BHO: (Ask Toolbar BHO) - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL (Ask.com) O2 - BHO: (no name) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - No CLSID value found. O3 - HKLM\..\Toolbar: (Ashampoo US Toolbar) - {124d001a-bdcb-472f-aa59-bbe7e4bc3204} - C:\Program Files\Ashampoo_US\prxtbAsh1.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll () O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKLM\..\Toolbar: (BrotherSoft Extreme Toolbar) - {51a86bb3-6602-4c85-92a5-130ee4864f13} - C:\Program Files\BrotherSoft_Extreme\prxtbBro1.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (IMinent Toolbar) - {977AE9CC-AF83-45E8-9E03-E2798216E2D5} - C:\Program Files\IMinent Toolbar\tbcore3.dll () O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.) O3 - HKLM\..\Toolbar: (Funmoods Toolbar) - {A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} - C:\Program Files\Funmoods\funmoods\1.5.19.3\funmoodsTlbr.dll (Funmoods) O3 - HKLM\..\Toolbar: (IncrediMail MediaBar 2 Toolbar) - {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files\IncrediMail_MediaBar_2\prxtbInc0.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (facemoods Toolbar) - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - C:\Program Files\facemoods.com\facemoods\1.4.17.7\facemoodsTlbr.dll (facemoods.com) O3 - HKLM\..\Toolbar: (Ask Toolbar) - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL (Ask.com) O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll () O3 - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll () O4 - HKLM..\Run: [avast!] C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software) O4 - HKLM..\Run: [cobholnxcbagwgv] C:\WINDOWS\System32\lykqluqmeryxynbo.dll () O4 - HKLM..\Run: [IMBooster] C:\Program Files\Iminent\IMBooster\imbooster.exe (Iminent) O4 - HKLM..\Run: [Iminent.Notifier] C:\Program Files\Iminent\SearchTheWeb\Iminent.Notifier.exe (Iminent) O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe () O4 - HKLM..\Run: [sqlncli] C:\Documents and Settings\WKS\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\3775\sqlncli.exe () O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Real\RealPlayer\update\realsched.exe (RealNetworks, Inc.) O4 - HKCU..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG) O4 - HKCU..\Run: [Gadu-Gadu] D:\Program Files2\Gadu-Gadu\gg.exe (Gadu-Gadu S.A.) O4 - HKCU..\Run: [Gadu-Gadu 10] C:\Program Files\Gadu-Gadu 10\gg.exe (GG Network S.A.) O4 - HKCU..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe (IncrediMail, Ltd.) O4 - HKCU..\Run: [Microsoft Windows Manager] C:\Documents and Settings\WKS\M-10-6897-8685-3464\winmgr.exe () O4 - HKCU..\Run: [Mjjicrtugug ddd Manager] C:\Documents and Settings\WKS\M-10-8754-86589-55555\windogz.exe File not found O4 - HKCU..\Run: [Mjjicrtuiigug ddd Manager] C:\Documents and Settings\WKS\M-10-8754-86589-55555\wiuugz.exe File not found O4 - HKCU..\Run: [Mjjicujuurtuiigug ddd Manager] C:\Documents and Settings\WKS\M-10-8754-86589-55555\uughgu.exe File not found O4 - HKCU..\RunOnce: [Shockwave Updater] C:\WINDOWS\system32\Adobe\Shockwave 11\SwHelper_1150600.exe -Update -1150600 -"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)" -"http://www8.agame.com/games/shockwave/t/traffic_slam/game_minigry_pl.htm" File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: RTHDBPL = C:\Documents and Settings\WKS\Dane aplikacji\SystemProc\lsass.exe O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation) O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control) O16 - DPF: {3D3B42C2-11BF-4732-A304-A01384B70D68} http://picasaweb.google.com/s/v/66.35/uploader2.cab (UploadListView Class) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Java Plug-in 1.6.0_02) O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.1 208.67.222.222 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2836675C-B55B-4270-AA55-4BE7FEFD8696}: DhcpNameServer = 10.0.0.1 208.67.222.222 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BD9D46FF-AA28-446A-9C63-C9D04AA0B815}: DhcpNameServer = 217.30.129.149 192.168.0.1 O18 - Protocol\Filter\x-sdch {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll (Google Inc.) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\SYSTEM32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.) O24 - Desktop Components:0 () - file:///C:/DOCUME~1/WKS/USTAWI~1/Temp/msohtml1/01/clip_image002.gif O24 - Desktop Components:1 (Moja bieżąca strona główna) - About:Home O24 - Desktop Components:2 () - http://www.namefunk.com/ O24 - Desktop WallPaper: C:\Documents and Settings\WKS\Dane aplikacji\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\WKS\Dane aplikacji\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp O30 - LSA: Authentication Packages - (nwprovau) - C:\WINDOWS\System32\nwprovau.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-01-11 20:11:07 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{56cc1736-e0c7-11dd-993f-00e04c10b10a}\Shell - "" = AutoRun O33 - MountPoints2\{56cc1736-e0c7-11dd-993f-00e04c10b10a}\Shell\AutoRun\command - "" = G:\autorun.exe O33 - MountPoints2\{5ba3e228-e8ac-11dd-9989-00e04c10b10a}\Shell\AutoRun\command - "" = H:\x.cmd O33 - MountPoints2\{5ba3e228-e8ac-11dd-9989-00e04c10b10a}\Shell\open\Command - "" = H:\x.cmd O33 - MountPoints2\{61e6ef9d-e6e3-11dd-997b-00e04c10b10a}\Shell\AutoRun\command - "" = m9ma.exe O33 - MountPoints2\{61e6ef9d-e6e3-11dd-997b-00e04c10b10a}\Shell\explore\Command - "" = m9ma.exe O33 - MountPoints2\{61e6ef9d-e6e3-11dd-997b-00e04c10b10a}\Shell\open\Command - "" = m9ma.exe O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-08-07 16:27:25 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\WKS\Pulpit\OTL.exe [2012-08-07 16:22:38 | 000,000,000 | RHSD | C] -- C:\Documents and Settings\WKS\M-10-8754-86589-5555h5 [2012-08-06 21:57:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\WKS\Dane aplikacji\hellomoto [2012-08-04 11:40:53 | 000,000,000 | RHSD | C] -- C:\Documents and Settings\WKS\M-10-8754-86589-55555 [2012-08-03 16:52:35 | 000,000,000 | RHSD | C] -- C:\Documents and Settings\WKS\M-10-6897-8685-3464 [2012-07-25 17:44:44 | 000,000,000 | ---D | C] -- C:\Program Files\GIMP 2 [5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [31 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [3 C:\WINDOWS\System32\dllcache\*.tmp files -> C:\WINDOWS\System32\dllcache\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-08-07 16:26:38 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2012-08-07 16:24:05 | 000,044,964 | ---- | M] () -- C:\WINDOWS\System32\ativvaxx.cap [2012-08-07 16:22:07 | 000,001,026 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2012-08-07 16:22:00 | 000,000,274 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-2000478354-839522115-1426796328-1004.job [2012-08-07 15:57:40 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\WKS\Pulpit\OTL.exe [2012-08-07 15:28:08 | 000,001,124 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2000478354-839522115-1426796328-1004UA.job [2012-08-07 14:43:00 | 000,001,030 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2012-08-07 12:28:00 | 000,001,072 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2000478354-839522115-1426796328-1004Core.job [2012-08-05 16:16:00 | 000,000,282 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-2000478354-839522115-1426796328-1004.job [2012-08-05 16:11:18 | 000,000,761 | RHS- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts [2012-08-02 22:34:49 | 000,002,286 | ---- | M] () -- C:\Documents and Settings\WKS\Pulpit\Google Chrome.lnk [2012-07-30 15:37:26 | 005,085,782 | ---- | M] () -- C:\Documents and Settings\WKS\Pulpit\CHERYL - CALL MY NAME-[www_2conv_com].mp3 [2012-07-30 15:27:56 | 008,730,804 | ---- | M] () -- C:\Documents and Settings\WKS\Pulpit\Spencer & Hill & Nadia Ali - Believe It (Cazzette's Androids Sound Hot Remix)-[www_2conv_com].mp3 [2012-07-30 15:09:38 | 007,780,992 | ---- | M] () -- C:\Documents and Settings\WKS\Pulpit\Skylar Grey vs_ Dirty South - Invisible (TON!C Bootleg)-[www_2conv_com].mp3 [2012-07-30 14:53:32 | 005,080,140 | ---- | M] () -- C:\Documents and Settings\WKS\Pulpit\Mirami feat_ LayZee - Summer Dreams (Radio Edit)-[www_2conv_com].mp3 [2012-07-30 14:47:50 | 005,488,277 | ---- | M] () -- C:\Documents and Settings\WKS\Pulpit\Liviu Hodor feat Mona - Sweet Love Bodybangers Remix (Koxikk edit)-[www_2conv_com].mp3 [2012-07-21 23:06:37 | 000,457,565 | ---- | M] () -- C:\Documents and Settings\WKS\Pulpit\adi3.jpg [2012-07-21 22:53:40 | 000,048,000 | ---- | M] () -- C:\Documents and Settings\WKS\Pulpit\adi2.jpg [2012-07-15 19:07:09 | 001,984,282 | ---- | M] () -- C:\Documents and Settings\WKS\Pulpit\adi1.jpg [2012-07-15 19:05:04 | 000,099,100 | ---- | M] () -- C:\Documents and Settings\WKS\Pulpit\adi.jpg [2012-07-15 18:59:26 | 000,115,557 | ---- | M] () -- C:\Documents and Settings\WKS\Pulpit\2012-07-15 17.21.36.jpg [2012-07-15 18:07:12 | 001,999,159 | ---- | M] () -- C:\Documents and Settings\WKS\Pulpit\2012-07-15 17.30.55.jpg [2012-07-15 18:06:52 | 002,473,080 | ---- | M] () -- C:\Documents and Settings\WKS\Pulpit\2012-07-15 17.30.31.jpg [2012-07-15 17:59:52 | 000,017,920 | ---- | M] () -- C:\Documents and Settings\WKS\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-07-15 17:53:06 | 002,473,781 | ---- | M] () -- C:\Documents and Settings\WKS\Pulpit\2012-07-15 17.18.00.jpg [2012-07-15 17:52:44 | 002,419,690 | ---- | M] () -- C:\Documents and Settings\WKS\Pulpit\2012-07-15 17.17.31.jpg [2012-07-15 17:52:26 | 002,197,312 | ---- | M] () -- C:\Documents and Settings\WKS\Pulpit\2012-07-15 17.16.22.jpg [2012-07-15 17:52:08 | 002,529,836 | ---- | M] () -- C:\Documents and Settings\WKS\Pulpit\2012-07-15 17.16.02.jpg [2012-07-15 17:47:06 | 001,852,625 | ---- | M] () -- C:\Documents and Settings\WKS\Pulpit\2012-07-15 17.22.00.jpg [2012-07-15 17:45:08 | 002,154,098 | ---- | M] () -- C:\Documents and Settings\WKS\Pulpit\2012-07-15 17.32.06.jpg [2012-07-15 17:44:20 | 001,302,868 | ---- | M] () -- C:\Documents and Settings\WKS\Pulpit\2012-07-15 17.32.35.jpg [2012-07-13 12:09:44 | 000,184,320 | ---- | M] () -- C:\Documents and Settings\WKS\Moje dokumenty\cu.jpg [2012-07-11 15:58:52 | 000,125,320 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2012-07-11 13:00:39 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2012-07-09 21:14:40 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [31 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [3 C:\WINDOWS\System32\dllcache\*.tmp files -> C:\WINDOWS\System32\dllcache\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-07-30 15:36:33 | 005,085,782 | ---- | C] () -- C:\Documents and Settings\WKS\Pulpit\CHERYL - CALL MY NAME-[www_2conv_com].mp3 [2012-07-30 15:25:53 | 008,730,804 | ---- | C] () -- C:\Documents and Settings\WKS\Pulpit\Spencer & Hill & Nadia Ali - Believe It (Cazzette's Androids Sound Hot Remix)-[www_2conv_com].mp3 [2012-07-30 15:08:19 | 007,780,992 | ---- | C] () -- C:\Documents and Settings\WKS\Pulpit\Skylar Grey vs_ Dirty South - Invisible (TON!C Bootleg)-[www_2conv_com].mp3 [2012-07-30 14:52:33 | 005,080,140 | ---- | C] () -- C:\Documents and Settings\WKS\Pulpit\Mirami feat_ LayZee - Summer Dreams (Radio Edit)-[www_2conv_com].mp3 [2012-07-30 14:46:50 | 005,488,277 | ---- | C] () -- C:\Documents and Settings\WKS\Pulpit\Liviu Hodor feat Mona - Sweet Love Bodybangers Remix (Koxikk edit)-[www_2conv_com].mp3 [2012-07-25 17:47:45 | 000,000,734 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\GIMP 2.lnk [2012-07-21 23:06:36 | 000,457,565 | ---- | C] () -- C:\Documents and Settings\WKS\Pulpit\adi3.jpg [2012-07-21 22:53:40 | 000,048,000 | ---- | C] () -- C:\Documents and Settings\WKS\Pulpit\adi2.jpg [2012-07-15 19:07:08 | 001,984,282 | ---- | C] () -- C:\Documents and Settings\WKS\Pulpit\adi1.jpg [2012-07-15 19:05:04 | 000,099,100 | ---- | C] () -- C:\Documents and Settings\WKS\Pulpit\adi.jpg [2012-07-15 18:56:11 | 001,999,159 | ---- | C] () -- C:\Documents and Settings\WKS\Pulpit\2012-07-15 17.30.55.jpg [2012-07-15 18:56:08 | 002,473,080 | ---- | C] () -- C:\Documents and Settings\WKS\Pulpit\2012-07-15 17.30.31.jpg [2012-07-15 18:56:06 | 001,852,625 | ---- | C] () -- C:\Documents and Settings\WKS\Pulpit\2012-07-15 17.22.00.jpg [2012-07-15 18:56:04 | 000,115,557 | ---- | C] () -- C:\Documents and Settings\WKS\Pulpit\2012-07-15 17.21.36.jpg [2012-07-15 17:57:51 | 002,419,690 | ---- | C] () -- C:\Documents and Settings\WKS\Pulpit\2012-07-15 17.17.31.jpg [2012-07-15 17:57:49 | 002,197,312 | ---- | C] () -- C:\Documents and Settings\WKS\Pulpit\2012-07-15 17.16.22.jpg [2012-07-15 17:57:48 | 001,302,868 | ---- | C] () -- C:\Documents and Settings\WKS\Pulpit\2012-07-15 17.32.35.jpg [2012-07-15 17:57:38 | 002,473,781 | ---- | C] () -- C:\Documents and Settings\WKS\Pulpit\2012-07-15 17.18.00.jpg [2012-07-15 17:57:27 | 002,529,836 | ---- | C] () -- C:\Documents and Settings\WKS\Pulpit\2012-07-15 17.16.02.jpg [2012-07-15 17:47:50 | 002,154,098 | ---- | C] () -- C:\Documents and Settings\WKS\Pulpit\2012-07-15 17.32.06.jpg [2012-07-13 12:09:23 | 000,184,320 | ---- | C] () -- C:\Documents and Settings\WKS\Moje dokumenty\cu.jpg [2012-07-02 21:34:11 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\qt_temp.tx1296.png [2012-06-30 22:10:25 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1190677.JPG [2012-06-30 22:09:35 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1190688 — skrót.lnk [2012-06-30 22:06:22 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1210731.JPG [2012-06-30 22:02:41 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1210730.JPG [2012-06-30 21:57:56 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1210725.JPG [2012-06-30 21:56:07 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1210724.JPG [2012-06-30 21:53:59 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1210723.JPG [2012-06-30 21:51:08 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1210722.JPG [2012-06-30 21:49:05 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1210720.JPG [2012-06-30 21:47:01 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1210718.JPG [2012-06-30 21:45:18 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1210717.JPG [2012-06-30 21:43:28 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1210716.JPG [2012-06-30 21:41:49 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1210715.JPG [2012-06-30 21:40:31 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1210705.JPG [2012-06-30 21:39:02 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1210702.JPG [2012-06-30 21:37:30 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1210700.JPG [2012-06-30 21:35:03 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1210699.JPG [2012-06-30 21:32:22 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1210691.JPG [2012-06-30 21:29:53 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1210690.JPG [2012-06-30 21:27:35 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1210689.JPG [2012-06-30 21:26:26 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\cu.jpg [2012-06-27 15:32:50 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200961.JPG [2012-06-19 20:32:50 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1210463.JPG [2012-06-19 20:32:20 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1210460.JPG [2012-06-19 20:31:58 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1210459.JPG [2012-06-07 13:07:53 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1210427.JPG [2012-06-07 13:07:17 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1210431.JPG [2012-06-07 12:14:17 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1210440.JPG [2012-06-07 12:13:29 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1210441.JPG [2012-06-05 21:28:10 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1210339.JPG [2012-05-28 21:20:28 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\xx.JPG [2012-05-28 21:20:19 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\x.JPG [2012-05-23 20:28:48 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\DSC04449.JPG [2012-05-23 20:28:26 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\DSC04448.JPG [2012-05-19 17:37:53 | 001,443,840 | ---- | C] () -- C:\Program Files\admiral.dff [2012-05-19 17:37:53 | 000,722,972 | ---- | C] () -- C:\Program Files\admiral.txd [2012-05-19 17:37:53 | 000,293,766 | ---- | C] () -- C:\Program Files\alfaromeo159.jpg [2012-05-19 17:36:44 | 001,065,661 | ---- | C] () -- C:\Program Files\13-02-2012_www_ModBase_PL_1328636401_Alfa_Romeo_159.rar [2012-05-18 21:28:07 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\2012_05_18_21_26_05_493.jpg [2012-05-16 16:46:07 | 000,000,952 | -HS- | C] () -- C:\WINDOWS\System32\KGyGaAvL.sys [2012-05-05 17:02:50 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\Zdjęcie0007.jpg [2012-04-28 22:19:38 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200735.JPG [2012-04-28 22:17:00 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200736.JPG [2012-04-28 22:13:54 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200747.JPG [2012-04-28 22:10:15 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200715.JPG [2012-04-28 22:07:41 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200734.JPG [2012-04-28 22:04:36 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200730.JPG [2012-04-24 12:13:18 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200439.JPG [2012-04-24 12:10:54 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200425.JPG [2012-04-24 12:08:15 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200440.JPG [2012-04-24 12:04:00 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200441.JPG [2012-04-24 11:58:30 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200437.JPG [2012-04-24 11:54:21 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200448.JPG [2012-04-24 11:48:07 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200442.JPG [2012-04-24 11:44:52 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200443.JPG [2012-04-24 11:41:28 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200446.JPG [2012-04-24 11:33:32 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200417.JPG [2012-04-24 11:30:22 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200422.JPG [2012-04-24 11:27:34 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200420.JPG [2012-04-23 21:41:22 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200445.JPG [2012-04-20 21:39:11 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\Obraz 030.jpg [2012-04-20 21:37:21 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\Obraz 028.jpg [2012-04-19 20:16:13 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200419.JPG [2012-04-15 13:31:18 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200335.JPG [2012-04-15 13:27:45 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200370.JPG [2012-04-15 13:22:53 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200406.JPG [2012-04-15 13:18:03 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200379.JPG [2012-04-15 13:11:35 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200380.JPG [2012-04-15 13:06:56 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200341.JPG [2012-04-15 13:00:18 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200345.JPG [2012-04-15 12:57:10 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200342.JPG [2012-04-15 12:53:50 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200330.JPG [2012-04-15 12:50:43 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200329.JPG [2012-04-14 21:14:13 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200344.JPG [2012-04-14 21:11:07 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200332.JPG [2012-04-14 21:06:09 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200340.JPG [2012-04-14 21:00:53 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200369.JPG [2012-04-14 20:56:21 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200364.JPG [2012-04-14 20:49:11 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200412.JPG [2012-04-14 20:43:50 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200423.JPG [2012-04-14 20:39:35 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200421.JPG [2012-04-14 20:35:06 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200413.JPG [2012-04-14 20:30:04 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200424.JPG [2012-04-14 20:24:49 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1200343.JPG [2012-03-05 17:52:28 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1190702.JPG [2012-03-05 17:23:32 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1190642.JPG [2012-03-05 17:16:52 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1190902.JPG [2012-03-05 17:13:41 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1190693.JPG [2012-03-05 17:10:15 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1190641.JPG [2012-03-05 17:06:44 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1190752.JPG [2012-03-05 17:03:46 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1190836.JPG [2012-03-05 17:00:15 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1190640.JPG [2012-03-05 16:55:39 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1190675.JPG [2012-03-04 22:53:25 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1190850.JPG [2012-03-04 22:50:36 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1190795.JPG [2012-03-04 22:46:02 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1190877.JPG [2012-03-04 22:34:32 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1190831.JPG [2012-03-04 22:29:53 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1190825.JPG [2012-03-04 22:23:37 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1190833.JPG [2012-03-04 22:18:04 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1190900.JPG [2012-03-04 22:17:22 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1190910.JPG [2012-03-04 11:31:32 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1190860.JPG [2012-03-02 13:10:14 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1190513.JPG [2012-03-02 13:05:12 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1190599 (2).JPG [2012-03-02 13:05:01 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1190567 (2).JPG [2012-03-02 13:04:48 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1190570.JPG [2012-03-02 13:04:37 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1190537.JPG [2012-03-02 13:04:20 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1190569.JPG [2012-03-02 13:04:10 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\l_nbigl.JPG [2012-03-02 13:03:30 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P1190518.JPG [2012-02-27 21:46:17 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\Zdjęcie0043.jpg [2012-02-27 21:45:29 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\Zdjęcie0044.jpg [2012-02-27 21:43:56 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\Zdjęcie0045.jpg [2012-02-16 13:24:24 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll [2012-01-08 22:06:30 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P200110_15.490002.jpg [2012-01-08 21:50:50 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\74.png [2011-12-22 17:10:45 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\20111222523.JPG [2011-12-22 17:10:05 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\20111222524.JPG [2011-12-06 21:42:41 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\15. Stodo Records - Pendemic.mp3 [2011-12-06 21:39:10 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\mro próba.wmv [2011-12-06 21:17:05 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\Stodo Records - Hustla.mp3 [2011-11-03 17:16:13 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\6.jpg [2011-07-20 21:04:01 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\P110711_19.22.jpg [2011-07-20 20:56:15 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\SDC10339.JPG [2011-07-17 21:59:34 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\SDC10342.JPG [2011-06-13 21:32:51 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\domciu.JPG [2011-06-04 21:16:30 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\Film0028.mp4 [2011-05-30 21:31:50 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\aniaa.jpg [2011-05-30 21:31:10 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\ania19.jpg [2011-05-30 21:30:09 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\ania18.jpg [2011-05-30 21:29:00 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\ania17.jpg [2011-05-30 21:28:23 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\ania16.jpg [2011-05-30 21:28:02 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\ania15.jpg [2011-05-30 21:27:24 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\ania14.jpg [2011-05-30 21:26:56 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\ania13.jpg [2011-05-30 21:26:26 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\ania12.jpg [2011-05-30 21:25:59 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\ania11.jpg [2011-05-30 21:25:39 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\ania10.jpg [2011-05-30 21:24:24 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\ania9.jpg [2011-05-30 21:24:00 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\ania7.jpg [2011-05-30 21:15:36 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\Ania [2011-05-30 21:12:03 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\PROSZĘ [2011-05-29 22:23:25 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\spiochy.jpg [2011-05-29 22:23:04 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\mamamam.jpg [2011-05-29 22:22:30 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\nanana.jpg [2011-05-29 22:20:13 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\aniuu.jpg [2011-05-29 22:18:37 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\najzajebistrz.jpg [2011-05-29 22:17:42 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\ANNAA.jpg [2011-05-29 22:15:36 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\anianajs.jpg [2011-05-29 22:14:19 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\ania2.jpg [2011-05-29 22:14:14 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\ania4.jpg [2011-05-29 22:14:12 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\ania5.jpg [2011-05-29 22:14:09 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\ania6.jpg [2011-05-29 22:14:04 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\ania3.jpg [2011-03-17 00:36:38 | 000,081,936 | ---- | C] () -- C:\WINDOWS\System32\RtNicProp32.dll [2011-03-16 00:17:38 | 000,593,920 | ---- | C] () -- C:\WINDOWS\System32\ati2sgag.exe [2011-03-15 23:50:36 | 000,000,704 | ---- | C] () -- C:\WINDOWS\unins000.dat [2011-03-14 22:10:18 | 000,000,139 | ---- | C] () -- C:\Documents and Settings\WKS\Dane aplikacji\mainhst.zgh [2011-03-13 23:05:47 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin [2011-03-13 23:03:45 | 003,107,788 | R--- | C] () -- C:\WINDOWS\System32\ativvaxx.dat [2011-03-13 23:03:45 | 003,107,788 | R--- | C] () -- C:\WINDOWS\System32\ativva5x.dat [2011-03-13 23:03:45 | 000,887,724 | R--- | C] () -- C:\WINDOWS\System32\ativva6x.dat [2011-03-13 23:03:45 | 000,174,818 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat [2011-03-13 21:40:05 | 000,000,552 | ---- | C] () -- C:\WINDOWS\System32\d3d8caps.dat [2010-10-01 19:43:10 | 000,000,000 | ---- | C] () -- C:\WINDOWS\strongSS.ini [2010-05-07 22:28:26 | 000,000,902 | ---- | C] () -- C:\Documents and Settings\WKS\.recently-used.xbel [2009-06-08 20:52:13 | 000,017,920 | ---- | C] () -- C:\Documents and Settings\WKS\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-05-03 15:47:27 | 000,000,683 | ---- | C] () -- C:\Documents and Settings\WKS\Config.ini [2009-03-25 18:47:26 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\WKS\Obraz.gif [2009-01-31 16:23:04 | 000,000,096 | ---- | C] () -- C:\Documents and Settings\WKS\default.pls [color=#E56717]========== LOP Check ==========[/color] [2011-11-06 15:47:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Babylon [2009-01-12 18:38:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite [2009-12-22 14:09:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Electronic Arts [2010-04-06 20:03:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10 [2011-11-06 15:54:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\IM [2011-04-26 13:07:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\IMinent [2011-11-06 15:53:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\IncrediMail [2010-06-06 14:16:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla [2011-08-05 15:02:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM [2009-02-28 03:24:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP [2009-01-12 18:32:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\WinZip [2012-03-13 18:18:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WKS\Dane aplikacji\Anthropics [2011-11-06 15:47:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WKS\Dane aplikacji\Babylon [2012-02-24 22:31:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WKS\Dane aplikacji\BabylonToolbar [2011-12-09 22:21:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WKS\Dane aplikacji\com.adobe.downloadassistant.AdobeDownloadAssistant [2012-02-24 21:47:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WKS\Dane aplikacji\Complitly [2009-01-23 13:28:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WKS\Dane aplikacji\DAEMON Tools [2009-05-22 23:27:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WKS\Dane aplikacji\DAEMON Tools Lite [2009-05-22 15:56:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WKS\Dane aplikacji\DAEMON Tools Pro [2011-04-26 13:16:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WKS\Dane aplikacji\facemoods.com [2009-12-28 18:29:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WKS\Dane aplikacji\FrostWire [2012-05-07 19:25:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WKS\Dane aplikacji\Funmoods [2009-01-23 13:28:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WKS\Dane aplikacji\Gadu-Gadu [2012-06-29 10:36:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WKS\Dane aplikacji\Gadu-Gadu 10 [2010-10-08 21:10:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WKS\Dane aplikacji\GetRightToGo [2012-08-06 21:57:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WKS\Dane aplikacji\hellomoto [2010-06-06 14:23:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WKS\Dane aplikacji\ipla [2009-12-22 19:26:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WKS\Dane aplikacji\Leadertech [2009-12-13 21:01:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WKS\Dane aplikacji\MaxTV Technologies [2009-07-05 18:20:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WKS\Dane aplikacji\NetMedia Providers [2010-06-10 14:02:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WKS\Dane aplikacji\Nowe Gadu-Gadu [2009-08-04 22:12:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WKS\Dane aplikacji\OpenFM [2011-03-26 22:03:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WKS\Dane aplikacji\PhotoFiltre Studio X [2011-11-22 15:52:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WKS\Dane aplikacji\PhotoScape [2012-08-07 15:27:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WKS\Dane aplikacji\PriceGong [2009-07-05 18:20:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WKS\Dane aplikacji\Publish Providers [2009-03-27 00:48:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WKS\Dane aplikacji\PWNEncy2007 [2009-07-05 18:23:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WKS\Dane aplikacji\Sony [2012-05-07 18:23:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WKS\Dane aplikacji\SumatraPDF [2010-08-02 21:36:10 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\WKS\Dane aplikacji\SystemProc [2011-04-26 13:07:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WKS\Dane aplikacji\Toolbar4 [2011-03-14 22:33:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WKS\Dane aplikacji\ZipGenius [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:DFC5A2B2 < End of report >