OTL logfile created on: 2012-08-10 18:11:11 - Run 1 OTL by OldTimer - Version 3.2.56.0 Folder = C:\cdwr\software Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 7.0.5730.13) Locale: 00000415 | Country: Poland | Language: PLK | Date Format: yyyy-MM-dd 2,97 Gb Total Physical Memory | 2,63 Gb Available Physical Memory | 88,68% Memory free 4,81 Gb Paging File | 4,70 Gb Available in Paging File | 97,72% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 149,04 Gb Total Space | 23,53 Gb Free Space | 15,79% Space Free | Partition Type: NTFS Computer Name: DNAROJCZYK | User Name: dn429663 | NOT logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-08-10 18:10:22 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\cdwr\software\OTL.exe PRC - [2011-08-31 20:07:00 | 000,148,520 | ---- | M] (McAfee, Inc.) -- C:\WINDOWS\system32\mfevtps.exe PRC - [2009-10-22 13:37:14 | 000,141,864 | ---- | M] (ActivIdentity) -- C:\Program Files\ActivIdentity\ActivClient\acevents.exe PRC - [2008-04-14 05:42:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2009-10-22 13:37:35 | 000,114,688 | ---- | M] () -- C:\WINDOWS\system32\aicext.dll MOD - [2008-03-31 14:30:34 | 002,842,624 | ---- | M] () -- C:\WINDOWS\system32\btwicons.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [On_Demand | Stopped] -- C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE -- (LiveUpdate) SRV - [2012-06-20 12:31:27 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2012-01-04 13:32:36 | 000,718,888 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2011-09-29 22:10:10 | 007,587,744 | ---- | M] (Iron Mountain Incorporated) [Auto | Stopped] -- C:\Program Files\PC Backup\AgentService.exe -- (AgentService) SRV - [2011-08-31 20:07:00 | 000,148,520 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\WINDOWS\system32\mfevtps.exe -- (mfevtp) SRV - [2011-08-31 20:07:00 | 000,147,984 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe -- (McShield) SRV - [2011-08-31 20:07:00 | 000,066,880 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe -- (McTaskManager) SRV - [2011-08-31 20:07:00 | 000,022,816 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Program Files\McAfee\VirusScan Enterprise\EngineServer.exe -- (McAfeeEngineService) SRV - [2011-05-19 16:05:00 | 000,120,128 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Program Files\McAfee\Common Framework\FrameworkService.exe -- (McAfeeFramework) SRV - [2010-11-27 01:55:42 | 000,398,176 | ---- | M] (Sony Corporation) [Auto | Stopped] -- C:\Program Files\Sony\PMB\PMBDeviceInfoProvider.exe -- (PMBDeviceInfoProvider) SRV - [2010-08-19 02:09:31 | 000,075,608 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Microsoft Forefront Identity Manager\2010\Password Reset Client Service\PwdMgmtProxy.exe -- (FIMPasswordReset) SRV - [2010-06-15 11:50:48 | 001,498,224 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Program Files\McAfee\Host Intrusion Prevention\FireSvc.exe -- (enterceptAgent) SRV - [2010-04-21 04:17:06 | 000,333,544 | ---- | M] (Hewlett-Packard) [Auto | Stopped] -- C:\Program Files\Hewlett-Packard\PC COE 3\OV CMS\radstgms.exe -- (Radstgms) SRV - [2010-04-21 04:16:33 | 000,190,184 | ---- | M] (Hewlett-Packard) [Auto | Stopped] -- C:\Program Files\Hewlett-Packard\PC COE 3\OV CMS\radsched.exe -- (radsched) SRV - [2010-04-21 04:13:00 | 000,300,776 | ---- | M] (Hewlett-Packard) [Auto | Stopped] -- C:\Program Files\Hewlett-Packard\PC COE 3\OV CMS\radexecd.exe -- (radexecd) SRV - [2010-03-10 15:26:48 | 000,189,728 | ---- | M] (Protexis Inc.) [Auto | Stopped] -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2) SRV - [2010-01-26 17:57:22 | 000,035,696 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Program Files\McAfee\Host Intrusion Prevention\HIPSCore\HIPSvc.exe -- (hips) SRV - [2009-12-16 20:31:06 | 000,222,528 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Program Files\McAfee\SiteAdvisor Enterprise\McSACore.exe -- (McAfee SiteAdvisor Enterprise Service) SRV - [2009-10-22 13:38:08 | 000,046,120 | ---- | M] (ActivIdentity) [Auto | Stopped] -- C:\Program Files\ActivIdentity\ActivClient\acautoup.exe -- (acautoup) SRV - [2009-10-22 13:37:14 | 000,198,184 | ---- | M] (ActivIdentity) [Auto | Stopped] -- C:\Program Files\ActivIdentity\ActivClient\accoca.exe -- (accoca) SRV - [2009-09-25 23:32:18 | 000,189,736 | ---- | M] (Seagate Technology LLC) [Auto | Stopped] -- C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe -- (FreeAgentGoNext Service) SRV - [2008-06-20 22:37:30 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON) SRV - [2007-12-11 21:15:04 | 000,012,800 | ---- | M] (Agere Systems) [Auto | Stopped] -- C:\WINDOWS\system32\agrsmsvc.exe -- (AgereModemAudio) SRV - [2007-01-04 19:48:52 | 000,112,152 | R--- | M] (InterVideo) [Auto | Stopped] -- C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe -- (IviRegMgr) SRV - [2001-12-21 17:31:22 | 000,053,248 | ---- | M] () [Auto | Stopped] -- C:\Program Files\Common Files\YDP\UserAccessManager\useraccess.exe -- (UserAccess) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - [2011-11-01 10:07:26 | 000,018,176 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd) DRV - [2011-11-01 10:07:26 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt) DRV - [2011-11-01 10:07:26 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev) DRV - [2011-11-01 10:07:24 | 000,023,168 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc) DRV - [2011-09-29 22:10:10 | 000,045,384 | ---- | M] () [File_System | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LV_Tracker.sys -- (LV_Tracker) DRV - [2011-08-31 20:07:00 | 000,461,864 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\mfehidk.sys -- (mfehidk) DRV - [2011-08-31 20:07:00 | 000,180,072 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mfeavfk.sys -- (mfeavfk) DRV - [2011-08-31 20:07:00 | 000,119,808 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mfeapfk.sys -- (mfeapfk) DRV - [2011-08-31 20:07:00 | 000,089,624 | ---- | M] (McAfee, Inc.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\mfetdi2k.sys -- (mfetdi2k) DRV - [2011-08-31 20:07:00 | 000,087,808 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mferkdet.sys -- (mferkdet) DRV - [2011-08-31 20:07:00 | 000,065,960 | ---- | M] (McAfee, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\drivers\mfetdik.sys -- (mfetdik) DRV - [2011-08-31 20:07:00 | 000,059,288 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mfebopk.sys -- (mfebopk) DRV - [2011-05-13 04:21:06 | 000,136,808 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadmdm.sys -- (ssadmdm) DRV - [2011-05-13 04:21:06 | 000,121,064 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadbus.sys -- (ssadbus) DRV - [2011-05-13 04:21:06 | 000,114,280 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadserd.sys -- (ssadserd) DRV - [2011-05-13 04:21:06 | 000,012,776 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadmdfl.sys -- (ssadmdfl) DRV - [2011-05-13 04:21:04 | 000,030,312 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadadb.sys -- (androidusb) DRV - [2010-11-25 23:42:46 | 000,117,504 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ewusbnet.sys -- (ewusbnet) DRV - [2010-11-25 23:42:46 | 000,106,496 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ewusbmdm.sys -- (hwdatacard) DRV - [2010-11-25 23:42:46 | 000,072,832 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ew_jubusenum.sys -- (huawei_enumerator) DRV - [2010-11-25 23:42:44 | 000,102,784 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ew_hwusbdev.sys -- (ew_hwusbdev) DRV - [2010-06-15 11:49:08 | 000,030,824 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\firelm01.sys -- (firelm01) DRV - [2010-06-15 11:49:02 | 000,145,616 | ---- | M] (McAfee, Inc.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\FireTDI.sys -- (FireTDI) DRV - [2010-06-15 11:48:58 | 000,137,536 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\FirePM.sys -- (FirePM) DRV - [2010-01-26 17:57:02 | 000,035,552 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HIPQK.sys -- (HIPQK) DRV - [2010-01-26 17:56:48 | 000,038,680 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HIPPSK.sys -- (HIPPSK) DRV - [2010-01-26 17:56:32 | 000,107,960 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HIPK.sys -- (HIPK) DRV - [2009-09-10 23:20:20 | 000,029,072 | ---- | M] (Hewlett Packard) [File_System | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\radiamsi.sys -- (RadiaMsi) DRV - [2009-03-04 12:31:00 | 004,202,496 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NETw5x32.sys -- (NETw5x32) DRV - [2008-11-25 18:16:12 | 000,123,952 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SYMEVENT.SYS -- (SymEvent) DRV - [2008-10-17 15:26:24 | 000,044,680 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\firehk.sys -- (FirehkMP) DRV - [2008-10-17 15:26:24 | 000,044,680 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\firehk.sys -- (Firehk) DRV - [2008-08-26 09:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2008-07-08 19:45:54 | 000,038,632 | ---- | M] (Symantec Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\WGX.SYS -- (WGX) DRV - [2008-06-03 07:49:04 | 002,881,536 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag) DRV - [2008-05-13 09:30:34 | 000,475,520 | ---- | M] (AuthenTec, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ATSwpWDF.sys -- (ATSwpWDF) DRV - [2008-04-03 18:40:44 | 000,879,624 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL) DRV - [2008-04-03 18:40:44 | 000,074,688 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB) DRV - [2008-04-03 18:40:44 | 000,037,424 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btport.sys -- (BTDriver) DRV - [2008-03-31 18:04:30 | 000,023,040 | ---- | M] (Hewlett-Packard Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Accelerometer.sys -- (Accelerometer) DRV - [2008-03-31 18:04:30 | 000,017,664 | ---- | M] (Hewlett-Packard Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\hpdskflt.sys -- (hpdskflt) DRV - [2008-03-28 12:14:02 | 000,024,064 | ---- | M] (Sonic Focus, Inc) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sfaudio.sys -- (SFAUDIO) DRV - [2008-03-01 01:13:38 | 001,202,560 | ---- | M] (Agere Systems) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem) DRV - [2008-02-15 19:42:42 | 000,046,592 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\rimmptsk.sys -- (rimmptsk) DRV - [2008-02-15 17:21:00 | 000,243,856 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\e1y5132.sys -- (e1yexpress) DRV - [2007-07-16 23:29:43 | 000,020,504 | R--- | M] (Hewlett Packard) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hpfxfax.sys -- (HPFXFAX) DRV - [2007-07-16 23:29:33 | 000,017,432 | R--- | M] (Hewlett Packard) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hpfxbulk.sys -- (HPFXBULK) DRV - [2007-06-26 11:06:42 | 000,013,619 | ---- | M] (ActivCard) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\akbus.sys -- (akbus) DRV - [2007-06-26 11:06:42 | 000,010,161 | ---- | M] (ActivIdentity) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\akspcsc.sys -- (akspcsc) DRV - [2007-06-26 11:06:42 | 000,009,493 | ---- | M] (ActivCard) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\akpcsc.sys -- (akpcsc) DRV - [2007-06-18 17:12:04 | 000,016,768 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HpqKbFiltr.sys -- (HpqKbFiltr) DRV - [2007-04-06 12:46:50 | 000,013,647 | ---- | M] (ActivIdentity) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\aksbus.sys -- (aksbus) DRV - [2007-04-04 21:16:20 | 000,041,216 | ---- | M] (Infineon Technologies AG) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ifxtpm.sys -- (IFXTPM) DRV - [2006-12-20 03:08:00 | 000,047,616 | ---- | M] (RICOH Company, Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\rismc32.sys -- (rismc32) DRV - [2006-06-28 10:54:00 | 000,009,472 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\CPQBttn.sys -- (HBtnKey) DRV - [2005-11-01 14:00:46 | 000,092,288 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\drivers\symmpi.sys -- (Symmpi) DRV - [2005-01-24 13:24:00 | 000,186,112 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\b57xp32.sys -- (b57w2k) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://athp.hp.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [Binary data over 100 bytes] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [Binary data over 100 bytes] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://athp.hp.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Update_Check_Page = http://inline.compaq.com/im/is/ect/ctp/ie/addon.asp IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://athp.hp.com IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.portal.hp.com/search/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKCU\..\SearchScopes,DefaultScope = {14B3DB8D-BA02-4A2C-97CB-1022BBCE045C} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKCU\..\SearchScopes\{14B3DB8D-BA02-4A2C-97CB-1022BBCE045C}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage} IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.cpqcorp.net; IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = web-proxy.atl.hp.com:8088 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "AutoConfigURL" = http://autocache.hp.com [color=#E56717]========== FireFox ==========[/color] FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=12.0.1.647: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=12.0.1.647: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=12.0.1.652: C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.652: C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=12.0.1.647: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\dn429663\Local Settings\Application Data\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\dn429663\Local Settings\Application Data\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\webcomponent@globalenglish.com: C:\Program Files\GlobalEnglish\Firefox\Version3\webcomponent@globalenglish.com [2010-06-18 13:16:37 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{B7082FAA-CB62-4872-9106-E42DD88EDE45}: C:\Program Files\McAfee\SiteAdvisor Enterprise\ [2012-03-23 23:07:59 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-07-08 13:20:53 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-07-26 11:11:55 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-01-26 13:54:28 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\dn429663\Application Data\Mozilla\Extensions [2012-07-23 23:20:44 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\dn429663\Application Data\Mozilla\Firefox\Profiles\zovdftt9.default\extensions [2012-07-23 11:06:44 | 000,000,000 | ---D | M] (YouTube to ALLPlayer) -- C:\Documents and Settings\dn429663\Application Data\Mozilla\Firefox\Profiles\zovdftt9.default\extensions\YouTubetoALL@ALLPlayer.org [2012-03-24 01:02:21 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2012-06-20 12:31:27 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2011-08-31 20:07:00 | 000,023,864 | ---- | M] (McAfee, Inc.) -- C:\Program Files\mozilla firefox\components\Scriptff.dll [2012-03-24 01:02:15 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2012-03-24 01:02:15 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2012-03-24 01:02:15 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2012-03-24 01:02:15 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2012-03-24 01:02:15 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2012-03-24 01:02:15 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - homepage: http://www.google.com/ CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms} CHR - homepage: http://www.google.com/ CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Documents and Settings\dn429663\Local Settings\Application Data\Google\Chrome\Application\20.0.1132.57\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\dn429663\Local Settings\Application Data\Google\Chrome\Application\20.0.1132.57\pdf.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\dn429663\Local Settings\Application Data\Google\Chrome\Application\20.0.1132.57\gcswf32.dll CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll CHR - plugin: Java Deployment Toolkit 6.0.240.7 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 6 U24 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll CHR - plugin: QuickTime Plug-in 7.5.5 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.5.5 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.5.5 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.5.5 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.5.5 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll CHR - plugin: QuickTime Plug-in 7.5.5 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll CHR - plugin: QuickTime Plug-in 7.5.5 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll CHR - plugin: RealNetworks(tm) RealPlayer Chrome Background Extension Plug-In (32-bit) (Enabled) = C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll CHR - plugin: RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) (Enabled) = C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll CHR - plugin: Google Update (Enabled) = C:\Documents and Settings\dn429663\Local Settings\Application Data\Google\Update\1.3.21.79\npGoogleUpdate3.dll CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll CHR - plugin: Default Plug-in (Enabled) = default_plugin CHR - Extension: YouTube = C:\Documents and Settings\dn429663\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.3_0\ CHR - Extension: YouTube = C:\Documents and Settings\dn429663\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: Szukaj w Google = C:\Documents and Settings\dn429663\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.16_0\ CHR - Extension: Szukaj w Google = C:\Documents and Settings\dn429663\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\ CHR - Extension: RealPlayer HTML5Video Downloader Extension = C:\Documents and Settings\dn429663\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.4_0\ CHR - Extension: Gmail = C:\Documents and Settings\dn429663\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2001-08-23 21:00:00 | 000,000,734 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer) O2 - BHO: (YouTube To ALLPlayer) - {61DB16C5-B733-43F4-872E-B20DC9E72740} - C:\Program Files\ALLPlayer\YouTubeToALLPlayer.dll (ALLPlayer.org) O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files\McAfee\SiteAdvisor Enterprise\McIEPlg.dll (McAfee, Inc.) O2 - BHO: (Vuze Remote Toolbar) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files\Vuze_Remote\prxtbVuz0.dll (Conduit Ltd.) O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\Program Files\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.) O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files\McAfee\SiteAdvisor Enterprise\McIEPlg.dll (McAfee, Inc.) O3 - HKLM\..\Toolbar: (Vuze Remote Toolbar) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files\Vuze_Remote\prxtbVuz0.dll (Conduit Ltd.) O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {00000000-0000-0000-0000-000000000000} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (Vuze Remote Toolbar) - {BA14329E-9550-4989-B3F2-9732E92D17CC} - C:\Program Files\Vuze_Remote\prxtbVuz0.dll (Conduit Ltd.) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [AccelerometerSysTrayApplet] C:\WINDOWS\system32\accelerometerST.exe (Hewlett-Packard Corporation) O4 - HKLM..\Run: [accrdsub] C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe (ActivIdentity) O4 - HKLM..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" File not found O4 - HKLM..\Run: [AgentUiRunKey] C:\Program Files\PC Backup\Agent.exe (Iron Mountain Incorporated) O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) O4 - HKLM..\Run: [COEMsgDisplay] c:\Program Files\Hewlett-Packard\PC COE\COEMsgDisplay.exe (Hewlett Packard) O4 - HKLM..\Run: [Communicator] C:\Program Files\Microsoft Office Communicator\communicator.exe (Microsoft Corporation) O4 - HKLM..\Run: [DataCardMonitor] C:\Program Files\blueconnect\DataCardMonitor.exe (Huawei Technologies Co., Ltd.) O4 - HKLM..\Run: [eepc_SmartClient] C:\Program Files\SmartClient\Smart.exe (Hewlett-Packard Company) O4 - HKLM..\Run: [GetITIcon] C:\Program Files\Hewlett-Packard\GetITIcon\GetITShell.exe (Hewlett-Packard Company) O4 - HKLM..\Run: [HPPQVideo] "C:\Program Files\HP\ScheduledLaunch\HP Color LaserJet CM2320 MFP Series\bin\hppschlnch.exe" -r SOFTWARE\Hewlett-Packard\ScheduledLaunch\CLJ_CM2320_MFP_Series -f PQOptimizerVideo.xml -o remindLater File not found O4 - HKLM..\Run: [HPRAService] C:\Program Files\RA2HP\HPRAService.exe (Hewlett-Packard Company) O4 - HKLM..\Run: [HPUsageTracking] C:\Program Files\HP\HP UT\bin\hppusg.exe () O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation) O4 - HKLM..\Run: [IDA] c:\Program Files\Hewlett-Packard\PC COE\Ida.exe (Hewlett-Packard Company) O4 - HKLM..\Run: [iPlusManager] C:\Program Files\iPlus\iPlusChecker.exe () O4 - HKLM..\Run: [MaxMenuMgr] C:\Program Files\Seagate\SeagateManager\FreeAgent Status\StxMenuMgr.exe (Seagate LLC) O4 - HKLM..\Run: [McAfee Host Intrusion Prevention Tray] C:\Program Files\McAfee\Host Intrusion Prevention\FireTray.exe (McAfee, Inc.) O4 - HKLM..\Run: [McAfeeUpdaterUI] C:\Program Files\McAfee\Common Framework\udaterui.exe (McAfee, Inc.) O4 - HKLM..\Run: [PasswordRegistration] C:\WINDOWS\system32\MsPwdRegistration.exe (Microsoft Corporation) O4 - HKLM..\Run: [PMBVolumeWatcher] C:\Program Files\Sony\PMB\PMBVolumeWatcher.exe (Sony Corporation) O4 - HKLM..\Run: [ShStatEXE] C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE (McAfee, Inc.) O4 - HKLM..\Run: [StructuredQuery] C:\Documents and Settings\dn429663\Local Settings\Application Data\Microsoft\Windows\673\StructuredQuery.exe () O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Real\RealPlayer\update\realsched.exe (RealNetworks, Inc.) O4 - HKLM..\Run: [UpdateManager] C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe (Sonic Solutions) O4 - HKLM..\Run: [WatchDog] C:\Program Files\InterVideo\DVD Check\DVDCheck.exe (InterVideo Inc.) O4 - HKLM..\Run: [XPOff2003Excempt] C:\Program Files\Hewlett-Packard\AST\XPOff2003Excempt.exe (Hewlett-Packard Company) O4 - HKCU..\Run: [Akamai NetSession Interface] C:\Documents and Settings\dn429663\Local Settings\Application Data\Akamai\netsession_win.exe (Akamai Technologies, Inc) O4 - HKCU..\Run: [ALLUpdate] C:\Program Files\ALLPlayer\ALLUpdate.exe () O4 - HKCU..\Run: [PC Suite Tray] C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe (Nokia) O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\ActivClient Agent.lnk = C:\Program Files\ActivIdentity\ActivClient\acsagent.exe (ActivIdentity) O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Aktywacja Testera.lnk = C:\Program Files\YDP\YdpDict\Watch.exe (Young Digital Poland) O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Bluetooth.lnk = C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.) O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\DVD Check.lnk = C:\Program Files\InterVideo\DVD Check\DVDCheck.exe (InterVideo Inc.) O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HD Writer.lnk = C:\Program Files\Common Files\Panasonic\HD Writer AutoStart\HDWriterAutoStart.exe (Panasonic Corporation) O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\WinZip Quick Pick.lnk = c:\WINDOWS\Installer\{9FDF923E-DB53-41E4-8CE6-8DEB8301C12E}\Icon_WZQKPICK.EXE (InstallShield Software Corp.) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoMSAppLogo5ChannelNotify = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoToolbarCustomize = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoBandCustomize = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableNT4Policy = 1 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery present O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Persistence present O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Btn_Back = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Btn_Forward = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Btn_Stop = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Btn_Refresh = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Btn_Home = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Btn_Search = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Btn_History = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Btn_Favorites = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Btn_Media = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Btn_Folders = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Btn_Fullscreen = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Btn_Tools = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Btn_MailNews = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Btn_Size = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Btn_Print = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Btn_Edit = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Btn_Discussions = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Btn_Cut = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Btn_Copy = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Btn_Paste = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Btn_Encoding = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Btn_PrintPreview = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoInternetIcon = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoNetHood = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktop = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFavoritesMenu = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWindowsUpdate = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoChangeStartMenu = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoClose = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetTaskbar = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoTrayContextMenu = 0 O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra Button: Fix Common Internet Explorer Problems - {E270AB82-96D5-45DB-ABE3-0BC038B92334} - C:\Program Files\Hewlett-Packard\IEToolBar\HP IE Fix.exe (Hewlett-Packard Company) O9 - Extra 'Tools' menuitem : Fix Common Internet Explorer Problems - {E270AB82-96D5-45DB-ABE3-0BC038B92334} - C:\Program Files\Hewlett-Packard\IEToolBar\HP IE Fix.exe (Hewlett-Packard Company) O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O15 - HKLM\..Trusted Domains: compaq.co.jp ([]http in Local intranet) O15 - HKLM\..Trusted Domains: compaq.com ([]http in Local intranet) O15 - HKLM\..Trusted Domains: compaq.com ([ie.config.asia] http in Trusted sites) O15 - HKLM\..Trusted Domains: compaq.com ([ie.config.eur] http in Trusted sites) O15 - HKLM\..Trusted Domains: compaq.com ([ie.config.im.hou] http in Trusted sites) O15 - HKLM\..Trusted Domains: compaq.com ([ie.config.jp] http in Trusted sites) O15 - HKLM\..Trusted Domains: compaq.com.ar ([]http in Local intranet) O15 - HKLM\..Trusted Domains: compaq.com.br ([]http in Local intranet) O15 - HKLM\..Trusted Domains: compaq.com.cl ([]http in Local intranet) O15 - HKLM\..Trusted Domains: compaq.com.co ([]http in Local intranet) O15 - HKLM\..Trusted Domains: compaq.com.mx ([]http in Local intranet) O15 - HKLM\..Trusted Domains: compaq.com.sg ([]http in Local intranet) O15 - HKLM\..Trusted Domains: compaq.com.ve ([]http in Local intranet) O15 - HKLM\..Trusted Domains: cpqcorp.net ([]http in Local intranet) O15 - HKLM\..Trusted Domains: dec.com ([]http in Local intranet) O15 - HKLM\..Trusted Domains: dec.com ([ie.config.ecom] http in Trusted sites) O15 - HKLM\..Trusted Domains: digital.co.uk ([]http in Local intranet) O15 - HKLM\..Trusted Domains: digital.com ([]http in Local intranet) O15 - HKLM\..Trusted Domains: hp.com ([]http in Local intranet) O15 - HKLM\..Trusted Domains: microcom.com ([]http in Local intranet) O15 - HKLM\..Trusted Domains: tandem.com ([]http in Local intranet) O15 - HKLM\..Trusted Domains: tandem.com ([ie.config] http in Trusted sites) O15 - HKCU\..Trusted Domains: citibankonline.pl ([www] https in Trusted sites) O15 - HKCU\..Trusted Domains: compaq.co.jp ([]http in Local intranet) O15 - HKCU\..Trusted Domains: compaq.com ([]http in Local intranet) O15 - HKCU\..Trusted Domains: compaq.com ([ie.config.asia] http in Trusted sites) O15 - HKCU\..Trusted Domains: compaq.com ([ie.config.eur] http in Trusted sites) O15 - HKCU\..Trusted Domains: compaq.com ([ie.config.im.hou] http in Trusted sites) O15 - HKCU\..Trusted Domains: compaq.com ([ie.config.jp] http in Trusted sites) O15 - HKCU\..Trusted Domains: compaq.com.ar ([]http in Local intranet) O15 - HKCU\..Trusted Domains: compaq.com.br ([]http in Local intranet) O15 - HKCU\..Trusted Domains: compaq.com.cl ([]http in Local intranet) O15 - HKCU\..Trusted Domains: compaq.com.co ([]http in Local intranet) O15 - HKCU\..Trusted Domains: compaq.com.mx ([]http in Local intranet) O15 - HKCU\..Trusted Domains: compaq.com.sg ([]http in Local intranet) O15 - HKCU\..Trusted Domains: compaq.com.ve ([]http in Local intranet) O15 - HKCU\..Trusted Domains: cpqcorp.net ([]http in Local intranet) O15 - HKCU\..Trusted Domains: dec.com ([]http in Local intranet) O15 - HKCU\..Trusted Domains: dec.com ([ie.config.ecom] http in Trusted sites) O15 - HKCU\..Trusted Domains: digital.co.uk ([]http in Local intranet) O15 - HKCU\..Trusted Domains: digital.com ([]http in Local intranet) O15 - HKCU\..Trusted Domains: eds.com ([]* in Trusted sites) O15 - HKCU\..Trusted Domains: hp.com ([]http in Local intranet) O15 - HKCU\..Trusted Domains: microcom.com ([]http in Local intranet) O15 - HKCU\..Trusted Domains: tandem.com ([]http in Local intranet) O15 - HKCU\..Trusted Domains: tandem.com ([ie.config] http in Trusted sites) O16 - DPF: {00000035-9593-4264-8B29-930B3E4EDCCD} https://www.rooms.hp.com/vRoom_Cab/WebHPVCInstall35.cab (HPVirtualRooms35 Class) O16 - DPF: {1851174C-97BD-4217-A0CC-E908F60D5B7A} http://h50203.www5.hp.com/HPITWeb/Customer/cabs/HPISDataManager.CAB (Hewlett-Packard Online Support Services) O16 - DPF: {5A734A13-B486-4199-AB2F-9548416187B0} https://g5t0073.atlanta.hp.com/hp/hpcertenroll.cab (hpcertenroll Control) O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1169809900876 (WUWebControl Class) O16 - DPF: {857ABA85-8AB2-4C9E-8FAA-D2A963739859} https://g5t0073.atlanta.hp.com/hp/HPPKI.cab (HPPKI Control) O16 - DPF: {888078C6-70B2-4F88-8EE7-1F50DDEA6120} https://as.photoprintit.de/ips-opdata/activex/ImageUploader6.cab (CeWe Color AG & Co. OHG Control) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {D1282B0B-3590-4E91-811D-D27D7212DE52} http://217.153.179.235/HdrWatcher.cab (HdrWatch Control) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 194.204.159.1 194.204.152.34 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = emea.cpqcorp.net O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8A1DF2F5-E8D5-4D22-9146-742F07F34D22}: DhcpNameServer = 194.204.159.1 194.204.152.34 O18 - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files\McAfee\SiteAdvisor Enterprise\McIEPlg.dll (McAfee, Inc.) O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files\McAfee\SiteAdvisor Enterprise\McIEPlg.dll (McAfee, Inc.) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: GinaDLL - (MsPwdGina.dll) - C:\WINDOWS\System32\MsPwdGina.dll (Microsoft Corporation) O20 - Winlogon\Notify\ackpbsc: DllName - (C:\WINDOWS\system32\ackpbsc.dll) - C:\WINDOWS\system32\ackpbsc.dll (ActivIdentity) O20 - Winlogon\Notify\acunlock: DllName - (C:\Program Files\ActivIdentity\ActivClient\acunlock.dll) - C:\Program Files\ActivIdentity\ActivClient\acunlock.dll (ActivIdentity) O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2007-01-26 12:45:51 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2012-01-14 21:15:40 | 000,016,408 | ---- | M] () - C:\AutoMapaSetupLog.txt -- [ NTFS ] O33 - MountPoints2\{2a1cc88a-8901-11df-a3a5-00216a5d1ff2}\Shell - "" = AutoRun O33 - MountPoints2\{2a1cc88a-8901-11df-a3a5-00216a5d1ff2}\Shell\AutoRun - "" = Auto&Play O33 - MountPoints2\{2a1cc88a-8901-11df-a3a5-00216a5d1ff2}\Shell\AutoRun\command - "" = E:\AutoRun.exe O33 - MountPoints2\{2a1cc88b-8901-11df-a3a5-00216a5d1ff2}\Shell - "" = AutoRun O33 - MountPoints2\{2a1cc88b-8901-11df-a3a5-00216a5d1ff2}\Shell\AutoRun - "" = Auto&Play O33 - MountPoints2\{2a1cc88b-8901-11df-a3a5-00216a5d1ff2}\Shell\AutoRun\command - "" = E:\AutoRun.exe O33 - MountPoints2\{4931128e-97ee-11e0-a4d5-00216a5d1ff2}\Shell\AutoRun\command - "" = E:\urDrive.exe O33 - MountPoints2\{50f2f07c-9ff1-11df-a3bb-00216a5d1ff2}\Shell - "" = AutoRun O33 - MountPoints2\{50f2f07c-9ff1-11df-a3bb-00216a5d1ff2}\Shell\AutoRun - "" = Auto&Play O33 - MountPoints2\{50f2f07c-9ff1-11df-a3bb-00216a5d1ff2}\Shell\AutoRun\command - "" = E:\AutoRun.exe O33 - MountPoints2\{8fbb3c1e-9ff2-11df-a3bc-00216a5d1ff2}\Shell - "" = AutoRun O33 - MountPoints2\{8fbb3c1e-9ff2-11df-a3bc-00216a5d1ff2}\Shell\AutoRun - "" = Auto&Play O33 - MountPoints2\{8fbb3c1e-9ff2-11df-a3bc-00216a5d1ff2}\Shell\AutoRun\command - "" = E:\AutoRun.exe O33 - MountPoints2\{8fc2f5ac-d9f4-11e0-a4f5-00216a5d1ff2}\Shell - "" = AutoRun O33 - MountPoints2\{8fc2f5ac-d9f4-11e0-a4f5-00216a5d1ff2}\Shell\AutoRun - "" = Auto&Play O33 - MountPoints2\{8fc2f5ac-d9f4-11e0-a4f5-00216a5d1ff2}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{97add307-801d-11df-a39d-00216a5d1ff2}\Shell - "" = AutoRun O33 - MountPoints2\{97add307-801d-11df-a39d-00216a5d1ff2}\Shell\AutoRun - "" = Auto&Play O33 - MountPoints2\{97add307-801d-11df-a39d-00216a5d1ff2}\Shell\AutoRun\command - "" = E:\AutoRun.exe O33 - MountPoints2\{97add30a-801d-11df-a39d-00216a5d1ff2}\Shell - "" = AutoRun O33 - MountPoints2\{97add30a-801d-11df-a39d-00216a5d1ff2}\Shell\AutoRun - "" = Auto&Play O33 - MountPoints2\{97add30a-801d-11df-a39d-00216a5d1ff2}\Shell\AutoRun\command - "" = E:\AutoRun.exe O33 - MountPoints2\{97add30c-801d-11df-a39d-00216a5d1ff2}\Shell - "" = AutoRun O33 - MountPoints2\{97add30c-801d-11df-a39d-00216a5d1ff2}\Shell\AutoRun - "" = Auto&Play O33 - MountPoints2\{97add30c-801d-11df-a39d-00216a5d1ff2}\Shell\AutoRun\command - "" = E:\AutoRun.exe O33 - MountPoints2\{97add30d-801d-11df-a39d-00216a5d1ff2}\Shell - "" = AutoRun O33 - MountPoints2\{97add30d-801d-11df-a39d-00216a5d1ff2}\Shell\AutoRun - "" = Auto&Play O33 - MountPoints2\{97add30d-801d-11df-a39d-00216a5d1ff2}\Shell\AutoRun\command - "" = E:\AutoRun.exe O33 - MountPoints2\{c89f141e-bdf2-11e0-a4ee-00216a5d1ff2}\Shell - "" = AutoRun O33 - MountPoints2\{c89f141e-bdf2-11e0-a4ee-00216a5d1ff2}\Shell\AutoRun - "" = Auto&Play O33 - MountPoints2\{c89f141e-bdf2-11e0-a4ee-00216a5d1ff2}\Shell\AutoRun\command - "" = E:\AutoRun.exe O33 - MountPoints2\{c89f1422-bdf2-11e0-a4ee-00216a5d1ff2}\Shell - "" = AutoRun O33 - MountPoints2\{c89f1422-bdf2-11e0-a4ee-00216a5d1ff2}\Shell\AutoRun - "" = Auto&Play O33 - MountPoints2\{c89f1422-bdf2-11e0-a4ee-00216a5d1ff2}\Shell\AutoRun\command - "" = F:\AutoRun.exe O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-08-10 12:51:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\dn429663\Application Data\hellomoto [2012-07-31 21:53:00 | 000,000,000 | ---D | C] -- C:\WINDOWS\Minidump [2012-07-29 22:12:23 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\crypt32.dll [2012-07-29 15:35:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Panasonic [2012-07-29 15:35:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\dn429663\Local Settings\Application Data\Panasonic [2012-07-29 14:03:08 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Panasonic [2012-07-29 14:02:53 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Synchronization Services [2012-07-29 14:02:52 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft SQL Server Compact Edition [2012-07-29 13:55:53 | 000,000,000 | ---D | C] -- C:\WINDOWS\SxsCaPendDel [2012-07-29 13:35:55 | 000,000,000 | ---D | C] -- C:\Program Files\Panasonic [2012-07-29 13:35:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Panasonic [2012-07-26 11:11:07 | 000,089,624 | ---- | C] (McAfee, Inc.) -- C:\WINDOWS\System32\drivers\mfetdi2k.sys [2012-07-23 11:06:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\NapiProjekt [2012-07-23 11:06:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\ALLConverter PRO [2012-07-23 11:06:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\dn429663\Local Settings\Application Data\ALLConverter [2012-07-23 11:06:40 | 000,000,000 | ---D | C] -- C:\Program Files\NapiProjekt [2012-07-23 11:06:38 | 000,000,000 | ---D | C] -- C:\Program Files\ALLConverter PRO [2012-07-23 10:49:20 | 031,493,971 | ---- | C] (ALLPlayer ) -- C:\Documents and Settings\dn429663\Desktop\ALLPlayerPL.exe [2012-07-22 17:29:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\dn429663\Desktop\Zdjecia do wywolania 012011 do 052012 [2012-07-13 10:26:42 | 000,000,000 | ---D | C] -- C:\Program Files\e-Deklaracje [2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-08-10 17:47:00 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2012-08-10 17:45:33 | 000,000,238 | ---- | M] () -- C:\WINDOWS\tasks\Smart Client.job [2012-08-10 17:44:37 | 000,000,278 | ---- | M] () -- C:\WINDOWS\tasks\Maint.job [2012-08-10 17:44:31 | 000,000,296 | ---- | M] () -- C:\WINDOWS\tasks\pcpm-collector.job [2012-08-10 17:43:00 | 000,000,408 | ---- | M] () -- C:\WINDOWS\tasks\NetLogonRestarter-Scheduled.job [2012-08-10 17:41:06 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1957994488-842925246-40105171-198059.job [2012-08-10 17:41:05 | 000,001,140 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1957994488-842925246-40105171-198059UA.job [2012-08-10 16:09:21 | 000,000,790 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk [2012-08-10 15:41:00 | 000,001,088 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1957994488-842925246-40105171-198059Core.job [2012-08-10 15:31:59 | 000,000,302 | ---- | M] () -- C:\WINDOWS\tasks\pcpm-consolidator.job [2012-08-10 15:31:56 | 000,000,296 | ---- | M] () -- C:\WINDOWS\tasks\sc-healthcheck.job [2012-08-10 13:02:37 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat [2012-08-10 12:05:42 | 000,002,513 | ---- | M] () -- C:\Documents and Settings\dn429663\Application Data\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Excel 2003.lnk [2012-08-10 11:43:16 | 000,002,315 | ---- | M] () -- C:\Documents and Settings\dn429663\Desktop\Google Chrome.lnk [2012-08-10 11:43:16 | 000,002,293 | ---- | M] () -- C:\Documents and Settings\dn429663\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk [2012-08-09 22:30:06 | 000,002,167 | ---- | M] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\WinZip Quick Pick.lnk [2012-08-09 22:24:55 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2012-08-04 20:37:59 | 000,000,456 | ---- | M] () -- C:\WINDOWS\tasks\Defrag-Scheduled-Weekly.job [2012-07-29 22:59:56 | 000,006,378 | RHS- | M] () -- C:\Documents and Settings\dn429663\ntuser.pol [2012-07-29 14:04:46 | 000,001,764 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\HD Writer AE 4.1.lnk [2012-07-29 14:04:40 | 000,001,825 | ---- | M] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HD Writer.lnk [2012-07-29 14:02:44 | 000,484,958 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2012-07-29 14:02:44 | 000,080,972 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2012-07-29 13:50:32 | 000,000,292 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1957994488-842925246-40105171-198059.job [2012-07-29 13:36:05 | 000,000,847 | ---- | M] () -- C:\Documents and Settings\dn429663\Desktop\X900_X909_X900M_X800 Instrukcja obsługi.lnk [2012-07-23 11:06:45 | 000,000,745 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\YouTube to ALLPlayer.lnk [2012-07-23 11:06:44 | 000,000,681 | ---- | M] () -- C:\Documents and Settings\dn429663\Application Data\Microsoft\Internet Explorer\Quick Launch\NapiProjekt.lnk [2012-07-23 11:06:44 | 000,000,663 | ---- | M] () -- C:\Documents and Settings\dn429663\Desktop\NapiProjekt.lnk [2012-07-23 11:06:41 | 000,000,797 | ---- | M] () -- C:\Documents and Settings\dn429663\Application Data\Microsoft\Internet Explorer\Quick Launch\ALLConverter PRO.lnk [2012-07-23 11:06:41 | 000,000,779 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\ALLConverter PRO.lnk [2012-07-23 10:50:35 | 000,000,700 | ---- | M] () -- C:\Documents and Settings\dn429663\Desktop\ALLPlayer.lnk [2012-07-23 10:49:31 | 031,493,971 | ---- | M] (ALLPlayer ) -- C:\Documents and Settings\dn429663\Desktop\ALLPlayerPL.exe [2012-07-20 11:43:46 | 000,002,253 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Microsoft Office Communicator 2007 R2.lnk [2012-07-13 10:26:43 | 000,000,676 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\e-Deklaracje.lnk [2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-07-29 14:04:46 | 000,001,764 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\HD Writer AE 4.1.lnk [2012-07-29 14:04:40 | 000,001,825 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HD Writer.lnk [2012-07-29 13:36:05 | 000,000,847 | ---- | C] () -- C:\Documents and Settings\dn429663\Desktop\X900_X909_X900M_X800 Instrukcja obsługi.lnk [2012-07-23 11:06:45 | 000,000,745 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\YouTube to ALLPlayer.lnk [2012-07-23 11:06:44 | 000,000,681 | ---- | C] () -- C:\Documents and Settings\dn429663\Application Data\Microsoft\Internet Explorer\Quick Launch\NapiProjekt.lnk [2012-07-23 11:06:44 | 000,000,663 | ---- | C] () -- C:\Documents and Settings\dn429663\Desktop\NapiProjekt.lnk [2012-07-23 11:06:41 | 000,000,797 | ---- | C] () -- C:\Documents and Settings\dn429663\Application Data\Microsoft\Internet Explorer\Quick Launch\ALLConverter PRO.lnk [2012-07-23 11:06:41 | 000,000,779 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\ALLConverter PRO.lnk [2012-07-23 10:50:35 | 000,000,700 | ---- | C] () -- C:\Documents and Settings\dn429663\Desktop\ALLPlayer.lnk [2012-07-23 10:50:31 | 000,644,608 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2012-07-23 10:50:31 | 000,258,048 | ---- | C] () -- C:\WINDOWS\System32\libFLAC.dll [2012-07-22 17:44:54 | 004,448,250 | ---- | C] () -- C:\Documents and Settings\dn429663\Desktop\DSC04993.JPG [2012-03-12 16:10:41 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll [2012-01-30 15:47:10 | 000,036,896 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat [2011-11-27 21:28:30 | 000,000,088 | RHS- | C] () -- C:\Documents and Settings\All Users\Application Data\9ADE89C7FE.sys [2011-11-27 21:28:29 | 000,002,828 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\KGyGaAvL.sys [2011-09-08 10:23:39 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat [2011-09-01 09:12:12 | 000,038,439 | ---- | C] () -- C:\Documents and Settings\dn429663\Application Data\Microsoft Excel.ADR [2011-04-10 17:27:27 | 000,723,981 | ---- | C] () -- C:\Documents and Settings\dn429663\Local Settings\Application Data\unins000.exe [2011-04-10 17:27:27 | 000,002,163 | ---- | C] () -- C:\Documents and Settings\dn429663\Local Settings\Application Data\unins000.dat [2010-10-04 15:06:11 | 000,009,216 | ---- | C] () -- C:\Documents and Settings\dn429663\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-09-08 23:05:22 | 000,045,384 | ---- | C] () -- C:\WINDOWS\System32\drivers\LV_Tracker.sys [2010-05-10 16:05:59 | 000,000,131 | ---- | C] () -- C:\Documents and Settings\dn429663\Local Settings\Application Data\fusioncache.dat [2010-04-12 15:28:42 | 001,056,768 | ---- | C] () -- C:\Documents and Settings\dn429663\secsetup.sdb [2009-10-22 11:39:37 | 000,006,378 | RHS- | C] () -- C:\Documents and Settings\dn429663\ntuser.pol [2008-12-01 16:19:40 | 000,017,021 | RHS- | C] () -- C:\Documents and Settings\All Users\ntuser.pol [1980-01-01 02:00:00 | 000,002,048 | -HS- | C] () -- C:\WINDOWS\Installer\{bf3724dd-2aa6-d0d0-b2e6-34143ece2f74}\@ [1980-01-01 02:00:00 | 000,002,048 | -HS- | C] () -- C:\Documents and Settings\dn429663\Local Settings\Application Data\{bf3724dd-2aa6-d0d0-b2e6-34143ece2f74}\@ < End of report >