OTL logfile created on: 20-08-2012 15:02:07 - Run 1 OTL by OldTimer - Version 3.2.58.1 Folder = E:\ Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: dd-MM-yyyy 1023,23 Mb Total Physical Memory | 143,43 Mb Available Physical Memory | 14,02% Memory free 2,41 Gb Paging File | 1,63 Gb Available in Paging File | 67,82% Paging File free Paging file location(s): C:\pagefile.sys 1536 3072 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 11,72 Gb Total Space | 0,98 Gb Free Space | 8,33% Space Free | Partition Type: NTFS Drive D: | 117,19 Gb Total Space | 7,22 Gb Free Space | 6,16% Space Free | Partition Type: NTFS Drive E: | 20,13 Gb Total Space | 1,75 Gb Free Space | 8,68% Space Free | Partition Type: NTFS Computer Name: SYKUT-28BBAC2DE | User Name: Kamil | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-08-20 14:25:10 | 000,596,480 | ---- | M] (OldTimer Tools) -- E:\OTL.exe PRC - [2012-08-04 12:18:41 | 000,800,656 | ---- | M] (Opera Software) -- C:\Program Files\Opera\pluginwrapper\opera_plugin_wrapper.exe PRC - [2012-08-04 12:18:37 | 000,874,896 | ---- | M] (Opera Software) -- C:\Program Files\Opera\opera.exe PRC - [2012-03-26 19:05:04 | 004,656,632 | ---- | M] (Almico Software (www.almico.com)) -- C:\Program Files\SpeedFan\speedfan.exe PRC - [2011-10-05 14:21:24 | 000,273,528 | ---- | M] (RealNetworks, Inc.) -- D:\Program Files\Real\RealPlayer\Update\realsched.exe PRC - [2010-04-14 19:47:08 | 002,790,472 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe PRC - [2010-04-14 19:47:05 | 000,040,384 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe PRC - [2009-12-22 04:31:26 | 000,217,088 | ---- | M] (Teruten) -- C:\WINDOWS\system32\FsUsbExService.Exe PRC - [2008-04-14 23:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2006-08-15 13:01:08 | 001,105,920 | ---- | M] (OMDigit) -- C:\Program Files\OMDigit\OM- Counter 2.6\OMCounterApp.exe PRC - [2005-12-06 14:53:30 | 000,819,200 | ---- | M] (France Télécom R&D) -- C:\Program Files\neostrada tp\neostradatp.exe PRC - [2005-11-22 12:54:18 | 000,249,856 | ---- | M] (France Télécom R&D) -- C:\Program Files\neostrada tp\ComComp.exe PRC - [2004-11-02 15:31:20 | 000,069,632 | ---- | M] (France Telecom R&D) -- C:\Program Files\neostrada tp\Toaster.exe PRC - [2004-10-27 11:30:44 | 000,032,768 | ---- | M] () -- C:\Program Files\neostrada tp\Inactivity.exe PRC - [2004-10-27 11:07:06 | 000,069,632 | ---- | M] () -- C:\Program Files\neostrada tp\PollingModule.exe PRC - [2004-10-21 08:50:52 | 000,045,056 | ---- | M] () -- C:\WINDOWS\system32\AlertModule\AlertModule.exe PRC - [2004-10-05 17:00:12 | 000,061,440 | ---- | M] (France Télécom R&D) -- C:\Program Files\neostrada tp\TaskBarIcon.exe PRC - [2004-08-23 14:49:56 | 000,040,960 | ---- | M] (France Telecom) -- C:\WINDOWS\system32\FTRTSVC.exe PRC - [2004-08-23 14:49:56 | 000,020,480 | ---- | M] (France Télécom R&D) -- C:\Program Files\neostrada tp\Watch.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012-08-20 14:50:09 | 000,192,512 | ---- | M] () -- C:\Documents and Settings\Kamil\Ustawienia lokalne\Temp\sfamcc00001.dll MOD - [2012-08-20 14:50:09 | 000,158,720 | ---- | M] () -- C:\Documents and Settings\Kamil\Ustawienia lokalne\Temp\sfareca00001.dll MOD - [2012-08-20 10:01:29 | 001,800,192 | ---- | M] () -- C:\Program Files\Alwil Software\Avast5\defs\12082000\algo.dll MOD - [2012-08-04 12:19:05 | 000,276,480 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstwebmdec.dll MOD - [2012-08-04 12:19:05 | 000,078,336 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstwavparse.dll MOD - [2012-08-04 12:19:05 | 000,064,000 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstautodetect.dll MOD - [2012-08-04 12:19:05 | 000,046,592 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstwaveform.dll MOD - [2012-08-04 12:19:04 | 000,316,928 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstoggdec.dll MOD - [2012-08-04 12:19:04 | 000,168,448 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstffmpegcolorspace.dll MOD - [2012-08-04 12:19:04 | 000,076,800 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstdirectsound.dll MOD - [2012-08-04 12:19:04 | 000,045,568 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gsttypefindfunctions.dll MOD - [2012-08-04 12:19:03 | 000,099,840 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstcoreplugins.dll MOD - [2012-08-04 12:19:03 | 000,098,816 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstaudioresample.dll MOD - [2012-08-04 12:19:03 | 000,068,608 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstdecodebin2.dll MOD - [2012-08-04 12:19:02 | 000,783,360 | ---- | M] () -- C:\Program Files\Opera\gstreamer\gstreamer.dll MOD - [2012-08-04 12:19:02 | 000,098,816 | ---- | M] () -- C:\Program Files\Opera\gstreamer\plugins\gstaudioconvert.dll MOD - [2012-08-03 19:15:34 | 009,465,032 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_3_300_270.dll MOD - [2009-02-27 20:04:20 | 000,311,296 | ---- | M] () -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\pdfshell.POL MOD - [2008-04-14 23:50:38 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll MOD - [2007-08-21 13:32:44 | 000,098,304 | ---- | M] () -- C:\WINDOWS\system32\redmonnt.dll MOD - [2006-05-22 14:29:28 | 001,802,240 | ---- | M] () -- c:\Program Files\neostrada tp\skin\Default\main\ResourceStyle.dll MOD - [2004-11-16 18:10:52 | 000,053,248 | ---- | M] () -- C:\Program Files\neostrada tp\SynchroDll.dll MOD - [2004-10-27 11:30:44 | 000,032,768 | ---- | M] () -- C:\Program Files\neostrada tp\Inactivity.exe MOD - [2004-10-27 11:07:06 | 000,069,632 | ---- | M] () -- C:\Program Files\neostrada tp\PollingModule.exe MOD - [2004-10-26 09:49:34 | 000,028,672 | ---- | M] () -- C:\Program Files\neostrada tp\Inactivity.dll MOD - [2004-10-21 18:27:38 | 000,036,864 | ---- | M] () -- C:\WINDOWS\system32\AlertModule\AlertClient.dll MOD - [2004-10-21 08:50:52 | 000,045,056 | ---- | M] () -- C:\WINDOWS\system32\AlertModule\AlertModule.exe MOD - [2004-08-23 14:49:58 | 000,188,416 | ---- | M] () -- C:\Program Files\neostrada tp\PhoneManager.dll MOD - [2004-08-23 14:49:56 | 000,036,864 | ---- | M] () -- C:\Program Files\neostrada tp\PMStub.dll MOD - [2004-04-19 08:28:06 | 000,090,112 | ---- | M] () -- C:\Program Files\neostrada tp\DetectComponent.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ) SRV - File not found [On_Demand | Stopped] -- %SystemRoot%\System32\appmgmts.dll -- (AppMgmt) SRV - [2012-08-05 14:40:15 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2010-04-14 19:47:05 | 000,040,384 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Web Scanner) SRV - [2010-04-14 19:47:05 | 000,040,384 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Mail Scanner) SRV - [2010-04-14 19:47:05 | 000,040,384 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus) SRV - [2009-12-22 04:31:26 | 000,217,088 | ---- | M] (Teruten) [Auto | Running] -- C:\WINDOWS\system32\FsUsbExService.Exe -- (FsUsbExService) SRV - [2008-11-11 09:38:06 | 000,620,544 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2004-08-23 14:49:56 | 000,040,960 | ---- | M] (France Telecom) [Auto | Running] -- C:\WINDOWS\system32\FTRTSVC.exe -- (FTRTSVC) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\PCAMPR5.SYS -- (PCAMPR5) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\Kamil\USTAWI~1\Temp\catchme.sys -- (catchme) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\Kamil\USTAWI~1\Temp\ALSysIO.sys -- (ALSysIO) DRV - File not found [Kernel | On_Demand | Unknown] -- -- (a9qtogc4) DRV - [2011-08-06 16:22:38 | 000,231,248 | ---- | M] (TrueCrypt Foundation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\truecrypt.sys -- (truecrypt) DRV - [2011-06-10 14:26:26 | 000,717,296 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sptd.sys -- (sptd) DRV - [2011-06-07 11:13:36 | 000,020,032 | ---- | M] (Devguru Co., Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\dgderdrv.sys -- (dgderdrv) DRV - [2011-03-18 18:08:54 | 000,025,240 | ---- | M] (Almico Software) [Kernel | Boot | Running] -- C:\WINDOWS\system32\speedfan.sys -- (speedfan) DRV - [2010-12-21 07:55:02 | 000,123,648 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bmdm.sys -- (ss_bmdm) DRV - [2010-12-21 07:55:02 | 000,100,224 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bserd.sys -- (ss_bserd) DRV - [2010-12-21 07:55:02 | 000,098,432 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bbus.sys -- (ss_bbus) DRV - [2010-12-21 07:55:02 | 000,014,848 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bmdfl.sys -- (ss_bmdfl) DRV - [2010-04-14 19:35:47 | 000,046,672 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi) DRV - [2010-04-14 19:35:25 | 000,162,768 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP) DRV - [2010-04-14 19:31:39 | 000,023,376 | ---- | M] (ALWIL Software) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr) DRV - [2010-04-14 19:31:12 | 000,100,432 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2) DRV - [2010-04-14 19:31:01 | 000,019,024 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk) DRV - [2010-04-14 19:30:45 | 000,028,880 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4) DRV - [2009-12-22 04:31:26 | 000,036,640 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\FsUsbExDisk.Sys -- (FsUsbExDisk) DRV - [2008-08-26 09:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2008-04-14 01:15:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum) DRV - [2007-04-24 12:33:46 | 000,100,488 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s125mgmt.sys -- (s125mgmt) DRV - [2007-04-24 12:33:46 | 000,098,696 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s125obex.sys -- (s125obex) DRV - [2007-04-24 12:33:44 | 000,108,680 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s125mdm.sys -- (s125mdm) DRV - [2007-04-24 12:33:42 | 000,015,112 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s125mdfl.sys -- (s125mdfl) DRV - [2007-04-24 12:33:34 | 000,083,336 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s125bus.sys -- (s125bus) DRV - [2006-09-19 12:03:28 | 000,116,992 | ---- | M] (Analog Devices Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\e4usbaw.sys -- (e4usbaw) DRV - [2006-09-15 12:07:54 | 000,064,000 | ---- | M] (Analog Deivces) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\e4ldr.sys -- (IKANLOADER2) DRV - [2006-06-28 10:25:24 | 004,304,384 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) DRV - [2005-11-16 10:08:16 | 000,078,976 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTL8023xp) DRV - [2005-01-14 18:14:07 | 000,047,616 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sfdrv01.sys -- (sfdrv01) DRV - [2004-10-28 12:47:59 | 000,006,656 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sfhlp02.sys -- (sfhlp02) DRV - [2003-08-04 14:22:44 | 000,016,128 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\PCANDIS5.SYS -- (PCANDIS5) DRV - [1996-04-03 21:33:26 | 000,005,248 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\giveio.sys -- (giveio) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=bcd74a1a00000000000000138fdc6aa2&tlver=1.4.19.19&affID=17160 IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKLM\..\SearchScopes\{0B26FE8F-C554-469C-9561-C4E6F1EEFD0A}: "URL" = http://startsear.ch/?q={searchTerms} IE - HKLM\..\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB9}: "URL" = http://startsear.ch/?aff=1&q={searchTerms} IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = pl.v9.com/idg/idg_1340702507_238486 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = pl.v9.com/idg/idg_1340702507_238486 IE - HKCU\..\URLSearchHook: {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\neostrada tp\SearchPageURL.dll () IE - HKCU\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - No CLSID value found IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC IE - HKCU\..\SearchScopes\{1645A33F-0A96-4315-904E-29E188E7720E}: "URL" = http://startsear.ch/?aff=1&src=sp&cf=9c522440-3963-11e1-b2fb-4d6564696130&q={searchTerms} IE - HKCU\..\SearchScopes\{1F096B29-E9DA-4D64-8D63-936BE7762CC5}: "URL" = http://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=bcd74a1a00000000000000138fdc6aa2&tlver=1.4.19.19&affID=17161 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultengine: "Web Search" FF - prefs.js..browser.search.defaultenginename: "SweetIM Search" FF - prefs.js..browser.search.defaulturl: "" FF - prefs.js..browser.search.order.1: "http://startsear.ch/?q=" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.search.update: false FF - prefs.js..browser.startup.homepage: "http://www.meczyki.pl/" FF - prefs.js..keyword.URL: "http://startsear.ch/?q=" FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: "Web Search" FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: "Google" FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_3_300_270.dll () FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@pages.tvunetworks.com/WebPlayer: d:\Program Files\TVUPlayer\npTVUAx.dll File not found FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=12.0.1.669: d:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=12.0.1.669: d:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=12.0.1.669: C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.669: C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=12.0.1.669: d:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-08-05 14:40:17 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-08-20 13:18:28 | 000,000,000 | ---D | M] [2011-06-03 20:33:31 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Kamil\Dane aplikacji\Mozilla\Extensions [2012-06-29 14:55:50 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Kamil\Dane aplikacji\Mozilla\Firefox\Profiles\16so3vgv.default\extensions [2012-01-07 21:13:06 | 000,000,792 | ---- | M] () -- C:\Documents and Settings\Kamil\Dane aplikacji\Mozilla\Firefox\Profiles\16so3vgv.default\searchplugins\startsear.xml [2012-06-26 11:46:04 | 000,003,915 | ---- | M] () -- C:\Documents and Settings\Kamil\Dane aplikacji\Mozilla\Firefox\Profiles\16so3vgv.default\searchplugins\sweetim.xml [2012-08-19 23:11:30 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2011-06-03 20:41:19 | 000,000,000 | ---D | M] (vShare Add-On) -- C:\Program Files\Mozilla Firefox\extensions\{dd05fd3d-18df-4ce4-ae53-e795339c5f01} [2012-01-07 21:11:55 | 000,634,964 | ---- | M] () (No name found) -- C:\DOCUMENTS AND SETTINGS\KAMIL\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\16SO3VGV.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI [2012-08-05 14:40:16 | 000,136,672 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2012-07-29 17:03:47 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2012-07-29 17:03:47 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2012-07-29 17:03:47 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2012-07-29 17:03:47 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2011-11-10 18:50:31 | 000,000,158 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\Search the web.src [2012-06-26 11:21:47 | 000,002,415 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\v9.xml [2012-07-29 17:03:47 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2012-07-29 17:03:47 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2006-03-02 14:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (IE5BarLauncherBHO Class) - {78F3A323-798E-4AEA-9A57-88F4B05FD5DD} - C:\Program Files\vShare.tv plugin\BarLcher.dll File not found O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll File not found O3 - HKLM\..\Toolbar: (VShareToolBar) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files\vShare.tv plugin\BarLcher.dll File not found O3 - HKLM\..\Toolbar: (no name) - {DFEFCDEE-CF1A-4FC8-89AF-189327213627} - No CLSID value found. O3 - HKLM\..\Toolbar: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll File not found O3 - HKCU\..\Toolbar\WebBrowser: (VShareToolBar) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files\vShare.tv plugin\BarLcher.dll File not found O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\ALCMTR.EXE (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\AvastUI.exe (ALWIL Software) O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe () O4 - HKLM..\Run: [OM- Counter 2.6] C:\Program Files\OMDigit\OM- Counter 2.6\OMCounterApp.exe (OMDigit) O4 - HKLM..\Run: [RelevantKnowledge] C:\program files\relevantknowledge\rlvknlg.exe -boot File not found O4 - HKLM..\Run: [TkBellExe] D:\Program Files\Real\RealPlayer\update\realsched.exe (RealNetworks, Inc.) O4 - HKLM..\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\GestMaj.exe TaskBarIcon.exe File not found O4 - HKLM..\Run: [WOOWATCH] C:\Program Files\neostrada tp\Watch.exe (France Télécom R&D) O4 - Startup: C:\Documents and Settings\Kamil\Menu Start\Programy\Autostart\SpeedFan.lnk = C:\Program Files\SpeedFan\speedfan.exe (Almico Software (www.almico.com)) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 File not found O9 - Extra Button: Add to VideoGet - {88CFA58B-A63F-4A94-9C54-0C7A58E3333E} - D:\Program Files\VideoGet\Plugins\VideoGet_IE.dll (Nuclear Coffee Software) O9 - Extra 'Tools' menuitem : Add to &VideoGet - {88CFA58B-A63F-4A94-9C54-0C7A58E3333E} - D:\Program Files\VideoGet\Plugins\VideoGet_IE.dll (Nuclear Coffee Software) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - mswsock.dll File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - mswsock.dll File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - mswsock.dll File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - mswsock.dll File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - mswsock.dll File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - mswsock.dll File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - mswsock.dll File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - mswsock.dll File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - mswsock.dll File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - mswsock.dll File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - mswsock.dll File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - mswsock.dll File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - mswsock.dll File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - mswsock.dll File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - mswsock.dll File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - mswsock.dll File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - mswsock.dll File not found O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E9337768-5F28-4EE0-BB99-2BD573513E9F}: NameServer = 194.204.159.1 194.204.152.34 O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\Kamil\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Kamil\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2011-03-01 14:34:00 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2012-08-20 12:54:38 | 000,000,000 | ---D | M] - E:\Autoruns -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-08-20 14:34:45 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Kamil\Recent [2012-08-19 23:19:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Kamil\Dane aplikacji\Malwarebytes [2012-08-19 23:03:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Malwarebytes' Anti-Malware [2012-08-19 23:03:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes [2012-08-19 23:03:48 | 000,022,344 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2012-08-19 22:54:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\EMCO [2012-08-19 22:21:56 | 000,000,000 | --SD | C] -- C:\32788R22FWJFW [2012-08-19 21:32:34 | 000,012,872 | ---- | C] (SurfRight B.V.) -- C:\WINDOWS\System32\bootdelete.exe [2012-08-19 21:26:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\HitmanPro [2012-08-19 20:56:30 | 000,089,600 | ---- | C] (NZXT) -- C:\Documents and Settings\All Users\Dane aplikacji\dqnaraxb.exe [2012-08-19 20:56:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\enzgfvdtencpgwz [2012-08-17 15:53:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Combined Community Codec Pack [2012-08-17 15:53:48 | 000,000,000 | ---D | C] -- C:\Program Files\Combined Community Codec Pack [2012-08-17 15:42:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\ALLPlayer [2012-08-17 09:25:17 | 000,479,232 | ---- | C] (Online Media Technologies Ltd.) -- C:\WINDOWS\System32\NCTAudioVisualization2.dll [2012-08-17 09:25:17 | 000,417,792 | ---- | C] (Online Media Technologies Ltd.) -- C:\WINDOWS\System32\NCTTextToAudio2.dll [2012-08-17 09:25:17 | 000,348,160 | ---- | C] (NCT Company Ltd.) -- C:\WINDOWS\System32\NCTWMAFile2.dll [2012-08-17 09:25:16 | 000,835,584 | ---- | C] (NCT) -- C:\WINDOWS\System32\NCTAudioCDGrabber2.dll [2012-08-17 09:14:35 | 000,000,000 | ---D | C] -- C:\Program Files\Absolute Sound Recorder [2012-07-28 17:47:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Kamil\Dane aplikacji\PC Suite [2012-07-28 16:35:07 | 000,100,224 | ---- | C] (MCCI Corporation) -- C:\WINDOWS\System32\drivers\ss_bserd.sys [2012-07-28 16:35:06 | 000,123,648 | ---- | C] (MCCI Corporation) -- C:\WINDOWS\System32\drivers\ss_bmdm.sys [2012-07-28 16:35:06 | 000,014,848 | ---- | C] (MCCI Corporation) -- C:\WINDOWS\System32\drivers\ss_bmdfl.sys [2012-07-28 16:35:06 | 000,012,416 | ---- | C] (MCCI Corporation) -- C:\WINDOWS\System32\drivers\ss_bcmnt.sys [2012-07-28 16:35:04 | 000,098,432 | ---- | C] (MCCI) -- C:\WINDOWS\System32\drivers\ss_bbus.sys [2012-07-28 16:35:04 | 000,012,288 | ---- | C] (MCCI Corporation) -- C:\WINDOWS\System32\drivers\ss_bwhnt.sys [2012-07-28 15:06:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Samsung [2012-07-28 15:06:01 | 004,659,712 | ---- | C] (Dmitry Streblechenko) -- C:\WINDOWS\System32\Redemption.dll [2012-07-28 15:05:04 | 000,821,824 | ---- | C] (Devguru Co., Ltd.) -- C:\WINDOWS\System32\dgderapi.dll [2012-07-28 15:05:04 | 000,319,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DIFxAPI.dll [2012-07-28 15:05:04 | 000,020,032 | ---- | C] (Devguru Co., Ltd) -- C:\WINDOWS\System32\drivers\dgderdrv.sys [2012-07-28 14:16:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Suite [2012-07-28 14:11:13 | 000,000,000 | ---D | C] -- C:\Program Files\SAMSUNG [2012-07-28 14:10:44 | 000,000,000 | ---D | C] -- C:\Program Files\DIFX [2012-07-28 14:10:43 | 000,018,816 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\pccsmcfd.sys [2012-07-28 14:04:51 | 000,000,000 | ---D | C] -- C:\Program Files\MarkAny [8 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-08-20 14:49:46 | 000,201,654 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml [2012-08-20 14:49:15 | 000,000,278 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-823518204-1972579041-839522115-1004.job [2012-08-20 14:48:52 | 000,002,422 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2012-08-20 14:48:50 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2012-08-20 14:48:48 | 000,310,784 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2012-08-19 21:32:34 | 000,012,872 | ---- | M] (SurfRight B.V.) -- C:\WINDOWS\System32\bootdelete.exe [2012-08-19 20:56:30 | 000,000,051 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\fjpbkqvoiefcbtj [2012-08-19 20:56:09 | 000,089,600 | ---- | M] (NZXT) -- C:\Documents and Settings\All Users\Dane aplikacji\dqnaraxb.exe [2012-08-17 15:56:01 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2012-08-17 13:01:10 | 000,085,756 | ---- | M] () -- C:\Documents and Settings\Kamil\Pulpit\697c2bdc205c9e919384e7df11a450a4.jpg [2012-08-14 19:17:00 | 000,000,286 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-823518204-1972579041-839522115-1004.job [2012-08-14 15:53:07 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat [2012-08-14 12:09:47 | 000,139,364 | ---- | M] () -- C:\Documents and Settings\Kamil\Pulpit\HR praca.JPG [2012-08-14 12:03:04 | 000,150,714 | ---- | M] () -- C:\Documents and Settings\Kamil\Pulpit\KUL praca.JPG [2012-08-13 16:19:26 | 004,189,581 | ---- | M] () -- C:\Documents and Settings\Kamil\Pulpit\Muse - Survival.mp3 [2012-08-13 15:59:49 | 003,854,733 | ---- | M] () -- C:\Documents and Settings\Kamil\Pulpit\Bombers - Independent Love Song (Hyper Go Go Radio Mix).mp3 [2012-08-13 15:54:26 | 003,691,933 | ---- | M] () -- C:\Documents and Settings\Kamil\Pulpit\Scarlet - Independent Love Song.mp3 [2012-08-10 14:14:12 | 000,001,535 | ---- | M] () -- C:\Documents and Settings\Kamil\.recently-used.xbel [2012-08-08 15:14:16 | 000,147,050 | ---- | M] () -- C:\Documents and Settings\Kamil\Pulpit\Stokrotka kadry.JPG [2012-08-08 14:21:59 | 000,064,303 | ---- | M] () -- C:\Documents and Settings\Kamil\Pulpit\przyklad-cv.jpg [2012-08-06 15:07:56 | 000,001,263 | ---- | M] () -- C:\Documents and Settings\Kamil\Pulpit\juve.gif [2012-08-06 15:07:49 | 000,007,135 | ---- | M] () -- C:\Documents and Settings\Kamil\Pulpit\111685juve+flaga.gif [2012-08-03 19:15:34 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe [2012-08-03 19:15:34 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl [2012-08-03 14:14:13 | 002,986,038 | ---- | M] () -- C:\Documents and Settings\Kamil\Pulpit\Kamionka praca.bmp [2012-07-31 14:10:01 | 000,055,361 | ---- | M] () -- C:\Documents and Settings\Kamil\Pulpit\get_file_contents.pdf [2012-07-28 14:04:46 | 000,002,006 | ---- | M] () -- C:\aqua_bitmap.cpp [8 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-08-19 20:56:11 | 000,000,051 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\fjpbkqvoiefcbtj [2012-08-17 15:41:56 | 000,797,184 | ---- | C] () -- C:\WINDOWS\System32\ac3filter.ax [2012-08-17 15:41:56 | 000,258,048 | ---- | C] () -- C:\WINDOWS\System32\libFLAC.dll [2012-08-17 13:01:10 | 000,085,756 | ---- | C] () -- C:\Documents and Settings\Kamil\Pulpit\697c2bdc205c9e919384e7df11a450a4.jpg [2012-08-17 09:25:17 | 000,113,486 | ---- | C] () -- C:\WINDOWS\System32\NCTWMAProfiles.prx [2012-08-14 12:09:47 | 000,139,364 | ---- | C] () -- C:\Documents and Settings\Kamil\Pulpit\HR praca.JPG [2012-08-14 12:03:04 | 000,150,714 | ---- | C] () -- C:\Documents and Settings\Kamil\Pulpit\KUL praca.JPG [2012-08-13 16:19:22 | 004,189,581 | ---- | C] () -- C:\Documents and Settings\Kamil\Pulpit\Muse - Survival.mp3 [2012-08-13 15:59:24 | 003,854,733 | ---- | C] () -- C:\Documents and Settings\Kamil\Pulpit\Bombers - Independent Love Song (Hyper Go Go Radio Mix).mp3 [2012-08-13 15:54:05 | 003,691,933 | ---- | C] () -- C:\Documents and Settings\Kamil\Pulpit\Scarlet - Independent Love Song.mp3 [2012-08-10 14:14:12 | 000,001,535 | ---- | C] () -- C:\Documents and Settings\Kamil\.recently-used.xbel [2012-08-08 15:14:16 | 000,147,050 | ---- | C] () -- C:\Documents and Settings\Kamil\Pulpit\Stokrotka kadry.JPG [2012-08-08 14:21:59 | 000,064,303 | ---- | C] () -- C:\Documents and Settings\Kamil\Pulpit\przyklad-cv.jpg [2012-08-06 15:07:56 | 000,001,263 | ---- | C] () -- C:\Documents and Settings\Kamil\Pulpit\juve.gif [2012-08-06 15:07:49 | 000,007,135 | ---- | C] () -- C:\Documents and Settings\Kamil\Pulpit\111685juve+flaga.gif [2012-08-03 13:59:49 | 002,986,038 | ---- | C] () -- C:\Documents and Settings\Kamil\Pulpit\Kamionka praca.bmp [2012-07-31 14:10:01 | 000,055,361 | ---- | C] () -- C:\Documents and Settings\Kamil\Pulpit\get_file_contents.pdf [2012-07-28 19:53:53 | 000,635,304 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat [2012-07-28 14:04:46 | 000,002,006 | ---- | C] () -- C:\aqua_bitmap.cpp [2012-07-28 13:00:34 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat [2012-07-18 16:36:27 | 000,074,703 | ---- | C] () -- C:\WINDOWS\System32\mfc45.dll [2012-06-29 13:21:14 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll [2011-10-05 16:28:57 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll [2011-06-07 11:13:38 | 000,974,848 | ---- | C] () -- C:\WINDOWS\System32\cis-2.4.dll [2011-06-07 11:13:38 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\issacapi_bs-2.3.dll [2011-06-07 11:13:38 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\issacapi_pe-2.3.dll [2011-06-07 11:13:38 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\issacapi_se-2.3.dll [2011-06-07 11:13:38 | 000,030,568 | ---- | C] () -- C:\WINDOWS\MusiccityDownload.exe [2011-06-02 18:02:01 | 000,000,075 | ---- | C] () -- C:\WINDOWS\winDecrypt.INI [2011-06-02 14:06:32 | 000,074,752 | ---- | C] () -- C:\WINDOWS\cadkasdeinst01e.exe [2011-06-02 13:07:42 | 000,110,032 | ---- | C] () -- C:\WINDOWS\System32\aloaha_prntmon.dll [2011-05-28 11:17:32 | 000,644,608 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2011-05-28 11:17:32 | 000,240,640 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2011-05-27 02:04:56 | 000,061,024 | ---- | C] () -- C:\WINDOWS\System32\zlib.dll [2011-05-15 20:24:46 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat [2011-03-29 13:40:16 | 000,004,608 | ---- | C] () -- C:\Documents and Settings\Kamil\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-03-28 18:10:00 | 000,000,341 | ---- | C] () -- C:\WINDOWS\MP3trt.ini [2011-03-27 12:58:12 | 000,000,448 | ---- | C] () -- C:\WINDOWS\MP3trtg.ini [2011-03-26 16:01:13 | 006,814,952 | ---- | C] () -- C:\WINDOWS\System32\SpoonUninstall.exe [2011-03-26 15:52:53 | 000,000,029 | ---- | C] () -- C:\WINDOWS\wordpad.ini [2011-03-19 19:11:57 | 000,098,304 | ---- | C] () -- C:\WINDOWS\System32\redmonnt.dll [2011-03-06 00:33:43 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2011-03-02 17:45:39 | 000,000,594 | ---- | C] () -- C:\WINDOWS\poolemup.ini [2011-03-02 17:35:06 | 000,040,960 | ---- | C] () -- C:\Program Files\Uninstall_CDS.exe [2011-03-02 17:33:07 | 000,000,427 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2011-03-02 11:35:15 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll [2011-03-02 11:35:15 | 000,036,640 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys [2011-03-01 14:58:55 | 000,000,168 | ---- | C] () -- C:\WINDOWS\adidsl.ini [2011-03-01 14:58:55 | 000,000,021 | ---- | C] () -- C:\WINDOWS\Fast800.ini [2011-03-01 14:58:53 | 000,127,456 | ---- | C] () -- C:\WINDOWS\System32\IPDETECT.EXE [2011-03-01 14:58:52 | 000,126,976 | ---- | C] () -- C:\WINDOWS\System32\coclassfast.dll [2011-03-01 14:58:52 | 000,024,576 | ---- | C] () -- C:\WINDOWS\enddisk32.exe [2011-03-01 14:58:51 | 000,152,126 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E9P2.BIN [2011-03-01 14:58:51 | 000,046,892 | ---- | C] () -- C:\WINDOWS\System32\ADADIX16.DLL [2011-03-01 14:58:50 | 000,152,220 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E4I2.BIN [2011-03-01 14:58:50 | 000,152,220 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E4I1.BIN [2011-03-01 14:58:50 | 000,152,220 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E4I0.BIN [2011-03-01 14:58:50 | 000,152,132 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E4P2.BIN [2011-03-01 14:58:50 | 000,152,132 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E4P1.BIN [2011-03-01 14:58:50 | 000,152,132 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E4P0.BIN [2011-03-01 14:58:50 | 000,152,126 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E9P1.BIN [2011-03-01 14:58:50 | 000,152,126 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E9P0.BIN [2011-03-01 14:58:50 | 000,152,126 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E9I2.BIN [2011-03-01 14:58:50 | 000,152,126 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E9I1.BIN [2011-03-01 14:58:50 | 000,152,126 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E9I0.BIN [2011-03-01 14:58:50 | 000,152,036 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E4D2.BIN [2011-03-01 14:58:50 | 000,152,034 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E4D1.BIN [2011-03-01 14:58:50 | 000,152,034 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E4D0.BIN [2011-03-01 14:58:50 | 000,022,395 | ---- | C] () -- C:\WINDOWS\System32\drivers\fpga.bin [2011-03-01 14:58:02 | 000,041,068 | ---- | C] () -- C:\WINDOWS\System32\ActPanel.dll [2011-03-01 14:46:32 | 000,040,960 | R--- | C] () -- C:\WINDOWS\System32\ChCfg.exe [2011-03-01 14:44:29 | 000,004,986 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini [2011-03-01 14:44:25 | 000,005,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS [2011-03-01 14:36:17 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2011-03-01 14:30:06 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2006-03-02 14:00:00 | 000,002,048 | -HS- | C] () -- C:\Documents and Settings\Kamil\Ustawienia lokalne\Dane aplikacji\{e63fff48-5c1c-eb96-1093-ab3d58675ea1}\@ [color=#E56717]========== LOP Check ==========[/color] [2011-03-01 15:05:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Alwil Software [2011-03-07 17:55:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\e-file [2012-08-19 20:56:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\enzgfvdtencpgwz [2012-07-13 17:18:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\F-Secure [2011-03-06 15:51:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10 [2012-08-20 11:04:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\HitmanPro [2012-07-18 16:36:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\iolo [2011-10-28 20:24:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\KONAMI [2011-03-08 17:12:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM [2012-07-28 14:16:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Suite [2012-07-28 15:04:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Samsung [2011-04-27 10:24:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Sony [2011-10-08 12:58:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP [2011-03-30 14:51:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kamil\Dane aplikacji\BabylonToolbar [2011-06-02 14:06:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kamil\Dane aplikacji\CAD-KAS [2011-09-29 16:11:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kamil\Dane aplikacji\DAEMON Tools [2011-03-26 16:18:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kamil\Dane aplikacji\dBpoweramp [2011-11-16 13:57:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kamil\Dane aplikacji\eMuleTV [2012-07-13 17:19:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kamil\Dane aplikacji\f-secure [2011-10-05 14:48:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kamil\Dane aplikacji\FDRLab [2011-03-06 15:20:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kamil\Dane aplikacji\FMA [2012-06-18 09:12:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kamil\Dane aplikacji\Gadu-Gadu 10 [2012-06-07 15:52:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kamil\Dane aplikacji\gtk-2.0 [2012-07-18 16:36:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kamil\Dane aplikacji\iolo [2011-05-14 12:29:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kamil\Dane aplikacji\MyPhoneExplorer [2011-04-30 11:30:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kamil\Dane aplikacji\OpenCandy [2011-03-29 18:54:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kamil\Dane aplikacji\OpenOffice.org [2012-01-24 13:48:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kamil\Dane aplikacji\Opera [2011-10-01 14:20:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kamil\Dane aplikacji\OwnRooms [2011-10-05 17:42:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kamil\Dane aplikacji\Participatory Culture Foundation [2012-07-28 17:47:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kamil\Dane aplikacji\PC Suite [2011-10-05 17:48:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kamil\Dane aplikacji\PCF-VLC [2011-03-10 18:07:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kamil\Dane aplikacji\PhotoFiltre [2011-06-02 17:42:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kamil\Dane aplikacji\Softland [2011-09-29 15:47:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kamil\Dane aplikacji\SuperMemo World [2011-03-06 13:58:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kamil\Dane aplikacji\Teleca [2011-08-06 16:31:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kamil\Dane aplikacji\TrueCrypt [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 146 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:AF4CCAAD < End of report >