OTL logfile created on: 2012-08-28 10:38:28 - Run 5 OTL by OldTimer - Version 3.2.59.1 Folder = F:\Documents and Settings\Administrator\Pulpit Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,75 Gb Total Physical Memory | 2,07 Gb Available Physical Memory | 75,31% Memory free 4,59 Gb Paging File | 4,07 Gb Available in Paging File | 88,52% Paging File free Paging file location(s): F:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = F: | %SystemRoot% = F:\WINDOWS | %ProgramFiles% = F:\Program Files Drive C: | 48,83 Gb Total Space | 48,75 Gb Free Space | 99,84% Space Free | Partition Type: NTFS Drive D: | 68,36 Gb Total Space | 52,65 Gb Free Space | 77,02% Space Free | Partition Type: NTFS Drive E: | 58,59 Gb Total Space | 58,49 Gb Free Space | 99,82% Space Free | Partition Type: NTFS Drive F: | 420,38 Gb Total Space | 395,88 Gb Free Space | 94,17% Space Free | Partition Type: NTFS Drive G: | 125,30 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS Computer Name: PL-A99B0C6215B1 | User Name: Piotrek | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-08-28 00:46:45 | 000,598,528 | ---- | M] (OldTimer Tools) -- F:\Documents and Settings\Administrator\Pulpit\OTL.exe PRC - [2012-08-28 00:22:34 | 000,105,832 | ---- | M] (SurfRight B.V.) -- F:\Program Files\HitmanPro\hmpsched.exe PRC - [2012-08-27 14:01:46 | 000,161,768 | ---- | M] (Oracle Corporation) -- F:\Program Files\Java\jre7\bin\jqs.exe PRC - [2012-07-28 11:37:24 | 000,913,888 | ---- | M] (Mozilla Corporation) -- F:\Program Files\Mozilla Firefox\firefox.exe PRC - [2010-12-07 18:01:00 | 000,208,384 | ---- | M] (SEIKO EPSON CORPORATION) -- F:\WINDOWS\system32\spool\drivers\w32x86\3\E_FATIHJE.EXE PRC - [2010-08-30 09:32:24 | 000,979,328 | ---- | M] (SEIKO EPSON CORPORATION) -- F:\Program Files\Epson Software\Event Manager\EEventManager.exe PRC - [2010-01-08 01:26:54 | 002,478,080 | ---- | M] (SEC) -- F:\Program Files\MagicTune Premium\MagicTune.exe PRC - [2009-09-14 17:00:00 | 000,153,600 | ---- | M] (SEIKO EPSON CORPORATION) -- F:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50ST7.EXE PRC - [2009-09-14 17:00:00 | 000,121,856 | ---- | M] (SEIKO EPSON CORPORATION) -- F:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RP7.EXE PRC - [2009-06-12 18:14:23 | 000,606,720 | ---- | M] (Crawler.com) -- F:\Program Files\Spyware Terminator\sp_rsser.exe PRC - [2009-05-14 17:07:14 | 000,759,048 | ---- | M] (ABBYY) -- F:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe PRC - [2008-04-14 22:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- F:\WINDOWS\explorer.exe PRC - [2007-08-23 16:05:00 | 000,045,056 | ---- | M] () -- F:\Program Files\MagicTune Premium\MagicTuneEngine.exe PRC - [2006-11-02 20:40:12 | 000,174,656 | ---- | M] () -- F:\WINDOWS\system32\PSIService.exe PRC - [2006-03-03 22:03:10 | 000,069,632 | ---- | M] (HP) -- F:\WINDOWS\system32\HPZipm12.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012-07-28 11:37:23 | 002,003,424 | ---- | M] () -- F:\Program Files\Mozilla Firefox\mozjs.dll MOD - [2010-01-08 16:11:12 | 000,077,824 | ---- | M] () -- F:\Program Files\MagicTune Premium\MagicTuneCore.dll MOD - [2010-01-08 01:26:50 | 000,065,536 | ---- | M] () -- F:\Program Files\MagicTune Premium\MTResPol.dll MOD - [2010-01-08 01:25:36 | 000,032,768 | ---- | M] () -- F:\Program Files\MagicTune Premium\HzZone.dll MOD - [2010-01-08 01:25:34 | 000,040,960 | ---- | M] () -- F:\Program Files\MagicTune Premium\DProfile.dll MOD - [2010-01-08 01:25:32 | 000,040,960 | ---- | M] () -- F:\Program Files\MagicTune Premium\EProfile.dll MOD - [2010-01-08 01:25:30 | 000,045,056 | ---- | M] () -- F:\Program Files\MagicTune Premium\VESADll.dll MOD - [2010-01-08 01:25:30 | 000,045,056 | ---- | M] () -- F:\Program Files\MagicTune Premium\IProfile.dll MOD - [2010-01-08 01:25:28 | 000,040,960 | ---- | M] () -- F:\Program Files\MagicTune Premium\DeviceInterface.dll MOD - [2010-01-08 01:25:28 | 000,032,768 | ---- | M] () -- F:\Program Files\MagicTune Premium\Highlight.dll MOD - [2007-08-23 16:05:00 | 000,045,056 | ---- | M] () -- F:\Program Files\MagicTune Premium\MagicTuneEngine.exe MOD - [2006-11-02 20:40:12 | 000,174,656 | ---- | M] () -- F:\WINDOWS\system32\PSIService.exe MOD - [2006-10-31 08:35:00 | 000,196,608 | ---- | M] () -- F:\WINDOWS\system32\nvapi.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ) SRV - [2012-08-28 00:22:34 | 000,105,832 | ---- | M] (SurfRight B.V.) [Auto | Running] -- F:\Program Files\HitmanPro\hmpsched.exe -- (HitmanProScheduler) SRV - [2012-08-27 14:01:46 | 000,161,768 | ---- | M] (Oracle Corporation) [Auto | Running] -- F:\Program Files\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService) SRV - [2012-07-28 11:37:24 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- F:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2009-09-14 17:00:00 | 000,153,600 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- F:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50ST7.EXE -- (EPSON_EB_RPCV4_04) SRV - [2009-09-14 17:00:00 | 000,121,856 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- F:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RP7.EXE -- (EPSON_PM_RPCV4_04) SRV - [2009-06-12 18:14:23 | 000,606,720 | ---- | M] (Crawler.com) [Auto | Running] -- F:\Program Files\Spyware Terminator\sp_rsser.exe -- (sp_rssrv) SRV - [2009-05-14 17:07:14 | 000,759,048 | ---- | M] (ABBYY) [Auto | Running] -- F:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe -- (ABBYY.Licensing.FineReader.Sprint.9.0) SRV - [2007-08-23 16:05:00 | 000,045,056 | ---- | M] () [Auto | Running] -- F:\Program Files\MagicTune Premium\MagicTuneEngine.exe -- (MagicTuneEngine) SRV - [2006-11-02 20:40:12 | 000,174,656 | ---- | M] () [Auto | Running] -- F:\WINDOWS\system32\PSIService.exe -- (ProtexisLicensing) SRV - [2006-03-03 22:03:10 | 000,069,632 | ---- | M] (HP) [Auto | Running] -- F:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - File not found [Kernel | On_Demand | Unknown] -- -- (ak4v8pbv) DRV - [2012-05-08 17:12:12 | 000,016,608 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- F:\WINDOWS\gdrv.sys -- (gdrv) DRV - [2012-01-18 20:19:48 | 000,443,448 | ---- | M] () [Kernel | Boot | Running] -- F:\WINDOWS\system32\drivers\sptd.sys -- (sptd) DRV - [2012-01-18 20:14:25 | 000,223,128 | ---- | M] (DT Soft Ltd.) [Kernel | On_Demand | Stopped] -- F:\WINDOWS\system32\drivers\dtscsi.sys -- (dtscsi) DRV - [2009-11-19 15:06:46 | 000,098,672 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- F:\WINDOWS\system32\drivers\s1039bus.sys -- (s1039bus) DRV - [2009-11-19 15:06:46 | 000,025,456 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- F:\WINDOWS\system32\drivers\s1039nd5.sys -- (s1039nd5) DRV - [2009-11-19 15:06:45 | 000,124,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- F:\WINDOWS\system32\drivers\s1039mdm.sys -- (s1039mdm) DRV - [2009-11-19 15:06:45 | 000,123,504 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- F:\WINDOWS\system32\drivers\s1039unic.sys -- (s1039unic) DRV - [2009-11-19 15:06:45 | 000,117,872 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- F:\WINDOWS\system32\drivers\s1039mgmt.sys -- (s1039mgmt) DRV - [2009-11-19 15:06:45 | 000,113,904 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- F:\WINDOWS\system32\drivers\s1039obex.sys -- (s1039obex) DRV - [2009-11-19 15:06:44 | 000,014,960 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- F:\WINDOWS\system32\drivers\s1039mdfl.sys -- (s1039mdfl) DRV - [2009-06-12 18:14:23 | 000,141,312 | ---- | M] () [Kernel | System | Running] -- F:\WINDOWS\system32\drivers\sp_rsdrv2.sys -- (sp_rsdrv2) DRV - [2009-06-04 14:53:04 | 000,014,080 | ---- | M] (Samsung Electronics, Inc. ) [Kernel | On_Demand | Running] -- F:\WINDOWS\system32\drivers\MTiCtwl.sys -- (MagicTune) DRV - [2008-12-11 11:24:20 | 004,959,232 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- F:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) DRV - [2008-11-11 13:42:00 | 000,024,832 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- F:\WINDOWS\system32\drivers\lgusbmodem.sys -- (USBModem) DRV - [2008-11-11 13:41:00 | 000,019,968 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- F:\WINDOWS\system32\drivers\lgusbdiag.sys -- (UsbDiag) DRV - [2008-11-11 13:41:00 | 000,013,056 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- F:\WINDOWS\system32\drivers\lgusbbus.sys -- (usbbus) DRV - [2008-04-14 00:23:10 | 000,040,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- F:\WINDOWS\system32\drivers\nmnt.sys -- (nm) DRV - [2008-04-13 22:05:40 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] -- F:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) DRV - [2006-11-27 16:33:54 | 000,019,968 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- F:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus) DRV - [2006-11-27 16:33:50 | 000,058,368 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- F:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD) DRV - [2006-10-18 16:31:38 | 000,105,472 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- F:\WINDOWS\system32\drivers\nvata.sys -- (nvata) DRV - [2006-07-24 16:05:00 | 000,005,632 | ---- | M] () [File_System | System | Running] -- F:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen) DRV - [2006-07-01 23:32:26 | 000,043,520 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- F:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = www.v9.com/idg/idg_1327874459_767631 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.v9.com/idg/idg_1327874459_767631 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKCU\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC IE - HKCU\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://www.google.pl/cse?q={searchTerms}&cx=partner-pub-2489206448026482%3A4041638047&tbm=&ie=UTF-8#gsc.tab=0&gsc.q={searchTerms} IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MOOI_pl IE - HKCU\..\SearchScopes\{DD7E7873-6EF6-414A-A595-7E381CC3460A}: "URL" = http://www.dymasearch.com/search.php?src=tops&q={SearchTerms} IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultenginename: "Google " FF - prefs.js..browser.search.order.1: "Google " FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://search.babylon.com/?AF=100482&babsrc=HP_ss&mntrId=08b7e1bd00000000000000241d11c4d4" FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2.2 FF - prefs.js..keyword.URL: "http://search.babylon.com/?AF=100482&babsrc=adbartrp&mntrId=08b7e1bd00000000000000241d11c4d4&q=" FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: F:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: D:\Picasa3\npPicasa3.dll (Google, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.6.2: F:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.6.2: F:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: f:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: F:\Documents and Settings\Piotrek\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: F:\Documents and Settings\Piotrek\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: F:\Program Files\Mozilla Firefox\components [2012-07-28 11:37:24 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: F:\Program Files\Mozilla Firefox\plugins [2012-08-28 10:32:14 | 000,000,000 | ---D | M] [2010-08-12 11:20:39 | 000,000,000 | ---D | M] (No name found) -- F:\Documents and Settings\Piotrek\Dane aplikacji\Mozilla\Extensions [2012-08-27 21:43:01 | 000,000,000 | ---D | M] (No name found) -- F:\Documents and Settings\Piotrek\Dane aplikacji\Mozilla\Firefox\Profiles\hl6gnepy.default\extensions [2012-05-15 20:42:54 | 000,000,000 | ---D | M] (Winamp Toolbar) -- F:\Documents and Settings\Piotrek\Dane aplikacji\Mozilla\Firefox\Profiles\hl6gnepy.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} [2012-01-29 23:52:08 | 000,000,000 | ---D | M] (Babylon) -- F:\Documents and Settings\Piotrek\Dane aplikacji\Mozilla\Firefox\Profiles\hl6gnepy.default\extensions\ffxtlbr@babylon.com [2012-08-27 21:43:01 | 000,000,000 | ---D | M] ("TimeLineRemove.Com") -- F:\Documents and Settings\Piotrek\Dane aplikacji\Mozilla\Firefox\Profiles\hl6gnepy.default\extensions\jid0-YxzrUsJ0WOiOaU89TngAzLcIs18@jetpack [2012-08-28 10:20:12 | 000,000,000 | ---D | M] (No name found) -- F:\Program Files\Mozilla Firefox\extensions [2012-07-28 11:37:24 | 000,136,672 | ---- | M] (Mozilla Foundation) -- F:\Program Files\mozilla firefox\components\browsercomps.dll [2011-12-09 19:23:32 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- F:\Program Files\mozilla firefox\plugins\npwachk.dll [2012-06-21 19:37:06 | 000,002,767 | ---- | M] () -- F:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2012-06-21 19:37:06 | 000,001,406 | ---- | M] () -- F:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2012-06-21 19:37:06 | 000,000,917 | ---- | M] () -- F:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2012-06-21 19:37:06 | 000,000,858 | ---- | M] () -- F:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2012-06-21 19:37:06 | 000,001,183 | ---- | M] () -- F:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2012-06-21 19:37:06 | 000,001,683 | ---- | M] () -- F:\Program Files\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - homepage: CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms} CHR - homepage: CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = F:\Documents and Settings\Piotrek\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\20.0.1132.57\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = F:\Documents and Settings\Piotrek\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\20.0.1132.57\pdf.dll CHR - plugin: Shockwave Flash (Enabled) = F:\Documents and Settings\Piotrek\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\20.0.1132.57\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = F:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll CHR - plugin: Adobe Acrobat (Enabled) = F:\Program Files\Adobe\Acrobat 6.0 CE\Reader\Browser\nppdf32.dll CHR - plugin: Java Deployment Toolkit 6.0.140.8 (Enabled) = F:\Program Files\Java\jre6\bin\new_plugin\npdeploytk.dll CHR - plugin: Java(TM) Platform SE 6 U14 (Enabled) = F:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll CHR - plugin: downloadUpdater (Enabled) = F:\Program Files\Mozilla Firefox\plugins\npdnu.dll CHR - plugin: downloadUpdater2 (Enabled) = F:\Program Files\Mozilla Firefox\plugins\npdnupdater2.dll CHR - plugin: Microsoft Office 2003 (Enabled) = F:\Program Files\Mozilla Firefox\plugins\NPOFFICE.DLL CHR - plugin: Winamp Application Detector (Enabled) = F:\Program Files\Mozilla Firefox\plugins\npwachk.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = F:\Program Files\Windows Media Player\npdrmv2.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = F:\Program Files\Windows Media Player\npwmsdrm.dll CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = F:\Program Files\Windows Media Player\npdsplay.dll CHR - plugin: Picasa (Enabled) = D:\Picasa3\npPicasa3.dll CHR - plugin: Google Update (Enabled) = F:\Documents and Settings\Piotrek\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.111\npGoogleUpdate3.dll CHR - plugin: Silverlight Plug-In (Enabled) = f:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll CHR - Extension: YouTube = F:\Documents and Settings\Piotrek\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: Szukaj w Google = F:\Documents and Settings\Piotrek\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\ CHR - Extension: AutocompletePro plugin for chrome = F:\Documents and Settings\Piotrek\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.0_0\ CHR - Extension: Gmail = F:\Documents and Settings\Piotrek\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2001-10-26 15:45:16 | 000,000,742 | ---- | M]) - F:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - F:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - F:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - F:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O3 - HKLM\..\Toolbar: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - F:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.) O4 - HKLM..\Run: [Alcmtr] F:\WINDOWS\ALCMTR.EXE (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [EEventManager] F:\Program Files\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION) O4 - HKLM..\Run: [NvCplDaemon] F:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] F:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] F:\WINDOWS\System32\nwiz.exe () O4 - HKCU..\Run: [EPSON SX130 Series] F:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIHJE.EXE (SEIKO EPSON CORPORATION) O4 - HKCU..\Run: [Gadu-Gadu] F:\Program Files\Gadu-Gadu\gg.exe (Gadu-Gadu S.A.) O4 - HKCU..\Run: [IgfxSys] rundll32.exe "F:\Documents and Settings\Piotrek\Dane aplikacji\Messenger\Drivers\IgfxSys.dll",StartProtector File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Windows Printing Driver = WinSpooler.exe O8 - Extra context menu item: Add to Google Photos Screensa&ver - F:\WINDOWS\System32\GPhotos.scr (Google Inc.) O8 - Extra context menu item: Funkcja Google Sidewiki - res://F:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html File not found O16 - DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 178.218.224.6 178.218.224.2 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4D8A0A00-F7CD-4870-9824-3667BF916FDB}: DhcpNameServer = 178.218.224.6 178.218.224.2 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C75D5A45-EFFB-473C-B3DB-9956A940E1FB}: DhcpNameServer = 178.218.224.6 178.218.224.2 O20 - HKLM Winlogon: Shell - (Explorer.exe) - F:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (F:\WINDOWS\system32\userinit.exe) - F:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: F:\Documents and Settings\Piotrek\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: F:\Documents and Settings\Piotrek\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-06-12 17:51:43 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{29f4a54c-c97d-11de-b2fa-00241d11c4d4}\Shell - "" = AutoRun O33 - MountPoints2\{29f4a54c-c97d-11de-b2fa-00241d11c4d4}\Shell\AutoRun\command - "" = F:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL copy.exe O33 - MountPoints2\{33a0ff05-36b7-11e0-9bac-00241d11c4d4}\Shell - "" = AutoRun O33 - MountPoints2\{33a0ff05-36b7-11e0-9bac-00241d11c4d4}\Shell\AutoRun\command - "" = H:\Startme.exe O33 - MountPoints2\{5950889d-81f6-11de-b260-00241d11c4d4}\Shell\AutoRun\command - "" = F:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Recycled\ctfmon.exe O33 - MountPoints2\{5950889d-81f6-11de-b260-00241d11c4d4}\Shell\Open(&0)\command - "" = H:\Recycled\ctfmon.exe O33 - MountPoints2\{606ffb1f-995b-11de-b28d-00241d11c4d4}\Shell - "" = AutoRun O33 - MountPoints2\{606ffb1f-995b-11de-b28d-00241d11c4d4}\Shell\AutoRun\command - "" = H:\USBAutoRun.exe O33 - MountPoints2\{87479142-5778-11de-85ab-806d6172696f}\Shell - "" = AutoRun O33 - MountPoints2\{87479142-5778-11de-85ab-806d6172696f}\Shell\AutoRun\command - "" = G:\Run.exe O34 - HKLM BootExecute: (autocheck autochk *) O34 - HKLM BootExecute: (bootdelete) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-08-28 00:50:17 | 000,000,000 | ---D | C] -- F:\_OTL [2012-08-28 00:22:34 | 000,000,000 | ---D | C] -- F:\Program Files\HitmanPro [2012-08-28 00:22:34 | 000,000,000 | ---D | C] -- F:\Documents and Settings\All Users\Menu Start\Programy\HitmanPro [2012-08-28 00:22:09 | 000,000,000 | ---D | C] -- F:\Documents and Settings\All Users\Dane aplikacji\HitmanPro [2012-08-28 00:14:03 | 000,000,000 | ---D | C] -- F:\Documents and Settings\All Users\Dane aplikacji\PC Tools [2012-08-27 23:39:49 | 000,000,000 | ---D | C] -- F:\Documents and Settings\Piotrek\Ustawienia lokalne\Dane aplikacji\Sun [2012-08-27 14:02:48 | 000,000,000 | ---D | C] -- F:\Documents and Settings\All Users\Dane aplikacji\Sun [2012-08-27 14:02:47 | 000,000,000 | ---D | C] -- F:\Program Files\Common Files\Java [2012-08-27 14:01:58 | 000,821,736 | ---- | C] (Oracle Corporation) -- F:\WINDOWS\System32\npDeployJava1.dll [2012-08-27 14:01:58 | 000,746,984 | ---- | C] (Oracle Corporation) -- F:\WINDOWS\System32\deployJava1.dll [2012-08-27 14:01:54 | 000,093,672 | ---- | C] (Oracle Corporation) -- F:\WINDOWS\System32\WindowsAccessBridge.dll [2012-08-27 13:57:46 | 000,894,952 | ---- | C] (Oracle Corporation) -- F:\Documents and Settings\Piotrek\Pulpit\jxpiinstall.exe [2012-08-27 13:40:33 | 000,000,000 | ---D | C] -- F:\Documents and Settings\Piotrek\Pulpit\Zdjecia [2012-08-01 17:30:18 | 000,000,000 | ---D | C] -- F:\Documents and Settings\Piotrek\Dane aplikacji\Sony Setup [2012-08-01 17:30:18 | 000,000,000 | ---D | C] -- F:\Documents and Settings\Piotrek\Dane aplikacji\Sony [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] File not found -- F:\Documents and Settings\Piotrek\Pulpit\Ten Typ Mes - File not found -- F:\Documents and Settings\Piotrek\Pulpit\masaz.rar File not found -- F:\Documents and Settings\Piotrek\Pulpit\masaz(2).rar [2012-08-28 10:35:58 | 000,081,496 | ---- | M] () -- F:\WINDOWS\System32\nvapps.xml [2012-08-28 10:35:53 | 000,002,048 | --S- | M] () -- F:\WINDOWS\bootstat.dat [2012-08-28 10:34:24 | 000,618,227 | ---- | M] () -- F:\Documents and Settings\Piotrek\Pulpit\adwcleaner.exe [2012-08-28 01:03:00 | 000,001,140 | ---- | M] () -- F:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-839522115-1715567821-2147137731-1003UA.job [2012-08-28 00:27:13 | 000,020,258 | ---- | M] () -- F:\WINDOWS\System32\.crusader [2012-08-28 00:20:41 | 000,001,324 | ---- | M] () -- F:\WINDOWS\System32\d3d9caps.dat [2012-08-27 23:41:43 | 000,173,283 | ---- | M] () -- F:\Documents and Settings\Piotrek\Pulpit\7C pudełko-horz.jpg [2012-08-27 23:41:38 | 000,143,512 | ---- | M] () -- F:\Documents and Settings\Piotrek\Pulpit\8C pudełko-horz.jpg [2012-08-27 23:29:07 | 000,046,592 | ---- | M] () -- F:\Documents and Settings\Piotrek\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-08-27 23:03:00 | 000,001,088 | ---- | M] () -- F:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-839522115-1715567821-2147137731-1003Core.job [2012-08-27 22:06:19 | 000,151,401 | ---- | M] () -- F:\Documents and Settings\Piotrek\Pulpit\image2xxl.jpg [2012-08-27 22:06:14 | 000,154,229 | ---- | M] () -- F:\Documents and Settings\Piotrek\Pulpit\image1xxl.jpg [2012-08-27 21:51:29 | 000,505,214 | ---- | M] () -- F:\Documents and Settings\Piotrek\Pulpit\2.png [2012-08-27 21:51:00 | 000,558,961 | ---- | M] () -- F:\Documents and Settings\Piotrek\Pulpit\Bez%C2%A0tytu%C5%82u.png [2012-08-27 21:49:11 | 000,200,071 | ---- | M] () -- F:\Documents and Settings\Piotrek\Pulpit\stylizacja-Analyne-seksowne_7.jpg [2012-08-27 21:48:57 | 000,042,555 | ---- | M] () -- F:\Documents and Settings\Piotrek\Pulpit\nowa-czarna-bandage-bandazowa-atmosphere-xs-s-87459_4.jpg [2012-08-27 21:48:07 | 000,031,348 | ---- | M] () -- F:\Documents and Settings\Piotrek\Pulpit\9e_500x640.jpg [2012-08-27 21:47:33 | 000,007,245 | ---- | M] () -- F:\Documents and Settings\Piotrek\Pulpit\images.jpg [2012-08-27 21:45:45 | 000,047,990 | ---- | M] () -- F:\Documents and Settings\Piotrek\Pulpit\2583787799_1.jpg [2012-08-27 21:45:40 | 000,042,768 | ---- | M] () -- F:\Documents and Settings\Piotrek\Pulpit\2583787799.jpg [2012-08-27 21:24:02 | 000,029,465 | ---- | M] () -- F:\Documents and Settings\Piotrek\Pulpit\24242.jpg [2012-08-27 20:15:49 | 000,035,536 | ---- | M] () -- F:\Documents and Settings\Piotrek\Pulpit\253151_428360760564464_1502498652_n.jpg [2012-08-27 15:07:30 | 000,048,596 | ---- | M] () -- F:\Documents and Settings\Piotrek\Pulpit\IMG_1487.JPG [2012-08-27 14:59:53 | 000,035,783 | ---- | M] () -- F:\Documents and Settings\Piotrek\Pulpit\miodowe.jpg [2012-08-27 14:52:47 | 000,041,726 | ---- | M] () -- F:\Documents and Settings\Piotrek\Pulpit\1298471471738_7232366_FORMAT9_PHOTO[0]_300x0.jpg [2012-08-27 14:01:46 | 000,821,736 | ---- | M] (Oracle Corporation) -- F:\WINDOWS\System32\npDeployJava1.dll [2012-08-27 14:01:46 | 000,746,984 | ---- | M] (Oracle Corporation) -- F:\WINDOWS\System32\deployJava1.dll [2012-08-27 14:01:46 | 000,246,760 | ---- | M] (Oracle Corporation) -- F:\WINDOWS\System32\javaws.exe [2012-08-27 14:01:46 | 000,174,056 | ---- | M] (Oracle Corporation) -- F:\WINDOWS\System32\javaw.exe [2012-08-27 14:01:46 | 000,174,056 | ---- | M] (Oracle Corporation) -- F:\WINDOWS\System32\java.exe [2012-08-27 14:01:46 | 000,143,872 | ---- | M] (Oracle Corporation) -- F:\WINDOWS\System32\javacpl.cpl [2012-08-27 14:01:46 | 000,093,672 | ---- | M] (Oracle Corporation) -- F:\WINDOWS\System32\WindowsAccessBridge.dll [2012-08-27 13:57:47 | 000,894,952 | ---- | M] (Oracle Corporation) -- F:\Documents and Settings\Piotrek\Pulpit\jxpiinstall.exe [2012-08-27 13:49:59 | 066,469,316 | ---- | M] () -- F:\Documents and Settings\Piotrek\Pulpit\Zdjecia.rar [2012-08-26 23:56:51 | 000,077,326 | ---- | M] () -- F:\Documents and Settings\Piotrek\Pulpit\2581343665.jpg [2012-08-26 21:36:33 | 000,002,206 | ---- | M] () -- F:\WINDOWS\System32\wpa.dbl [2012-08-18 10:58:10 | 000,000,353 | ---- | M] () -- F:\Documents and Settings\Piotrek\Pulpit\glowny_96.m3u [2012-08-17 19:38:03 | 000,212,080 | ---- | M] () -- F:\WINDOWS\System32\FNTCACHE.DAT [2012-08-17 18:05:08 | 000,001,374 | ---- | M] () -- F:\WINDOWS\imsins.BAK [2012-08-15 23:20:35 | 000,042,656 | ---- | M] () -- F:\Documents and Settings\Piotrek\Pulpit\547349_423179041082636_1788026758_n.jpg [2012-08-09 10:26:32 | 000,040,603 | ---- | M] () -- F:\Documents and Settings\Piotrek\Moje dokumenty\533353_432960590061642_470733434_n.jpg [2012-08-09 10:25:26 | 000,070,250 | ---- | M] () -- F:\Documents and Settings\Piotrek\Moje dokumenty\562775_464806593543708_569522879_n.jpg [2012-08-04 12:33:02 | 000,000,116 | ---- | M] () -- F:\WINDOWS\NeroDigital.ini [color=#E56717]========== Files Created - No Company Name ==========[/color] File not found -- F:\Documents and Settings\Piotrek\Pulpit\Ten Typ Mes - File not found -- F:\Documents and Settings\Piotrek\Pulpit\masaz.rar File not found -- F:\Documents and Settings\Piotrek\Pulpit\masaz(2).rar [2012-08-28 10:34:23 | 000,618,227 | ---- | C] () -- F:\Documents and Settings\Piotrek\Pulpit\adwcleaner.exe [2012-08-28 00:27:13 | 000,020,258 | ---- | C] () -- F:\WINDOWS\System32\.crusader [2012-08-28 00:22:34 | 000,001,652 | ---- | C] () -- F:\Documents and Settings\All Users\Pulpit\HitmanPro.lnk [2012-08-27 23:41:43 | 000,173,283 | ---- | C] () -- F:\Documents and Settings\Piotrek\Pulpit\7C pudełko-horz.jpg [2012-08-27 23:41:38 | 000,143,512 | ---- | C] () -- F:\Documents and Settings\Piotrek\Pulpit\8C pudełko-horz.jpg [2012-08-27 22:06:18 | 000,151,401 | ---- | C] () -- F:\Documents and Settings\Piotrek\Pulpit\image2xxl.jpg [2012-08-27 22:06:14 | 000,154,229 | ---- | C] () -- F:\Documents and Settings\Piotrek\Pulpit\image1xxl.jpg [2012-08-27 21:51:29 | 000,505,214 | ---- | C] () -- F:\Documents and Settings\Piotrek\Pulpit\2.png [2012-08-27 21:51:00 | 000,558,961 | ---- | C] () -- F:\Documents and Settings\Piotrek\Pulpit\Bez%C2%A0tytu%C5%82u.png [2012-08-27 21:49:11 | 000,200,071 | ---- | C] () -- F:\Documents and Settings\Piotrek\Pulpit\stylizacja-Analyne-seksowne_7.jpg [2012-08-27 21:48:57 | 000,042,555 | ---- | C] () -- F:\Documents and Settings\Piotrek\Pulpit\nowa-czarna-bandage-bandazowa-atmosphere-xs-s-87459_4.jpg [2012-08-27 21:48:06 | 000,031,348 | ---- | C] () -- F:\Documents and Settings\Piotrek\Pulpit\9e_500x640.jpg [2012-08-27 21:47:33 | 000,007,245 | ---- | C] () -- F:\Documents and Settings\Piotrek\Pulpit\images.jpg [2012-08-27 21:45:45 | 000,047,990 | ---- | C] () -- F:\Documents and Settings\Piotrek\Pulpit\2583787799_1.jpg [2012-08-27 21:45:40 | 000,042,768 | ---- | C] () -- F:\Documents and Settings\Piotrek\Pulpit\2583787799.jpg [2012-08-27 21:24:02 | 000,029,465 | ---- | C] () -- F:\Documents and Settings\Piotrek\Pulpit\24242.jpg [2012-08-27 20:15:49 | 000,035,536 | ---- | C] () -- F:\Documents and Settings\Piotrek\Pulpit\253151_428360760564464_1502498652_n.jpg [2012-08-27 15:07:29 | 000,048,596 | ---- | C] () -- F:\Documents and Settings\Piotrek\Pulpit\IMG_1487.JPG [2012-08-27 14:59:53 | 000,035,783 | ---- | C] () -- F:\Documents and Settings\Piotrek\Pulpit\miodowe.jpg [2012-08-27 14:52:46 | 000,041,726 | ---- | C] () -- F:\Documents and Settings\Piotrek\Pulpit\1298471471738_7232366_FORMAT9_PHOTO[0]_300x0.jpg [2012-08-27 13:49:16 | 066,469,316 | ---- | C] () -- F:\Documents and Settings\Piotrek\Pulpit\Zdjecia.rar [2012-08-26 23:56:50 | 000,077,326 | ---- | C] () -- F:\Documents and Settings\Piotrek\Pulpit\2581343665.jpg [2012-08-18 10:58:10 | 000,000,353 | ---- | C] () -- F:\Documents and Settings\Piotrek\Pulpit\glowny_96.m3u [2012-08-15 23:20:34 | 000,042,656 | ---- | C] () -- F:\Documents and Settings\Piotrek\Pulpit\547349_423179041082636_1788026758_n.jpg [2012-08-09 10:26:32 | 000,040,603 | ---- | C] () -- F:\Documents and Settings\Piotrek\Moje dokumenty\533353_432960590061642_470733434_n.jpg [2012-08-09 10:25:26 | 000,070,250 | ---- | C] () -- F:\Documents and Settings\Piotrek\Moje dokumenty\562775_464806593543708_569522879_n.jpg [2012-05-08 17:08:25 | 000,001,861 | ---- | C] () -- F:\WINDOWS\Ascd_tmp.ini [2012-05-08 17:08:24 | 000,005,824 | ---- | C] () -- F:\WINDOWS\System32\drivers\ASUSHWIO.SYS [2012-03-31 14:26:11 | 000,000,058 | ---- | C] () -- F:\Documents and Settings\Piotrek\Ustawienia lokalne\Dane aplikacji\Images.fl [2012-03-29 00:15:34 | 000,000,000 | ---- | C] () -- F:\WINDOWS\EEventManager.INI [2012-02-15 15:43:16 | 000,003,072 | ---- | C] () -- F:\WINDOWS\System32\iacenc.dll [2012-01-26 20:14:38 | 000,000,083 | ---- | C] () -- F:\WINDOWS\WWP.INI [2011-07-10 02:29:32 | 000,000,000 | ---- | C] () -- F:\Documents and Settings\Piotrek\Ustawienia lokalne\Dane aplikacji\{15641D7D-EBD4-411B-9084-CB0B260CFA8C} [2010-09-08 12:23:28 | 189,467,464 | ---- | C] () -- F:\WINDOWS\System32\ntmcache.dll [2010-09-07 11:10:24 | 003,133,440 | ---- | C] () -- F:\WINDOWS\System32\atsvr.exe [2010-09-07 11:00:34 | 001,094,144 | ---- | C] () -- F:\WINDOWS\System32\nvwrsx86.dll [2010-09-07 11:00:24 | 000,135,168 | ---- | C] () -- F:\WINDOWS\System32\irclas32.dll [2009-07-31 22:57:09 | 000,002,516 | -HS- | C] () -- F:\Documents and Settings\All Users\Dane aplikacji\KGyGaAvL.sys [2009-07-31 22:57:09 | 000,000,088 | RHS- | C] () -- F:\Documents and Settings\All Users\Dane aplikacji\1610D01933.sys [2009-07-27 23:34:08 | 000,000,102 | ---- | C] () -- F:\Documents and Settings\Piotrek\default.pls [2009-06-16 14:12:06 | 000,000,000 | ---- | C] () -- F:\Documents and Settings\All Users\Dane aplikacji\LauncherAccess.dt [2009-06-13 22:30:16 | 000,046,592 | ---- | C] () -- F:\Documents and Settings\Piotrek\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 110 bytes -> F:\Documents and Settings\All Users\Dane aplikacji\TEMP:8303F807 @Alternate Data Stream - 109 bytes -> F:\Documents and Settings\All Users\Dane aplikacji\TEMP:DFC5A2B2 @Alternate Data Stream - 109 bytes -> F:\Documents and Settings\All Users\Dane aplikacji\TEMP:A73B0434 < End of report >