OTL logfile created on: 9/13/2012 1:19:52 AM - Run OTLPE by OldTimer - Version 3.1.48.0 Folder = X:\Programs\OTLPE Windows Vista (TM) Home Premium Service Pack 1 (Version = 6.0.6001) - Type = System Internet Explorer (Version = 7.0.6001.18000) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 91.00% Memory free 3.00 Gb Paging File | 3.00 Gb Available in Paging File | 98.00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 227.76 Gb Total Space | 191.65 Gb Free Space | 84.15% Space Free | Partition Type: NTFS Drive D: | 1.97 Gb Total Space | 1.97 Gb Free Space | 99.98% Space Free | Partition Type: FAT Drive E: | 228.00 Gb Total Space | 227.62 Gb Free Space | 99.84% Space Free | Partition Type: NTFS Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS Computer Name: REATOGO | User Name: SYSTEM Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days Using ControlSet: ControlSet001 [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Auto] -- -- (KwinzySrch Service) SRV - [2012/07/13 08:01:18 | 000,160,944 | R--- | M] (Skype Technologies) [Auto] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2008/05/23 01:11:56 | 000,819,200 | ---- | M] (Intel(R) Corporation) [Auto] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng) SRV - [2008/05/23 00:43:52 | 000,466,944 | ---- | M] (Intel(R) Corporation) [Auto] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc) SRV - [2008/05/12 19:47:20 | 000,077,480 | ---- | M] () [Auto] -- C:\Program Files\Samsung\Samsung Update Plus\SLUBackgroundService.exe -- (Samsung Update Plus) SRV - [2008/01/24 19:38:12 | 002,458,128 | ---- | M] (McAfee, Inc.) [Auto] -- C:\Program Files\Common Files\McAfee\MNA\McNASvc.exe -- (McNASvc) SRV - [2008/01/20 22:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2008/01/16 07:04:36 | 000,030,312 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe -- (BcmSqlStartupSvc) SRV - [2008/01/09 09:50:22 | 000,767,976 | ---- | M] (McAfee, Inc.) [Auto] -- C:\Program Files\McAfee\MSC\mcmscsvc.exe -- (mcmscsvc) SRV - [2007/12/05 04:04:10 | 000,695,624 | ---- | M] (McAfee, Inc.) [Disabled] -- C:\Program Files\McAfee\VirusScan\mcsysmon.exe -- (McSysmon) SRV - [2007/11/07 03:35:40 | 000,378,184 | ---- | M] (McAfee, Inc.) [On_Demand] -- C:\Program Files\McAfee\VirusScan\mcods.exe -- (McODS) SRV - [2007/08/14 23:36:04 | 000,359,248 | ---- | M] (McAfee, Inc.) [Auto] -- C:\Program Files\Common Files\McAfee\McProxy\McProxy.exe -- (McProxy) SRV - [2007/07/23 23:02:14 | 000,144,704 | ---- | M] (McAfee, Inc.) [Auto] -- C:\Program Files\McAfee\VirusScan\Mcshield.exe -- (McShield) SRV - [2007/07/18 02:54:42 | 000,856,864 | ---- | M] (McAfee, Inc.) [Auto] -- C:\Program Files\McAfee\MPF\MPFSrv.exe -- (MpfService) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand] -- -- (NwlnkFwd) DRV - File not found [Kernel | On_Demand] -- -- (NwlnkFlt) DRV - File not found [Kernel | On_Demand] -- -- (IpInIp) DRV - [2012/01/23 17:18:39 | 000,077,004 | ---- | M] (Oak Technology Inc.) [Kernel | Boot] -- C:\Windows\System32\drivers\AFS.SYS -- (AFS) DRV - [2008/09/12 03:00:04 | 000,013,312 | ---- | M] (SAMSUNG ELECTRONICS CO., LTD.) [Kernel | Auto] -- C:\Windows\System32\drivers\KMDFMEMIO.sys -- (KMDFMEMIO) DRV - [2008/08/05 14:29:26 | 000,044,576 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\nvhda32v.sys -- (NVHDA) DRV - [2008/07/26 15:24:00 | 007,548,000 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm) DRV - [2008/06/05 03:30:28 | 000,242,048 | ---- | M] (Vimicro Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\vmc302.sys -- (VMC302) DRV - [2008/05/20 15:36:12 | 003,663,360 | ---- | M] (Intel Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\NETw5v32.sys -- (NETw5v32) Sterownik karty Intel(R) DRV - [2008/05/08 05:51:18 | 000,226,328 | ---- | M] (Intel Corporation) [Kernel | Boot] -- C:\Windows\System32\drivers\iaNvStor.sys -- (iaNvStor) Intel(R) DRV - [2008/01/20 22:23:20 | 002,225,664 | ---- | M] (Intel Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\NETw3v32.sys -- (NETw3v32) Intel(R) DRV - [2007/12/02 06:51:42 | 000,040,488 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\mfesmfk.sys -- (mfesmfk) DRV - [2007/11/22 00:44:08 | 000,201,320 | ---- | M] (McAfee, Inc.) [Kernel | System] -- C:\Windows\System32\drivers\mfehidk.sys -- (mfehidk) DRV - [2007/11/22 00:44:08 | 000,079,304 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\mfeavfk.sys -- (mfeavfk) DRV - [2007/11/22 00:44:08 | 000,035,240 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\mfebopk.sys -- (mfebopk) DRV - [2007/11/22 00:44:04 | 000,033,832 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\mferkdk.sys -- (mferkdk) DRV - [2007/07/12 20:21:12 | 000,125,728 | ---- | M] (McAfee, Inc.) [Kernel | System] -- C:\Windows\System32\drivers\Mpfp.sys -- (MPFP) DRV - [2006/11/28 03:11:00 | 001,161,888 | ---- | M] (Agere Systems) [Kernel | On_Demand] -- C:\Windows\System32\drivers\AGRSM.sys -- (AgereSoftModem) DRV - [2006/11/02 03:30:53 | 000,045,056 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\bcm4sbxp.sys -- (bcm4sbxp) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http:\\www.samsungcomputer.com IE - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.) IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\Renia_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http:\\www.samsungcomputer.com IE - HKU\Renia_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?AF=19993&babsrc=HP_ss&mntrId=e8c2e8df00000000000000216b04c9e6 IE - HKU\Renia_ON_C\Software\Microsoft\Internet Explorer\Main,StartPageCache = 2 IE - HKU\Renia_ON_C\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.) IE - HKU\Renia_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\System32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Renia\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Renia\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) O1 HOSTS File: ([2006/09/18 17:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (BFlix Class) - {0C9F4179-6CE2-4c6a-A3E5-67FF3592A12E} - C:\Program Files\BFlix\Bflix.dll (BFlix) O2 - BHO: (PCCBHO.CPCCBHO) - {22FC6CE8-7D47-479F-B74A-BFBB04ADB9AF} - C:\Program Files\Winferno\PC Confidential\PCCBHO.dll (Capital Intellect Inc) O2 - BHO: (Winamp Toolbar Loader) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.) O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO) O2 - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll (McAfee, Inc.) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.7529.1424\swg.dll (Google Inc.) O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.) O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.) O3 - HKU\Renia_ON_C\..\Toolbar\WebBrowser: (Winamp Toolbar) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.) O4 - HKLM..\Run: [Sage Komunikator] C:\Program Files\Sage\Komunikator\SageUpdt.exe () O4 - HKU\LocalService_ON_C..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation) O4 - HKU\NetworkService_ON_C..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation) O4 - HKU\Renia_ON_C..\Run: [avxkcfmcizfdwfl] C:\ProgramData\avxkcfmc.exe (Ultra Products) O4 - HKU\Renia_ON_C..\Run: [Gadu-Gadu] C:\Program Files\Gadu-Gadu\gg.exe (Gadu-Gadu S.A.) O8 - Extra context menu item: &Winamp Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html () O9 - Extra 'Tools' menuitem : PC Confidential - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - C:\Program Files\Winferno\PC Confidential\PCConfidential.exe (Capital Intellect, Inc) O9 - Extra Button: PC Confidential - {925DAB62-F9AC-4221-806A-057BFB1014AA} - C:\Program Files\Winferno\PC Confidential\PCConfidential.exe (Capital Intellect, Inc) O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 0.0.0.0 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Windows\Sec\Wallpapers\wallpaper.jpg O24 - Desktop BackupWallPaper: C:\Windows\Sec\Wallpapers\wallpaper.jpg O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006/09/18 17:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ] O33 - MountPoints2\{94971b53-fb6a-11df-9ca8-001377b3b207}\Shell - "" = AutoRun O33 - MountPoints2\{94971b53-fb6a-11df-9ca8-001377b3b207}\Shell\AutoRun\command - "" = F:\AutoRunCardDetector.exe O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012/09/09 16:25:47 | 000,000,000 | ---D | C] -- C:\ProgramData\fitioykwiommljw [2012/09/09 16:25:46 | 000,157,696 | ---- | C] (Ultra Products) -- C:\ProgramData\avxkcfmc.exe [2012/09/06 11:18:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype [2012/09/06 11:18:49 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype [2012/09/06 11:18:48 | 000,000,000 | R--D | C] -- C:\Program Files\Skype [2012/09/06 11:18:36 | 000,000,000 | -HSD | C] -- C:\Config.Msi [2012/08/19 15:23:36 | 006,286,448 | ---- | C] (Microsoft Corporation) -- C:\Users\Renia\Desktop\Silverlight.exe [5 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012/09/12 16:01:04 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012/09/12 16:00:43 | 000,004,720 | ---- | M] () -- C:\Windows\System32\Config.MPF [2012/09/12 16:00:43 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat [2012/09/12 15:59:56 | 000,001,030 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2012/09/12 15:59:15 | 000,004,784 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2012/09/12 15:59:15 | 000,004,784 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2012/09/12 15:59:00 | 000,000,434 | ---- | M] () -- C:\Windows\tasks\RegPowerClean.job [2012/09/12 15:58:54 | 000,000,420 | ---- | M] () -- C:\Windows\tasks\RPCReminder.job [2012/09/12 15:58:54 | 000,000,416 | ---- | M] () -- C:\Windows\tasks\PCConfidential.job [2012/09/12 15:58:49 | 000,090,587 | ---- | M] () -- C:\ProgramData\nvModes.001 [2012/09/12 15:58:20 | 3215,577,088 | -HS- | M] () -- C:\hiberfil.sys [2012/09/10 10:08:00 | 000,001,034 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2012/09/10 10:07:01 | 000,001,058 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2418375235-3566275102-3426414316-1003UA.job [2012/09/09 16:25:47 | 000,078,030 | ---- | M] () -- C:\ProgramData\eqzhnnmbuxvnqqm [2012/09/09 16:25:37 | 000,157,696 | ---- | M] (Ultra Products) -- C:\ProgramData\avxkcfmc.exe [2012/09/09 15:07:00 | 000,001,006 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2418375235-3566275102-3426414316-1003Core.job [2012/09/06 11:18:54 | 000,001,880 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk [2012/09/06 11:18:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype [2012/09/06 11:13:19 | 000,000,686 | ---- | M] () -- C:\Windows\System32\dmlg.dat [2012/09/04 15:40:46 | 000,001,753 | ---- | M] () -- C:\Users\Renia\Desktop\Continue Adobe Flash Player Installation.lnk [2012/09/04 15:10:40 | 000,002,042 | ---- | M] () -- C:\Users\Renia\Desktop\Google Chrome.lnk [2012/09/04 15:10:40 | 000,002,004 | ---- | M] () -- C:\Users\Renia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk [2012/08/27 17:21:38 | 000,000,269 | -H-- | M] () -- C:\Users\Renia\Documents\hpothb07.dat [2012/08/27 17:21:38 | 000,000,000 | -H-- | M] () -- C:\Users\Renia\Documents\hpothb07.tif [2012/08/27 17:21:37 | 000,002,940 | -H-- | M] () -- C:\Users\Renia\Desktop\hpothb07.dat [2012/08/27 17:21:32 | 000,000,000 | -H-- | M] () -- C:\Users\Renia\Desktop\hpothb07.tif [2012/08/27 17:21:23 | 000,000,399 | -H-- | M] () -- C:\ProgramData\hpothb07.dat [2012/08/27 17:21:23 | 000,000,000 | -H-- | M] () -- C:\ProgramData\hpothb07.tif [2012/08/19 15:23:36 | 006,286,448 | ---- | M] (Microsoft Corporation) -- C:\Users\Renia\Desktop\Silverlight.exe [5 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012/09/12 15:58:20 | 3215,577,088 | -HS- | C] () -- C:\hiberfil.sys [2012/09/09 16:25:38 | 000,078,030 | ---- | C] () -- C:\ProgramData\eqzhnnmbuxvnqqm [2012/09/06 11:18:54 | 000,001,880 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk [2012/09/04 14:55:14 | 000,001,753 | ---- | C] () -- C:\Users\Renia\Desktop\Continue Adobe Flash Player Installation.lnk [2012/01/23 17:02:47 | 000,016,622 | ---- | C] () -- C:\Windows\hpomdl01.dat [2012/01/19 10:15:30 | 000,000,268 | ---- | C] () -- C:\Windows\_delis32.ini [2012/01/19 09:47:09 | 000,000,680 | ---- | C] () -- C:\Users\Renia\AppData\Local\d3d9caps.dat [2012/01/11 11:13:41 | 000,000,399 | -H-- | C] () -- C:\ProgramData\hpothb07.dat [2012/01/11 11:13:41 | 000,000,000 | -H-- | C] () -- C:\ProgramData\hpothb07.tif [2012/01/11 09:59:46 | 000,000,235 | ---- | C] () -- C:\Users\Renia\AppData\Roaming\devices.xml [2012/01/11 09:59:46 | 000,000,012 | ---- | C] () -- C:\Users\Renia\AppData\Roaming\settings.xml [2012/01/03 16:43:56 | 000,043,520 | ---- | C] () -- C:\Windows\System32\CmdLineExt03.dll [2011/04/10 08:27:46 | 000,000,066 | ---- | C] () -- C:\Windows\mxreader.INI [2011/04/10 08:22:19 | 000,000,454 | ---- | C] () -- C:\Windows\MKP.ini [2011/04/10 08:18:11 | 000,000,080 | ---- | C] () -- C:\Windows\Sage.eDeklaracje.INI [2011/04/10 08:02:30 | 000,000,591 | ---- | C] () -- C:\Windows\amfp.ini [2011/04/10 08:02:06 | 000,002,442 | ---- | C] () -- C:\Windows\AmFK.ini [2011/04/10 08:01:11 | 000,101,888 | ---- | C] () -- C:\Windows\System32\BUTIL.DLL [2011/04/10 08:01:11 | 000,002,055 | R--- | C] () -- C:\Windows\BTI.INI [2010/10/15 11:24:07 | 000,165,376 | ---- | C] () -- C:\Windows\System32\unrar.dll [2010/10/15 11:24:05 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini [2010/10/15 11:23:59 | 002,931,712 | ---- | C] () -- C:\Windows\System32\x264vfw.dll [2010/10/15 11:23:58 | 000,790,528 | ---- | C] () -- C:\Windows\System32\xvidcore.dll [2010/10/15 11:23:58 | 000,134,144 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll [2010/10/15 11:23:56 | 000,108,032 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll [2010/08/08 11:01:46 | 000,024,064 | ---- | C] () -- C:\Users\Renia\AppData\Roaming\UserTile.png [2010/08/08 09:07:22 | 000,000,686 | ---- | C] () -- C:\Windows\System32\dmlg.dat [2009/05/05 10:20:36 | 000,012,800 | ---- | C] () -- C:\Users\Renia\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009/05/04 06:08:36 | 000,001,228 | ---- | C] () -- C:\Windows\unins000.dat [2009/05/04 06:00:09 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2009/05/04 05:55:07 | 000,000,612 | ---- | C] () -- C:\Windows\M3JP2K.INI [2009/05/04 05:37:14 | 000,057,344 | ---- | C] () -- C:\Windows\System32\MMTray2k.exe [2008/12/29 22:23:13 | 000,090,587 | ---- | C] () -- C:\ProgramData\nvModes.001 [2008/12/29 22:22:58 | 000,090,587 | ---- | C] () -- C:\ProgramData\nvModes.dat [2008/09/12 18:40:29 | 000,000,012 | ---- | C] () -- C:\Windows\bthservsdp.dat [2008/09/12 03:02:42 | 000,001,670 | ---- | C] () -- C:\Windows\HotFixList.ini [2008/09/12 03:02:18 | 000,307,200 | ---- | C] () -- C:\Windows\SetDisplayResolution.exe [2008/09/12 03:01:53 | 000,000,135 | R--- | C] () -- C:\Windows\System32\lngEng.ini [2008/09/12 03:01:53 | 000,000,117 | ---- | C] () -- C:\Windows\System32\lngKor.ini [2008/09/12 02:55:22 | 000,040,960 | ---- | C] () -- C:\Windows\System32\IhDEV.exe [2008/09/12 02:55:22 | 000,024,576 | ---- | C] () -- C:\Windows\System32\IhINF.exe [2008/09/12 02:53:53 | 000,172,032 | ---- | C] () -- C:\Windows\System32\nvccoin.dll [2008/09/12 01:33:46 | 000,708,820 | ---- | C] () -- C:\Windows\System32\perfh015.dat [2008/09/12 01:33:46 | 000,332,832 | ---- | C] () -- C:\Windows\System32\perfi015.dat [2008/09/12 01:33:46 | 000,144,430 | ---- | C] () -- C:\Windows\System32\perfc015.dat [2008/09/12 01:33:46 | 000,037,468 | ---- | C] () -- C:\Windows\System32\perfd015.dat [2008/09/12 01:26:45 | 001,060,424 | ---- | C] () -- C:\Windows\System32\WdfCoInstaller01000.dll [2008/02/09 12:03:07 | 000,024,576 | ---- | C] () -- C:\Windows\System32\drivers\Marker.exe [2008/01/20 22:24:14 | 000,100,043 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin [2007/02/26 03:49:12 | 006,139,774 | ---- | C] () -- C:\Windows\System32\imagine digital freedom.dat [2006/11/02 08:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2006/11/02 08:47:37 | 000,394,168 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT [2006/11/02 08:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll [2006/11/02 06:33:01 | 000,633,886 | ---- | C] () -- C:\Windows\System32\perfh009.dat [2006/11/02 06:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat [2006/11/02 06:33:01 | 000,118,772 | ---- | C] () -- C:\Windows\System32\perfc009.dat [2006/11/02 06:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat [2006/11/02 06:25:21 | 000,061,440 | ---- | C] () -- C:\Windows\System32\igfxTMM.dll [2006/11/02 06:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat [2006/11/02 04:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2006/11/02 04:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT [2006/11/02 03:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini [2006/11/02 03:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat [2006/11/02 03:22:43 | 000,018,271 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin [2002/12/02 22:59:26 | 000,020,728 | ---- | C] () -- C:\Windows\hpoins01.dat [2002/08/07 06:06:22 | 000,045,056 | ---- | C] () -- C:\Windows\System32\dsrmp4.dll [2002/05/15 18:38:40 | 000,091,136 | ---- | C] () -- C:\Windows\System32\mp4fil32.dll [2001/11/13 23:56:00 | 001,802,240 | ---- | C] () -- C:\Windows\System32\lcppn21.dll [color=#E56717]========== LOP Check ==========[/color] [2012/01/24 16:33:19 | 000,000,000 | ---D | M] -- C:\Users\Renia\AppData\Roaming\Babylon [2009/05/05 09:53:30 | 000,000,000 | ---D | M] -- C:\Users\Renia\AppData\Roaming\Gadu-Gadu [2011/08/19 12:23:55 | 000,000,000 | ---D | M] -- C:\Users\Renia\AppData\Roaming\Gadu-Gadu 10 [2010/10/15 11:34:27 | 000,000,000 | ---D | M] -- C:\Users\Renia\AppData\Roaming\OpenOffice.org [2010/08/08 11:01:45 | 000,000,000 | ---D | M] -- C:\Users\Renia\AppData\Roaming\PeerNetworking [2011/04/10 08:02:29 | 000,000,000 | ---D | M] -- C:\Users\Renia\AppData\Roaming\Sage [2006/11/02 09:02:03 | 000,000,000 | -HSD | M] -- C:\ProgramData\Application Data [2011/04/10 09:04:10 | 000,000,000 | ---D | M] -- C:\ProgramData\Asseco Poland SA [2012/01/24 16:33:20 | 000,000,000 | ---D | M] -- C:\ProgramData\Babylon [2009/05/04 04:52:38 | 000,000,000 | -HSD | M] -- C:\ProgramData\Dane aplikacji [2006/11/02 09:02:03 | 000,000,000 | -HSD | M] -- C:\ProgramData\Desktop [2006/11/02 09:02:03 | 000,000,000 | -HSD | M] -- C:\ProgramData\Documents [2009/05/04 04:52:38 | 000,000,000 | -HSD | M] -- C:\ProgramData\Dokumenty [2006/11/02 09:02:03 | 000,000,000 | -HSD | M] -- C:\ProgramData\Favorites [2012/09/09 16:25:47 | 000,000,000 | ---D | M] -- C:\ProgramData\fitioykwiommljw [2011/08/19 12:23:22 | 000,000,000 | ---D | M] -- C:\ProgramData\Gadu-Gadu 10 [2012/01/24 16:33:45 | 000,000,000 | ---D | M] -- C:\ProgramData\InstallMate [2012/09/12 12:44:51 | 000,000,000 | ---D | M] -- C:\ProgramData\KwinzySrch [2009/05/04 04:52:38 | 000,000,000 | -HSD | M] -- C:\ProgramData\Menu Start [2009/05/04 06:33:42 | 000,000,000 | ---D | M] -- C:\ProgramData\OrbNetworks [2012/01/24 16:33:02 | 000,000,000 | ---D | M] -- C:\ProgramData\Premium [2009/05/04 04:52:38 | 000,000,000 | -HSD | M] -- C:\ProgramData\Pulpit [2008/09/12 02:49:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Roaming [2011/04/10 08:02:29 | 000,000,000 | ---D | M] -- C:\ProgramData\Sage [2006/11/02 09:02:03 | 000,000,000 | -HSD | M] -- C:\ProgramData\Start Menu [2011/04/10 08:02:06 | 000,000,000 | ---D | M] -- C:\ProgramData\Symfonia [2009/05/04 04:52:38 | 000,000,000 | -HSD | M] -- C:\ProgramData\Szablony [2006/11/02 09:02:04 | 000,000,000 | -HSD | M] -- C:\ProgramData\Templates [2009/05/04 04:52:38 | 000,000,000 | -HSD | M] -- C:\ProgramData\Ulubione [2009/05/05 10:54:54 | 000,000,000 | ---D | M] -- C:\ProgramData\VistaCodecs [2009/05/04 06:12:00 | 000,000,000 | ---D | M] -- C:\ProgramData\Winferno [2008/09/12 04:17:18 | 000,000,000 | ---D | M] -- C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3} [2008/09/12 03:29:14 | 000,000,362 | ---- | M] () -- C:\Windows\Tasks\McDefragTask.job [2008/09/12 03:29:14 | 000,000,348 | ---- | M] () -- C:\Windows\Tasks\McQcTask.job [2012/09/12 15:58:54 | 000,000,416 | ---- | M] () -- C:\Windows\Tasks\PCConfidential.job [2012/09/12 15:59:00 | 000,000,434 | ---- | M] () -- C:\Windows\Tasks\RegPowerClean.job [2012/09/12 15:58:54 | 000,000,420 | ---- | M] () -- C:\Windows\Tasks\RPCReminder.job [2012/09/12 16:00:43 | 000,032,548 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] < End of report >