OTL logfile created on: 2012-09-16 13:17:05 - Run 5 OTL by OldTimer - Version 3.2.61.5 Folder = L:\ Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,50 Gb Total Physical Memory | 3,20 Gb Available Physical Memory | 91,43% Memory free 6,34 Gb Paging File | 6,26 Gb Available in Paging File | 98,74% Paging File free Paging file location(s): C:\pagefile.sys 3070 3070 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = Drive C: | 48,83 Gb Total Space | 7,50 Gb Free Space | 15,35% Space Free | Partition Type: NTFS Drive D: | 138,97 Gb Total Space | 2,39 Gb Free Space | 1,72% Space Free | Partition Type: NTFS Drive E: | 137,70 Gb Total Space | 55,79 Gb Free Space | 40,52% Space Free | Partition Type: NTFS Drive F: | 137,70 Gb Total Space | 22,11 Gb Free Space | 16,06% Space Free | Partition Type: NTFS Drive L: | 7,45 Gb Total Space | 0,28 Gb Free Space | 3,73% Space Free | Partition Type: FAT32 Computer Name: KACPER-CAE7A81D | User Name: Kacper | Logged in as Administrator. Boot Mode: SafeMode | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-09-16 13:16:16 | 000,600,064 | ---- | M] (OldTimer Tools) -- L:\OTL.exe PRC - [2008-04-14 22:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2008-04-14 22:51:10 | 000,396,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\cmd.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2010-07-08 00:52:44 | 000,555,624 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\nView\nvShell.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV - [2012-09-15 23:30:18 | 000,070,144 | ---- | M] () [Unknown (-1) | Unknown] -- C:\WINDOWS\System32\drivers\ce38f4e828997f2b.sys -- (ce38f4e828997f2b) SRV - [2012-09-15 23:30:14 | 000,365,568 | ---- | M] (Motion computing) [Auto | Stopped] -- C:\WINDOWS\Installer\{747506B3-6D2C-D954-9827-3AAB7810039C}\syshost.exe -- (syshost32) SRV - [2012-09-07 16:51:28 | 000,529,744 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2012-08-27 11:32:32 | 000,129,976 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2012-04-16 17:49:06 | 000,240,208 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Program Files\Microsoft\BingBar\7.1.382.0\SeaPort.EXE -- (BBUpdate) SRV - [2012-04-16 17:49:06 | 000,193,616 | ---- | M] (Microsoft Corporation.) [Auto | Stopped] -- C:\Program Files\Microsoft\BingBar\7.1.382.0\BBSvc.EXE -- (BBSvc) SRV - [2012-04-05 21:50:06 | 000,008,704 | ---- | M] (Hi-Rez Studios) [Auto | Stopped] -- E:\GRY\Razgames\HiPatchService.exe -- (HiPatchService) SRV - [2012-02-14 04:53:38 | 000,193,288 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Stopped] -- C:\Program Files\AVG\AVG2012\avgwdsvc.exe -- (avgwd) SRV - [2012-01-18 14:38:28 | 000,155,320 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion) SRV - [2012-01-04 13:32:36 | 000,718,888 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2011-10-20 18:03:53 | 000,651,720 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2008-02-27 12:22:58 | 000,494,088 | ---- | M] () [Auto | Stopped] -- C:\Program Files\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe -- (TryAndDecideService) SRV - [2008-02-27 11:24:48 | 000,427,288 | ---- | M] (Acronis) [Auto | Stopped] -- C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe -- (AcrSch2Svc) SRV - [2007-05-15 16:55:46 | 001,550,896 | ---- | M] (Nero AG) [Auto | Stopped] -- C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe -- (InCDsrv) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\EagleNT.sys -- (EagleNT) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - [2012-09-15 23:30:18 | 000,070,144 | ---- | M] () [Unknown (-1) | Unknown (-1) | Unknown] -- C:\WINDOWS\System32\drivers\ce38f4e828997f2b.sys -- (ce38f4e828997f2b) DRV - [2012-09-15 23:30:16 | 000,070,144 | ---- | M] () [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\194c278.sys -- (194c278) DRV - [2012-07-26 03:21:30 | 000,237,408 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\avgldx86.sys -- (Avgldx86) DRV - [2012-04-19 04:50:26 | 000,024,896 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\avgidshx.sys -- (AVGIDSHX) DRV - [2012-02-29 23:47:53 | 000,271,360 | ---- | M] () [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt) DRV - [2012-02-29 23:47:49 | 000,018,048 | ---- | M] () [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt) DRV - [2012-01-31 04:46:50 | 000,031,952 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\avgrkx86.sys -- (Avgrkx86) DRV - [2011-12-23 13:32:14 | 000,041,040 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Stopped] -- C:\WINDOWS\system32\drivers\avgmfx86.sys -- (Avgmfx86) DRV - [2010-01-29 12:40:04 | 000,082,320 | ---- | M] (EZB Systems, Inc.) [File_System | System | Stopped] -- C:\Program Files\UltraISO\drivers\ISODrive.sys -- (ISODrive) DRV - [2009-12-16 17:16:03 | 000,441,760 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\timntr.sys -- (timounter) DRV - [2009-12-16 17:16:03 | 000,044,384 | ---- | M] (Acronis) [File_System | Auto | Stopped] -- C:\WINDOWS\system32\drivers\tifsfilt.sys -- (tifsfilter) DRV - [2009-12-16 17:15:56 | 000,129,248 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\snapman.sys -- (snapman) DRV - [2009-12-16 17:15:39 | 000,368,480 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\tdrpman.sys -- (tdrpman) DRV - [2009-12-16 15:03:27 | 000,015,600 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\gdrv.sys -- (gdrv) DRV - [2008-08-26 09:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2008-05-16 12:33:14 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016mdfl.sys -- (s0016mdfl) DRV - [2008-05-16 12:33:12 | 000,120,744 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016mdm.sys -- (s0016mdm) DRV - [2008-05-16 12:33:12 | 000,089,256 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016bus.sys -- (s0016bus) DRV - [2007-09-05 11:31:30 | 004,611,072 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) DRV - [2007-06-28 13:46:42 | 000,020,480 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus) DRV - [2007-06-28 13:46:40 | 000,045,824 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD) DRV - [2007-05-15 16:55:36 | 000,118,576 | ---- | M] (Nero AG) [File_System | Disabled | Stopped] -- C:\WINDOWS\system32\drivers\InCDfs.sys -- (InCDfs) DRV - [2007-05-15 16:55:36 | 000,038,576 | ---- | M] (Nero AG) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\InCDRm.sys -- (incdrm) DRV - [2007-05-15 16:55:36 | 000,037,040 | ---- | M] (Nero AG) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\InCDPass.sys -- (InCDPass) DRV - [2007-05-15 16:55:36 | 000,016,304 | ---- | M] (Nero AG) [Recognizer | System | Unknown] -- C:\WINDOWS\System32\drivers\InCDrec.sys -- (InCDrec) DRV - [2006-07-02 00:32:26 | 000,043,520 | ---- | M] (Advanced Micro Devices) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8) DRV - [2003-09-06 15:37:22 | 000,062,656 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\prohlp02.sys -- (prohlp02) DRV - [2003-09-06 14:27:06 | 000,004,832 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sfhlp01.sys -- (sfhlp01) DRV - [2003-09-06 14:25:52 | 000,051,744 | ---- | M] (Protection Technology) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\prodrv06.sys -- (prodrv06) DRV - [2003-09-06 14:22:08 | 000,006,944 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\prosync1.sys -- (prosync1) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-448539723-1450960922-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie IE - HKU\S-1-5-21-448539723-1450960922-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ IE - HKU\S-1-5-21-448539723-1450960922-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKU\S-1-5-21-448539723-1450960922-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKU\S-1-5-21-448539723-1450960922-682003330-1003\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}\InprocServer32 File not found IE - HKU\S-1-5-21-448539723-1450960922-682003330-1003\..\URLSearchHook: {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTo0.dll (Conduit Ltd.) IE - HKU\S-1-5-21-448539723-1450960922-682003330-1003\..\SearchScopes,DefaultScope = {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} IE - HKU\S-1-5-21-448539723-1450960922-682003330-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?FORM=NP01DF&PC=NP01&q={searchTerms}&src=IE-SearchBox IE - HKU\S-1-5-21-448539723-1450960922-682003330-1003\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=DAT&o=15240&src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=FD&apn_dtid=YYYYYYYYPL&apn_uid=FDE24DB1-2747-402A-B4C3-01C37042033B&apn_sauid=2692596F-19DB-4B4B-A30C-E30436483D1F IE - HKU\S-1-5-21-448539723-1450960922-682003330-1003\..\SearchScopes\{66A5F44A-4AC5-4AAC-857A-AB4FC805336D}: "URL" = http://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7 IE - HKU\S-1-5-21-448539723-1450960922-682003330-1003\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searcrchTerms}&ei=utf-8&fr=b1ie7 IE - HKU\S-1-5-21-448539723-1450960922-682003330-1003\..\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}: "URL" = http://www.daemon-search.com/search/web?q={searchTerms} IE - HKU\S-1-5-21-448539723-1450960922-682003330-1003\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3072253 IE - HKU\S-1-5-21-448539723-1450960922-682003330-1003\..\SearchScopes\{B5D96C03-1AB9-4B71-8DEB-A951208D184F}: "URL" = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 IE - HKU\S-1-5-21-448539723-1450960922-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-448539723-1450960922-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultengine: "Ask.com" FF - prefs.js..browser.search.defaultenginename: "Ask.com" FF - prefs.js..browser.search.defaultthis.engineName: "uTorrentControl2 Customized Web Search" FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&SearchSource=3&q={searchTerms}" FF - prefs.js..browser.search.order.1: "Ask.com" FF - prefs.js..browser.search.selectedEngine: "Ask.com" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://search.conduit.com/?ctid=CT3072253&SearchSource=13" FF - prefs.js..extensions.enabledAddons: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledAddons: {F53C93F1-07D5-430c-86D4-C9531B27DFAF}:12.0.0.2189 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}:6.0.31 FF - prefs.js..extensions.enabledItems: {F53C93F1-07D5-430c-86D4-C9531B27DFAF}:12.0.0.2189 FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products Ltd.) FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=12.0.1.633: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=12.0.1.633: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.633: C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=12.0.1.633: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products Ltd.) FF - HKCU\Software\MozillaPlugins\facebook.com/fbDesktopPlugin: C:\Documents and Settings\Kacper\Ustawienia lokalne\Dane aplikacji\Facebook\Messenger\2.1.4631.0\npFbDesktopPlugin.dll (Facebook, Inc.) FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-02-11 15:08:15 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtualKeyboard@kaspersky.ru: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\virtualKeyboard@kaspersky.ru FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\KavAntiBanner@Kaspersky.ru: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\KavAntiBanner@kaspersky.ru FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\linkfilter@kaspersky.ru: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\linkfilter@kaspersky.ru FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{F53C93F1-07D5-430c-86D4-C9531B27DFAF}: C:\Program Files\AVG\AVG2012\Firefox\DoNotTrack\ [2012-07-20 15:24:23 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-08-27 11:32:37 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-08-27 11:32:37 | 000,000,000 | ---D | M] [2011-01-10 21:14:30 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Kacper\Dane aplikacji\Mozilla\Extensions [2012-08-31 07:24:51 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Kacper\Dane aplikacji\Mozilla\Firefox\Profiles\4beeu6nz.default\extensions [2012-05-09 11:34:15 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Kacper\Dane aplikacji\Mozilla\Firefox\Profiles\4beeu6nz.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2012-07-20 15:24:23 | 000,000,000 | ---D | M] (AVG Do Not Track) -- C:\PROGRAM FILES\AVG\AVG2012\FIREFOX\DONOTTRACK [2012-03-04 21:25:07 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [color=#E56717]========== Chrome ==========[/color] CHR - homepage: http://search.conduit.com/?ctid=CT3072253&SearchSource=48 CHR - default_search_provider: Conduit (Enabled) CHR - default_search_provider: search_url = http://search.conduit.com/Results.aspx?q={searchTerms}&SearchSource=49&ctid=CT3072253 CHR - default_search_provider: suggest_url = http://search.conduit.com/ CHR - homepage: http://search.conduit.com/?ctid=CT3072253&SearchSource=48 CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\20.0.1132.57\pdf.dll CHR - plugin: Google Gears 0.5.33.0 (Enabled) = C:\Program Files\Google\Chrome\Application\20.0.1132.57\gears.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\20.0.1132.57\gcswf32.dll CHR - plugin: Java Deployment Toolkit 6.0.230.5 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 6 U23 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll CHR - plugin: 2007 Microsoft Office system (Enabled) = C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL CHR - plugin: PDF-XChange Viewer (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npPDFXCviewNPPlugin.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll CHR - plugin: Picasa (Enabled) = C:\Program Files\Google\Picasa3\npPicasa3.dll CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.2.183.23\npGoogleOneClick8.dll CHR - plugin: Windows Presentation Foundation (Enabled) = C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll CHR - plugin: Default Plug-in (Enabled) = default_plugin CHR - Extension: RealPlayer HTML5Video Downloader Extension = C:\Documents and Settings\Kacper\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.3_0\ CHR - Extension: uTorrentControl2 = C:\Documents and Settings\Kacper\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\2.3.15.10_0\ CHR - Extension: Vid-Saver = C:\Documents and Settings\Kacper\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pgmfkblbflahhponhjmkcnpjinenhlnc\1.18.26_0\crossrider CHR - Extension: Vid-Saver = C:\Documents and Settings\Kacper\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pgmfkblbflahhponhjmkcnpjinenhlnc\1.18.26_0\ O1 HOSTS File: ([2012-07-19 11:02:38 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Yahoo! Companion BHO) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_2_0.dll (Yahoo! Inc.) O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer) O2 - BHO: (AVG Do Not Track) - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files\AVG\AVG2012\avgdtiex.dll (AVG Technologies CZ, s.r.o.) O2 - BHO: (uTorrentControl2 Toolbar) - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTo0.dll (Conduit Ltd.) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\7.1.382.0\BingExt.dll (Microsoft Corporation.) O2 - BHO: (Arcade Town Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll File not found O3 - HKLM\..\Toolbar: (uTorrentControl2 Toolbar) - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTo0.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\7.1.382.0\BingExt.dll (Microsoft Corporation.) O3 - HKLM\..\Toolbar: (Arcade Town Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll File not found O3 - HKU\S-1-5-21-448539723-1450960922-682003330-1003\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found. O3 - HKU\S-1-5-21-448539723-1450960922-682003330-1003\..\Toolbar\WebBrowser: (uTorrentControl2 Toolbar) - {687578B9-7132-4A7A-80E4-30EE31099E03} - C:\Program Files\uTorrentControl2\prxtbuTo0.dll (Conduit Ltd.) O3 - HKU\S-1-5-21-448539723-1450960922-682003330-1003\..\Toolbar\WebBrowser: (Arcade Town Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll File not found O3 - HKU\S-1-5-21-448539723-1450960922-682003330-1003\..\Toolbar\WebBrowser: (&Yahoo! Companion) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_2_0.dll (Yahoo! Inc.) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-448539723-1450960922-682003330-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-448539723-1450960922-682003330-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-21-448539723-1450960922-682003330-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-21-448539723-1450960922-682003330-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.) O9 - Extra Button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - C:\Program Files\AVG\AVG2012\avgdtiex.dll (AVG Technologies CZ, s.r.o.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{CCA393FF-8E56-47A3-BF06-5ADB524352B8}: DhcpNameServer = 192.168.0.1 O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O20 - HKU\S-1-5-21-448539723-1450960922-682003330-1003 Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKU\S-1-5-21-448539723-1450960922-682003330-1003 Winlogon: Shell - (C:\Documents and Settings\Kacper\Dane aplikacji\msconfig.dat) - C:\Documents and Settings\Kacper\Dane aplikacji\msconfig.dat () O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\Kacper\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Kacper\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O30 - LSA: Authentication Packages - (relog_ap) - C:\WINDOWS\System32\relog_ap.dll (Acronis) O31 - SafeBoot: UseAlternatShell - 1 O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-12-16 14:42:12 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2011-10-20 17:49:26 | 000,000,000 | ---D | M] - F:\AUTOCAD2010 -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG2012\avgrsx.exe /sync /restart) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-09-16 10:31:10 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss [2012-09-14 18:28:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Kacper\Pulpit\Nowy folder (3) [2012-09-14 15:55:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\World of Tanks [2012-09-14 15:52:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Kacper\Dane aplikacji\wargaming.net [2012-09-14 11:58:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Kacper\Pulpit\Slums_Attack-CNO2-CD-PL-2012-p4weu [2012-09-11 16:11:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\AVG [2012-09-09 21:35:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Kacper\Pulpit\Nowy folder (2) [2012-09-09 12:04:19 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Kacper\Pulpit\.picasaoriginals [2012-09-08 11:32:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Kacper\Menu Start\Programy\Facebook [2012-08-29 23:26:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Kacper\Ustawienia lokalne\Dane aplikacji\Facebook [2012-08-27 23:12:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\036E193202C2E1CE37E6D8E981CB3EF3 [2012-08-27 11:32:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Mozilla [2012-08-19 21:55:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Dane aplikacji\Apple Computer [2 \*.tmp files -> \*.tmp -> ] [2 \*.tmp files -> \*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-09-16 13:12:26 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2012-09-16 13:12:10 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2012-09-16 11:30:27 | 000,000,045 | ---- | M] () -- C:\Documents and Settings\Kacper\Dane aplikacji\msconfig.ini [2012-09-16 11:30:00 | 000,000,464 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{AEE31547-830B-4B3E-B72D-E60CD8AF2D5C}.job [2012-09-16 11:27:39 | 000,001,032 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2012-09-16 11:27:39 | 000,000,280 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-448539723-1450960922-682003330-1003.job [2012-09-16 11:27:37 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2012-09-16 11:12:51 | 000,000,573 | ---- | M] () -- C:\WINDOWS\win.ini [2012-09-16 11:12:51 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini [2012-09-16 10:45:45 | 014,942,208 | ---- | M] () -- C:\Documents and Settings\Kacper\ntuser.dat [2012-09-16 10:45:45 | 000,000,188 | -HS- | M] () -- C:\Documents and Settings\Kacper\ntuser.ini [2012-09-15 23:30:18 | 000,070,144 | ---- | M] () -- C:\WINDOWS\System32\drivers\ce38f4e828997f2b.sys [2012-09-15 23:30:16 | 000,070,144 | ---- | M] () -- C:\WINDOWS\System32\drivers\194c278.sys [2012-09-15 22:59:58 | 000,000,288 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-448539723-1450960922-682003330-1003.job [2012-09-15 22:33:00 | 000,001,036 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2012-09-15 20:31:02 | 000,001,006 | ---- | M] () -- C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-448539723-1450960922-682003330-1003UA.job [2012-09-15 19:53:00 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job [2012-09-15 15:44:03 | 094,883,637 | ---- | M] () -- C:\WINDOWS\System32\drivers\AVG\incavi.avm [2012-09-15 12:07:24 | 000,053,248 | ---- | M] () -- C:\Documents and Settings\Kacper\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-09-15 12:06:36 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2012-09-15 10:56:26 | 000,058,177 | ---- | M] () -- C:\WINDOWS\System32\drivers\AVG\iavichjg.avm [2012-09-14 23:31:00 | 000,000,984 | ---- | M] () -- C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-448539723-1450960922-682003330-1003Core.job [2012-09-14 16:01:54 | 002,175,477 | ---- | M] () -- C:\Documents and Settings\Kacper\Pulpit\Paluch - Za Wszystko (DIIL.TV HD).mp3 [2012-09-14 11:53:51 | 130,945,973 | ---- | M] () -- C:\Documents and Settings\Kacper\Pulpit\Slums_Attack-CNO2-CD-PL-2012-p4weu.rar [2012-09-11 16:11:03 | 000,000,716 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\AVG 2012.lnk [2012-09-10 12:15:38 | 000,002,513 | ---- | M] () -- C:\Documents and Settings\Kacper\Pulpit\Microsoft Office Word 2007.lnk [2012-08-29 10:42:21 | 000,001,723 | ---- | M] () -- C:\Documents and Settings\Kacper\Pulpit\Sony PC Companion 2.1.lnk [2012-08-28 11:38:05 | 000,012,146 | ---- | M] () -- C:\Documents and Settings\Kacper\AVGIDSAgent [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-09-16 13:16:32 | 000,600,064 | ---- | C] () -- \OTL.exe [2012-09-16 13:14:44 | 000,468,072 | ---- | C] () -- \OTL(19450).exe [2012-09-15 23:30:22 | 000,000,045 | ---- | C] () -- C:\Documents and Settings\Kacper\Dane aplikacji\msconfig.ini [2012-09-15 23:30:18 | 000,070,144 | ---- | C] () -- C:\WINDOWS\System32\drivers\ce38f4e828997f2b.sys [2012-09-15 23:30:16 | 000,070,144 | ---- | C] () -- C:\WINDOWS\System32\drivers\194c278.sys [2012-09-14 16:01:52 | 002,175,477 | ---- | C] () -- C:\Documents and Settings\Kacper\Pulpit\Paluch - Za Wszystko (DIIL.TV HD).mp3 [2012-09-14 11:53:19 | 130,945,973 | ---- | C] () -- C:\Documents and Settings\Kacper\Pulpit\Slums_Attack-CNO2-CD-PL-2012-p4weu.rar [2012-09-10 18:56:35 | 000,000,280 | ---- | C] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-448539723-1450960922-682003330-1003.job [2012-08-29 23:26:25 | 000,001,006 | ---- | C] () -- C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-448539723-1450960922-682003330-1003UA.job [2012-08-29 23:26:25 | 000,000,984 | ---- | C] () -- C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-448539723-1450960922-682003330-1003Core.job [2012-08-28 08:57:05 | 000,012,146 | ---- | C] () -- C:\Documents and Settings\Kacper\AVGIDSAgent [2012-08-27 11:32:38 | 000,000,714 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Mozilla Firefox.lnk [2012-07-23 16:59:04 | 000,000,051 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\hbbervkrhlwpfcj [2012-07-19 11:05:34 | 000,558,133 | ---- | C] () -- C:\WINDOWS\System32\sqlite3.dll [2012-06-28 19:40:48 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Kacper\ja 003.jpg [2012-06-28 19:39:02 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Kacper\P3040228.JPG [2012-06-02 06:14:59 | 001,701,507 | ---- | C] () -- \DOBORGRZ_3.pdf [2012-05-02 15:55:13 | 014,942,208 | ---- | C] () -- C:\Documents and Settings\Kacper\ntuser.dat [2012-03-10 10:17:37 | 000,000,076 | -H-- | C] () -- \nmdsdcid [2012-02-29 23:47:52 | 000,271,360 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys [2012-02-29 23:47:49 | 000,018,048 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys [2012-02-25 15:13:27 | 001,986,049 | ---- | C] () -- \Regionalna Strategia Innowacji dla Dolnego Śląska na lata 2011-2020 (z 30 sierpnia 2011 r.)[1].pdf [2012-02-25 15:13:26 | 001,071,933 | ---- | C] () -- \Plan Wykonawczy na lata 2012-2014[1].pdf [2012-02-25 15:13:26 | 000,536,695 | ---- | C] () -- \osta.dwg [2012-02-25 15:13:26 | 000,534,197 | ---- | C] () -- \Rysunek7 na zajęciach.dwg [2012-02-25 15:13:26 | 000,293,965 | ---- | C] () -- \ostatnie.dwg [2012-02-25 15:13:26 | 000,282,389 | ---- | C] () -- \ostatnie.bak [2012-02-25 15:13:26 | 000,245,759 | ---- | C] () -- \Rysunek7 na zajęciach 2.dwg [2012-02-25 15:13:26 | 000,082,984 | ---- | C] () -- \najnowyszzzzz.dwg [2012-02-25 15:13:23 | 004,437,234 | ---- | C] () -- \Mechanika Płynów Skrypt.pdf [2012-02-25 15:13:23 | 000,353,218 | ---- | C] () -- \kubas.dwg [2012-02-25 15:13:22 | 000,622,938 | ---- | C] () -- \cadNIE.dwg [2012-02-25 15:13:22 | 000,541,066 | ---- | C] () -- \cadNIE.bak [2012-02-25 15:08:25 | 000,521,214 | ---- | C] () -- \Rysunek7 na zajęciach.bak [2012-02-25 15:08:25 | 000,263,211 | ---- | C] () -- \Rysunek7 na zajęciach 222.bak [2012-02-25 15:08:24 | 000,295,050 | ---- | C] () -- \Rysunek7 na zajęciach 222.dwg [2012-02-25 15:02:32 | 000,521,189 | ---- | C] () -- \Rysunek7 u.dwg [2012-02-25 15:02:31 | 000,188,429 | ---- | C] () -- \Rysunek7 u.bak [2012-02-16 15:55:18 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll [2012-01-07 21:33:14 | 000,139,080 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys [2012-01-07 21:33:08 | 000,138,056 | ---- | C] () -- C:\Documents and Settings\Kacper\Dane aplikacji\PnkBstrK.sys [2012-01-07 21:32:45 | 000,270,240 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe [2012-01-07 21:32:29 | 000,075,136 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe [2011-12-18 10:37:22 | 000,000,191 | -H-- | C] () -- \18,12,2011.dwl2 [2011-12-18 10:37:22 | 000,000,041 | -H-- | C] () -- \18,12,2011.dwl [2011-12-15 20:22:04 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Kacper\fgnjfhjmfdmkk.bmp [2011-12-15 20:18:55 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Kacper\krzyzowka.odt [2011-12-11 10:49:38 | 000,000,191 | -H-- | C] () -- \EGZAMINkoniec.dwl2 [2011-12-11 10:49:38 | 000,000,041 | -H-- | C] () -- \EGZAMINkoniec.dwl [2011-11-15 22:09:14 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Kacper\sdfdgvdg.rtf [2011-09-06 17:31:47 | 000,000,218 | ---- | C] () -- C:\Documents and Settings\Kacper\.recently-used.xbel [2011-07-04 23:36:10 | 000,000,577 | ---- | C] () -- C:\WINDOWS\eReg.dat [2011-06-29 23:10:55 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Kacper\PLAY ONLINE.lnk [2011-05-24 13:23:57 | 000,072,652 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat [2011-03-30 10:38:31 | 000,004,096 | ---- | C] () -- C:\WINDOWS\d3dx.dat [2011-03-16 22:45:25 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Kacper\jj.png [2011-03-06 13:26:17 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Kacper\Grand_Theft_Auto_IV_PC_Version_Full_Game_and_Crack.4552159.TPB.torrent [2011-02-19 00:11:53 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Kacper\Evanesce - My Immortal (Rock Version).mp3 [2011-02-11 16:53:52 | 002,641,036 | -H-- | C] () -- C:\Documents and Settings\Kacper\Ustawienia lokalne\Dane aplikacji\IconCache.db [2011-01-18 18:11:11 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat [2011-01-14 20:12:20 | 000,053,248 | ---- | C] () -- C:\Documents and Settings\Kacper\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-01-13 19:40:30 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2011-01-10 23:30:43 | 000,232,968 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin [2011-01-10 23:30:40 | 000,232,968 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin [2011-01-10 23:30:40 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin [2011-01-10 21:14:27 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat [2011-01-10 13:32:13 | 000,080,896 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2011-01-10 13:32:13 | 000,000,590 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2009-12-16 18:20:24 | 000,102,040 | ---- | C] () -- C:\Documents and Settings\Kacper\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT [2009-12-16 18:19:47 | 000,002,596 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Config.nt.bak [2009-12-16 18:19:47 | 000,001,734 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Autoexec.nt.bak [2009-12-16 18:19:47 | 000,000,742 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\hosts.bak [2009-12-16 14:46:14 | 000,000,188 | -HS- | C] () -- C:\Documents and Settings\Kacper\ntuser.ini [2008-04-14 22:49:16 | 000,077,312 | ---- | C] () -- C:\Documents and Settings\Kacper\Dane aplikacji\msconfig.dat [color=#E56717]========== LOP Check ==========[/color] [2012-09-02 14:38:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\036E193202C2E1CE37E6D8E981CB3EF3 [2009-12-16 17:16:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Acronis [2012-07-23 16:59:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ajfncqmmpunkgfb [2011-10-24 16:05:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Autodesk [2011-03-21 19:25:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Avery [2012-07-20 15:27:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AVG2012 [2012-03-10 12:27:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Battle.net [2012-07-20 15:23:32 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Common Files [2011-02-15 22:02:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite [2011-01-10 12:52:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\G DATA [2011-01-11 00:22:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10 [2012-03-15 00:09:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Hi-Rez Studios [2012-05-09 10:54:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Installations [2011-08-04 08:54:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\InstallMate [2011-02-22 12:05:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\InterAction studios [2011-10-05 13:35:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla [2011-01-26 11:11:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\LightScribe [2012-09-15 18:56:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\MFAData [2012-07-22 13:57:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM [2011-03-24 12:13:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Suite [2012-09-14 14:04:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PMB Files [2011-08-04 08:54:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Premium [2011-10-05 13:35:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\RDRM [2012-06-03 14:54:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Sony [2011-01-21 13:52:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TuneUp Software [2011-01-16 15:23:27 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16} [2011-04-08 20:35:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{429CAD59-35B1-4DBC-BB6D-1DB246563521} [2011-07-04 13:26:20 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{AB2D8F2E-F7AD-4446-A11A-50D846B2CF2A} [2012-03-25 17:28:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kacper\Dane aplikacji\.minecraft [2012-03-13 12:45:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kacper\Dane aplikacji\1334 [2009-12-16 17:20:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kacper\Dane aplikacji\Acronis [2011-10-24 16:05:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kacper\Dane aplikacji\Autodesk [2012-07-20 15:26:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kacper\Dane aplikacji\AVG2012 [2009-12-16 20:15:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kacper\Dane aplikacji\BESTplayer [2011-04-16 14:25:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kacper\Dane aplikacji\BitComet [2011-02-15 15:18:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kacper\Dane aplikacji\DAEMON Tools Lite [2011-12-08 21:10:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kacper\Dane aplikacji\DBV [2012-07-19 11:34:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kacper\Dane aplikacji\ESET [2012-07-20 22:36:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kacper\Dane aplikacji\Gadu-Gadu 10 [2011-05-02 15:17:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kacper\Dane aplikacji\GetRightToGo [2011-03-21 19:10:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kacper\Dane aplikacji\inkscape [2009-12-16 20:59:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kacper\Dane aplikacji\IObit [2011-10-05 13:35:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kacper\Dane aplikacji\ipla [2011-05-11 10:14:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kacper\Dane aplikacji\LolClient [2012-05-25 11:24:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kacper\Dane aplikacji\LolClient2 [2011-01-12 12:33:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kacper\Dane aplikacji\MargonemMapki [2012-05-09 11:03:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kacper\Dane aplikacji\Nokia [2011-02-02 21:50:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kacper\Dane aplikacji\OpenFM [2011-03-24 12:15:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kacper\Dane aplikacji\PC Suite [2011-05-03 23:12:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kacper\Dane aplikacji\PhotoScape [2012-05-11 11:19:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kacper\Dane aplikacji\Sony [2012-03-06 17:08:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kacper\Dane aplikacji\Tibia [2011-01-16 15:23:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kacper\Dane aplikacji\TuneUp Software [2011-01-22 18:28:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kacper\Dane aplikacji\Uniblue [2012-09-15 12:09:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kacper\Dane aplikacji\uTorrent [2012-09-14 15:52:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Kacper\Dane aplikacji\wargaming.net [2009-12-16 17:17:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Acronis [2011-01-22 18:23:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Dane aplikacji\Acronis [2012-09-14 23:31:00 | 000,000,984 | ---- | M] () -- C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-448539723-1450960922-682003330-1003Core.job [2012-09-15 20:31:02 | 000,001,006 | ---- | M] () -- C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-448539723-1450960922-682003330-1003UA.job [2012-09-16 11:30:00 | 000,000,464 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{AEE31547-830B-4B3E-B72D-E60CD8AF2D5C}.job [color=#E56717]========== Purity Check ==========[/color] < End of report >