OTL logfile created on: 2012-11-18 00:50:42 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = D:\Programy\Programy antywirusowe Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 511,48 Mb Total Physical Memory | 174,21 Mb Available Physical Memory | 34,06% Memory free 1,21 Gb Paging File | 0,95 Gb Available in Paging File | 78,49% Paging File free Paging file location(s): C:\pagefile.sys 768 1536 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 29,29 Gb Total Space | 5,47 Gb Free Space | 18,68% Space Free | Partition Type: NTFS Drive D: | 78,13 Gb Total Space | 1,91 Gb Free Space | 2,44% Space Free | Partition Type: NTFS Drive E: | 78,13 Gb Total Space | 6,40 Gb Free Space | 8,19% Space Free | Partition Type: NTFS Drive F: | 44,00 Gb Total Space | 4,54 Gb Free Space | 10,32% Space Free | Partition Type: NTFS Drive G: | 2,51 Gb Total Space | 2,50 Gb Free Space | 99,40% Space Free | Partition Type: NTFS Computer Name: TOMEK | User Name: Administrator | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-10-31 21:12:34 | 000,602,112 | ---- | M] (OldTimer Tools) -- D:\Programy\Programy antywirusowe\OTL.exe PRC - [2012-10-31 20:11:38 | 000,917,984 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2008-04-14 18:21:16 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2007-01-16 13:42:20 | 000,950,272 | ---- | M] ( ) -- C:\Program Files\SAGEM WiFi manager\WLANUTL.EXE [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012-11-09 23:05:39 | 014,586,808 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_5_502_110.dll MOD - [2012-10-31 20:11:38 | 002,295,264 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll MOD - [2007-01-16 13:52:18 | 000,212,992 | ---- | M] () -- C:\Program Files\SAGEM WiFi manager\dot1x_dll.dll MOD - [2007-01-16 13:52:18 | 000,045,056 | ---- | M] () -- C:\Program Files\SAGEM WiFi manager\ZDWlan.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV - File not found [Auto | Stopped] -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper) SRV - File not found [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - File not found [On_Demand | Stopped] -- C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT) SRV - [2012-11-09 23:05:40 | 000,250,808 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2012-10-31 16:00:30 | 000,206,448 | ---- | M] (Kaspersky Lab ZAO) [Auto | Stopped] -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe -- (AVP) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\ZDPNDIS5.SYS -- (ZDPNDIS5) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - [2012-10-28 23:16:21 | 000,565,552 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\klif.sys -- (KLIF) DRV - [2011-03-10 18:34:46 | 000,034,608 | ---- | M] (Kaspersky Lab ZAO) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\klim5.sys -- (klim5) DRV - [2011-03-04 13:23:20 | 000,011,352 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\kl2.sys -- (kl2) DRV - [2011-03-04 13:23:14 | 000,133,208 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\kl1.sys -- (KL1) DRV - [2010-12-21 14:35:18 | 000,231,248 | ---- | M] (TrueCrypt Foundation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\truecrypt.sys -- (truecrypt) DRV - [2010-12-13 19:28:09 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sptd.sys -- (sptd) DRV - [2010-07-04 20:51:26 | 000,004,096 | ---- | M] () [Kernel | Unavailable | Unknown] -- C:\Program Files\Unlocker\UnlockerDriver5.sys -- (UnlockerDriver5) DRV - [2009-11-02 20:27:24 | 000,019,472 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\klmouflt.sys -- (klmouflt) DRV - [2008-04-13 19:40:50 | 000,149,376 | ---- | M] (M-Systems) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\tffsport.sys -- (tffsport) DRV - [2007-01-16 13:52:20 | 000,017,664 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ZDPSp50.sys -- (ZDPSp50) DRV - [2007-01-10 10:14:34 | 000,450,560 | ---- | M] (ZyDAS Technology Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\WlanBZXP.sys -- (SG762_XP) DRV - [2006-12-21 03:42:52 | 000,006,144 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\ATI\SUPPORT\7-1_xp_dd_ccc_wdm_enu_40211\BIN\atiicdxx.sys -- (ATICDSDr) DRV - [2006-05-18 00:48:50 | 000,047,249 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ftdibus.sys -- (FTDIBUS) DRV - [2005-09-01 11:03:04 | 000,127,488 | ---- | M] (Ahead Software AG) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\imagesrv.sys -- (imagesrv) DRV - [2005-09-01 11:03:04 | 000,005,888 | ---- | M] (Ahead Software AG) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\imagedrv.sys -- (imagedrv) DRV - [2005-02-22 14:36:04 | 000,986,624 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag) DRV - [2004-12-22 10:07:12 | 002,304,320 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM) DRV - [2004-07-28 23:15:38 | 000,012,928 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus) DRV - [2004-07-28 23:15:36 | 000,033,024 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD) DRV - [2004-06-03 03:40:46 | 000,079,360 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\nvatabus.sys -- (nvatabus) DRV - [2004-04-02 08:40:00 | 000,021,760 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\nv_agp.SYS -- (nv_agp) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1960408961-115176313-1801674531-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "www.wp.pl" FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_5_502_110.dll () FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60310.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.6.14: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll File not found FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2027: C:\Program Files\ACE Mega CoDecS Pack\SystemS\RealMedia\Browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.6.14: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll File not found FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.6.14: C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.6.14: C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1040: C:\Program Files\ACE Mega CoDecS Pack\SystemS\RealMedia\Browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=15.0.6.14: C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll File not found FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\linkfilter@kaspersky.ru: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\linkfilter@kaspersky.ru [2012-10-31 16:07:41 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\virtualKeyboard@kaspersky.ru: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\virtualKeyboard@kaspersky.ru [2012-10-31 16:07:42 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\KavAntiBanner@Kaspersky.ru: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\KavAntiBanner@Kaspersky.ru [2012-10-31 16:07:41 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{0153E448-190B-4987-BDE1-F256CADA672F}: C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012-10-31 19:45:26 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-11-05 23:59:04 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-11-09 23:05:37 | 000,000,000 | ---D | M] [2012-11-18 00:20:50 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Extensions [2012-10-31 21:07:22 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2012-10-31 20:11:38 | 000,261,600 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2010-08-20 10:07:28 | 000,931,328 | ---- | M] (Ganymede Technologies) -- C:\Program Files\mozilla firefox\plugins\NPBOARDS.dll [2003-01-13 16:08:06 | 000,499,712 | ---- | M] (Morgan Multimedia) -- C:\Program Files\mozilla firefox\plugins\npjp2.dll [2012-10-31 19:45:15 | 000,129,176 | ---- | M] (RealPlayer) -- C:\Program Files\mozilla firefox\plugins\nprpplugin.dll [2010-08-20 10:07:46 | 000,624,112 | ---- | M] (Ganymede Technologies) -- C:\Program Files\mozilla firefox\plugins\NPSOCCER.dll [2012-10-11 03:58:06 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2012-10-11 03:58:06 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2012-10-11 03:58:06 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2012-10-11 03:58:06 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2012-10-11 03:58:06 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2012-10-11 03:58:06 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2012-10-31 15:43:46 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer) O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\ievkbd.dll (Kaspersky Lab ZAO) O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\klwtbbho.dll (Kaspersky Lab ZAO) O4 - HKLM..\Run: [AVP] C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe (Kaspersky Lab ZAO) O4 - HKLM..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe (HP) O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Nero AG) O4 - HKLM..\Run: [QuickTime Task] C:\WINDOWS\System32\qttask.exe (Apple Computer, Inc.) O4 - HKLM..\Run: [Resume copy] C:\WINDOWS\COPYFSTQ.EXE () O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Real\RealPlayer\update\realsched.exe (RealNetworks, Inc.) O4 - HKLM..\Run: [Ulead AutoDetector v2] C:\Program Files\Common Files\Ulead Systems\AutoDetector\monitor.exe File not found O4 - HKLM..\Run: [UnlockerAssistant] C:\Program Files\Unlocker\UnlockerAssistant.exe () O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Program sieciowy dla SAGEM Wi-Fi 11g USB adapter.lnk = C:\Program Files\SAGEM WiFi manager\WLANUTL.EXE ( ) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 32 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 28 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1960408961-115176313-1801674531-500\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-1960408961-115176313-1801674531-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1960408961-115176313-1801674531-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWelcomeScreen = 1 O7 - HKU\S-1-5-21-1960408961-115176313-1801674531-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableChangePassword = 1 O9 - Extra Button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll File not found O9 - Extra 'Tools' menuitem : Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll File not found O9 - Extra Button: &Klawiatura wirtualna - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\ievkbd.dll (Kaspersky Lab ZAO) O9 - Extra Button: &Sprawdzanie adresów internetowych - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\klwtbbho.dll (Kaspersky Lab ZAO) O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe File not found O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe File not found O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://go.microsoft.com/fwlink/?linkid=39204 (Windows Genuine Advantage Validation Tool) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{6332C27E-1DCF-432D-B270-189391434F05}: DhcpNameServer = 192.168.0.1 O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.) O20 - Winlogon\Notify\klogon: DllName - (C:\WINDOWS\system32\klogon.dll) - C:\WINDOWS\system32\klogon.dll (Kaspersky Lab ZAO) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2010-12-03 01:37:11 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2012-05-24 04:18:41 | 000,000,000 | ---D | M] - E:\AutoMapa EU -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-11-18 00:21:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\Adobe [2012-11-18 00:21:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Moje dokumenty\Pobieranie [2012-11-18 00:20:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Mozilla [2012-11-18 00:20:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla [2012-11-17 23:45:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\Real [2012-11-17 23:43:54 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Administrator\Moje dokumenty\Moja muzyka [2012-11-17 23:43:53 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Administrator\Moje dokumenty\Moje obrazy [2012-11-17 23:43:51 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Administrator\IETldCache [2012-11-17 23:43:39 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\Microsoft [2012-11-17 23:43:39 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Administrator\SendTo [2012-11-17 23:43:39 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Administrator\Recent [2012-11-17 23:43:39 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji [2012-11-17 23:43:39 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Administrator\Ulubione [2012-11-17 23:43:39 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Administrator\Moje dokumenty [2012-11-17 23:43:39 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Administrator\Menu Start [2012-11-17 23:43:39 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Administrator\Menu Start\Programy\Autostart [2012-11-17 23:43:39 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Administrator\Menu Start\Programy\Akcesoria [2012-11-17 23:43:39 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Administrator\Cookies [2012-11-17 23:43:39 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Administrator\Szablony [2012-11-17 23:43:39 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Administrator\PrintHood [2012-11-17 23:43:39 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Administrator\NetHood [2012-11-17 23:43:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Pulpit [2012-11-17 23:43:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Microsoft [2012-11-17 23:43:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\Macromedia [2012-11-17 23:43:38 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Administrator\Ustawienia lokalne [2012-11-17 23:43:08 | 000,000,000 | -HSD | C] -- C:\WINDOWS\CSC [2012-11-17 08:37:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\msmq [2012-11-17 08:37:15 | 000,000,000 | ---D | C] -- C:\Inetpub [2012-11-17 08:37:14 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Logfiles [2012-11-15 19:40:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Microsoft Silverlight [2012-11-15 19:39:06 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight [2012-11-15 19:28:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\YTD Video Downloader [2012-11-15 19:28:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\YTD Video Downloader [2012-11-15 19:28:38 | 000,000,000 | ---D | C] -- C:\Program Files\GreenTree Applications [2012-11-06 00:10:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Mirillis [2012-11-06 00:09:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Mirillis [2012-11-06 00:09:24 | 000,000,000 | ---D | C] -- C:\Program Files\Mirillis [2012-11-06 00:06:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Emicsoft [2012-11-06 00:05:58 | 000,000,000 | ---D | C] -- C:\Program Files\Emicsoft Studio [2012-11-06 00:00:15 | 000,098,304 | ---- | C] (Apple Computer, Inc.) -- C:\WINDOWS\System32\qttask.exe [2012-11-05 23:59:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\ACE Mega CoDecS Pack [2012-11-05 23:58:59 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\directx.cpl [2012-11-05 23:58:59 | 000,106,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tweakui.cpl [2012-11-05 23:58:53 | 000,360,504 | ---- | C] (Apple Computer, Inc.) -- C:\WINDOWS\System32\qtplugin.ocx [2012-11-05 23:58:52 | 006,676,480 | ---- | C] (Apple Computer, Inc.) -- C:\WINDOWS\System32\quicktime.qts [2012-11-05 23:58:52 | 000,323,072 | ---- | C] (Apple Computer, Inc.) -- C:\WINDOWS\System32\quicktime.cpl [2012-11-05 23:58:45 | 001,650,688 | ---- | C] (Ligos Corporation) -- C:\WINDOWS\System32\mplva6.dll [2012-11-05 23:58:45 | 001,581,056 | ---- | C] (Ligos Corporation) -- C:\WINDOWS\System32\mplvw7.dll [2012-11-05 23:58:45 | 001,552,384 | ---- | C] (Ligos Corporation) -- C:\WINDOWS\System32\mplvm6.dll [2012-11-05 23:58:45 | 001,122,304 | ---- | C] (Ligos Corporation) -- C:\WINDOWS\System32\mplvpx.dll [2012-11-05 23:58:45 | 000,077,824 | ---- | C] (Ligos Corporation) -- C:\WINDOWS\System32\mplaw7.dll [2012-11-05 23:58:45 | 000,077,824 | ---- | C] (Ligos Corporation) -- C:\WINDOWS\System32\mplaa6.dll [2012-11-05 23:58:45 | 000,065,536 | ---- | C] (Ligos Corporation) -- C:\WINDOWS\System32\mplapx.dll [2012-11-05 23:58:45 | 000,065,536 | ---- | C] (Ligos Corporation) -- C:\WINDOWS\System32\mplam6.dll [2012-11-05 23:58:38 | 000,000,000 | ---D | C] -- C:\Program Files\ACE Mega CoDecS Pack [2012-11-05 23:55:21 | 000,000,000 | ---D | C] -- C:\Program Files\XviD [2012-11-05 23:53:55 | 000,000,000 | ---D | C] -- C:\Program Files\K-Lite Codec Pack [2012-11-05 22:48:26 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER [2012-11-05 22:48:19 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Visual Studio [2012-11-05 02:16:54 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Works [2012-11-05 02:16:13 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ODBC [2012-11-05 00:46:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\WinRAR [2012-11-05 00:35:54 | 000,000,000 | ---D | C] -- C:\WINDOWS\ie8updates [2012-11-05 00:35:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\WBEM [2012-11-05 00:34:47 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ie8 [2012-11-05 00:32:56 | 000,521,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jsdbgui.dll [2012-11-05 00:30:40 | 000,630,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeeds.dll [2012-11-05 00:30:40 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeedsbs.dll [2012-11-05 00:30:38 | 002,000,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iertutil.dll [2012-11-05 00:30:38 | 000,743,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iedvtool.dll [2012-11-05 00:30:36 | 011,111,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieframe.dll [2012-11-05 00:15:26 | 000,954,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mfc40.dll [2012-11-05 00:15:26 | 000,953,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mfc40u.dll [2012-11-05 00:11:35 | 000,617,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comctl32.dll [2012-11-05 00:04:22 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ndproxy.sys [2012-11-03 18:15:08 | 000,105,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mup.sys [2012-11-03 18:08:59 | 000,000,000 | ---D | C] -- C:\Config.Msi [2012-11-03 18:02:09 | 000,139,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rdpwd.sys [2012-11-03 17:52:10 | 000,000,000 | ---D | C] -- C:\Program Files\Reference Assemblies [2012-11-03 17:51:10 | 000,010,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ndistapi.sys [2012-11-03 17:42:57 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\system [2012-11-03 17:42:57 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\speechengines [2012-11-03 17:42:57 | 000,000,000 | ---D | C] -- C:\Program Files\outlook express [2012-11-03 17:42:57 | 000,000,000 | ---D | C] -- C:\Program Files\netmeeting [2012-11-03 17:42:57 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\mssoap [2012-11-03 17:42:57 | 000,000,000 | ---D | C] -- C:\Program Files\msn gaming zone [2012-11-03 17:42:57 | 000,000,000 | ---D | C] -- C:\Program Files\movie maker [2012-11-03 17:42:57 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\microsoft shared [2012-11-03 17:42:57 | 000,000,000 | ---D | C] -- C:\Program Files\microsoft frontpage [2012-11-02 18:53:15 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch [2012-11-02 18:37:46 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\pl [2012-11-02 18:37:46 | 000,000,000 | ---D | C] -- C:\WINDOWS\l2schemas [2012-11-02 18:37:46 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\bits [2012-11-02 18:35:15 | 000,000,000 | ---D | C] -- C:\WINDOWS\network diagnostic [2012-11-02 18:32:57 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$NtServicePackUninstall$ [2012-11-02 16:58:13 | 000,025,471 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\watv10nt.sys [2012-11-02 16:58:13 | 000,022,271 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\watv06nt.sys [2012-11-02 16:58:13 | 000,011,935 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv11nt.sys [2012-11-02 16:58:13 | 000,011,871 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv09nt.sys [2012-11-02 16:58:13 | 000,011,807 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv07nt.sys [2012-11-02 16:58:13 | 000,011,295 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv08nt.sys [2012-11-02 16:58:09 | 000,404,990 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slntamr.sys [2012-11-02 16:58:09 | 000,166,912 | ---- | C] (S3 Graphics, Inc.) -- C:\WINDOWS\System32\drivers\s3gnbm.sys [2012-11-02 16:58:09 | 000,129,535 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slnt7554.sys [2012-11-02 16:58:09 | 000,095,424 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slnthal.sys [2012-11-02 16:58:09 | 000,013,776 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\recagent.sys [2012-11-02 16:58:09 | 000,013,240 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slwdmsup.sys [2012-11-02 16:58:07 | 001,309,184 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\mtlstrm.sys [2012-11-02 16:58:07 | 000,452,736 | ---- | C] (Matrox Graphics Inc.) -- C:\WINDOWS\System32\drivers\mtxparhm.sys [2012-11-02 16:58:07 | 000,180,360 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\ntmtlfax.sys [2012-11-02 16:58:06 | 000,126,686 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\mtlmnt5.sys [2012-11-02 16:56:46 | 000,104,960 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinrvxx.sys [2012-11-02 16:56:46 | 000,073,216 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atintuxx.sys [2012-11-02 16:56:46 | 000,063,488 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinxsxx.sys [2012-11-02 16:56:46 | 000,057,856 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinbtxx.sys [2012-11-02 16:56:46 | 000,052,224 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinraxx.sys [2012-11-02 16:56:46 | 000,031,744 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinxbxx.sys [2012-11-02 16:56:46 | 000,028,672 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinsnxx.sys [2012-11-02 16:56:46 | 000,014,336 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinpdxx.sys [2012-11-02 16:56:46 | 000,013,824 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinttxx.sys [2012-11-02 16:56:46 | 000,013,824 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinmdxx.sys [2012-11-02 16:56:45 | 000,327,040 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati2mtaa.sys [2012-11-02 16:56:45 | 000,063,663 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1rvxx.sys [2012-11-02 16:56:45 | 000,056,623 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1btxx.sys [2012-11-02 16:56:45 | 000,036,463 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1tuxx.sys [2012-11-02 16:56:45 | 000,034,735 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1xsxx.sys [2012-11-02 16:56:45 | 000,030,671 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1raxx.sys [2012-11-02 16:56:45 | 000,029,455 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1xbxx.sys [2012-11-02 16:56:45 | 000,026,367 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1snxx.sys [2012-11-02 16:56:45 | 000,021,343 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1ttxx.sys [2012-11-02 16:56:45 | 000,012,047 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1pdxx.sys [2012-11-02 16:56:45 | 000,011,615 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1mdxx.sys [2012-11-02 16:24:48 | 000,000,000 | -HSD | C] -- C:\found.001 [2012-11-02 13:49:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\ServicePackFiles [2012-11-02 12:35:19 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe [2012-11-02 09:39:41 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\t2embed.dll [2012-11-02 09:39:41 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fontsub.dll [2012-11-02 09:39:33 | 000,203,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rmcast.sys [2012-11-02 09:39:20 | 000,273,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bthport.sys [2012-11-02 09:39:11 | 003,558,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\moviemk.exe [2012-11-02 09:38:46 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\browserchoice.exe [2012-11-02 09:38:00 | 000,331,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadce.dll [2012-11-02 09:37:40 | 000,357,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srv.sys [2012-11-02 09:36:38 | 000,456,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mrxsmb.sys [2012-11-02 09:30:13 | 000,744,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\helpsvc.exe [2012-11-02 09:30:10 | 002,194,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntoskrnl.exe [2012-11-02 09:30:07 | 000,732,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lsasrv.dll [2012-11-02 09:30:05 | 002,150,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrnlmp.exe [2012-11-02 09:30:04 | 002,029,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrpamp.exe [2012-11-02 09:27:11 | 000,471,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aclayers.dll [2012-11-02 09:13:19 | 002,066,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstscax.dll [2012-11-02 09:08:56 | 000,337,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\netapi32.dll [2012-11-02 09:08:47 | 001,172,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msxml3.dll [2012-11-02 01:48:44 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$MSI31Uninstall_KB893803v2$ [2012-11-02 01:48:14 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\PreInstall [2012-11-02 01:48:10 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$hf_mig$ [2012-11-01 23:54:00 | 000,000,000 | -HSD | C] -- C:\RECYCLER [2012-11-01 19:56:53 | 000,045,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wups2.dll [2012-11-01 19:56:53 | 000,024,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wucltui.dll.mui [2012-11-01 19:56:53 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\SoftwareDistribution [2012-11-01 19:56:51 | 000,015,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuapi.dll.mui [2012-11-01 15:00:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Norton [2012-10-31 20:11:23 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox [2012-10-31 19:44:43 | 000,000,000 | ---D | C] -- C:\Program Files\Real [2012-10-31 19:37:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Real [2012-10-31 15:30:06 | 000,000,000 | RHSD | C] -- C:\cmdcons [2012-10-28 23:18:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Kaspersky Internet Security 2012 [2012-10-28 23:16:48 | 000,000,000 | ---D | C] -- C:\Program Files\Kaspersky Lab [2012-10-28 23:16:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab [2012-10-28 23:16:21 | 000,565,552 | ---- | C] (Kaspersky Lab) -- C:\WINDOWS\System32\drivers\klif.sys [1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-11-18 00:54:04 | 000,001,036 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2012-11-18 00:48:22 | 000,001,032 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2012-11-18 00:48:20 | 000,000,280 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1960408961-115176313-1801674531-1003.job [2012-11-18 00:47:29 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2012-11-18 00:47:27 | 536,399,872 | -HS- | M] () -- C:\hiberfil.sys [2012-11-18 00:22:22 | 000,006,656 | ---- | M] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-11-18 00:03:00 | 000,000,930 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job [2012-11-17 23:43:44 | 000,001,390 | RHS- | M] () -- C:\Documents and Settings\Administrator\ntuser.pol [2012-11-17 08:39:37 | 000,003,788 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2012-11-17 00:04:00 | 000,000,288 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1960408961-115176313-1801674531-1003.job [2012-11-16 11:52:45 | 000,094,749 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\770c62d618130219.jpg [2012-11-16 11:51:46 | 000,097,932 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\1b53bffc3ad161a2.jpg [2012-11-16 07:28:43 | 000,298,848 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2012-11-16 07:24:59 | 000,558,914 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2012-11-16 07:24:59 | 000,496,398 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2012-11-16 07:24:59 | 000,105,332 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2012-11-16 07:24:59 | 000,084,500 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2012-11-15 19:47:58 | 000,001,869 | ---- | M] () -- C:\WINDOWS\bestplayer.ini [2012-11-15 19:47:58 | 000,000,356 | ---- | M] () -- C:\WINDOWS\bestplayer.bbt [2012-11-15 19:47:58 | 000,000,000 | ---- | M] () -- C:\WINDOWS\bestplayer.bpp [2012-11-15 19:28:40 | 000,000,942 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\YTD Video Downloader.lnk [2012-11-15 19:14:35 | 000,214,365 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\watch.htm [2012-11-14 17:49:33 | 000,001,729 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Adobe Reader 9.lnk [2012-11-14 14:53:39 | 006,816,932 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\25789-timur-rodrigez-bolen-toboj.mp3 [2012-11-14 14:50:24 | 000,054,156 | -H-- | M] () -- C:\WINDOWS\QTFont.qfn [2012-11-14 07:50:37 | 000,008,890 | ---- | M] () -- C:\WINDOWS\System32\quicktime.qtp [2012-11-14 07:50:06 | 000,001,409 | ---- | M] () -- C:\WINDOWS\QTFont.for [2012-11-12 17:03:42 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2012-11-09 23:05:40 | 000,697,272 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe [2012-11-09 23:05:40 | 000,073,656 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl [2012-11-06 00:09:28 | 000,001,734 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Splash PRO.lnk [2012-11-06 00:00:15 | 000,098,304 | ---- | M] (Apple Computer, Inc.) -- C:\WINDOWS\System32\qttask.exe [2012-11-05 23:59:19 | 000,001,001 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Media Player Classic.lnk [2012-11-05 23:59:19 | 000,000,949 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\ACE Mega CoDecS Pack DashBoard.lnk [2012-11-05 00:22:00 | 000,000,444 | ---- | M] () -- C:\WINDOWS\tasks\Wise Registry Cleaner Schedule Task.job [2012-11-02 23:03:02 | 000,028,854 | ---- | M] () -- C:\WINDOWS\hpdj3840.his [2012-11-02 23:03:02 | 000,004,009 | ---- | M] () -- C:\WINDOWS\hpdj3840.ini [2012-11-02 22:54:38 | 000,000,414 | RHS- | M] () -- C:\Documents and Settings\All Users\ntuser.pol [2012-11-02 18:54:26 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx [2012-11-02 18:35:05 | 000,251,152 | RHS- | M] () -- C:\ntldr [2012-11-01 15:17:23 | 000,017,716 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\SMRResults311.dat [2012-11-01 15:17:20 | 000,000,328 | -HS- | M] () -- C:\boot.ini [2012-10-31 19:45:19 | 000,198,864 | ---- | M] (RealNetworks, Inc.) -- C:\WINDOWS\System32\rmoc3260.dll [2012-10-31 19:45:08 | 000,006,656 | ---- | M] (RealNetworks, Inc.) -- C:\WINDOWS\System32\pndx5016.dll [2012-10-31 19:45:08 | 000,005,632 | ---- | M] (RealNetworks, Inc.) -- C:\WINDOWS\System32\pndx5032.dll [2012-10-31 19:09:38 | 000,821,736 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\npDeployJava1.dll [2012-10-31 19:09:38 | 000,746,984 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\deployJava1.dll [2012-10-31 15:43:46 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts [2012-10-29 00:54:00 | 000,116,189 | ---- | M] () -- C:\WINDOWS\System32\drivers\klin.dat [2012-10-29 00:54:00 | 000,098,168 | ---- | M] () -- C:\WINDOWS\System32\drivers\klick.dat [2012-10-28 23:16:21 | 000,565,552 | ---- | M] (Kaspersky Lab) -- C:\WINDOWS\System32\drivers\klif.sys [2012-10-26 20:08:41 | 000,000,724 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk [2012-10-22 20:57:10 | 001,866,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\win32k.sys [2012-10-22 20:57:10 | 001,866,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\win32k.sys [2012-10-19 12:25:06 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-11-18 00:22:13 | 000,006,656 | ---- | C] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-11-17 23:43:44 | 000,001,390 | RHS- | C] () -- C:\Documents and Settings\Administrator\ntuser.pol [2012-11-17 23:43:40 | 000,001,599 | ---- | C] () -- C:\Documents and Settings\Administrator\Menu Start\Programy\Pomoc zdalna.lnk [2012-11-17 23:43:39 | 000,000,792 | ---- | C] () -- C:\Documents and Settings\Administrator\Menu Start\Programy\Windows Media Player.lnk [2012-11-16 11:52:45 | 000,094,749 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\770c62d618130219.jpg [2012-11-16 11:51:45 | 000,097,932 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\1b53bffc3ad161a2.jpg [2012-11-15 19:28:40 | 000,000,942 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\YTD Video Downloader.lnk [2012-11-15 19:14:34 | 000,214,365 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\watch.htm [2012-11-14 17:49:33 | 000,001,729 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Adobe Reader 9.lnk [2012-11-14 14:51:58 | 006,816,932 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\25789-timur-rodrigez-bolen-toboj.mp3 [2012-11-14 07:50:06 | 000,054,156 | -H-- | C] () -- C:\WINDOWS\QTFont.qfn [2012-11-14 07:50:06 | 000,001,409 | ---- | C] () -- C:\WINDOWS\QTFont.for [2012-11-06 00:09:28 | 000,001,734 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Splash PRO.lnk [2012-11-05 23:59:19 | 000,001,001 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Media Player Classic.lnk [2012-11-05 23:59:19 | 000,000,949 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\ACE Mega CoDecS Pack DashBoard.lnk [2012-11-05 23:59:01 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\vp6dec_settings.cpl [2012-11-05 23:58:59 | 000,098,304 | ---- | C] () -- C:\WINDOWS\System32\startup.cpl [2012-11-05 23:58:52 | 000,008,890 | ---- | C] () -- C:\WINDOWS\System32\quicktime.qtp [2012-11-05 23:58:48 | 000,000,761 | ---- | C] () -- C:\WINDOWS\m3jp2k.ini [2012-11-05 23:58:48 | 000,000,714 | ---- | C] () -- C:\WINDOWS\m3jpeg.ini [2012-11-05 23:58:48 | 000,000,702 | ---- | C] () -- C:\WINDOWS\mmtvmj.ini [2012-11-05 23:58:45 | 000,019,968 | ---- | C] () -- C:\WINDOWS\System32\cpuinf32.dll [2012-11-05 23:58:42 | 000,761,856 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2012-11-05 23:58:38 | 000,417,792 | ---- | C] () -- C:\WINDOWS\System32\ac3filter.cpl [2012-11-03 17:50:50 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll [2012-11-03 17:50:50 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\dllcache\iacenc.dll [2012-11-02 16:58:14 | 000,693,932 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmplayer.chm [2012-11-02 16:58:14 | 000,354,468 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud1.wav [2012-11-02 16:58:14 | 000,343,204 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud7.wav [2012-11-02 16:58:14 | 000,343,204 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud6.wav [2012-11-02 16:58:14 | 000,172,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud9.wav [2012-11-02 16:58:14 | 000,172,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud8.wav [2012-11-02 16:58:14 | 000,172,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud3.wav [2012-11-02 16:58:14 | 000,086,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud5.wav [2012-11-02 16:58:14 | 000,086,180 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud4.wav [2012-11-02 16:58:14 | 000,086,180 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud2.wav [2012-11-02 16:58:14 | 000,071,460 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmplayer.adm [2012-11-02 16:58:14 | 000,034,548 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmdm.inf [2012-11-02 16:58:14 | 000,027,965 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmplay.chm [2012-11-02 16:58:14 | 000,013,540 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmfsdk.inf [2012-11-02 16:58:14 | 000,008,677 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm7.gif [2012-11-02 16:58:14 | 000,007,892 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm9.gif [2012-11-02 16:58:14 | 000,007,636 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm2.gif [2012-11-02 16:58:14 | 000,007,369 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm4.gif [2012-11-02 16:58:14 | 000,006,241 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm3.gif [2012-11-02 16:58:14 | 000,006,060 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm6.gif [2012-11-02 16:58:14 | 000,005,789 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm1.gif [2012-11-02 16:58:14 | 000,004,193 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm8.gif [2012-11-02 16:58:14 | 000,002,477 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm5.gif [2012-11-02 16:58:14 | 000,001,771 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmptour.css [2012-11-02 16:58:14 | 000,001,714 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpocm.inf [2012-11-02 16:58:13 | 000,017,489 | ---- | C] () -- C:\WINDOWS\System32\dllcache\videobg.gif [2012-11-02 16:58:13 | 000,005,290 | ---- | C] () -- C:\WINDOWS\System32\dllcache\vidsamp.gif [2012-11-02 16:58:12 | 000,023,829 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tourbg.gif [2012-11-02 16:58:12 | 000,003,187 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tour.js [2012-11-02 16:58:12 | 000,002,469 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tplay.gif [2012-11-02 16:58:12 | 000,002,450 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tpause.gif [2012-11-02 16:58:12 | 000,002,375 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tplayh.gif [2012-11-02 16:58:12 | 000,002,371 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tpauseh.gif [2012-11-02 16:58:11 | 000,001,380 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taonh.gif [2012-11-02 16:58:10 | 000,001,398 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taon.gif [2012-11-02 16:58:10 | 000,001,380 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taoff.gif [2012-11-02 16:58:10 | 000,001,367 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taoffh.gif [2012-11-02 16:58:10 | 000,001,148 | ---- | C] () -- C:\WINDOWS\System32\dllcache\snd.htm [2012-11-02 16:58:09 | 000,066,160 | ---- | C] () -- C:\WINDOWS\System32\dllcache\revert.wmz [2012-11-02 16:58:09 | 000,001,818 | ---- | C] () -- C:\WINDOWS\System32\dllcache\skins.inf [2012-11-02 16:58:08 | 000,089,253 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plyr_err.chm [2012-11-02 16:58:07 | 000,067,866 | ---- | C] () -- C:\WINDOWS\System32\drivers\netwlan5.img [2012-11-02 16:58:07 | 000,022,060 | ---- | C] () -- C:\WINDOWS\System32\dllcache\npds.zip [2012-11-02 16:58:07 | 000,000,403 | ---- | C] () -- C:\WINDOWS\System32\dllcache\npdrmv2.zip [2012-11-02 16:58:06 | 000,036,644 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplayer2.inf [2012-11-02 16:58:06 | 000,002,778 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplogoh.gif [2012-11-02 16:58:06 | 000,002,545 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplogo.gif [2012-11-02 16:58:02 | 000,005,971 | ---- | C] () -- C:\WINDOWS\System32\dllcache\events.js [2012-11-02 16:57:56 | 000,184,137 | ---- | C] () -- C:\WINDOWS\System32\dllcache\compact.wmz [2012-11-02 16:57:56 | 000,129,045 | ---- | C] () -- C:\WINDOWS\System32\drivers\cxthsfs2.cty [2012-11-02 16:57:56 | 000,009,585 | ---- | C] () -- C:\WINDOWS\System32\dllcache\controls.css [2012-11-02 16:57:56 | 000,000,773 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cnth.gif [2012-11-02 16:57:56 | 000,000,773 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cnt.gif [2012-11-02 16:57:56 | 000,000,772 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cntd.gif [2012-11-02 16:57:56 | 000,000,760 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cloapph.gif [2012-11-02 16:57:56 | 000,000,717 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cloapp.gif [2012-11-02 16:57:55 | 000,000,999 | ---- | C] () -- C:\WINDOWS\System32\dllcache\bktrh.gif [2012-11-02 16:56:46 | 000,064,352 | ---- | C] () -- C:\WINDOWS\System32\drivers\ativmc20.cod [2012-11-02 12:35:44 | 000,002,347 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Adobe Reader 9.lnk [2012-11-01 15:17:15 | 000,017,716 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\SMRResults311.dat [2012-10-31 19:46:30 | 000,000,280 | ---- | C] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1960408961-115176313-1801674531-1003.job [2012-10-31 19:46:29 | 000,000,288 | ---- | C] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1960408961-115176313-1801674531-1003.job [2012-10-28 23:18:31 | 000,116,189 | ---- | C] () -- C:\WINDOWS\System32\drivers\klin.dat [2012-10-28 23:18:31 | 000,098,168 | ---- | C] () -- C:\WINDOWS\System32\drivers\klick.dat [2012-07-20 21:59:49 | 000,516,096 | ---- | C] () -- C:\WINDOWS\System32\ati2sgag.exe [2012-07-20 21:59:44 | 000,079,320 | R--- | C] () -- C:\WINDOWS\System32\atiicdxx.dat [2011-11-01 18:33:20 | 000,315,408 | ---- | C] () -- C:\WINDOWS\System32\drivers\7924933.sys [2011-08-29 17:29:46 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\ftdiunin.exe [2011-08-29 17:29:46 | 000,000,133 | ---- | C] () -- C:\WINDOWS\System32\ftdiun2k.ini [2011-07-26 22:57:09 | 000,000,030 | ---- | C] () -- C:\WINDOWS\iedit_.INI [2011-07-26 22:51:38 | 000,000,035 | ---- | C] () -- C:\WINDOWS\Ulead32.INI [2011-05-12 22:47:32 | 000,000,039 | ---- | C] () -- C:\WINDOWS\System32\mscandc.ini [2011-05-12 22:39:54 | 000,044,491 | ---- | C] () -- C:\WINDOWS\System32\MiiIniFile13.ini [2011-05-06 10:26:53 | 000,004,009 | ---- | C] () -- C:\WINDOWS\hpdj3840.ini [2011-04-25 12:07:22 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2011-04-23 11:15:36 | 000,315,408 | ---- | C] () -- C:\WINDOWS\System32\drivers\7643789.sys [2011-03-14 22:21:59 | 000,000,612 | ---- | C] () -- C:\WINDOWS\mp3wavcon.ini [2011-03-14 22:21:33 | 000,000,005 | ---- | C] () -- C:\WINDOWS\System32\SySmp3con.dat [2011-03-14 22:21:28 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll [2011-03-11 12:43:54 | 000,029,763 | ---- | C] () -- C:\WINDOWS\System32\drivers\klopp.dat [2011-02-02 17:24:52 | 000,000,079 | ---- | C] () -- C:\WINDOWS\pit2010.ini [2011-02-02 17:24:52 | 000,000,021 | ---- | C] () -- C:\WINDOWS\pit2007.ini [2011-01-19 23:30:44 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Checkers3D.INI [2011-01-15 17:53:57 | 000,000,004 | ---- | C] () -- C:\WINDOWS\System32\proc1395793746.bin [2011-01-05 09:57:12 | 000,000,010 | ---- | C] () -- C:\WINDOWS\WININIT.INI [2010-12-28 18:47:27 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2010-12-28 08:57:20 | 000,000,421 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2010-12-26 00:07:16 | 000,001,869 | ---- | C] () -- C:\WINDOWS\bestplayer.ini [2010-12-16 21:07:21 | 000,001,324 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat [2010-12-04 02:29:32 | 000,000,414 | RHS- | C] () -- C:\Documents and Settings\All Users\ntuser.pol [2010-12-03 18:53:03 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\N360BUOptions.ini [2010-12-03 02:07:00 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat [2010-12-03 01:57:25 | 000,244,224 | R--- | C] () -- C:\WINDOWS\System32\NvRaidMan.exe [2010-12-03 01:56:03 | 000,000,164 | ---- | C] () -- C:\WINDOWS\avrack.ini [2010-12-03 01:55:59 | 000,156,672 | ---- | C] () -- C:\WINDOWS\System32\RTLCPAPI.dll [2010-12-03 01:55:59 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe [2010-12-03 01:43:42 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2010-12-03 01:42:23 | 000,298,848 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010-12-03 01:39:59 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2010-12-03 01:33:43 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [color=#E56717]========== ZeroAccess Check ==========[/color] [2010-12-08 18:20:14 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shdocvw.dll -- [2010-04-16 17:09:01 | 001,509,888 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2009-02-09 11:53:44 | 000,473,600 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = %systemroot%\system32\wbem\wbemess.dll -- [2008-04-14 18:20:57 | 000,273,920 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [color=#E56717]========== LOP Check ==========[/color] [2012-10-17 22:27:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\CanonIJMSetup [2012-06-04 00:26:47 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Common Files [2010-12-13 19:27:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite [2012-05-16 02:28:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\explauncher [2010-12-03 02:15:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10 [2012-07-17 19:03:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla [2012-05-16 02:28:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\launcher [2012-11-06 00:10:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Mirillis [2011-04-25 12:07:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\RDRM [2011-05-12 22:44:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Ulead Systems [2012-11-15 19:28:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\YTD Video Downloader [2010-12-13 19:27:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\prezes\Dane aplikacji\DAEMON Tools Lite [2012-03-05 23:52:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\prezes\Dane aplikacji\e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1 [2012-09-13 20:03:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\prezes\Dane aplikacji\Gadu-Gadu 10 [2011-01-15 17:53:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\prezes\Dane aplikacji\GanymedeNet [2012-11-02 20:54:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\prezes\Dane aplikacji\ipla [2010-12-05 19:47:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\prezes\Dane aplikacji\Leadertech [2012-11-06 00:10:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\prezes\Dane aplikacji\Mirillis [2012-07-08 19:58:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\prezes\Dane aplikacji\Oracle [2012-01-27 23:11:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\prezes\Dane aplikacji\Passware [2012-04-22 19:37:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\prezes\Dane aplikacji\Patcher [2010-12-16 19:07:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\prezes\Dane aplikacji\RDRM [2012-05-03 21:38:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\prezes\Dane aplikacji\TeraCopy [2010-12-21 14:37:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\prezes\Dane aplikacji\TrueCrypt [2011-05-12 22:51:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\prezes\Dane aplikacji\Ulead Systems [2012-06-25 17:31:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\prezes\Dane aplikacji\WordToPDF [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Files - Unicode (All) ==========[/color] [2012-11-15 19:44:09 | 018,380,478 | ---- | M] ()(C:\Documents and Settings\Administrator\Pulpit\?????? ???????.avi) -- C:\Documents and Settings\Administrator\Pulpit\Парень танцует.avi [2012-11-15 19:40:34 | 018,380,478 | ---- | C] ()(C:\Documents and Settings\Administrator\Pulpit\?????? ???????.avi) -- C:\Documents and Settings\Administrator\Pulpit\Парень танцует.avi [2012-11-15 19:36:44 | 007,947,953 | ---- | M] ()(C:\Documents and Settings\Administrator\Pulpit\?????? ???????.flv) -- C:\Documents and Settings\Administrator\Pulpit\Парень танцует.flv [2012-11-15 19:31:01 | 007,947,953 | ---- | C] ()(C:\Documents and Settings\Administrator\Pulpit\?????? ???????.flv) -- C:\Documents and Settings\Administrator\Pulpit\Парень танцует.flv < End of report >