OTL logfile created on: 2012-11-22 10:23:12 - Run 2
OTL by OldTimer - Version 3.2.69.0     Folder = C:\
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
767,48 Mb Total Physical Memory | 566,92 Mb Available Physical Memory | 73,87% Memory free
1,83 Gb Paging File | 1,69 Gb Available in Paging File | 92,20% Paging File free
Paging file location(s): C:\pagefile.sys 1152 2304 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 20,99 Gb Total Space | 16,53 Gb Free Space | 78,74% Space Free | Partition Type: FAT32
Drive D: | 49,99 Gb Total Space | 2,49 Gb Free Space | 4,98% Space Free | Partition Type: FAT32
Drive E: | 78,02 Gb Total Space | 16,21 Gb Free Space | 20,78% Space Free | Partition Type: FAT32
 
Computer Name: S-E390A2C98A174 | User Name: Słoń | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-11-22 07:59:24 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\OTL.exe
PRC - [2012-11-13 18:06:52 | 000,161,768 | ---- | M] (Oracle Corporation) -- C:\Program Files\Java\jre7\bin\jqs.exe
PRC - [2012-10-30 23:51:00 | 004,297,136 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2012-10-30 23:51:00 | 000,247,224 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
PRC - [2012-10-30 23:51:00 | 000,044,808 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2008-04-14 20:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007-04-16 15:28:22 | 000,577,536 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\soundman.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2012-11-14 07:27:04 | 001,831,424 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\12111400\algo.dll
MOD - [2009-02-27 19:04:20 | 000,311,296 | ---- | M] () -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\pdfshell.POL
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ)
SRV - [2012-11-13 18:06:52 | 000,161,768 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\Program Files\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2012-11-13 17:56:08 | 000,250,808 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012-10-30 23:51:00 | 000,044,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2012-10-24 18:49:18 | 000,115,168 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] --  -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] --  -- (Changer)
DRV - [2012-10-30 23:51:58 | 000,738,504 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2012-10-30 23:51:58 | 000,361,032 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2012-10-30 23:51:58 | 000,097,608 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2012-10-30 23:51:58 | 000,054,232 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2012-10-30 23:51:58 | 000,035,928 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (AswRdr)
DRV - [2012-10-30 23:51:56 | 000,025,256 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2012-10-30 23:51:56 | 000,021,256 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2008-09-24 10:40:22 | 004,122,368 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\alcxwdm.sys -- (ALCXWDM)
DRV - [2008-04-14 21:30:58 | 000,701,440 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2008-04-13 22:05:40 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_5_502_110.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{0153E448-190B-4987-BDE1-F256CADA672F}: C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-11-13 18:32:30 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-11-13 17:43:56 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
 
[2012-11-13 17:45:28 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Słoń\Dane aplikacji\Mozilla\Extensions
[2012-11-13 17:43:56 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012-10-24 18:50:04 | 000,261,600 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012-10-24 20:33:06 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2012-10-24 20:33:06 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2012-10-24 20:33:06 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2012-10-24 20:33:06 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2012-10-24 20:33:06 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2012-10-24 20:33:06 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2001-10-26 17:45:16 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\soundman.exe (Realtek Semiconductor Corp.)
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2012-11-13 17:24:40 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ FAT32 ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012-11-22 10:19:56 | 000,000,000 | ---D | C] -- C:\_OTL
[2012-11-22 08:00:45 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\OTL.exe
[2012-11-18 08:37:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Słoń\.ultramixer
[2012-11-18 08:37:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\UltraMixer
[2012-11-18 08:37:29 | 000,000,000 | ---D | C] -- C:\Program Files\UltraMixer
[2012-11-14 21:20:49 | 000,000,000 | ---D | C] -- C:\Program Files\TimeOff
[2012-11-14 16:29:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Słoń\Moje dokumenty\GTA San Andreas User Files
[2012-11-14 16:11:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Słoń\Ustawienia lokalne\Dane aplikacji\Adobe
[2012-11-14 16:10:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Słoń\Ustawienia lokalne\Dane aplikacji\Sun
[2012-11-14 16:10:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\Sun
[2012-11-14 15:22:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Słoń\Dane aplikacji\Macromedia
[2012-11-14 15:22:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Słoń\Dane aplikacji\Adobe
[2012-11-14 15:16:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\YTD Video Downloader
[2012-11-14 15:16:30 | 000,000,000 | ---D | C] -- C:\Program Files\GreenTree Applications
[2012-11-14 15:14:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Słoń\Moje dokumenty\Pobieranie
[2012-11-14 08:37:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Słoń\Dane aplikacji\Media Player Classic
[2012-11-13 18:39:48 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Słoń\Recent
[2012-11-13 18:33:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\avast! Free Antivirus
[2012-11-13 18:33:02 | 000,361,032 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2012-11-13 18:33:02 | 000,021,256 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2012-11-13 18:33:01 | 000,738,504 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSnx.sys
[2012-11-13 18:33:01 | 000,054,232 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2012-11-13 18:33:01 | 000,035,928 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2012-11-13 18:33:00 | 000,097,608 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys
[2012-11-13 18:33:00 | 000,089,752 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswmon.sys
[2012-11-13 18:33:00 | 000,025,256 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys
[2012-11-13 18:32:27 | 000,041,224 | ---- | C] (AVAST Software) -- C:\WINDOWS\avastSS.scr
[2012-11-13 18:32:26 | 000,227,648 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe
[2012-11-13 18:31:49 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2012-11-13 18:31:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\AVAST Software
[2012-11-13 18:07:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Sun
[2012-11-13 18:07:30 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2012-11-13 18:07:25 | 000,821,736 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\npDeployJava1.dll
[2012-11-13 18:07:25 | 000,746,984 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\deployJava1.dll
[2012-11-13 18:07:25 | 000,246,760 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javaws.exe
[2012-11-13 18:07:25 | 000,143,872 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javacpl.cpl
[2012-11-13 18:07:04 | 000,174,056 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javaw.exe
[2012-11-13 18:07:04 | 000,174,056 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\java.exe
[2012-11-13 18:07:04 | 000,093,672 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\WindowsAccessBridge.dll
[2012-11-13 18:06:46 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2012-11-13 17:59:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\SxsCaPendDel
[2012-11-13 17:59:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Słoń\Menu Start\Programy\XP Codec Pack 2.5.1
[2012-11-13 17:59:05 | 000,000,000 | ---D | C] -- C:\Program Files\XP Codec Pack
[2012-11-13 17:58:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\ffdshow
[2012-11-13 17:58:54 | 000,000,000 | ---D | C] -- C:\Program Files\ffdshow
[2012-11-13 17:57:40 | 000,000,000 | -HSD | C] -- C:\Recycled
[2012-11-13 17:57:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Słoń\Dane aplikacji\Sun
[2012-11-13 17:56:06 | 000,697,272 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2012-11-13 17:56:06 | 000,073,656 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012-11-13 17:55:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\CCleaner
[2012-11-13 17:55:51 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2012-11-13 17:54:28 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Słoń\Moje dokumenty\Moje wideo
[2012-11-13 17:53:46 | 000,000,000 | ---D | C] -- C:\Program Files\Real
[2012-11-13 17:53:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Słoń\Dane aplikacji\Real
[2012-11-13 17:45:46 | 000,000,000 | ---D | C] -- C:\WINDOWS\Downloaded Installations
[2012-11-13 17:44:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Słoń\Ustawienia lokalne\Dane aplikacji\Mozilla
[2012-11-13 17:44:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Słoń\Dane aplikacji\Mozilla
[2012-11-13 17:43:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Mozilla
[2012-11-13 17:43:57 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Maintenance Service
[2012-11-13 17:43:54 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2012-11-13 17:43:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\Logs
[2012-11-13 17:41:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Real Alternative
[2012-11-13 17:41:36 | 000,005,632 | ---- | C] (RealNetworks, Inc.) -- C:\WINDOWS\System32\pndx5032.dll
[2012-11-13 17:41:35 | 000,006,656 | ---- | C] (RealNetworks, Inc.) -- C:\WINDOWS\System32\pndx5016.dll
[2012-11-13 17:41:34 | 000,000,000 | ---D | C] -- C:\Program Files\Real Alternative
[2012-11-13 17:40:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Adobe
[2012-11-13 17:39:59 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2012-11-13 17:39:59 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
[2012-11-13 17:39:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Real
[2012-11-13 17:37:13 | 004,122,368 | R--- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\drivers\alcxwdm.sys
[2012-11-13 17:37:05 | 010,528,768 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\RTLCPL.exe
[2012-11-13 17:37:05 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek AC97
[2012-11-13 17:37:04 | 018,804,736 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\alsndmgr.cpl
[2012-11-13 17:37:04 | 000,577,536 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\soundman.exe
[2012-11-13 17:37:04 | 000,315,392 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\alcupd.exe
[2012-11-13 17:37:04 | 000,217,088 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\Alcrmv.exe
[2012-11-13 17:37:03 | 000,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information
[2012-11-13 17:36:54 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield
[2012-11-13 17:32:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Słoń\Dane aplikacji\Identities
[2012-11-13 17:32:52 | 000,000,000 | -H-D | C] -- C:\Program Files\Uninstall Information
[2012-11-13 17:32:48 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Słoń\Moje dokumenty\Moje obrazy
[2012-11-13 17:32:48 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Słoń\Moje dokumenty\Moja muzyka
[2012-11-13 17:32:44 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Słoń\Dane aplikacji\Microsoft
[2012-11-13 17:32:44 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Słoń\Cookies
[2012-11-13 17:32:44 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Słoń\SendTo
[2012-11-13 17:32:44 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Słoń\Dane aplikacji
[2012-11-13 17:32:44 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Słoń\Ulubione
[2012-11-13 17:32:44 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Słoń\Moje dokumenty
[2012-11-13 17:32:44 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Słoń\Menu Start
[2012-11-13 17:32:44 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Słoń\Menu Start\Programy\Autostart
[2012-11-13 17:32:44 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Słoń\Menu Start\Programy\Akcesoria
[2012-11-13 17:32:44 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Słoń\Ustawienia lokalne
[2012-11-13 17:32:44 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Słoń\Szablony
[2012-11-13 17:32:44 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Słoń\PrintHood
[2012-11-13 17:32:44 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Słoń\NetHood
[2012-11-13 17:32:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Słoń\Pulpit
[2012-11-13 17:32:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Słoń\Ustawienia lokalne\Dane aplikacji\Microsoft
[2012-11-13 17:32:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\SoftwareDistribution
[2012-11-13 17:32:06 | 000,000,000 | --SD | C] -- C:\WINDOWS\System32\Microsoft
[2012-11-13 17:32:06 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[2012-11-13 17:32:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2012-11-13 17:32:05 | 000,000,000 | --SD | C] -- C:\Documents and Settings\LocalService\Dane aplikacji\Microsoft
[2012-11-13 17:32:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Microsoft
[2012-11-13 17:31:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Microsoft
[2012-11-13 17:31:58 | 000,000,000 | --SD | C] -- C:\Documents and Settings\NetworkService\Dane aplikacji\Microsoft
[2012-11-13 17:29:52 | 000,080,384 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia330.dll
[2012-11-13 17:29:51 | 000,080,384 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia001.dll
[2012-11-13 17:29:50 | 000,029,184 | ---- | C] (RICOH Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rw330ext.dll
[2012-11-13 17:27:14 | 000,045,056 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esunid.dll
[2012-11-13 17:27:13 | 000,057,856 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esuimgd.dll
[2012-11-13 17:27:12 | 000,031,744 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esucmd.dll
[2012-11-13 17:26:49 | 000,054,528 | ---- | C] (Philips Semiconductors GmbH) -- C:\WINDOWS\System32\dllcache\cap7146.sys
[2012-11-13 17:25:03 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\xircom
[2012-11-13 17:25:03 | 000,000,000 | ---D | C] -- C:\Program Files\xerox
[2012-11-13 17:25:03 | 000,000,000 | ---D | C] -- C:\Program Files\microsoft frontpage
[2012-11-13 17:23:33 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\All Users\DRM
[2012-11-13 17:23:21 | 000,000,000 | --SD | C] -- C:\WINDOWS\Downloaded Program Files
[2012-11-13 17:23:21 | 000,000,000 | R--D | C] -- C:\WINDOWS\Offline Web Pages
[2012-11-13 17:23:09 | 000,000,000 | -H-D | C] -- C:\Program Files\WindowsUpdate
[2012-11-13 17:23:06 | 000,000,000 | ---D | C] -- C:\Program Files\Usługi online
[2012-11-13 17:22:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\DirectX
[2012-11-13 17:22:36 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Services
[2012-11-13 17:22:34 | 000,000,000 | --SD | C] -- C:\WINDOWS\Tasks
[2012-11-13 17:22:33 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\MSSoap
[2012-11-13 17:22:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\srchasst
[2012-11-13 17:22:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Macromed
[2012-11-13 17:22:22 | 000,000,000 | ---D | C] -- C:\Program Files\Movie Maker
[2012-11-13 17:22:04 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Restore
[2012-11-13 17:22:03 | 000,032,768 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\isrdbg32.dll
[2012-11-13 17:22:03 | 000,032,768 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\dllcache\isrdbg32.dll
[2012-11-13 17:22:00 | 000,000,000 | ---D | C] -- C:\Program Files\NetMeeting
[2012-11-13 17:21:57 | 000,000,000 | ---D | C] -- C:\Program Files\Outlook Express
[2012-11-13 17:21:52 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\System
[2012-11-13 17:21:48 | 000,000,000 | ---D | C] -- C:\Program Files\Internet Explorer
[2012-11-13 17:21:42 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Dokumenty\Moje obrazy
[2012-11-13 17:21:05 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Gry
[2012-11-13 17:20:59 | 000,000,000 | ---D | C] -- C:\Program Files\ComPlus Applications
[2012-11-13 17:20:54 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Narzędzia administracyjne
[2012-11-13 17:20:54 | 000,000,000 | ---D | C] -- C:\WINDOWS\Registration
[2012-11-13 17:20:50 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Dokumenty\Moja muzyka
[2012-11-13 17:20:50 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Media Player
[2012-11-13 17:20:41 | 000,000,000 | ---D | C] -- C:\Program Files\Messenger
[2012-11-13 17:20:38 | 000,000,000 | ---D | C] -- C:\Program Files\MSN Gaming Zone
[2012-11-13 17:20:30 | 000,044,544 | ---- | C] (Hilgraeve, Inc.) -- C:\WINDOWS\System32\hticons.dll
[2012-11-13 17:20:30 | 000,013,312 | ---- | C] (Hilgraeve, Inc.) -- C:\WINDOWS\System32\dllcache\htrn_jis.dll
[2012-11-13 17:20:15 | 000,283,136 | ---- | C] (Cinematronics) -- C:\WINDOWS\System32\dllcache\pinball.exe
[2012-11-13 17:20:14 | 000,351,744 | ---- | C] (Hilgraeve, Inc.) -- C:\WINDOWS\System32\hypertrm.dll
[2012-11-13 17:20:14 | 000,000,000 | ---D | C] -- C:\Program Files\Windows NT
[2012-11-13 17:20:09 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\MsDtc
[2012-11-13 17:20:08 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Com
[2012-11-13 17:19:51 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Dokumenty\Moje wideo
[2012-11-13 17:19:26 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Akcesoria
[2012-11-13 17:16:40 | 001,888,992 | ---- | C] (ATI Technologies Inc. ) -- C:\WINDOWS\System32\ati3duag.dll
[2012-11-13 17:16:40 | 000,870,784 | ---- | C] (ATI Technologies Inc. ) -- C:\WINDOWS\System32\ati3d1ag.dll
[2012-11-13 17:16:40 | 000,701,440 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati2mtag.sys
[2012-11-13 17:16:40 | 000,516,768 | ---- | C] (ATI Technologies Inc. ) -- C:\WINDOWS\System32\ativvaxx.dll
[2012-11-13 17:16:39 | 000,229,376 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\ati2cqag.dll
[2012-11-13 17:16:39 | 000,201,728 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\ati2dvag.dll
[2012-11-13 17:16:18 | 000,020,992 | ---- | C] (Realtek Semiconductor Corporation) -- C:\WINDOWS\System32\drivers\RTL8139.sys
[2012-11-13 17:15:02 | 000,000,000 | -HSD | C] -- C:\WINDOWS\Installer
[2012-11-13 17:15:01 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ODBC
[2012-11-13 17:14:59 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\SpeechEngines
[2012-11-13 17:14:58 | 000,000,000 | R--D | C] -- C:\Program Files
[2012-11-13 17:14:58 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Microsoft Shared
[2012-11-13 17:14:58 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files
[2012-11-13 17:14:46 | 000,176,157 | ---- | C] (Digi International, Inc.) -- C:\WINDOWS\System32\dllcache\dgrpsetu.dll
[2012-11-13 17:14:46 | 000,176,157 | ---- | C] (Digi International, Inc.) -- C:\WINDOWS\System32\dgrpsetu.dll
[2012-11-13 17:14:46 | 000,103,424 | ---- | C] (Equinox Systems Inc.) -- C:\WINDOWS\System32\EqnClass.Dll
[2012-11-13 17:14:46 | 000,103,424 | ---- | C] (Equinox Systems Inc.) -- C:\WINDOWS\System32\dllcache\eqnclass.dll
[2012-11-13 17:14:46 | 000,085,532 | ---- | C] (Digi International) -- C:\WINDOWS\System32\dllcache\dgsetup.dll
[2012-11-13 17:14:46 | 000,085,532 | ---- | C] (Digi International) -- C:\WINDOWS\System32\dgsetup.dll
[2012-11-13 17:14:46 | 000,024,661 | ---- | C] (Perle Systems Ltd.) -- C:\WINDOWS\System32\spxcoins.dll
[2012-11-13 17:14:46 | 000,024,661 | ---- | C] (Perle Systems Ltd.) -- C:\WINDOWS\System32\dllcache\spxcoins.dll
[2012-11-13 17:14:34 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Menu Start
[2012-11-13 17:14:34 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Dokumenty
[2012-11-13 17:14:34 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Autostart
[2012-11-13 17:14:34 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Szablony
[2012-11-13 17:14:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Ulubione
[2012-11-13 17:14:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Pulpit
[2012-11-13 17:14:19 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot2
[2012-11-13 17:14:19 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot
[2012-11-13 17:14:14 | 000,000,000 | --SD | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Microsoft
[2012-11-13 17:14:14 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\All Users\Dane aplikacji
[2012-11-13 17:13:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings
[2012-11-13 17:09:27 | 000,000,000 | R-SD | C] -- C:\WINDOWS\Fonts
[2012-11-13 17:09:27 | 000,000,000 | RHSD | C] -- C:\WINDOWS\System32\dllcache
[2012-11-13 17:09:27 | 000,000,000 | R--D | C] -- C:\WINDOWS\Web
[2012-11-13 17:09:27 | 000,000,000 | -H-D | C] -- C:\WINDOWS\inf
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\WinSxS
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\wins
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\wbem
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\usmt
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\twain_32
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\Temp
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\system32
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\system
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\spool
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ShellExt
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Setup
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\security
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\Resources
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\repair
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ras
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\Provisioning
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\pl-pl
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\pl
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\PeerNet
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\pchealth
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\oobe
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\npp
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\Network Diagnostic
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\mui
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\mui
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\msapps
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\msagent
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\Media
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\L2Schemas
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\java
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\inetsrv
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\IME
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\ime
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\icsxml
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ias
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\Help
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\export
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\etc
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\ehome
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\Driver Cache
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\disdn
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\dhcp
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\Debug
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\Cursors
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\Connection Wizard
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\config
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\Config
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\AppPatch
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\addins
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\3com_dmi
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\3076
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\2052
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1054
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1045
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1042
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1041
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1037
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1033
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1031
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1028
[2012-11-13 17:09:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1025
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012-11-22 10:23:16 | 000,000,312 | -H-- | M] () -- C:\WINDOWS\tasks\avast! Emergency Update.job
[2012-11-22 10:22:14 | 000,000,276 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-583907252-920026266-1644491937-1003.job
[2012-11-22 10:22:04 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012-11-22 10:22:02 | 804,835,328 | -HS- | M] () -- C:\hiberfil.sys
[2012-11-22 09:57:02 | 000,000,930 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2012-11-22 07:59:24 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\OTL.exe
[2012-11-22 07:51:40 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012-11-18 22:21:40 | 000,013,824 | ---- | M] () -- C:\Documents and Settings\Słoń\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-11-16 18:58:58 | 000,000,038 | ---- | M] () -- C:\WINDOWS\AviSplitter.INI
[2012-11-16 18:53:52 | 000,094,272 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012-11-14 21:20:52 | 000,000,520 | ---- | M] () -- C:\Documents and Settings\Słoń\Pulpit\TimeOff.lnk
[2012-11-14 16:16:04 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-583907252-920026266-1644491937-1003.job
[2012-11-14 16:13:16 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012-11-14 15:16:34 | 000,000,846 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\YTD Video Downloader.lnk
[2012-11-13 18:33:02 | 000,002,644 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2012-11-13 18:06:54 | 000,093,672 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\WindowsAccessBridge.dll
[2012-11-13 18:06:52 | 000,821,736 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\npDeployJava1.dll
[2012-11-13 18:06:52 | 000,746,984 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\deployJava1.dll
[2012-11-13 18:06:52 | 000,246,760 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javaws.exe
[2012-11-13 18:06:52 | 000,174,056 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javaw.exe
[2012-11-13 18:06:52 | 000,174,056 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\java.exe
[2012-11-13 18:06:52 | 000,143,872 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javacpl.cpl
[2012-11-13 17:56:08 | 000,697,272 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2012-11-13 17:56:08 | 000,073,656 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012-11-13 17:53:56 | 000,006,656 | ---- | M] (RealNetworks, Inc.) -- C:\WINDOWS\System32\pndx5016.dll
[2012-11-13 17:53:56 | 000,005,632 | ---- | M] (RealNetworks, Inc.) -- C:\WINDOWS\System32\pndx5032.dll
[2012-11-13 17:33:26 | 000,355,486 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2012-11-13 17:33:26 | 000,311,604 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012-11-13 17:33:26 | 000,049,492 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2012-11-13 17:33:26 | 000,039,992 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012-11-13 17:32:02 | 000,008,192 | ---- | M] () -- C:\WINDOWS\REGLOCS.OLD
[2012-11-13 17:31:10 | 000,000,261 | ---- | M] () -- C:\WINDOWS\System32\$winnt$.inf
[2012-11-13 17:24:40 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2012-11-13 17:24:40 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2012-11-13 17:24:40 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2012-11-13 17:24:40 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2012-11-13 17:24:32 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx
[2012-11-13 17:24:30 | 000,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb
[2012-11-13 17:24:30 | 000,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb
[2012-11-13 17:24:22 | 000,004,293 | ---- | M] () -- C:\WINDOWS\ODBCINST.INI
[2012-11-13 17:21:04 | 000,021,856 | ---- | M] () -- C:\WINDOWS\System32\emptyregdb.dat
[2012-11-13 17:18:30 | 000,000,211 | -HS- | M] () -- C:\boot.ini
[2012-11-13 17:17:52 | 000,004,444 | ---- | M] () -- C:\WINDOWS\System32\pid.PNF
[2012-10-30 23:51:58 | 000,738,504 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSnx.sys
[2012-10-30 23:51:58 | 000,361,032 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2012-10-30 23:51:58 | 000,097,608 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys
[2012-10-30 23:51:58 | 000,089,752 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswmon.sys
[2012-10-30 23:51:58 | 000,054,232 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2012-10-30 23:51:58 | 000,035,928 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2012-10-30 23:51:56 | 000,025,256 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys
[2012-10-30 23:51:56 | 000,021,256 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2012-10-30 23:51:08 | 000,041,224 | ---- | M] (AVAST Software) -- C:\WINDOWS\avastSS.scr
[2012-10-30 23:51:00 | 000,227,648 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012-11-14 21:20:50 | 000,000,526 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\TimeOff.lnk
[2012-11-14 21:20:50 | 000,000,520 | ---- | C] () -- C:\Documents and Settings\Słoń\Pulpit\TimeOff.lnk
[2012-11-14 16:13:14 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012-11-14 16:11:59 | 000,039,436 | R--- | C] () -- C:\Documents and Settings\Słoń\Moje dokumenty\License.html
[2012-11-14 15:16:33 | 000,000,846 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\YTD Video Downloader.lnk
[2012-11-13 18:33:00 | 000,000,312 | -H-- | C] () -- C:\WINDOWS\tasks\avast! Emergency Update.job
[2012-11-13 18:01:07 | 000,000,038 | ---- | C] () -- C:\WINDOWS\AviSplitter.INI
[2012-11-13 17:59:12 | 000,421,888 | ---- | C] () -- C:\WINDOWS\System32\ac3filter.acm
[2012-11-13 17:58:56 | 000,047,616 | ---- | C] () -- C:\WINDOWS\System32\ff_acm.acm
[2012-11-13 17:56:06 | 000,000,930 | ---- | C] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2012-11-13 17:54:31 | 000,000,276 | ---- | C] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-583907252-920026266-1644491937-1003.job
[2012-11-13 17:54:30 | 000,000,284 | ---- | C] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-583907252-920026266-1644491937-1003.job
[2012-11-13 17:44:35 | 000,013,824 | ---- | C] () -- C:\Documents and Settings\Słoń\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-11-13 17:43:59 | 000,000,634 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Mozilla Firefox.lnk
[2012-11-13 17:40:08 | 000,001,804 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Adobe Reader 9.lnk
[2012-11-13 17:37:42 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2012-11-13 17:37:05 | 000,141,016 | ---- | C] () -- C:\WINDOWS\System32\alsndmgr.wav
[2012-11-13 17:37:04 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll
[2012-11-13 17:32:55 | 000,000,642 | ---- | C] () -- C:\Documents and Settings\Słoń\Menu Start\Programy\Outlook Express.lnk
[2012-11-13 17:32:52 | 000,000,671 | ---- | C] () -- C:\Documents and Settings\Słoń\Menu Start\Programy\Internet Explorer.lnk
[2012-11-13 17:32:45 | 000,001,503 | ---- | C] () -- C:\Documents and Settings\Słoń\Menu Start\Programy\Pomoc zdalna.lnk
[2012-11-13 17:32:45 | 000,000,696 | ---- | C] () -- C:\Documents and Settings\Słoń\Menu Start\Programy\Windows Media Player.lnk
[2012-11-13 17:32:43 | 804,835,328 | -HS- | C] () -- C:\hiberfil.sys
[2012-11-13 17:32:01 | 000,008,192 | ---- | C] () -- C:\WINDOWS\REGLOCS.OLD
[2012-11-13 17:31:08 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2012-11-13 17:29:32 | 000,175,104 | ---- | C] () -- C:\WINDOWS\System32\dllcache\pintlcsa.dll
[2012-11-13 17:28:57 | 001,158,818 | ---- | C] () -- C:\WINDOWS\System32\dllcache\korwbrkr.lex
[2012-11-13 17:28:20 | 000,059,392 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imscinst.exe
[2012-11-13 17:28:15 | 000,196,665 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imjpinst.exe
[2012-11-13 17:28:03 | 000,134,339 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imekr.lex
[2012-11-13 17:27:51 | 013,463,552 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hwxjpn.dll
[2012-11-13 17:27:43 | 000,108,827 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hanja.lex
[2012-11-13 17:27:23 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\dllcache\fpencode.dll
[2012-11-13 17:26:58 | 000,173,568 | ---- | C] () -- C:\WINDOWS\System32\dllcache\chtskf.dll
[2012-11-13 17:24:39 | 000,002,644 | ---- | C] () -- C:\WINDOWS\System32\CONFIG.NT
[2012-11-13 17:24:39 | 000,000,000 | RHS- | C] () -- C:\MSDOS.SYS
[2012-11-13 17:24:39 | 000,000,000 | RHS- | C] () -- C:\IO.SYS
[2012-11-13 17:24:39 | 000,000,000 | ---- | C] () -- C:\CONFIG.SYS
[2012-11-13 17:24:39 | 000,000,000 | ---- | C] () -- C:\AUTOEXEC.BAT
[2012-11-13 17:24:29 | 000,023,392 | ---- | C] () -- C:\WINDOWS\System32\nscompat.tlb
[2012-11-13 17:24:29 | 000,016,832 | ---- | C] () -- C:\WINDOWS\System32\amcompat.tlb
[2012-11-13 17:24:27 | 000,316,640 | ---- | C] () -- C:\WINDOWS\WMSysPr9.prx
[2012-11-13 17:23:08 | 000,000,690 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Windows Movie Maker.lnk
[2012-11-13 17:22:58 | 004,399,505 | ---- | C] () -- C:\WINDOWS\System32\dllcache\nls302en.lex
[2012-11-13 17:22:44 | 000,048,680 | -HS- | C] () -- C:\WINDOWS\winnt256.bmp
[2012-11-13 17:22:44 | 000,048,680 | -HS- | C] () -- C:\WINDOWS\winnt.bmp
[2012-11-13 17:22:38 | 000,000,984 | ---- | C] () -- C:\WINDOWS\System32\dllcache\srframe.mmf
[2012-11-13 17:22:05 | 000,380,416 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msinfo.dll
[2012-11-13 17:21:05 | 000,000,643 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Windows Messenger.lnk
[2012-11-13 17:21:03 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2012-11-13 17:20:25 | 000,065,954 | ---- | C] () -- C:\WINDOWS\Pod mikroskopem.bmp
[2012-11-13 17:20:25 | 000,065,832 | ---- | C] () -- C:\WINDOWS\Stiuk z Santa Fe.bmp
[2012-11-13 17:20:25 | 000,026,680 | ---- | C] () -- C:\WINDOWS\Wachlarze.bmp
[2012-11-13 17:20:25 | 000,026,582 | ---- | C] () -- C:\WINDOWS\Nefryt.bmp
[2012-11-13 17:20:25 | 000,017,362 | ---- | C] () -- C:\WINDOWS\Rododendron.bmp
[2012-11-13 17:20:25 | 000,017,336 | ---- | C] () -- C:\WINDOWS\Na rybkach.bmp
[2012-11-13 17:20:25 | 000,017,062 | ---- | C] () -- C:\WINDOWS\Kawa.bmp
[2012-11-13 17:20:25 | 000,016,730 | ---- | C] () -- C:\WINDOWS\Puch.bmp
[2012-11-13 17:20:25 | 000,009,522 | ---- | C] () -- C:\WINDOWS\Indiański pled.bmp
[2012-11-13 17:20:24 | 000,065,978 | ---- | C] () -- C:\WINDOWS\Bąbelki.bmp
[2012-11-13 17:20:24 | 000,001,272 | ---- | C] () -- C:\WINDOWS\Niebieska koronka 16.bmp
[2012-11-13 17:20:22 | 000,003,286 | ---- | C] () -- C:\WINDOWS\System32\tslabels.h
[2012-11-13 17:20:22 | 000,001,225 | ---- | C] () -- C:\WINDOWS\System32\usrlogon.cmd
[2012-11-13 17:20:21 | 000,000,768 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.h
[2012-11-13 17:20:16 | 000,063,488 | ---- | C] () -- C:\WINDOWS\System32\wmimgmt.msc
[2012-11-13 17:17:51 | 000,004,444 | ---- | C] () -- C:\WINDOWS\System32\pid.PNF
[2012-11-13 17:15:01 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2012-11-13 17:15:00 | 001,685,606 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.spd
[2012-11-13 17:15:00 | 000,000,888 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.sdf
[2012-11-13 17:14:59 | 000,643,717 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ltts1033.lxa
[2012-11-13 17:14:59 | 000,605,050 | ---- | C] () -- C:\WINDOWS\System32\dllcache\r1033tts.lxa
[2012-11-13 17:14:44 | 000,001,734 | ---- | C] () -- C:\WINDOWS\System32\AUTOEXEC.NT
[2012-11-13 17:14:32 | 000,808,524 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5IIS.CAT
[2012-11-13 17:14:32 | 000,399,670 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MAPIMIG.CAT
[2012-11-13 17:14:32 | 000,144,484 | ---- | C] () -- C:\WINDOWS\System32\dllcache\netfx.cat
[2012-11-13 17:14:32 | 000,105,628 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tabletpc.cat
[2012-11-13 17:14:32 | 000,037,509 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MW770.CAT
[2012-11-13 17:14:32 | 000,034,747 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mediactr.cat
[2012-11-13 17:14:32 | 000,033,765 | ---- | C] () -- C:\WINDOWS\System32\dllcache\FP4.CAT
[2012-11-13 17:14:32 | 000,016,825 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IMS.CAT
[2012-11-13 17:14:32 | 000,013,497 | ---- | C] () -- C:\WINDOWS\System32\dllcache\HPCRDP.CAT
[2012-11-13 17:14:32 | 000,012,363 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MSMSGS.CAT
[2012-11-13 17:14:32 | 000,010,027 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MSTSWEB.CAT
[2012-11-13 17:14:32 | 000,008,599 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IASNT4.CAT
[2012-11-13 17:14:32 | 000,007,382 | ---- | C] () -- C:\WINDOWS\System32\dllcache\OEMBIOS.CAT
[2012-11-13 17:14:32 | 000,007,334 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmerrenu.cat
[2012-11-13 17:14:31 | 002,033,887 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5.CAT
[2012-11-13 17:14:31 | 001,246,357 | ---- | C] () -- C:\WINDOWS\System32\dllcache\SP3.CAT
[2012-11-13 17:14:31 | 000,634,012 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5INF.CAT
[2012-11-13 17:13:57 | 000,094,272 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012-11-13 17:13:07 | 000,000,211 | -HS- | C] () -- C:\boot.ini
[2012-11-13 17:13:04 | 000,000,261 | ---- | C] () -- C:\WINDOWS\System32\$winnt$.inf
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2008-04-14 20:50:48 | 001,499,136 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2008-04-14 21:50:32 | 000,472,064 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008-04-14 21:50:58 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

< End of report >