OTL logfile created on: 2011-01-03 19:35:51 - Run 11
OTL by OldTimer - Version 3.2.10.0     Folder = C:\Documents and Settings\X\My Documents\_2010.07.01---
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000415 | Country: Poland | Language: PLK | Date Format: yyyy-MM-dd
 
503,00 Mb Total Physical Memory | 305,00 Mb Available Physical Memory | 61,00% Memory free
1,00 Gb Paging File | 1,00 Gb Available in Paging File | 76,00% Paging File free
Paging file location(s): C:\pagefile.sys 756 1512 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 34,21 Gb Total Space | 3,87 Gb Free Space | 11,30% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
 
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 90 Days
Output = Standard
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2010-12-19 23:52:10 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\X\My Documents\_2010.07.01---\OTL.exe
PRC - [2010-03-01 13:20:50 | 000,524,632 | ---- | M] (Lavasoft) -- C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
PRC - [2010-03-01 13:20:47 | 001,029,456 | ---- | M] (Lavasoft) -- C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
PRC - [2009-03-27 14:54:06 | 000,165,160 | ---- | M] (Seagate Technology LLC) -- C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe
PRC - [2009-03-27 14:53:28 | 000,181,544 | ---- | M] (Seagate LLC) -- C:\Program Files\Seagate\SeagateManager\FreeAgent Status\stxmenumgr.exe
PRC - [2008-04-14 04:42:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007-02-13 15:20:50 | 001,205,840 | ---- | M] () -- C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
PRC - [2005-09-10 06:19:34 | 000,393,216 | ---- | M] (SigmaTel, Inc.) -- C:\WINDOWS\stsystra.exe
PRC - [2003-10-29 09:06:00 | 000,024,576 | ---- | M] (BVRP Software) -- C:\Program Files\Digital Line Detect\DLG.exe
PRC - [2002-10-16 19:56:00 | 000,176,128 | ---- | M] (Executive Software International, Inc.) -- C:\Program Files\Executive Software\DiskeeperLite\DKService.exe
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - [2010-12-19 23:52:10 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\X\My Documents\_2010.07.01---\OTL.exe
MOD - [2010-08-23 17:12:02 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
MOD - [2008-04-14 04:40:22 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [Disabled | Stopped] -- C:\WINDOWS\System32\hidserv.dll -- (HidServ)
SRV - File not found [On_Demand | Stopped] -- C:\WINDOWS\System32\appmgmts.dll -- (AppMgmt)
SRV - [2010-03-01 13:20:47 | 001,029,456 | ---- | M] (Lavasoft) [Auto | Running] -- C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe -- (Lavasoft Ad-Aware Service)
SRV - [2009-03-27 14:54:06 | 000,165,160 | ---- | M] (Seagate Technology LLC) [Auto | Running] -- C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe -- (FreeAgentGoNext Service)
SRV - [2005-11-14 01:06:04 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe -- (IDriverT)
SRV - [2002-10-16 19:56:00 | 000,176,128 | ---- | M] (Executive Software International, Inc.) [Auto | Running] -- C:\Program Files\Executive Software\DiskeeperLite\DKService.exe -- (Diskeeper)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\wanatw4.sys -- (wanatw) WAN Miniport (ATW)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\X\LOCALS~1\Temp\mbr.sys -- (mbr)
DRV - [2009-04-23 12:21:26 | 000,064,160 | ---- | M] (Lavasoft AB) [File_System | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\Lbd.sys -- (Lbd)
DRV - [2009-03-18 08:54:44 | 000,039,440 | ---- | M] (COMODO Security Solutions Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\csdf.sys -- (csdf)
DRV - [2009-03-18 08:53:06 | 000,036,624 | ---- | M] (COMODO Security Solutions Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\crpf.sys -- (crpf)
DRV - [2008-05-26 16:14:48 | 000,102,664 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\tmcomm.sys -- (tmcomm)
DRV - [2008-04-13 23:06:40 | 000,043,008 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\amdagp.sys -- (amdagp)
DRV - [2008-04-13 23:06:40 | 000,040,960 | ---- | M] (Silicon Integrated Systems Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\sisagp.sys -- (sisagp)
DRV - [2008-04-13 21:06:06 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2008-04-03 18:07:34 | 000,010,240 | ---- | M] (Atola) [Kernel | On_Demand | Stopped] -- C:\Program Files\A-FF Find and Mount\slicedisk.sys -- (SliceDisk5)
DRV - [2007-02-07 15:50:32 | 000,118,552 | ---- | M] (Analog Devices Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\adiusbaw.sys -- (adiusbaw)
DRV - [2007-02-07 15:50:14 | 000,056,088 | ---- | M] (Analog Deivces) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\adildr.sys -- (ELOADER) General Purpose USB Driver (adildr.sys)
DRV - [2006-02-06 06:11:24 | 000,008,552 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\asctrm.sys -- (ASCTRM)
DRV - [2005-09-10 06:15:32 | 001,032,472 | ---- | M] (SigmaTel, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\sthda.sys -- (STHDA)
DRV - [2005-08-05 10:32:16 | 000,045,312 | R--- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\bcm4sbxp.sys -- (bcm4sbxp)
DRV - [2005-08-03 17:44:16 | 000,016,128 | ---- | M] (Dell Inc) [Kernel | System | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\APPDRV.SYS -- (APPDRV)
DRV - [2005-07-25 10:04:08 | 000,048,640 | ---- | M] (Prolific Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ser2pl.sys -- (Ser2pl)
DRV - [2005-07-22 10:02:12 | 001,035,008 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_DPV.sys -- (HSF_DPV)
DRV - [2005-07-22 10:01:08 | 000,201,600 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSFHWAZL.sys -- (HSFHWAZL)
DRV - [2005-07-22 10:01:00 | 000,717,952 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf)
DRV - [2005-06-24 13:19:52 | 000,190,560 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SynTP.sys -- (SynTP)
DRV - [2004-12-07 04:09:58 | 000,369,024 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\BCMWL5.SYS -- (BCM43XX)
DRV - [2004-12-06 08:05:00 | 000,100,603 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\dla\tfsnudfa.sys -- (tfsnudfa)
DRV - [2004-12-06 08:05:00 | 000,098,714 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\dla\tfsnudf.sys -- (tfsnudf)
DRV - [2004-12-06 08:05:00 | 000,086,586 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\dla\tfsnifs.sys -- (tfsnifs)
DRV - [2004-12-06 08:05:00 | 000,034,843 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\dla\tfsncofs.sys -- (tfsncofs)
DRV - [2004-12-06 08:05:00 | 000,025,883 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\dla\tfsnboio.sys -- (tfsnboio)
DRV - [2004-12-06 08:05:00 | 000,015,227 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\dla\tfsnopio.sys -- (tfsnopio)
DRV - [2004-12-06 08:05:00 | 000,006,363 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\dla\tfsnpool.sys -- (tfsnpool)
DRV - [2004-12-06 08:05:00 | 000,004,123 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\dla\tfsndrct.sys -- (tfsndrct)
DRV - [2004-12-06 08:05:00 | 000,002,239 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\dla\tfsndres.sys -- (tfsndres)
DRV - [2004-12-01 10:22:00 | 000,087,488 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\drvmcdb.sys -- (drvmcdb)
DRV - [2004-11-23 09:56:00 | 000,040,480 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\drvnddm.sys -- (drvnddm)
DRV - [2004-08-04 05:29:56 | 001,897,408 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2004-07-14 18:29:04 | 000,005,627 | ---- | M] (Sonic Solutions) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\sscdbhk5.sys -- (sscdbhk5)
DRV - [2004-07-14 18:28:50 | 000,023,545 | ---- | M] (Sonic Solutions) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\ssrtln.sys -- (ssrtln)
DRV - [2001-08-17 21:07:44 | 000,019,072 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\sparrow.sys -- (Sparrow)
DRV - [2001-08-17 21:07:42 | 000,030,688 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\sym_u3.sys -- (sym_u3)
DRV - [2001-08-17 21:07:40 | 000,028,384 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\sym_hi.sys -- (sym_hi)
DRV - [2001-08-17 21:07:36 | 000,032,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\symc8xx.sys -- (symc8xx)
DRV - [2001-08-17 21:07:34 | 000,016,256 | ---- | M] (Symbios Logic Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\symc810.sys -- (symc810)
DRV - [2001-08-17 20:52:22 | 000,036,736 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\ultra.sys -- (ultra)
DRV - [2001-08-17 20:52:20 | 000,045,312 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\ql12160.sys -- (ql12160)
DRV - [2001-08-17 20:52:20 | 000,040,320 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\ql1080.sys -- (ql1080)
DRV - [2001-08-17 20:52:18 | 000,049,024 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\ql1280.sys -- (ql1280)
DRV - [2001-08-17 20:52:16 | 000,179,584 | ---- | M] (Mylex Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\dac2w2k.sys -- (dac2w2k)
DRV - [2001-08-17 20:52:12 | 000,017,280 | ---- | M] (American Megatrends Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\mraid35x.sys -- (mraid35x)
DRV - [2001-08-17 20:52:00 | 000,026,496 | ---- | M] (Advanced System Products, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\asc.sys -- (asc)
DRV - [2001-08-17 20:51:58 | 000,014,848 | ---- | M] (Advanced System Products, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\asc3550.sys -- (asc3550)
DRV - [2001-08-17 20:51:56 | 000,005,248 | ---- | M] (Acer Laboratories Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\aliide.sys -- (AliIde)
DRV - [2001-08-17 20:51:54 | 000,006,656 | ---- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\cmdide.sys -- (CmdIde)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Page_URL = http://www.google.com/ig/dell?hl=en
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = http://www.google.com/ig/dell?hl=en
 
 
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/dell?hl=en
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/dell?hl=en
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-2154615204-4275496255-3731553294-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\S-1-5-21-2154615204-4275496255-3731553294-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
O1 HOSTS File: ([2009-04-18 13:26:45 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\Program Files\Google\GoogleToolbar1.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (&Google) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\Program Files\Google\GoogleToolbar1.dll (Google Inc.)
O3 - HKU\S-1-5-21-2154615204-4275496255-3731553294-1006\..\Toolbar\WebBrowser: (&Google) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\Program Files\Google\GoogleToolbar1.dll (Google Inc.)
O4 - HKLM..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe (Lavasoft)
O4 - HKLM..\Run: [FinePrint Dyspozytor v5] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe (FinePrint Software, LLC)
O4 - HKLM..\Run: [MaxMenuMgr] C:\Program Files\Seagate\SeagateManager\FreeAgent Status\StxMenuMgr.exe (Seagate LLC)
O4 - HKLM..\Run: [MMTray] C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe File not found
O4 - HKLM..\Run: [SigmatelSysTrayApp] C:\WINDOWS\stsystra.exe (SigmaTel, Inc.)
O4 - HKU\.DEFAULT..\RunOnce: [RunNarrator] C:\WINDOWS\System32\narrator.exe (Microsoft Corporation)
O4 - HKU\S-1-5-18..\RunOnce: [RunNarrator] C:\WINDOWS\System32\narrator.exe (Microsoft Corporation)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe (BVRP Software)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe ()
O4 - Startup: C:\Documents and Settings\X\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk = F:\Nowy folder\OpenOffice.org 3\program\quickstart.exe File not found
O4 - Startup: C:\Documents and Settings\X\Start Menu\Programs\Startup\Seagate 2GEYGGJN Product Registration.lnk = C:\Documents and Settings\X\Application Data\Leadertech\PowerRegister\Seagate 2GEYGGJN Product Registration.exe (Leader Technologies/Seagate)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-2154615204-4275496255-3731553294-1006\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2154615204-4275496255-3731553294-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-2154615204-4275496255-3731553294-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-2154615204-4275496255-3731553294-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O15 - HKLM\..Trusted Domains: musicmatch.com ([online] https in Trusted sites)
O16 - DPF: {00000075-9980-0010-8000-00AA00389B71} http://codecs.microsoft.com/codecs/i386/voxacm.CAB (Reg Error: Key error.)
O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab (Reg Error: Key error.)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} http://download.bitdefender.com/resources/scanner/sources/en/scan8/oscan8.cab (BDSCANONLINE Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/get/flashplayer/current/swflash.cab (Shockwave Flash Object)
O16 - DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} https://extranet.uj.edu.pl/dana-cached/sc/JuniperSetupClient.cab (JuniperSetupClientControl Class)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2004-08-10 20:04:08 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 90 Days ==========[/color]
 
[2011-01-01 14:52:37 | 000,000,000 | ---D | C] -- C:\Moje Strony Web
[2011-01-01 10:41:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\X\My Documents\_2011.01.01-
[2010-12-14 12:39:01 | 000,000,000 | ---D | C] -- C:\Program Files\Screamer Radio
[2010-12-10 18:22:46 | 000,000,000 | ---D | C] -- C:\Program Files\WinHTTrack
[2010-12-10 17:47:10 | 003,819,860 | ---- | C] (HTTrack                                                     ) -- C:\Documents and Settings\X\My Documents\httrack-3.43-9C(dobreprogramy.pl).exe
[2010-12-03 15:44:52 | 000,061,440 | ---- | C] (Org) -- C:\Documents and Settings\X\My Documents\scriptutility.exe
[2010-12-02 19:05:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\X\My Documents\vwget-2.4-wget-1.11.4-bin
[2010-11-30 21:52:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Juniper Networks
[2010-11-30 20:38:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\X\Application Data\Juniper Networks
[2010-11-21 15:31:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\X\My Documents\archpr
[2010-11-21 15:27:06 | 000,000,000 | ---D | C] -- C:\Program Files\Elcomsoft Password Recovery
[2010-11-21 15:27:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Elcomsoft Password Recovery
[2010-11-21 15:27:06 | 000,000,000 | ---D | C] -- C:\Program Files\Elcomsoft
[2010-11-21 15:18:40 | 000,000,000 | ---D | C] -- C:\Program Files\Intelore
[2010-11-21 12:16:51 | 006,637,689 | ---- | C] (www.flash-swf-converter.com                                 ) -- C:\Documents and Settings\X\My Documents\swfconverter.exe
[2010-11-15 19:20:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\X\Application Data\OpenOffice.org
[2010-11-15 19:15:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Sun
[2010-11-15 19:14:53 | 000,411,368 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll
[2010-11-15 19:14:53 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2010-11-15 19:14:53 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2010-11-15 19:14:53 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2010-11-15 19:14:53 | 000,073,728 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl
[2010-10-14 15:17:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\X\My Documents\QPPriv
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 90 Days ==========[/color]
 
[2011-01-03 13:22:16 | 000,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2011-01-03 10:49:36 | 000,001,318 | ---- | M] () -- C:\Documents and Settings\X\Start Menu\Programs\Startup\Seagate 2GEYGGJN Product Registration.lnk
[2011-01-03 10:48:46 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\PCConfidential.job
[2011-01-03 10:48:46 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2011-01-03 10:48:27 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011-01-03 10:48:20 | 527,892,480 | -HS- | M] () -- C:\hiberfil.sys
[2011-01-03 01:21:32 | 016,252,928 | -H-- | M] () -- C:\Documents and Settings\X\NTUSER.DAT
[2011-01-03 01:21:10 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\X\ntuser.ini
[2011-01-02 15:09:02 | 000,017,920 | ---- | M] () -- C:\Documents and Settings\X\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-01-01 15:37:40 | 000,054,156 | -H-- | M] () -- C:\WINDOWS\QTFont.qfn
[2011-01-01 12:02:59 | 000,007,518 | -HS- | M] () -- C:\WINDOWS\System32\KGyGaAvL.sys
[2011-01-01 12:02:59 | 000,000,152 | RHS- | M] () -- C:\WINDOWS\System32\F66EE488CB.sys
[2010-12-27 19:28:46 | 000,000,754 | ---- | M] () -- C:\WINDOWS\WORDPAD.INI
[2010-12-21 09:08:46 | 076,251,136 | ---- | M] () -- C:\WINDOWS\MEMORY.DMP
[2010-12-21 00:40:36 | 000,002,267 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Skype.lnk
[2010-12-16 10:20:30 | 000,194,568 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010-12-16 01:28:04 | 000,001,393 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2010-12-15 16:28:58 | 000,684,657 | ---- | M] () -- C:\Documents and Settings\X\My Documents\InstAviScreenC.zip
[2010-12-15 10:22:26 | 000,000,652 | ---- | M] () -- C:\Documents and Settings\X\Desktop\Sscreamer radio.lnk
[2010-12-14 12:00:03 | 002,771,494 | ---- | M] () -- C:\Documents and Settings\X\My Documents\screamer044.exe
[2010-12-10 19:00:30 | 000,005,189 | ---- | M] () -- C:\Documents and Settings\X\My Documents\index.html
[2010-12-10 19:00:30 | 000,004,243 | ---- | M] () -- C:\Documents and Settings\X\My Documents\backblue.gif
[2010-12-10 19:00:30 | 000,000,828 | ---- | M] () -- C:\Documents and Settings\X\My Documents\fade.gif
[2010-12-10 18:22:51 | 000,000,650 | ---- | M] () -- C:\Documents and Settings\X\Desktop\HTTrack Website Copier.lnk
[2010-12-10 17:47:10 | 003,819,860 | ---- | M] (HTTrack                                                     ) -- C:\Documents and Settings\X\My Documents\httrack-3.43-9C(dobreprogramy.pl).exe
[2010-12-08 15:43:38 | 000,001,409 | ---- | M] () -- C:\WINDOWS\QTFont.for
[2010-12-03 19:18:09 | 000,061,440 | ---- | M] (Org) -- C:\Documents and Settings\X\My Documents\scriptutility.exe
[2010-11-21 15:26:14 | 003,964,416 | ---- | M] () -- C:\Documents and Settings\X\My Documents\einpb_setup_en.msi
[2010-11-21 15:17:25 | 000,749,404 | ---- | M] () -- C:\Documents and Settings\X\My Documents\rar-password-recovery.exe
[2010-11-21 12:16:51 | 006,637,689 | ---- | M] (www.flash-swf-converter.com                                 ) -- C:\Documents and Settings\X\My Documents\swfconverter.exe
[2010-11-19 09:54:15 | 000,039,384 | ---- | M] () -- C:\Documents and Settings\X\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2010-11-18 19:12:44 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\isign32.dll
[2010-11-18 19:12:44 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\isign32.dll
[2010-11-15 19:21:01 | 000,000,715 | ---- | M] () -- C:\Documents and Settings\X\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk
[2010-11-15 19:16:48 | 000,000,777 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\OpenOffice.org 3.2.lnk
[2010-11-15 19:14:34 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2010-11-15 19:14:34 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2010-11-15 19:14:34 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2010-11-15 19:14:34 | 000,073,728 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl
[2010-11-15 19:14:33 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll
[2010-11-14 20:37:13 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010-11-05 06:05:36 | 001,510,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shdocvw.dll
[2010-11-05 06:05:36 | 000,667,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wininet.dll
[2010-11-05 06:05:36 | 000,629,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\urlmon.dll
[2010-11-05 06:05:36 | 000,532,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\mstime.dll
[2010-11-05 06:05:36 | 000,532,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstime.dll
[2010-11-05 06:05:36 | 000,449,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mshtmled.dll
[2010-11-05 06:05:35 | 003,076,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mshtml.dll
[2010-11-05 06:05:35 | 001,025,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\browseui.dll
[2010-11-05 06:05:35 | 000,251,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\iepeers.dll
[2010-11-05 06:05:35 | 000,251,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iepeers.dll
[2010-11-02 16:17:02 | 000,040,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ndproxy.sys
[2010-10-31 14:40:21 | 000,442,800 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010-10-31 14:40:20 | 000,072,066 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010-10-31 14:40:18 | 000,524,016 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010-10-28 14:13:22 | 000,290,048 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\dllcache\atmfd.dll
[2010-10-28 14:13:22 | 000,290,048 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\atmfd.dll
[2010-10-26 14:25:00 | 001,853,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\win32k.sys
[2010-10-26 14:25:00 | 001,853,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\win32k.sys
[2010-10-18 18:17:20 | 000,001,594 | ---- | M] () -- C:\Documents and Settings\X\Desktop\EKF.lnk
[2010-10-11 15:59:30 | 000,045,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wab.exe
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2010-12-15 16:28:43 | 000,684,657 | ---- | C] () -- C:\Documents and Settings\X\My Documents\InstAviScreenC.zip
[2010-12-15 10:22:25 | 000,000,652 | ---- | C] () -- C:\Documents and Settings\X\Desktop\Sscreamer radio.lnk
[2010-12-14 12:00:03 | 002,771,494 | ---- | C] () -- C:\Documents and Settings\X\My Documents\screamer044.exe
[2010-12-10 19:00:30 | 000,005,189 | ---- | C] () -- C:\Documents and Settings\X\My Documents\index.html
[2010-12-10 19:00:30 | 000,004,243 | ---- | C] () -- C:\Documents and Settings\X\My Documents\backblue.gif
[2010-12-10 19:00:30 | 000,000,828 | ---- | C] () -- C:\Documents and Settings\X\My Documents\fade.gif
[2010-12-10 18:22:51 | 000,000,650 | ---- | C] () -- C:\Documents and Settings\X\Desktop\HTTrack Website Copier.lnk
[2010-12-05 18:46:49 | 000,054,156 | -H-- | C] () -- C:\WINDOWS\QTFont.qfn
[2010-12-05 18:46:49 | 000,001,409 | ---- | C] () -- C:\WINDOWS\QTFont.for
[2010-11-21 15:26:14 | 003,964,416 | ---- | C] () -- C:\Documents and Settings\X\My Documents\einpb_setup_en.msi
[2010-11-21 15:17:20 | 000,749,404 | ---- | C] () -- C:\Documents and Settings\X\My Documents\rar-password-recovery.exe
[2010-11-15 19:21:01 | 000,000,715 | ---- | C] () -- C:\Documents and Settings\X\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk
[2010-11-15 19:16:48 | 000,000,777 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\OpenOffice.org 3.2.lnk
[2010-07-10 14:29:02 | 000,210,944 | ---- | C] () -- C:\WINDOWS\System32\MSVCRT10.DLL
[2010-01-13 13:17:55 | 000,000,020 | ---- | C] () -- C:\WINDOWS\naglos.INI
[2009-04-17 18:55:28 | 000,000,169 | ---- | C] () -- C:\WINDOWS\adidsl.ini
[2009-04-17 18:55:28 | 000,000,021 | ---- | C] () -- C:\WINDOWS\Fast800.ini
[2009-04-17 18:55:13 | 000,200,704 | ---- | C] () -- C:\WINDOWS\System32\coclassfast.dll
[2009-04-17 18:55:12 | 000,046,892 | ---- | C] () -- C:\WINDOWS\System32\ADADIX16.DLL
[2009-01-27 12:03:47 | 000,007,207 | R--- | C] () -- C:\WINDOWS\Disktool.INI
[2009-01-27 12:03:47 | 000,006,399 | R--- | C] () -- C:\WINDOWS\fwupgrade.ini
[2009-01-27 12:03:47 | 000,003,677 | R--- | C] () -- C:\WINDOWS\PlaySnd.INI
[2008-11-15 11:49:07 | 000,000,097 | ---- | C] () -- C:\WINDOWS\System32\PICSDK.ini
[2008-03-23 17:40:25 | 000,755,027 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2008-03-23 17:30:58 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\OggDS.dll
[2008-03-23 17:30:51 | 000,921,600 | ---- | C] () -- C:\WINDOWS\System32\vorbisenc.dll
[2008-03-23 17:30:23 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\vorbis.dll
[2008-03-23 17:30:17 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\ogg.dll
[2008-03-23 17:29:17 | 000,009,216 | ---- | C] () -- C:\WINDOWS\System32\cpuinf32.dll
[2008-01-09 15:01:48 | 000,000,453 | ---- | C] () -- C:\WINDOWS\bdoscandellang.ini
[2007-05-12 13:26:45 | 000,011,776 | ---- | C] () -- C:\WINDOWS\System32\ZPORT4AS.dll
[2006-12-14 19:38:23 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI
[2006-09-12 15:07:19 | 000,000,739 | ---- | C] () -- C:\WINDOWS\STImgBrowser.INI
[2006-09-09 08:08:49 | 000,000,002 | ---- | C] () -- C:\WINDOWS\msoffice.ini
[2006-02-26 16:25:14 | 000,000,990 | ---- | C] () -- C:\WINDOWS\adiras.ini
[2006-02-25 17:27:35 | 000,017,920 | ---- | C] () -- C:\Documents and Settings\X\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2006-02-21 15:08:42 | 000,061,678 | ---- | C] () -- C:\Documents and Settings\X\Application Data\PFP120JPR.{PB
[2006-02-21 15:08:42 | 000,012,358 | ---- | C] () -- C:\Documents and Settings\X\Application Data\PFP120JCM.{PB
[2006-02-18 17:46:55 | 000,007,518 | -HS- | C] () -- C:\WINDOWS\System32\KGyGaAvL.sys
[2006-02-18 17:46:55 | 000,000,152 | RHS- | C] () -- C:\WINDOWS\System32\F66EE488CB.sys
[2006-02-06 06:26:38 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2006-02-06 06:12:08 | 000,000,138 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2006-02-06 06:07:03 | 000,000,004 | -H-- | C] () -- C:\Documents and Settings\All Users\Application Data\QSLLPSVCShare
[2006-02-06 05:42:38 | 000,000,391 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2005-04-10 00:04:54 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini
[2005-04-04 12:52:42 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2004-09-16 13:26:40 | 000,012,634 | ---- | C] () -- C:\WINDOWS\System32\drivers\ADFUUD.SYS
[2004-09-16 13:26:40 | 000,012,634 | ---- | C] () -- C:\WINDOWS\ADFUUD.SYS
[2004-08-10 20:12:05 | 000,000,780 | ---- | C] () -- C:\WINDOWS\orun32.ini
[2004-08-10 20:01:18 | 000,001,793 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2010-11-21 15:27:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Elcomsoft Password Recovery
[2010-11-30 21:52:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Juniper Networks
[2009-07-16 19:51:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\OfficeRecovery
[2009-07-24 16:12:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Seagate
[2008-06-15 11:56:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Tarma Installer
[2008-11-05 08:39:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2006-02-06 06:11:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Viewpoint
[2009-04-16 12:14:36 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F}
[2007-01-15 08:51:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\X\Application Data\ContentGuard
[2010-09-18 12:38:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\X\Application Data\facemoods.com
[2010-09-18 12:37:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\X\Application Data\FreeFileViewer
[2010-11-30 21:52:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\X\Application Data\Juniper Networks
[2006-04-13 20:21:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\X\Application Data\Leadertech
[2010-11-15 19:20:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\X\Application Data\OpenOffice.org
[2008-12-09 11:19:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\X\Application Data\Opera
[2008-11-15 11:49:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\X\Application Data\Panasonic
[2008-03-09 13:03:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\X\Application Data\Publish or Perish
[2009-01-07 21:25:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\X\Application Data\Snapter Images
[2006-11-02 18:28:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\X\Application Data\Tlen.pl
[2011-01-03 13:22:16 | 000,000,472 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job
[2011-01-03 10:48:46 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\PCConfidential.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 127 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:0CE7F3C9
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D1B5B4F1
< End of report >