OTL logfile created on: 2012-12-16 13:48:06 - Run 3
OTL by OldTimer - Version 3.2.69.0     Folder = D:\Documents and Settings\smo\Pulpit
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
2,00 Gb Total Physical Memory | 1,19 Gb Available Physical Memory | 59,56% Memory free
3,85 Gb Paging File | 3,01 Gb Available in Paging File | 78,18% Paging File free
Paging file location(s): E:\pagefile.sys 2048 2048 [binary data]
 
%SystemDrive% = D: | %SystemRoot% = D:\WINDOWS | %ProgramFiles% = D:\Program Files
Drive C: | 30,27 Gb Total Space | 17,99 Gb Free Space | 59,42% Space Free | Partition Type: NTFS
Drive D: | 34,47 Gb Total Space | 19,38 Gb Free Space | 56,22% Space Free | Partition Type: NTFS
Drive E: | 40,04 Gb Total Space | 19,83 Gb Free Space | 49,54% Space Free | Partition Type: NTFS
Drive F: | 30,27 Gb Total Space | 27,58 Gb Free Space | 91,12% Space Free | Partition Type: NTFS
Drive G: | 40,04 Gb Total Space | 8,22 Gb Free Space | 20,52% Space Free | Partition Type: NTFS
Drive H: | 20,51 Gb Total Space | 16,52 Gb Free Space | 80,53% Space Free | Partition Type: NTFS
Drive I: | 40,04 Gb Total Space | 15,91 Gb Free Space | 39,74% Space Free | Partition Type: NTFS
Drive J: | 40,04 Gb Total Space | 14,78 Gb Free Space | 36,91% Space Free | Partition Type: NTFS
Drive K: | 40,04 Gb Total Space | 31,40 Gb Free Space | 78,41% Space Free | Partition Type: NTFS
Drive L: | 59,57 Gb Total Space | 36,64 Gb Free Space | 61,51% Space Free | Partition Type: NTFS
Drive M: | 49,81 Gb Total Space | 32,96 Gb Free Space | 66,17% Space Free | Partition Type: NTFS
Drive N: | 44,84 Gb Total Space | 19,40 Gb Free Space | 43,27% Space Free | Partition Type: NTFS
Drive P: | 298,08 Gb Total Space | 60,56 Gb Free Space | 20,32% Space Free | Partition Type: NTFS
Drive R: | 27,35 Gb Total Space | 19,18 Gb Free Space | 70,13% Space Free | Partition Type: NTFS
Drive X: | 298,08 Gb Total Space | 69,37 Gb Free Space | 23,27% Space Free | Partition Type: NTFS
 
Computer Name: BLACKV8 | User Name: smo | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-12-16 13:45:32 | 000,602,112 | ---- | M] (OldTimer Tools) -- D:\Documents and Settings\smo\Pulpit\OTL.scr
PRC - [2012-12-15 17:23:02 | 000,916,960 | ---- | M] (Mozilla Corporation) -- D:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2012-10-02 14:40:44 | 005,029,232 | ---- | M] (O&O Software GmbH) -- D:\Program Files\OO Software\Defrag\oodtray.exe
PRC - [2012-10-02 14:40:38 | 002,019,184 | ---- | M] (O&O Software GmbH) -- D:\Program Files\OO Software\Defrag\oodag.exe
PRC - [2012-08-25 21:27:58 | 000,545,552 | ---- | M] (SANDBOXIE L.T.D) -- D:\Program Files\Sandboxie\SbieCtrl.exe
PRC - [2012-08-25 21:27:58 | 000,085,776 | ---- | M] (SANDBOXIE L.T.D) -- D:\Program Files\Sandboxie\SbieSvc.exe
PRC - [2012-07-17 17:35:43 | 000,775,168 | ---- | M] () -- D:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
PRC - [2012-03-11 20:13:22 | 001,983,232 | ---- | M] (COMODO) -- D:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
PRC - [2012-03-11 20:13:02 | 006,749,512 | ---- | M] (COMODO) -- D:\Program Files\COMODO\COMODO Internet Security\cfp.exe
PRC - [2012-01-18 15:47:28 | 000,433,264 | ---- | M] (VMware, Inc.) -- D:\WINDOWS\system32\vmnat.exe
PRC - [2012-01-18 15:47:20 | 000,354,416 | ---- | M] (VMware, Inc.) -- D:\WINDOWS\system32\vmnetdhcp.exe
PRC - [2012-01-18 15:04:52 | 011,839,488 | ---- | M] () -- D:\Program Files\VMware\VMware Workstation\vmware-hostd.exe
PRC - [2012-01-18 13:27:20 | 000,079,872 | ---- | M] (VMware, Inc.) -- D:\Program Files\VMware\VMware Workstation\vmware-authd.exe
PRC - [2012-01-10 02:11:21 | 000,618,496 | ---- | M] (PHU XimSoft Tomasz Wyderka) -- D:\Program Files\XimSoft\RAM Kontroler\RAMKontroler.exe
PRC - [2012-01-10 02:11:21 | 000,143,467 | ---- | M] () -- D:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe
PRC - [2012-01-10 02:11:21 | 000,071,096 | ---- | M] () -- D:\Program Files\CDBurnerXP\NMSAccessU.exe
PRC - [2012-01-10 02:11:21 | 000,069,735 | ---- | M] () -- D:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe
PRC - [2011-12-28 12:40:48 | 006,148,096 | ---- | M] (FreeDownloadManager.ORG) -- D:\Program Files\Free Download Manager\fdm.exe
PRC - [2011-08-29 22:11:00 | 000,665,200 | ---- | M] (VMware, Inc.) -- D:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe
PRC - [2010-12-03 20:51:38 | 003,687,736 | ---- | M] (Ghisler Software GmbH) -- D:\Program Files\TC UP\TOTALCMD.EXE
PRC - [2010-11-14 13:57:38 | 000,615,936 | ---- | M] (Ultima Prime & Pawel Porwisz) -- D:\Program Files\TC UP\TC UP.exe
PRC - [2010-11-06 22:24:30 | 001,867,888 | ---- | M] (PeerBlock, LLC) -- D:\Program Files\PeerBlock\peerblock.exe
PRC - [2010-03-30 07:40:20 | 000,113,296 | ---- | M] (NEC Electronics Corporation) -- D:\Program Files\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
PRC - [2009-12-09 14:40:54 | 001,705,984 | ---- | M] (Microsoft Corporation) -- D:\WINDOWS\explorer.exe
PRC - [2009-05-18 17:57:02 | 000,345,088 | ---- | M] (Outertech) -- D:\Program Files\Cacheman\CachemanTray.exe
PRC - [2009-05-16 18:15:00 | 000,210,944 | ---- | M] (Outertech) -- D:\Program Files\Cacheman\CachemanServ.exe
PRC - [2008-05-02 05:15:46 | 000,015,872 | ---- | M] () -- D:\Program Files\Unlocker\UnlockerAssistant.exe
PRC - [2008-04-13 13:39:20 | 000,049,152 | ---- | M] (artArmin) -- D:\Program Files\Vista Drive Icon\DrvIcon.exe
PRC - [2006-07-09 20:58:00 | 001,777,664 | ---- | M] (Idea2) -- D:\Program Files\Desktop Sidebar\dsidebar.exe
PRC - [2006-02-17 10:14:22 | 000,163,840 | ---- | M] (A4Tech Co., Ltd.) -- D:\Program Files\A4Tech\Mouse\Amoumain.exe
PRC - [2005-08-07 23:10:22 | 000,018,944 | ---- | M] (Creative Technology Ltd) -- D:\WINDOWS\system32\CTXFIHLP.EXE
PRC - [2005-08-07 23:10:20 | 000,016,384 | ---- | M] (Creative Technology Ltd) -- D:\WINDOWS\CTHELPER.EXE
PRC - [2005-08-07 23:04:44 | 000,699,392 | ---- | M] (Creative Technology Ltd) -- D:\WINDOWS\system32\CTXFISPI.EXE
PRC - [2005-07-11 10:34:06 | 000,122,880 | ---- | M] (Creative Technology Ltd) -- D:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanel.exe
PRC - [2002-12-20 19:17:00 | 000,057,344 | ---- | M] (Thong Nguyen) -- D:\Documents and Settings\smo\Moje dokumenty\PowerMenu 1.5.1\PowerMenu.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2012-12-15 17:23:02 | 002,397,152 | ---- | M] () -- D:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2012-11-28 20:15:50 | 014,586,808 | ---- | M] () -- D:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_5_502_110.dll
MOD - [2012-07-17 17:35:43 | 000,775,168 | ---- | M] () -- D:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
MOD - [2012-01-18 15:04:52 | 011,839,488 | ---- | M] () -- D:\Program Files\VMware\VMware Workstation\vmware-hostd.exe
MOD - [2012-01-18 14:43:50 | 001,222,656 | ---- | M] () -- D:\Program Files\VMware\VMware Workstation\libxml2.dll
MOD - [2012-01-10 02:11:21 | 000,237,568 | ---- | M] () -- D:\Program Files\IVT Corporation\BlueSoleil\Mobile\BaseLib.dll
MOD - [2012-01-10 02:11:21 | 000,143,467 | ---- | M] () -- D:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe
MOD - [2012-01-10 02:11:21 | 000,071,096 | ---- | M] () -- D:\Program Files\CDBurnerXP\NMSAccessU.exe
MOD - [2012-01-10 02:11:21 | 000,069,735 | ---- | M] () -- D:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe
MOD - [2012-01-10 02:11:21 | 000,061,440 | ---- | M] () -- D:\Program Files\IVT Corporation\BlueSoleil\Mobile\ExtraLib.dll
MOD - [2012-01-10 02:11:21 | 000,041,472 | ---- | M] () -- D:\Program Files\IVT Corporation\BlueSoleil\Mobile\CsCvt.dll
MOD - [2012-01-10 02:11:21 | 000,015,937 | ---- | M] () -- D:\Program Files\XimSoft\RAM Kontroler\RAMKontroler.dll
MOD - [2011-12-28 13:13:24 | 003,522,048 | ---- | M] () -- D:\Program Files\Free Download Manager\fdmbtsupp.dll
MOD - [2011-12-28 11:49:14 | 000,086,528 | ---- | M] () -- D:\Program Files\Free Download Manager\fdmumsp.dll
MOD - [2011-12-28 11:48:54 | 000,230,400 | ---- | M] () -- D:\Program Files\Free Download Manager\iefdm2.dll
MOD - [2011-12-19 17:59:44 | 000,068,424 | ---- | M] () -- D:\Program Files\COMODO\COMODO Internet Security\scanners\smart.cav
MOD - [2010-03-07 19:03:38 | 000,240,128 | ---- | M] () -- D:\Program Files\Copy Handler\chext.dll
MOD - [2008-08-01 14:58:14 | 000,622,693 | ---- | M] () -- D:\WINDOWS\system32\BSShell.dll
MOD - [2008-08-01 14:55:40 | 000,118,880 | ---- | M] () -- D:\WINDOWS\system32\BsMobileSDK.dll
MOD - [2008-08-01 14:54:12 | 000,102,499 | ---- | M] () -- D:\WINDOWS\system32\Bs2Res.dll
MOD - [2008-08-01 14:46:30 | 017,907,824 | ---- | M] () -- D:\WINDOWS\system32\BsLangInDepRes.dll
MOD - [2008-05-02 05:15:46 | 000,015,872 | ---- | M] () -- D:\Program Files\Unlocker\UnlockerAssistant.exe
MOD - [2008-05-02 05:15:37 | 000,010,240 | ---- | M] () -- D:\Program Files\Unlocker\UnlockerCOM.dll
MOD - [2008-05-02 05:15:35 | 000,004,608 | ---- | M] () -- D:\Program Files\Unlocker\UnlockerHook.dll
MOD - [2005-08-07 23:10:26 | 000,003,072 | ---- | M] () -- D:\WINDOWS\CTXFIRES.DLL
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ)
SRV - [2012-12-15 17:23:02 | 000,115,168 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- D:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012-10-02 14:40:38 | 002,019,184 | ---- | M] (O&O Software GmbH) [Auto | Running] -- D:\Program Files\OO Software\Defrag\oodag.exe -- (OODefragAgent)
SRV - [2012-08-25 21:27:58 | 000,085,776 | ---- | M] (SANDBOXIE L.T.D) [Auto | Running] -- D:\Program Files\Sandboxie\SbieSvc.exe -- (SbieSvc)
SRV - [2012-07-17 17:35:43 | 000,775,168 | ---- | M] () [Auto | Running] -- D:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe -- (BlueSoleilCS)
SRV - [2012-03-11 20:13:22 | 001,983,232 | ---- | M] (COMODO) [Auto | Running] -- D:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe -- (cmdAgent)
SRV - [2012-01-18 15:47:28 | 000,433,264 | ---- | M] (VMware, Inc.) [Auto | Running] -- D:\WINDOWS\system32\vmnat.exe -- (VMware NAT Service)
SRV - [2012-01-18 15:47:20 | 000,354,416 | ---- | M] (VMware, Inc.) [Auto | Running] -- D:\WINDOWS\system32\vmnetdhcp.exe -- (VMnetDHCP)
SRV - [2012-01-18 15:04:52 | 011,839,488 | ---- | M] () [Auto | Running] -- D:\Program Files\VMware\VMware Workstation\vmware-hostd.exe -- (VMwareHostd)
SRV - [2012-01-18 13:27:20 | 000,079,872 | ---- | M] (VMware, Inc.) [Auto | Running] -- D:\Program Files\VMware\VMware Workstation\vmware-authd.exe -- (VMAuthdService)
SRV - [2012-01-10 02:11:21 | 000,143,467 | ---- | M] () [Auto | Running] -- D:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe -- (BsMobileCS)
SRV - [2012-01-10 02:11:21 | 000,071,096 | ---- | M] () [Auto | Running] -- D:\Program Files\CDBurnerXP\NMSAccessU.exe -- (NMSAccess)
SRV - [2012-01-10 02:11:21 | 000,069,735 | ---- | M] () [On_Demand | Running] -- D:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe -- (BsHelpCS)
SRV - [2011-08-29 22:11:00 | 000,665,200 | ---- | M] (VMware, Inc.) [Auto | Running] -- D:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe -- (VMUSBArbService)
SRV - [2009-05-16 18:15:00 | 000,210,944 | ---- | M] (Outertech) [Auto | Running] -- D:\Program Files\Cacheman\CachemanServ.exe -- (CachemanService)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- D:\Program Files\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Bin\SyDvCtrl32.sys -- (SyDvCtrl)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)
DRV - File not found [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\1A3.tmp -- (MEMSWEEP2)
DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] --  -- (i2omgmt)
DRV - File not found [Kernel | On_Demand | Stopped] -- D:\DOCUME~1\smo\USTAWI~1\Temp\esihdrv.sys -- (esihdrv)
DRV - File not found [Kernel | System | Stopped] --  -- (Changer)
DRV - [2012-08-25 21:27:54 | 000,157,776 | ---- | M] (SANDBOXIE L.T.D) [Kernel | On_Demand | Running] -- D:\Program Files\Sandboxie\SbieDrv.sys -- (SbieDrv)
DRV - [2012-06-30 02:34:07 | 000,064,392 | -H-- | M] (Sysinternals - www.sysinternals.com) [Kernel | On_Demand | Unknown] -- D:\WINDOWS\system32\drivers\PROCMON23.SYS -- (PROCMON23)
DRV - [2012-03-11 20:13:48 | 000,097,760 | ---- | M] (COMODO) [Kernel | Boot | Running] -- D:\WINDOWS\system32\drivers\inspect.sys -- (Inspect)
DRV - [2012-03-11 20:13:46 | 000,494,968 | ---- | M] (COMODO) [File_System | System | Running] -- D:\WINDOWS\system32\drivers\cmdGuard.sys -- (cmdGuard)
DRV - [2012-03-11 20:13:46 | 000,031,704 | ---- | M] (COMODO) [Kernel | System | Running] -- D:\WINDOWS\system32\drivers\cmdhlp.sys -- (cmdHlp)
DRV - [2012-03-11 20:13:44 | 000,018,056 | ---- | M] (COMODO) [File_System | System | Running] -- D:\WINDOWS\system32\drivers\cmderd.sys -- (cmderd)
DRV - [2012-01-31 18:19:53 | 000,092,080 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- D:\WINDOWS\system32\drivers\SysPlant.sys -- (SysPlant)
DRV - [2012-01-18 15:47:36 | 000,055,664 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- D:\WINDOWS\system32\drivers\vmx86.sys -- (vmx86)
DRV - [2012-01-18 15:47:32 | 000,023,792 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- D:\WINDOWS\system32\drivers\vmparport.sys -- (VMparport)
DRV - [2012-01-18 15:46:22 | 000,033,776 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- D:\WINDOWS\system32\drivers\vmnetbridge.sys -- (VMnetBridge)
DRV - [2012-01-18 15:46:16 | 000,025,712 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- D:\WINDOWS\system32\drivers\vmnetuserif.sys -- (VMnetuserif)
DRV - [2012-01-18 13:06:02 | 000,016,624 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\vmnetadapter.sys -- (VMnetAdapter)
DRV - [2012-01-10 02:11:21 | 000,082,320 | ---- | M] (EZB Systems, Inc.) [File_System | System | Running] -- D:\Program Files\UltraISO\drivers\ISODrive.sys -- (ISODrive)
DRV - [2012-01-10 02:11:21 | 000,016,472 | ---- | M] () [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\pwdrvio.sys -- (pwdrvio)
DRV - [2012-01-10 02:11:21 | 000,011,104 | ---- | M] () [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\pwdspio.sys -- (pwdspio)
DRV - [2012-01-10 02:11:21 | 000,004,096 | ---- | M] () [Kernel | Unavailable | Unknown] -- D:\Program Files\Unlocker\UnlockerDriver5.sys -- (UnlockerDriver5)
DRV - [2011-12-19 14:12:00 | 000,104,752 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\VBoxNetAdp.sys -- (VBoxNetAdp)
DRV - [2011-12-19 14:11:58 | 000,158,512 | ---- | M] (Oracle Corporation) [Kernel | System | Running] -- D:\WINDOWS\system32\drivers\VBoxDrv.sys -- (VBoxDrv)
DRV - [2011-12-19 14:11:58 | 000,116,016 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\VBoxNetFlt.sys -- (VBoxNetFlt)
DRV - [2011-12-19 14:11:58 | 000,091,440 | ---- | M] (Oracle Corporation) [Kernel | System | Running] -- D:\WINDOWS\system32\drivers\VBoxUSBMon.sys -- (VBoxUSBMon)
DRV - [2011-10-30 13:14:50 | 000,027,600 | ---- | M] (CrystalIdea Software) [File_System | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\CisUtMonitor.sys -- (CisUtMonitor)
DRV - [2011-10-25 06:45:38 | 000,444,232 | ---- | M] (COMODO Security Solutions Inc.) [File_System | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\cbreparse.sys -- (reparse)
DRV - [2011-08-29 22:11:00 | 000,032,496 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- D:\WINDOWS\system32\drivers\hcmon.sys -- (hcmon)
DRV - [2011-08-08 14:58:56 | 000,098,928 | ---- | M] (VMware, Inc.) [Kernel | Boot | Running] -- D:\WINDOWS\system32\drivers\vmci.sys -- (vmci)
DRV - [2011-07-08 15:32:56 | 000,022,768 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- D:\WINDOWS\system32\drivers\vstor2-mntapi10-shared.sys -- (vstor2-mntapi10-shared)
DRV - [2011-06-13 05:03:54 | 000,306,664 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2011-05-26 09:25:16 | 000,118,960 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\teefer.sys -- (Teefer2)
DRV - [2010-11-06 22:24:30 | 000,019,056 | ---- | M] () [Kernel | On_Demand | Running] -- D:\Program Files\PeerBlock\pbfilter.sys -- (pbfilter)
DRV - [2010-05-07 22:14:25 | 000,226,880 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- D:\WINDOWS\system32\drivers\tcpip6.sys -- (Tcpip6)
DRV - [2010-02-24 10:09:38 | 000,141,568 | ---- | M] (NEC Electronics Corporation) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\nusb3xhc.sys -- (nusb3xhc)
DRV - [2010-02-24 10:09:38 | 000,060,544 | ---- | M] (NEC Electronics Corporation) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\nusb3hub.sys -- (nusb3hub)
DRV - [2010-01-17 15:05:04 | 000,062,208 | ---- | M] (Silicon Image, Inc.) [Kernel | Boot | Running] -- D:\WINDOWS\System32\drivers\si3112.sys -- (Si3112)
DRV - [2009-11-12 13:48:56 | 000,005,504 | ---- | M] () [File_System | Auto | Running] -- D:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen)
DRV - [2009-10-25 17:30:16 | 000,016,384 | ---- | M] (Flint Incorporation) [Kernel | System | Running] -- D:\WINDOWS\System32\drivers\vd_filedisk.sys -- (VD_FileDisk)
DRV - [2009-10-12 03:10:54 | 000,029,440 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\RTLTEAMING.SYS -- (RTLTEAMING)
DRV - [2009-02-16 10:35:06 | 000,017,536 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\RTLVLAN.SYS -- (RTLVLAN)
DRV - [2008-07-31 19:45:42 | 000,020,616 | ---- | M] (IVT Corporation.) [Kernel | Boot | Running] -- D:\WINDOWS\system32\drivers\BtHidBus.sys -- (BtHidBus)
DRV - [2008-07-09 07:11:34 | 000,022,016 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | Auto | Running] -- D:\WINDOWS\system32\drivers\RtNdPt5x.sys -- (RtNdPt5x)
DRV - [2008-07-02 13:58:48 | 000,026,248 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\IvtBtBus.sys -- (IvtBtBUs)
DRV - [2008-07-02 13:58:36 | 000,029,960 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\VcommMgr.sys -- (VcommMgr)
DRV - [2008-07-02 13:58:28 | 000,038,920 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\btcusb.sys -- (Btcsrusb)
DRV - [2008-02-12 03:42:38 | 000,232,472 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- D:\WINDOWS\system32\drivers\VMM.sys -- (vmm)
DRV - [2008-02-05 01:50:44 | 000,059,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\VMNetSrv.sys -- (VPCNetS2)
DRV - [2008-01-21 18:28:12 | 000,014,600 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\btnetdrv.sys -- (BT)
DRV - [2008-01-21 18:27:50 | 000,014,856 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\VComm.sys -- (VComm)
DRV - [2007-06-29 13:47:34 | 000,034,304 | ---- | M] (AMD, Inc.) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\AmdLLD.sys -- (AmdLLD)
DRV - [2006-07-01 22:32:26 | 000,043,520 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- D:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8)
DRV - [2006-03-13 14:50:08 | 000,085,696 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\w300obex.sys -- (w300obex)
DRV - [2006-03-13 14:50:06 | 000,087,824 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\w300mgmt.sys -- (w300mgmt)
DRV - [2006-03-13 14:50:02 | 000,096,352 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\w300mdm.sys -- (w300mdm)
DRV - [2006-03-13 14:50:00 | 000,009,264 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\w300mdfl.sys -- (w300mdfl)
DRV - [2006-03-13 14:49:54 | 000,060,800 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\w300bus.sys -- (w300bus)
DRV - [2006-01-11 07:33:44 | 000,013,312 | ---- | M] (A4Tech Co.,Ltd.) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\Amusbprt.sys -- (Amusbprt)
DRV - [2006-01-11 07:33:32 | 000,008,704 | ---- | M] (A4Tech Co.,Ltd.) [Kernel | System | Running] -- D:\WINDOWS\system32\drivers\Amfilter.sys -- (Amfilter)
DRV - [2005-08-07 22:54:38 | 000,007,168 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\ctprxy2k.sys -- (ctprxy2k)
DRV - [2005-08-07 22:54:36 | 000,439,424 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\ctaud2k.sys -- (ctaud2k)
DRV - [2005-08-07 22:54:30 | 001,093,632 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\ha20x2k.sys -- (ha20x2k)
DRV - [2005-08-07 22:54:22 | 000,114,688 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\ctoss2k.sys -- (ossrv)
DRV - [2005-08-07 22:54:18 | 000,142,848 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\ctsfm2k.sys -- (ctsfm2k)
DRV - [2005-08-07 22:54:18 | 000,077,824 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\emupia2k.sys -- (emupia)
DRV - [2005-08-07 22:54:14 | 000,501,760 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\ctac32k.sys -- (ctac32k)
DRV - [2005-07-13 10:18:50 | 000,340,704 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\ctdvda2k.sys -- (ctdvda2k)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie_rsearch.html
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
 
 
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.com/spbasic.htm
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.symantec.com/enterprise/security_response/index.jsp
IE - HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchURL\g, = http://www.google.com/search?q=%s
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.com/spbasic.htm
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.symantec.com/enterprise/security_response/index.jsp
IE - HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchURL\g, = http://www.google.com/search?q=%s
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.com/spbasic.htm
IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.symantec.com/enterprise/security_response/index.jsp
 
IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.com/spbasic.htm
IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.symantec.com/enterprise/security_response/index.jsp
IE - HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchURL\g, = http://www.google.com/search?q=%s
IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-21-1606980848-1770027372-1801674531-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.com/spbasic.htm
IE - HKU\S-1-5-21-1606980848-1770027372-1801674531-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = about:blank [binary data]
IE - HKU\S-1-5-21-1606980848-1770027372-1801674531-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\S-1-5-21-1606980848-1770027372-1801674531-1002\Software\Microsoft\Internet Explorer\SearchURL\g, = http://www.google.com/search?q=%s
IE - HKU\S-1-5-21-1606980848-1770027372-1801674531-1002\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - No CLSID value found
IE - HKU\S-1-5-21-1606980848-1770027372-1801674531-1002\..\SearchScopes,DefaultScope = {3AFB5AD6-6F78-468B-B54B-B206E51C0D12}
IE - HKU\S-1-5-21-1606980848-1770027372-1801674531-1002\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC
IE - HKU\S-1-5-21-1606980848-1770027372-1801674531-1002\..\SearchScopes\{3AFB5AD6-6F78-468B-B54B-B206E51C0D12}: "URL" = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
IE - HKU\S-1-5-21-1606980848-1770027372-1801674531-1002\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050
IE - HKU\S-1-5-21-1606980848-1770027372-1801674531-1002\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..extensions.enabledAddons: anticontainer%40downthemall.net:1.2
FF - prefs.js..extensions.enabledAddons: TFToolbarX%40torrent-finder:1.3
FF - prefs.js..extensions.enabledAddons: %7BACAA314B-EEBA-48e4-AD47-84E31C44796C%7D:4.2.1.10
FF - prefs.js..extensions.enabledAddons: %7BDDC359D1-844A-42a7-9AA1-88A850A938A8%7D:2.0.15
FF - prefs.js..extensions.enabledAddons: jqs%40sun.com:1.0
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:17.0.1
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: D:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_5_502_110.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: D:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: D:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: D:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: D:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: d:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.450: D:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: D:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: D:\Documents and Settings\smo\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: D:\Documents and Settings\smo\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 17.0.1\extensions\\Components: D:\Program Files\Mozilla Firefox\components [2012-12-15 17:23:02 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 17.0.1\extensions\\Plugins: D:\Program Files\Mozilla Firefox\plugins [2012-12-15 17:22:55 | 000,000,000 | ---D | M]
 
[2012-10-28 18:24:42 | 000,000,000 | ---D | M] (No name found) -- D:\Documents and Settings\smo\Dane aplikacji\Mozilla\Extensions
[2012-10-28 18:24:42 | 000,000,000 | ---D | M] (No name found) -- D:\Documents and Settings\smo\Dane aplikacji\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2012-12-15 00:14:35 | 000,000,000 | ---D | M] (No name found) -- D:\Documents and Settings\smo\Dane aplikacji\Mozilla\Firefox\Profiles\hsfsxvrg.default\extensions
[2012-12-15 00:10:21 | 000,000,000 | ---D | M] (Free Download Manager plugin) -- D:\Documents and Settings\smo\Dane aplikacji\Mozilla\Firefox\Profiles\hsfsxvrg.default\extensions\fdm_ffext@freedownloadmanager.org
[2012-05-02 15:25:03 | 000,079,365 | ---- | M] () (No name found) -- D:\Documents and Settings\smo\Dane aplikacji\Mozilla\Firefox\Profiles\hsfsxvrg.default\extensions\anticontainer@downthemall.net.xpi
[2012-05-28 06:58:37 | 000,120,275 | ---- | M] () (No name found) -- D:\Documents and Settings\smo\Dane aplikacji\Mozilla\Firefox\Profiles\hsfsxvrg.default\extensions\TFToolbarX@torrent-finder.xpi
[2012-12-15 00:14:35 | 000,036,139 | ---- | M] () (No name found) -- D:\Documents and Settings\smo\Dane aplikacji\Mozilla\Firefox\Profiles\hsfsxvrg.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
[2012-09-18 05:19:31 | 000,698,867 | ---- | M] () (No name found) -- D:\Documents and Settings\smo\Dane aplikacji\Mozilla\Firefox\Profiles\hsfsxvrg.default\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi
[2012-12-15 17:22:55 | 000,000,000 | ---D | M] (No name found) -- D:\Program Files\Mozilla Firefox\extensions
[2012-02-28 07:22:39 | 000,000,000 | ---D | M] (Java Quick Starter) -- D:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2012-12-15 17:23:02 | 000,262,112 | ---- | M] (Mozilla Foundation) -- D:\Program Files\mozilla firefox\components\browsercomps.dll
[2008-09-04 01:11:24 | 000,054,600 | ---- | M] (BitTorrent, Inc.) -- D:\Program Files\mozilla firefox\plugins\npbittorrent.dll
[2012-02-28 07:22:38 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- D:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2011-12-09 18:23:32 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- D:\Program Files\mozilla firefox\plugins\npwachk.dll
[2012-03-04 19:48:41 | 000,002,767 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2012-03-04 19:48:41 | 000,001,406 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2012-03-04 19:48:41 | 000,000,917 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2012-03-04 19:48:41 | 000,000,858 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2012-03-04 19:48:41 | 000,001,183 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2012-03-04 19:48:41 | 000,001,683 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - homepage: http://www.google.com/
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}&sugkey={google:suggestAPIKeyParameter}
CHR - homepage: http://www.google.com/
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = D:\Documents and Settings\smo\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\23.0.1271.95\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = D:\Documents and Settings\smo\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\23.0.1271.95\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = D:\Documents and Settings\smo\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\23.0.1271.95\gcswf32.dll
CHR - plugin: Shockwave Flash (Disabled) = D:\Documents and Settings\smo\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = D:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_2_202_235.dll
CHR - plugin: BitTorrent (Enabled) = D:\Program Files\Mozilla Firefox\plugins\npbittorrent.dll
CHR - plugin: Java Deployment Toolkit 6.0.310.5 (Enabled) = D:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U31 (Enabled) = D:\Program Files\Java\jre6\bin\plugin2\npjp2.dll
CHR - plugin: Winamp Application Detector (Enabled) = D:\Program Files\Mozilla Firefox\plugins\npwachk.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = D:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = D:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = D:\Program Files\Windows Media Player\npdsplay.dll
CHR - plugin: Google Update (Enabled) = D:\Documents and Settings\smo\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Foxit Reader Plugin for Mozilla (Enabled) = D:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll
CHR - plugin: Silverlight Plug-In (Enabled) = D:\Program Files\Microsoft Silverlight\4.0.50401.0\npctrl.dll
CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit)  (Enabled) = D:\Program Files\Real Alternative\browser\plugins\nppl3260.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = D:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll
CHR - plugin: Shockwave for Director (Enabled) = D:\WINDOWS\system32\Adobe\Director\np32dsw.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = d:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - Extension: DVDVideoSoft Browser Extension = D:\Documents and Settings\smo\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.0_0\
CHR - Extension: DVDVideoSoftTB = D:\Documents and Settings\smo\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\plmlpkfpkijnlijgalnjaacllnjmoamo\10.13.1.89_0\
 
O1 HOSTS File: ([2012-03-16 21:00:03 | 000,000,949 | ---- | M]) - D:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Idea2 SidebarBrowserMonitor Class) - {45AD732C-2CE2-4666-B366-B2214AD57A49} - D:\Program Files\Desktop Sidebar\sbhelp.dll (Idea2)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Free Download Manager) - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - D:\Program Files\Free Download Manager\iefdm2.dll ()
O3 - HKLM\..\Toolbar: (no name) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - No CLSID value found.
O3 - HKLM\..\Toolbar: (StylerToolBar) - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - D:\Program Files\Styler\TB\StylerTB.dll (StyleFantasist)
O3 - HKU\S-1-5-21-1606980848-1770027372-1801674531-1002\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: [amd_dc_opt] D:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe (AMD)
O4 - HKLM..\Run: [COMODO Internet Security] D:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO)
O4 - HKLM..\Run: [Copy Handler]  File not found
O4 - HKLM..\Run: [CTHelper] D:\WINDOWS\CTHELPER.EXE (Creative Technology Ltd)
O4 - HKLM..\Run: [CTxfiHlp] D:\WINDOWS\System32\CTXFIHLP.EXE (Creative Technology Ltd)
O4 - HKLM..\Run: [DrvIcon] D:\Program Files\Vista Drive Icon\DrvIcon.exe (artArmin)
O4 - HKLM..\Run: [NUSB3MON] D:\Program Files\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (NEC Electronics Corporation)
O4 - HKLM..\Run: [NvCplDaemon] D:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] D:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [OODefragTray] D:\Program Files\OO Software\Defrag\oodtray.exe (O&O Software GmbH)
O4 - HKLM..\Run: [TC UP] D:\Program Files\TC UP\TC UP.exe (Ultima Prime & Pawel Porwisz)
O4 - HKLM..\Run: [UnlockerAssistant] D:\Program Files\Unlocker\UnlockerAssistant.exe ()
O4 - HKLM..\Run: [VolPanel] D:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanel.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [WheelMouse] D:\Program Files\A4Tech\Mouse\Amoumain.exe (A4Tech Co., Ltd.)
O4 - HKU\S-1-5-21-1606980848-1770027372-1801674531-1002..\Run: [CachemanTray] D:\Program Files\Cacheman\CachemanTray.exe (Outertech)
O4 - HKU\S-1-5-21-1606980848-1770027372-1801674531-1002..\Run: [Free Download Manager] D:\Program Files\Free Download Manager\fdm.exe (FreeDownloadManager.ORG)
O4 - HKU\S-1-5-21-1606980848-1770027372-1801674531-1002..\Run: [PeerBlock] D:\Program Files\PeerBlock\peerblock.exe (PeerBlock, LLC)
O4 - HKU\S-1-5-21-1606980848-1770027372-1801674531-1002..\Run: [RAMKontroler] D:\Program Files\XimSoft\RAM Kontroler\RAMKontroler.exe (PHU XimSoft Tomasz Wyderka)
O4 - HKU\S-1-5-21-1606980848-1770027372-1801674531-1002..\Run: [SandboxieControl] D:\Program Files\Sandboxie\SbieCtrl.exe (SANDBOXIE L.T.D)
O4 - HKU\S-1-5-21-1606980848-1770027372-1801674531-1002..\Run: [SIDEBAR] D:\Program Files\Desktop Sidebar\dsidebar.exe (Idea2)
O4 - HKU\.DEFAULT..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 File not found
O4 - HKU\S-1-5-18..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 File not found
O4 - HKU\S-1-5-20..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 File not found
O4 - Startup: D:\Documents and Settings\Default User\Menu Start\Programy\Autostart\Styler.lnk = D:\Documents and Settings\smo\Dane aplikacji\Microsoft\Installer\{E9ECF354-2422-4FDB-9ABF-D8ADAC0EF941}\_585b207a.exe ()
O4 - Startup: D:\Documents and Settings\smo\Menu Start\Programy\Autostart\PowerMenu.exe.lnk = D:\Documents and Settings\smo\Moje dokumenty\PowerMenu 1.5.1\PowerMenu.exe (Thong Nguyen)
O4 - Startup: D:\Documents and Settings\smo\Menu Start\Programy\Autostart\Styler.lnk = D:\Documents and Settings\smo\Dane aplikacji\Microsoft\Installer\{E9ECF354-2422-4FDB-9ABF-D8ADAC0EF941}\_585b207a.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRemoteRecursiveEvents = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 33554431
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoInternetOpenWith = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableCAD = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunStartupScriptSync = 0
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O7 - HKU\S-1-5-21-1606980848-1770027372-1801674531-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktopCleanupWizard = 1
O7 - HKU\S-1-5-21-1606980848-1770027372-1801674531-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O8 - Extra context menu item: Free YouTube Download - D:\Documents and Settings\smo\Dane aplikacji\DVDVideoSoftIEHelpers\freeytvdownloader.htm ()
O8 - Extra context menu item: Free YouTube to MP3 Converter - D:\Documents and Settings\smo\Dane aplikacji\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8 - Extra context menu item: Pobierz plik wideo w FDM - D:\Program Files\Free Download Manager\dlfvideo.htm ()
O8 - Extra context menu item: Pobierz w FDM - D:\Program Files\Free Download Manager\dllink.htm ()
O8 - Extra context menu item: Pobierz wszystkie pliki w FDM - D:\Program Files\Free Download Manager\dlall.htm ()
O8 - Extra context menu item: Pobierz zaznaczone pliki w FDM - D:\Program Files\Free Download Manager\dlselected.htm ()
O8 - Extra context menu item: Wyslij przez wiadomosc(&M)... - D:\Program Files\IVT Corporation\BlueSoleil\TransSend\IE\tssms.htm ()
O8 - Extra context menu item: Wyślij przez Bluetooth - D:\Program Files\IVT Corporation\BlueSoleil\TransSend\IE\tsinfo.htm ()
O9 - Extra Button: Subscribe in Desktop Sidebar - {09FE188B-6E85-479e-9411-51FB2220DF80} - D:\Program Files\Desktop Sidebar\sbhelp.dll (Idea2)
O9 - Extra 'Tools' menuitem : Subscribe in Desktop Sidebar - {09FE188B-6E85-479e-9411-51FB2220DF80} - D:\Program Files\Desktop Sidebar\sbhelp.dll (Idea2)
O9 - Extra Button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - D:\Program Files\WinHTTrack\WinHTTrackIEBar.dll ()
O9 - Extra 'Tools' menuitem : Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - D:\Program Files\WinHTTrack\WinHTTrackIEBar.dll ()
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - D:\WINDOWS\system32\vsocklib.dll (VMware, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - D:\WINDOWS\system32\vsocklib.dll (VMware, Inc.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.8.1 195.225.248.48 195.225.248.8
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{371DB25A-D106-40EE-B8FD-33D26EC4A4B3}: DhcpNameServer = 192.168.8.1 195.225.248.48 195.225.248.8
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{94B89D75-C036-46B5-93C4-BD9850F37827}: NameServer = 8.26.56.26,156.154.70.22
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\WINDOWS\system32\skype4com.dll (Skype Technologies)
O20 - AppInit_DLLs: (D:\WINDOWS\system32\guard32.dll) - D:\WINDOWS\system32\guard32.dll (COMODO)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - D:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (D:\WINDOWS\system32\userinit.exe) - D:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\SEP: DllName - (Reg Error: Value error.) - Reg Error: Value error. File not found
O24 - Desktop Components:0 (Bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: D:\Documents and Settings\smo\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: D:\Documents and Settings\smo\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 0
O32 - AutoRun File - [2007-03-28 22:16:50 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2011-10-02 06:09:52 | 000,000,000 | ---- | M] () - D:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (OODBS)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012-12-16 13:45:31 | 000,602,112 | ---- | C] (OldTimer Tools) -- D:\Documents and Settings\smo\Pulpit\OTL.scr
[2012-12-15 17:22:54 | 000,000,000 | ---D | C] -- D:\Program Files\Mozilla Firefox
[2012-12-14 19:15:09 | 000,000,000 | ---D | C] -- D:\Documents and Settings\smo\Pulpit\settlers 6-patche
[2012-12-14 19:14:03 | 000,000,000 | ---D | C] -- D:\Documents and Settings\smo\Pulpit\[  Netemx.pl  ] - The Lost Chronicles of Zerzura-SKIDROW
[2012-12-10 11:46:02 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Menu Start\Programy\Sandboxie
[2012-11-28 20:14:38 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Dane aplikacji\Adobe
[2012-11-25 00:41:21 | 000,000,000 | ---D | C] -- D:\Documents and Settings\smo\Dane aplikacji\FreeArc
[2012-11-25 00:41:19 | 000,000,000 | ---D | C] -- D:\Documents and Settings\smo\Menu Start\Programy\FreeArc
[2012-11-21 02:23:41 | 000,000,000 | -H-D | C] -- D:\WINDOWS\System32\GroupPolicy
[5 D:\WINDOWS\*.tmp files -> D:\WINDOWS\*.tmp -> ]
[1 D:\WINDOWS\System32\*.tmp files -> D:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012-12-16 13:46:22 | 000,856,731 | ---- | M] () -- D:\Documents and Settings\smo\Pulpit\SecurityCheck.exe
[2012-12-16 13:45:32 | 000,602,112 | ---- | M] (OldTimer Tools) -- D:\Documents and Settings\smo\Pulpit\OTL.scr
[2012-12-16 13:40:31 | 000,000,965 | ---- | M] () -- D:\WINDOWS\System32\bscs.ini
[2012-12-16 13:40:19 | 000,271,490 | ---- | M] () -- D:\WINDOWS\System32\NvApps.xml
[2012-12-16 13:38:44 | 000,002,048 | --S- | M] () -- D:\WINDOWS\bootstat.dat
[2012-12-16 13:38:20 | 000,062,524 | ---- | M] () -- D:\WINDOWS\System32\oodbs.lor
[2012-12-16 02:51:18 | 000,064,988 | ---- | M] () -- D:\WINDOWS\System32\DVCState-{00000004-00000000-00000007-00001102-00000005-00211102}.rfx
[2012-12-16 02:51:18 | 000,055,308 | ---- | M] () -- D:\WINDOWS\System32\BMXStateBkp-{00000004-00000000-00000007-00001102-00000005-00211102}.rfx
[2012-12-16 02:51:18 | 000,055,308 | ---- | M] () -- D:\WINDOWS\System32\BMXState-{00000004-00000000-00000007-00001102-00000005-00211102}.rfx
[2012-12-16 02:51:18 | 000,002,064 | ---- | M] () -- D:\WINDOWS\System32\settingsbkup.sfm
[2012-12-16 02:51:18 | 000,002,064 | ---- | M] () -- D:\WINDOWS\System32\settings.sfm
[2012-12-16 02:48:05 | 000,000,211 | ---- | M] () -- D:\fraglist.luar
[2012-12-16 02:45:23 | 000,008,747 | ---- | M] () -- D:\Documents and Settings\smo\Moje dokumenty\config.xml
[2012-12-16 01:58:00 | 000,001,124 | ---- | M] () -- D:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1606980848-1770027372-1801674531-1002UA.job
[2012-12-15 19:56:43 | 013,546,621 | ---- | M] () -- D:\Documents and Settings\smo\Pulpit\New 1.rtf
[2012-12-15 18:20:13 | 000,040,424 | ---- | M] () -- D:\Documents and Settings\smo\Pulpit\tmp.odt
[2012-12-14 19:16:41 | 004,256,190 | ---- | M] () -- D:\Documents and Settings\smo\Pulpit\zrzuc te torrki.rar
[2012-12-14 16:04:39 | 000,001,688 | ---- | M] () -- D:\WINDOWS\Sandboxie.ini
[2012-12-14 16:04:05 | 000,002,206 | ---- | M] () -- D:\WINDOWS\System32\wpa.dbl
[2012-12-10 16:51:38 | 294,270,860 | ---- | M] () -- D:\Documents and Settings\smo\Pulpit\8415-FC3-U2.rar
[2012-12-10 14:58:04 | 000,001,072 | ---- | M] () -- D:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1606980848-1770027372-1801674531-1002Core.job
[2012-12-10 11:47:17 | 000,090,934 | ---- | M] () -- D:\WINDOWS\System32\langs.xml
[2012-12-09 11:37:28 | 000,037,888 | ---- | M] () -- D:\Documents and Settings\smo\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-12-06 13:52:04 | 000,283,266 | ---- | M] () -- D:\Documents and Settings\smo\Moje dokumenty\all_winamp.m3u
[2012-12-06 13:52:00 | 000,281,840 | ---- | M] () -- D:\Documents and Settings\smo\Moje dokumenty\all.m3u
[2012-12-06 08:02:14 | 000,002,307 | ---- | M] () -- D:\Documents and Settings\All Users\Pulpit\O&O Defrag.lnk
[2012-12-04 15:48:50 | 000,000,531 | ---- | M] () -- D:\Documents and Settings\smo\Pulpit\Magic Briefcase.lnk
[2012-12-04 15:44:43 | 000,000,749 | ---- | M] () -- D:\Documents and Settings\smo\Pulpit\Maxthon 3.lnk
[2012-11-30 01:52:23 | 000,005,228 | ---- | M] () -- D:\Documents and Settings\smo\Moje dokumenty\deep in pl.Theme
[2012-11-29 21:12:33 | 000,004,658 | ---- | M] () -- D:\Documents and Settings\smo\Moje dokumenty\ikonki pulpitu-rozmiar przerw-1000.reg
[2012-11-29 21:00:16 | 106,965,686 | ---- | M] () -- D:\Documents and Settings\smo\Moje dokumenty\caly rejestr-backup_nie scalaj.reg
[2012-11-29 20:58:47 | 000,000,240 | ---- | M] () -- D:\Documents and Settings\smo\Moje dokumenty\no sounds_control panel.reg
[2012-11-28 23:15:56 | 000,000,042 | ---- | M] () -- D:\WINDOWS\oodjobd.INI
[2012-11-28 20:15:52 | 000,697,272 | ---- | M] (Adobe Systems Incorporated) -- D:\WINDOWS\System32\FlashPlayerApp.exe
[2012-11-28 20:15:51 | 000,073,656 | ---- | M] (Adobe Systems Incorporated) -- D:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012-11-25 00:41:19 | 000,000,732 | ---- | M] () -- D:\Documents and Settings\smo\Pulpit\FreeArc.lnk
[2012-11-21 00:59:29 | 000,000,898 | ---- | M] () -- D:\Documents and Settings\smo\Pulpit\DVDVideoSoft Free Studio.lnk
[5 D:\WINDOWS\*.tmp files -> D:\WINDOWS\*.tmp -> ]
[1 D:\WINDOWS\System32\*.tmp files -> D:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012-12-16 13:46:21 | 000,856,731 | ---- | C] () -- D:\Documents and Settings\smo\Pulpit\SecurityCheck.exe
[2012-12-16 02:48:05 | 000,000,211 | ---- | C] () -- D:\fraglist.luar
[2012-12-13 23:48:00 | 004,256,190 | ---- | C] () -- D:\Documents and Settings\smo\Pulpit\zrzuc te torrki.rar
[2012-12-10 16:51:48 | 294,270,860 | ---- | C] () -- D:\Documents and Settings\smo\Pulpit\8415-FC3-U2.rar
[2012-11-29 21:00:07 | 106,965,686 | ---- | C] () -- D:\Documents and Settings\smo\Moje dokumenty\caly rejestr-backup_nie scalaj.reg
[2012-11-29 20:58:47 | 000,000,240 | ---- | C] () -- D:\Documents and Settings\smo\Moje dokumenty\no sounds_control panel.reg
[2012-11-29 20:52:32 | 000,004,658 | ---- | C] () -- D:\Documents and Settings\smo\Moje dokumenty\ikonki pulpitu-rozmiar przerw-1000.reg
[2012-11-25 00:41:19 | 000,000,732 | ---- | C] () -- D:\Documents and Settings\smo\Pulpit\FreeArc.lnk
[2012-11-21 13:47:06 | 000,005,228 | ---- | C] () -- D:\Documents and Settings\smo\Moje dokumenty\deep in pl.Theme
[2012-11-03 10:05:50 | 000,094,720 | ---- | C] () -- D:\WINDOWS\System32\lua5.1a.dll
[2012-10-28 18:22:05 | 000,000,600 | ---- | C] () -- D:\Documents and Settings\smo\Dane aplikacji\winscp.rnd
[2012-10-20 08:09:06 | 000,000,042 | ---- | C] () -- D:\WINDOWS\oodjobd.INI
[2012-10-16 08:52:49 | 028,214,378 | ---- | C] () -- D:\Program Files\Symantec.zip
[2012-09-13 07:24:02 | 000,000,101 | ---- | C] () -- D:\WINDOWS\System32\ud-boot-time.ini
[2012-03-16 20:58:04 | 000,178,176 | ---- | C] () -- D:\WINDOWS\System32\ztvunrar39.dll
[2012-03-16 20:58:04 | 000,162,304 | ---- | C] () -- D:\WINDOWS\System32\ztvunrar36.dll
[2012-03-16 20:58:04 | 000,153,088 | ---- | C] () -- D:\WINDOWS\System32\UNRAR3.dll
[2012-03-16 20:58:04 | 000,077,312 | ---- | C] () -- D:\WINDOWS\System32\ztvunace26.dll
[2012-03-16 20:58:04 | 000,075,264 | ---- | C] () -- D:\WINDOWS\System32\unacev2.dll
[2012-01-10 04:13:45 | 001,474,832 | ---- | C] () -- D:\WINDOWS\System32\drivers\sfi.dat
[2012-01-06 15:08:10 | 000,081,936 | ---- | C] () -- D:\WINDOWS\System32\RtNicProp32.dll
[2011-10-02 05:25:36 | 000,910,920 | ---- | C] () -- D:\WINDOWS\System32\pwNative.exe
[2011-10-02 05:25:36 | 000,016,472 | ---- | C] () -- D:\WINDOWS\System32\pwdrvio.sys
[2011-10-02 05:25:36 | 000,011,104 | ---- | C] () -- D:\WINDOWS\System32\pwdspio.sys
[2011-09-17 10:55:24 | 000,000,215 | ---- | C] () -- D:\WINDOWS\BsMobileModel.ini
[2011-09-17 10:53:03 | 000,001,268 | ---- | C] () -- D:\WINDOWS\System32\SHORTCUT.INI
[2011-09-17 10:52:34 | 000,000,133 | ---- | C] () -- D:\WINDOWS\System32\REMOTEDEVICE.INI
[2011-09-17 10:52:16 | 000,004,535 | ---- | C] () -- D:\WINDOWS\System32\LOCALSERVICE.INI
[2011-09-17 10:52:13 | 000,000,099 | ---- | C] () -- D:\WINDOWS\System32\LOCALDEVICE.INI
[2011-09-17 10:45:23 | 000,000,000 | ---- | C] () -- D:\WINDOWS\System32\BSPRINT.INI
[2011-08-18 15:58:12 | 000,001,688 | ---- | C] () -- D:\WINDOWS\Sandboxie.ini
[2011-07-22 06:08:16 | 000,129,024 | ---- | C] () -- D:\WINDOWS\System32\AVERM.dll
[2011-07-22 06:08:16 | 000,028,672 | ---- | C] () -- D:\WINDOWS\System32\AVEQT.dll
[2011-07-10 14:12:41 | 004,755,968 | ---- | C] () -- D:\WINDOWS\System32\apexconverter.exe
[2011-07-10 14:12:41 | 000,120,320 | ---- | C] () -- D:\WINDOWS\System32\apexchanger.exe
[2011-07-10 14:12:41 | 000,109,568 | ---- | C] () -- D:\WINDOWS\System32\apex3gp.exe
[2011-07-10 14:12:40 | 003,138,048 | ---- | C] () -- D:\WINDOWS\System32\apexxbox.exe
[2011-07-10 14:12:40 | 000,086,016 | ---- | C] () -- D:\WINDOWS\System32\AddiTunes.exe
[2011-07-10 14:12:40 | 000,061,440 | ---- | C] () -- D:\WINDOWS\System32\cygz.dll
[2011-07-10 14:12:40 | 000,007,196 | ---- | C] () -- D:\WINDOWS\System32\INI_Pro_3GP_AAC.ini
[2011-07-10 14:12:40 | 000,006,490 | ---- | C] () -- D:\WINDOWS\System32\INI_Pro_PSP.ini
[2011-07-10 14:12:40 | 000,005,028 | ---- | C] () -- D:\WINDOWS\System32\INI_Pro_3GP2_AAC.ini
[2011-07-10 14:12:40 | 000,004,296 | ---- | C] () -- D:\WINDOWS\System32\INI_Pro_Zune.ini
[2011-07-10 14:12:40 | 000,003,045 | ---- | C] () -- D:\WINDOWS\System32\INI_Pro_iPod.ini
[2011-07-10 14:12:40 | 000,002,956 | ---- | C] () -- D:\WINDOWS\System32\INI_Pro_PMP.ini
[2011-07-10 14:12:40 | 000,002,910 | ---- | C] () -- D:\WINDOWS\System32\INI_Pro_3GP_AMR.ini
[2011-07-10 14:12:40 | 000,002,516 | ---- | C] () -- D:\WINDOWS\System32\INI_Pro_PPC.ini
[2011-07-10 14:12:40 | 000,002,175 | ---- | C] () -- D:\WINDOWS\System32\INI_Pro_iPhone.ini
[2011-07-10 14:12:40 | 000,001,964 | ---- | C] () -- D:\WINDOWS\System32\INI_QT_3GPP2_QVGA_AAC.ini
[2011-07-10 14:12:40 | 000,001,964 | ---- | C] () -- D:\WINDOWS\System32\INI_QT_3GPP2_QCIF_AAC.ini
[2011-07-10 14:12:40 | 000,001,878 | ---- | C] () -- D:\WINDOWS\System32\INI_Pro_Xbox.ini
[2011-07-10 14:12:40 | 000,001,814 | ---- | C] () -- D:\WINDOWS\System32\INI_QT_3GPP_QVGA_AMR.ini
[2011-07-10 14:12:40 | 000,001,814 | ---- | C] () -- D:\WINDOWS\System32\INI_QT_3GPP_QVGA_AAC.ini
[2011-07-10 14:12:40 | 000,001,814 | ---- | C] () -- D:\WINDOWS\System32\INI_QT_3GPP_QCIF_AMR.ini
[2011-07-10 14:12:40 | 000,001,814 | ---- | C] () -- D:\WINDOWS\System32\INI_QT_3GPP_QCIF_AAC.ini
[2011-07-10 14:12:40 | 000,001,739 | ---- | C] () -- D:\WINDOWS\System32\INI_Pro_AppleTV.ini
[2011-07-10 14:12:40 | 000,000,036 | ---- | C] () -- D:\WINDOWS\System32\INI_Add_mfra.ini
[2011-07-10 14:12:39 | 000,495,104 | ---- | C] () -- D:\WINDOWS\System32\lame_enc.dll
[2011-06-17 17:14:05 | 000,000,128 | ---- | C] () -- D:\Documents and Settings\smo\Ustawienia lokalne\Dane aplikacji\fusioncache.dat
[2011-05-25 07:00:25 | 000,037,888 | ---- | C] () -- D:\Documents and Settings\smo\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-05-11 14:03:26 | 000,005,504 | ---- | C] () -- D:\WINDOWS\System32\drivers\StarOpen.sys
[2011-05-11 14:02:56 | 000,000,000 | ---- | C] () -- D:\WINDOWS\nsreg.dat
[2011-04-30 14:38:28 | 000,004,293 | ---- | C] () -- D:\WINDOWS\ODBCINST.INI
[2011-04-30 14:37:04 | 000,144,424 | ---- | C] () -- D:\WINDOWS\System32\FNTCACHE.DAT
[2011-04-30 14:12:10 | 000,000,152 | ---- | C] () -- D:\WINDOWS\CoolPlay.ini
[2011-04-30 13:57:40 | 000,068,135 | ---- | C] () -- D:\WINDOWS\System32\instwdm.ini
[2011-04-30 13:57:40 | 000,003,072 | ---- | C] () -- D:\WINDOWS\CTXFIRES.DLL
[2011-04-30 13:57:40 | 000,000,191 | ---- | C] () -- D:\WINDOWS\System32\ctzapxx.ini
[2011-04-30 13:51:07 | 002,283,526 | ---- | C] () -- D:\WINDOWS\System32\nvdata.bin
[2011-04-30 13:35:15 | 000,581,120 | ---- | C] () -- D:\WINDOWS\lame.exe
[2011-04-30 13:35:15 | 000,495,104 | ---- | C] () -- D:\WINDOWS\lame_enc.dll
[2011-04-30 13:32:34 | 000,000,038 | ---- | C] () -- D:\WINDOWS\avisplitter.ini
[2011-04-30 13:32:33 | 002,600,448 | ---- | C] () -- D:\WINDOWS\System32\x264vfw.dll
[2011-04-30 13:32:33 | 000,810,496 | ---- | C] () -- D:\WINDOWS\System32\xvidcore.dll
[2011-04-30 13:32:33 | 000,183,808 | ---- | C] () -- D:\WINDOWS\System32\xvidvfw.dll
[2011-04-30 13:32:33 | 000,121,344 | ---- | C] ( ) -- D:\WINDOWS\System32\lagarith.dll
[2011-04-30 13:32:32 | 000,080,896 | ---- | C] () -- D:\WINDOWS\System32\ff_vfw.dll
[2011-04-30 13:09:23 | 000,008,128 | ---- | C] () -- D:\WINDOWS\System32\d3d9caps.dat
[2011-04-30 13:06:17 | 000,002,048 | --S- | C] () -- D:\WINDOWS\bootstat.dat
[2011-04-30 12:56:19 | 000,002,272 | ---- | C] () -- D:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat
[2011-04-30 12:52:54 | 000,165,376 | ---- | C] () -- D:\WINDOWS\System32\unrar.dll
[2011-04-30 12:50:11 | 000,021,856 | ---- | C] () -- D:\WINDOWS\System32\emptyregdb.dat
[2011-04-30 12:44:48 | 000,052,836 | ---- | C] () -- D:\WINDOWS\System32\zlib1.dll
[2011-04-30 12:44:39 | 000,162,304 | ---- | C] () -- D:\WINDOWS\System32\libpng13.dll
[2011-04-30 12:44:37 | 000,394,752 | ---- | C] () -- D:\WINDOWS\System32\cygwinb19.dll
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2011-04-30 12:54:35 | 000,000,227 | RHS- | M] () -- D:\WINDOWS\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2010-05-29 10:50:35 | 001,509,888 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = D:\WINDOWS\system32\wbem\fastprox.dll -- [2010-01-17 15:00:20 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = D:\WINDOWS\system32\wbem\wbemess.dll -- [2008-04-14 23:50:58 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2012-01-10 01:58:39 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\ashampoo
[2012-01-10 01:58:39 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\Canneverbe Limited
[2012-01-10 02:28:37 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\FreeDownloadManager.ORG
[2012-01-10 01:58:39 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\GoodSync
[2012-01-10 01:58:39 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\GridIron Software
[2012-04-08 14:40:21 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\Hi-Rez Studios
[2012-01-10 01:58:39 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\launcher
[2012-10-17 13:42:31 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\OO Software
[2012-09-02 18:52:56 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\TEMP
[2012-01-10 01:58:39 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
[2012-01-10 01:58:39 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\{32364CEA-7855-4A3C-B674-53D8E9B97936}
[2012-02-01 10:01:39 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\AIMP3
[2012-02-23 19:53:23 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\Ashampoo
[2012-03-25 17:14:23 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\Auslogics
[2012-01-10 01:58:39 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\Canneverbe Limited
[2012-01-10 01:58:39 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\CrystalIdea Software
[2012-12-16 02:50:59 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\Desktop Sidebar
[2012-11-21 00:59:36 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\DVDVideoSoft
[2012-09-18 05:56:42 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\DVDVideoSoftIEHelpers
[2012-02-28 09:19:53 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\ExtremeCopy
[2012-01-10 02:17:19 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\Foxit Software
[2012-12-16 13:49:32 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\Free Download Manager
[2012-11-25 00:41:21 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\FreeArc
[2012-12-16 00:00:01 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\GoodSync
[2012-01-10 01:58:39 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\HEXelon
[2012-08-26 03:22:25 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\Maxthon3
[2012-01-10 01:58:39 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\Notepad++
[2012-02-23 19:33:55 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\OpenOffice.org
[2012-01-10 02:32:54 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\Opera
[2012-09-24 19:43:21 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\PeaZip
[2012-12-15 16:21:03 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\uTorrent
[2012-01-19 04:22:35 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\wargaming.net
[2012-03-27 23:39:17 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\WinHKI
[2012-09-11 23:06:08 | 000,000,000 | ---D | M] -- D:\Documents and Settings\smo\Dane aplikacji\xrecode2
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Files - Unicode (All) ==========[/color]
[2012-01-10 01:58:39 | 000,000,755 | ---- | M] ()(D:\Documents and Settings\smo\Pulpit\Un?nstall Tool.lnk) -- D:\Documents and Settings\smo\Pulpit\Unіnstall Tool.lnk
[2011-12-17 19:33:51 | 000,000,755 | ---- | C] ()(D:\Documents and Settings\smo\Pulpit\Un?nstall Tool.lnk) -- D:\Documents and Settings\smo\Pulpit\Unіnstall Tool.lnk
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 192 bytes -> D:\Documents and Settings\All Users\Dane aplikacji\TEMP:CB0AACC9
@Alternate Data Stream - 136 bytes -> D:\Documents and Settings\All Users\Dane aplikacji\TEMP:D0AB0B4A

< End of report >