OTL logfile created on: 2011-01-07 15:14:27 - Run 1
OTL by OldTimer - Version 3.2.20.1     Folder = C:\Program Files\Narzędzia
Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 64,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 85,00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 61,98 Gb Total Space | 42,36 Gb Free Space | 68,35% Space Free | Partition Type: NTFS
Drive D: | 170,90 Gb Total Space | 102,59 Gb Free Space | 60,03% Space Free | Partition Type: NTFS
 
Computer Name: KOCUR | User Name: Komputer | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2011-01-07 15:13:53 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Program Files\Narzędzia\OTL.exe
PRC - [2010-12-23 09:47:04 | 000,321,328 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\uTorrent\uTorrent.exe
PRC - [2010-11-04 17:15:50 | 000,810,144 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe
PRC - [2010-11-04 17:15:32 | 002,219,184 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\egui.exe
PRC - [2010-05-09 00:45:50 | 000,867,328 | ---- | M] (Murray Hurps Corp Pty Ltd) -- C:\Program Files\Ad Muncher\AdMunch.exe
PRC - [2010-04-25 21:34:04 | 000,088,576 | ---- | M] (Guillaume Ryder (http://utilfr42.free.fr)) -- C:\Program Files\Clavier+\Clavier.exe
PRC - [2009-11-25 18:50:10 | 002,011,205 | ---- | M] (Informer Technologies, Inc.) -- C:\Program Files\Software Informer\softinfo.exe
PRC - [2008-04-14 18:21:28 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Outlook Express\msimn.exe
PRC - [2008-04-14 18:21:16 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007-08-09 08:27:52 | 000,073,728 | ---- | M] (HP) -- C:\WINDOWS\system32\HPZipm12.exe
PRC - [2006-03-01 18:23:56 | 000,163,840 | ---- | M] (RICOH Company Ltd.) -- C:\Program Files\RDS\PLTBar.exe
PRC - [2005-11-01 10:54:46 | 000,180,224 | ---- | M] (RICOH CO., LTD.) -- C:\Program Files\RDS\RMClient\PMJobObs.exe
PRC - [2004-10-07 18:08:26 | 000,180,224 | ---- | M] (RICOH CO.,LTD.) -- C:\WINDOWS\system32\PMObserv.exe
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - [2011-01-07 15:13:53 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Program Files\Narzędzia\OTL.exe
MOD - [2010-08-23 17:12:53 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
MOD - [2010-05-09 12:28:23 | 000,030,208 | ---- | M] (Murray Hurps Corp Pty Ltd) -- C:\Program Files\Ad Muncher\AM31376.dll
MOD - [2002-08-29 00:00:00 | 000,106,547 | ---- | M] (Microsoft Corporation) -- C:\Program Files\X-Setup Pro\bin\MSScript.ocx
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [On_Demand | Stopped] -- C:\WINDOWS\System32\appmgmts.dll -- (AppMgmt)
SRV - [2010-11-04 17:18:10 | 000,033,584 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe -- (EhttpSrv)
SRV - [2010-11-04 17:15:50 | 000,810,144 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe -- (ekrn)
SRV - [2010-06-13 22:41:32 | 000,651,720 | ---- | M] (Macrovision Europe Ltd.) [Disabled | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010-03-18 15:47:22 | 000,035,160 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe -- (aspnet_state)
SRV - [2010-03-18 12:16:28 | 000,753,504 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe -- (WPFFontCache_v0400)
SRV - [2010-03-18 12:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010-03-18 12:16:28 | 000,124,240 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe -- (NetTcpPortSharing)
SRV - [2007-08-09 08:27:52 | 000,073,728 | ---- | M] (HP) [Auto | Running] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)
SRV - [2004-10-07 18:08:26 | 000,180,224 | ---- | M] (RICOH CO.,LTD.) [On_Demand | Running] -- C:\WINDOWS\system32\PMObserv.exe -- (PMObserv)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\Komputer\USTAWI~1\Temp\catchme.sys -- (catchme)
DRV - [2010-11-21 19:55:23 | 000,231,248 | ---- | M] (TrueCrypt Foundation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\truecrypt.sys -- (truecrypt)
DRV - [2010-08-04 10:50:36 | 000,140,752 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\eamon.sys -- (eamon)
DRV - [2010-08-03 12:28:36 | 000,055,256 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\epfwtdi.sys -- (epfwtdi)
DRV - [2010-07-29 12:31:26 | 000,134,512 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\epfw.sys -- (epfw)
DRV - [2010-07-29 12:31:26 | 000,115,008 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ehdrv.sys -- (ehdrv)
DRV - [2010-07-29 12:31:26 | 000,032,608 | ---- | M] (ESET) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\epfwndis.sys -- (Epfwndis)
DRV - [2009-06-30 08:37:16 | 000,028,552 | ---- | M] (Panda Security, S.L.) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\pavboot.sys -- (pavboot)
DRV - [2006-12-11 11:05:28 | 002,209,536 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\w29n51.sys -- (w29n51) Sterownik karty Intel(R)
DRV - [2006-11-14 15:34:42 | 000,199,040 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SynTP.sys -- (SynTP)
DRV - [2006-08-22 11:16:56 | 000,530,176 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\camc6hal.sys -- (CAMCHALA)
DRV - [2006-08-22 11:16:20 | 000,038,144 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\camc6aud.sys -- (CAMCAUD)
DRV - [2006-05-17 21:26:32 | 000,990,592 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_DPV.sys -- (HSF_DPV)
DRV - [2006-05-17 21:25:56 | 000,246,912 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSFHWICH.sys -- (HSFHWICH)
DRV - [2006-05-17 21:25:50 | 000,727,808 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf)
DRV - [2001-08-10 07:00:00 | 000,003,252 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\PQNTDRV.SYS -- (PQNTDrv)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://onet.pl/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
[2009-11-18 00:51:42 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Komputer\Dane aplikacji\Mozilla\Firefox\extensions
[2010-03-22 10:28:42 | 000,000,000 | ---D | M] ("Ask Toolbar for Firefox") -- C:\Documents and Settings\Komputer\Dane aplikacji\Mozilla\Firefox\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}
 
O1 HOSTS File: ([2011-01-06 02:05:44 | 000,000,744 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Ad Muncher] C:\Program Files\Ad Muncher\AdMunch.exe (Murray Hurps Corp Pty Ltd)
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
O4 - HKLM..\Run: [JobHisInit] C:\Program Files\RDS\RMClient\JobHisInit.exe ()
O4 - HKLM..\Run: [MplSetUp] C:\Program Files\RDS\RMClient\MplSetUp.exe (RICOH CO.,LTD.)
O4 - HKCU..\Run: [Clavier+] C:\Program Files\Clavier+\Clavier.exe (Guillaume Ryder (http://utilfr42.free.fr))
O4 - HKCU..\Run: [fsm]  File not found
O4 - HKCU..\Run: [Software Informer] C:\Program Files\Software Informer\softinfo.exe (Informer Technologies, Inc.)
O4 - HKCU..\Run: [uTorrent] C:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Function Palette.lnk = C:\Program Files\RDS\PLTBar.exe (RICOH Company Ltd.)
O4 - Startup: C:\Documents and Settings\Komputer\Menu Start\Programy\Autostart\Desktop Calendar StartUp.lnk = D:\Różne\Kalendarz\DESKCAL.EXE (Shinonon Free Softrware)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O9 - Extra Button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Utwórz Ulubione dla urządzenia przenośnego... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll (Microsoft Corporation)
O9 - Extra Button: PDFill PDF Editor - {FB858B22-55E2-413f-87F5-30ADC5552151} - C:\Program Files\PlotSoft\PDFill\DownloadPDF.exe (PlotSoft LLC)
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab (Symantec RuFSI Utility Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 194.204.152.34 194.204.159.1 194.204.159.1
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Komputer\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Komputer\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008-11-05 14:04:28 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O34 - HKLM BootExecute: (UDBDef) - C:\WINDOWS\System32\UDBDef.exe ()
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011-01-06 12:56:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\DVD-lab PRO 2
[2011-01-05 23:07:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\p2padjust
[2011-01-05 23:07:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\copypart
[2011-01-05 23:05:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\backup
[2011-01-05 23:04:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\explauncher
[2011-01-05 23:04:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\launcher
[2011-01-05 22:53:51 | 000,040,560 | ---- | C] (Paragon Software Group) -- C:\WINDOWS\System32\drivers\hotcore3.sys
[2011-01-05 22:44:36 | 000,000,000 | ---D | C] -- C:\Program Files\Software Informer
[2011-01-05 22:44:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Komputer\Dane aplikacji\Software Informer
[2011-01-05 22:44:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Software Informer
[2011-01-04 11:37:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\xVideoServiceThief
[2011-01-02 18:31:23 | 000,462,848 | ---- | C] (eHelp Corporation.) -- C:\WINDOWS\System32\HHActiveX.dll
[2010-12-31 11:20:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Komputer\Ustawienia lokalne\Dane aplikacji\Easy CD-DA Extractor
[2010-12-31 11:20:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Easy CD-DA Extractor 2010
[2010-12-31 11:20:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Easy CD-DA Extractor
[2010-12-31 02:38:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Komputer\Menu Start\Programy\HiJackThis
[2010-12-31 02:31:17 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Komputer\Recent
[2010-12-31 02:31:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Komputer\Menu Start\Programy\Haali Media Splitter
[2010-12-31 02:31:16 | 000,000,000 | ---D | C] -- C:\Program Files\Haali
[2010-12-31 02:31:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\ffdshow
[2010-12-31 01:10:12 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2010-12-30 13:15:13 | 000,000,000 | ---D | C] -- C:\Program Files\Real Alternative
[2010-12-30 13:15:03 | 000,000,000 | ---D | C] -- C:\Program Files\AviSynth 2.5
[2010-12-29 16:35:16 | 000,000,000 | ---D | C] -- C:\Temp
[2010-12-27 23:44:05 | 000,662,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mscomct2.ocx
[2010-12-27 23:44:05 | 000,609,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comctl32.ocx
[2010-12-27 23:44:05 | 000,164,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comct232.ocx
[2010-12-27 23:44:05 | 000,040,960 | ---- | C] (vbAccelerator) -- C:\WINDOWS\System32\ssubtmr6.dll
[2010-12-27 23:44:05 | 000,036,864 | ---- | C] (Robdogg Inc.) -- C:\WINDOWS\System32\trayicon_handler.ocx
[2010-12-27 23:44:05 | 000,028,672 | ---- | C] (-) -- C:\WINDOWS\System32\mousewheel.ocx
[2010-12-23 09:47:04 | 000,000,000 | ---D | C] -- C:\Program Files\uTorrent
[2010-12-21 12:09:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Komputer\Dane aplikacji\Foxit Software
[2010-12-20 00:22:18 | 000,000,000 | ---D | C] -- D:\Moje dokumenty\Moje dokumenty\Downloads
[2010-12-14 22:26:58 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ndproxy.sys
[2010-12-14 22:26:22 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wab.exe
[2010-12-13 21:45:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Komputer\Ustawienia lokalne\Dane aplikacji\ESET
[2010-12-13 21:45:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Komputer\Dane aplikacji\ESET
[2010-12-13 21:45:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\ESET
[2010-12-13 21:44:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\ESET
[2010-12-13 21:44:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\ESET
[2010-12-10 21:38:22 | 000,000,000 | ---D | C] -- C:\Program Files\Clavier+
[2010-12-10 21:38:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Clavier+
[2010-04-19 09:15:30 | 000,321,328 | ---- | C] (BitTorrent, Inc.) -- C:\Program Files\utorrent.exe
[2010-01-06 23:25:58 | 001,774,080 | ---- | C] (Gabest) -- C:\Program Files\mplayerc.exe
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2011-01-07 12:12:38 | 000,476,058 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2011-01-07 12:12:38 | 000,416,402 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011-01-07 12:12:38 | 000,084,704 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2011-01-07 12:12:38 | 000,066,478 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011-01-07 12:08:23 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011-01-07 00:51:54 | 000,000,281 | RHS- | M] () -- C:\boot.ini
[2011-01-06 22:50:31 | 000,089,600 | ---- | M] () -- C:\Documents and Settings\Komputer\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-01-05 23:34:22 | 000,002,455 | ---- | M] () -- C:\Documents and Settings\Komputer\Pulpit\HiJackThis.lnk
[2011-01-05 14:25:18 | 000,000,882 | ---- | M] () -- C:\Documents and Settings\Komputer\Pulpit\Otwarty.lnk
[2011-01-04 11:37:25 | 000,000,922 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\xVST.lnk
[2011-01-03 18:51:36 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2011-01-02 21:04:39 | 000,004,096 | ---- | M] () -- C:\aaaa.bin
[2011-01-01 12:58:05 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010-12-23 00:56:32 | 000,000,043 | ---- | M] () -- C:\WINDOWS\gswin32.ini
[2010-12-22 13:12:55 | 000,068,567 | ---- | M] () -- C:\WINDOWS\System32\pagefile.msc
[2010-12-22 02:07:02 | 000,001,010 | ---- | M] () -- C:\Documents and Settings\Komputer\Pulpit\WiseRegistry Cleaner.exe.lnk
[2010-12-21 14:05:27 | 000,000,860 | ---- | M] () -- C:\Documents and Settings\Komputer\Pulpit\HP-Premiere.lnk
[2010-12-20 18:09:00 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010-12-20 18:08:40 | 000,020,952 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010-12-17 10:30:42 | 000,321,328 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\utorrent.exe
[2010-12-14 22:35:05 | 000,153,176 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010-12-12 21:46:31 | 011,010,048 | ---- | M] () -- C:\Documents and Settings\Komputer\ntuser.bak
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011-01-05 14:25:18 | 000,000,882 | ---- | C] () -- C:\Documents and Settings\Komputer\Pulpit\Otwarty.lnk
[2011-01-04 11:37:25 | 000,000,922 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\xVST.lnk
[2011-01-02 21:04:39 | 000,004,096 | ---- | C] () -- C:\aaaa.bin
[2010-12-31 02:38:20 | 000,002,455 | ---- | C] () -- C:\Documents and Settings\Komputer\Pulpit\HiJackThis.lnk
[2010-12-30 19:11:55 | 000,006,144 | ---- | C] () -- C:\WINDOWS\System32\ff_acm.acm
[2010-12-22 02:07:02 | 000,001,010 | ---- | C] () -- C:\Documents and Settings\Komputer\Pulpit\WiseRegistry Cleaner.exe.lnk
[2010-12-21 14:20:33 | 000,068,567 | ---- | C] () -- C:\WINDOWS\System32\pagefile.msc
[2010-12-21 14:05:27 | 000,000,860 | ---- | C] () -- C:\Documents and Settings\Komputer\Pulpit\HP-Premiere.lnk
[2010-11-05 00:25:14 | 000,127,432 | ---- | C] () -- C:\Program Files\noscript.exe
[2010-08-05 15:59:08 | 000,309,148 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-S-1-5-21-515967899-308236825-725345543-1004-0.dat
[2010-08-05 15:59:08 | 000,144,938 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-System.dat
[2010-06-13 20:12:36 | 000,072,192 | ---- | C] () -- C:\WINDOWS\System32\zlibwapi.dll
[2010-05-17 13:02:48 | 000,000,234 | ---- | C] () -- C:\WINDOWS\Fakturka.ini
[2009-12-23 20:57:29 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2009-11-22 00:22:12 | 000,000,043 | ---- | C] () -- C:\WINDOWS\gswin32.ini
[2009-11-19 13:49:19 | 000,000,035 | ---- | C] () -- C:\WINDOWS\RidocPrn.ini
[2009-11-05 12:48:10 | 001,542,330 | ---- | C] () -- C:\Program Files\abcpdfmg.zip
[2009-06-07 15:24:04 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2009-06-07 15:16:12 | 000,819,200 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2009-05-13 09:47:17 | 003,022,664 | R--- | C] () -- C:\Program Files\ComboFix.exe
[2009-01-28 19:50:44 | 000,153,088 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2009-01-16 21:31:27 | 000,000,028 | ---- | C] () -- C:\WINDOWS\v2d.INI
[2008-12-29 20:06:27 | 000,003,252 | ---- | C] () -- C:\WINDOWS\System32\drivers\PQNTDRV.SYS
[2008-12-15 01:26:39 | 000,089,600 | ---- | C] () -- C:\Documents and Settings\Komputer\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008-12-08 23:44:41 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\Komputer\Dane aplikacji\$_hpcst$.hpc
[2008-11-16 14:15:51 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2008-11-07 02:20:16 | 000,000,133 | ---- | C] () -- C:\Documents and Settings\Komputer\Ustawienia lokalne\Dane aplikacji\fusioncache.dat
[2008-11-07 01:14:17 | 000,077,824 | R--- | C] () -- C:\WINDOWS\System32\hpzids01.dll
[2008-11-06 16:12:59 | 000,000,427 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2008-11-06 15:38:57 | 000,000,081 | ---- | C] () -- C:\WINDOWS\Riconv.ini
[2008-11-06 14:49:27 | 000,000,028 | ---- | C] () -- C:\WINDOWS\System32\RPCS.ini
[2008-11-06 14:48:42 | 000,052,862 | ---- | C] () -- C:\WINDOWS\RicDB.ini
[2008-11-06 14:48:07 | 000,000,226 | ---- | C] () -- C:\WINDOWS\PMJobCli.ini
[2008-11-06 14:48:05 | 000,012,309 | ---- | C] () -- C:\WINDOWS\PMRicMb.ini
[2008-11-06 14:48:05 | 000,007,873 | ---- | C] () -- C:\WINDOWS\PMRicPMb.ini
[2008-11-06 14:48:05 | 000,005,390 | ---- | C] () -- C:\WINDOWS\PMPrtMb.ini
[2008-11-06 14:48:05 | 000,004,644 | ---- | C] () -- C:\WINDOWS\PMRicFMb.ini
[2008-11-06 14:48:05 | 000,003,149 | ---- | C] () -- C:\WINDOWS\PMDvPrn.ini
[2008-11-06 14:48:05 | 000,002,102 | ---- | C] () -- C:\WINDOWS\PMDvDev.ini
[2008-11-06 14:48:05 | 000,002,047 | ---- | C] () -- C:\WINDOWS\PMDIOMb.ini
[2008-11-06 14:48:05 | 000,002,036 | ---- | C] () -- C:\WINDOWS\PMHostMb.ini
[2008-11-06 14:48:05 | 000,001,885 | ---- | C] () -- C:\WINDOWS\PMPSIOMb.ini
[2008-11-06 14:48:05 | 000,001,727 | ---- | C] () -- C:\WINDOWS\PMRicSMb.ini
[2008-11-06 14:48:05 | 000,001,706 | ---- | C] () -- C:\WINDOWS\PMRicCMb.ini
[2008-11-06 14:48:05 | 000,001,494 | ---- | C] () -- C:\WINDOWS\PMMib2Mb.ini
[2008-11-06 14:48:05 | 000,001,168 | ---- | C] () -- C:\WINDOWS\PMDvFax.ini
[2008-11-06 14:48:05 | 000,001,143 | ---- | C] () -- C:\WINDOWS\PMDPIMb.ini
[2008-11-06 14:48:05 | 000,001,094 | ---- | C] () -- C:\WINDOWS\PMAxsMb.ini
[2008-11-06 14:48:05 | 000,000,842 | ---- | C] () -- C:\WINDOWS\PMDvScan.ini
[2008-11-06 14:48:05 | 000,000,423 | ---- | C] () -- C:\WINDOWS\PMDvCopy.ini
[2008-11-06 14:48:05 | 000,000,332 | ---- | C] () -- C:\WINDOWS\PMSnmpMb.ini
[2008-11-06 14:48:00 | 000,208,896 | ---- | C] () -- C:\WINDOWS\System32\rtcpf.dll
[2008-11-06 14:48:00 | 000,155,648 | ---- | C] () -- C:\WINDOWS\System32\RLPR.dll
[2008-11-06 14:47:59 | 000,434,176 | ---- | C] () -- C:\WINDOWS\System32\rpnv2ui.dll
[2008-11-06 14:47:56 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\PMObservps.dll
[2008-11-05 14:55:23 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[1999-01-22 18:46:58 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\MSRTEDIT.DLL
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 88 bytes -> C:\Program Files\utorrent.exe:SummaryInformation
@Alternate Data Stream - 196 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:DB7FB6BE
@Alternate Data Stream - 129 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:1493A0EF

< End of report >