OTL logfile created on: 1/23/2011 9:31:53 PM - Run 3
OTL by OldTimer - Version 3.2.20.4     Folder = C:\Documents and Settings\Administrator\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
 
3.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 80.00% Memory free
5.00 Gb Paging File | 5.00 Gb Available in Paging File | 91.00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 120.96 Gb Total Space | 15.33 Gb Free Space | 12.67% Space Free | Partition Type: NTFS
Drive E: | 488.29 Gb Total Space | 341.48 Gb Free Space | 69.93% Space Free | Partition Type: NTFS
Drive F: | 322.26 Gb Total Space | 43.32 Gb Free Space | 13.44% Space Free | Partition Type: NTFS
 
Computer Name: ZIBI | User Name: Administrator | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2011/01/23 00:48:14 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Desktop\OTL.exe
PRC - [2010/12/23 12:35:33 | 004,512,704 | ---- | M] (SlySoft, Inc.) -- C:\Program Files\SlySoft\AnyDVD\AnyDVDtray.exe
PRC - [2010/12/21 22:03:35 | 000,340,520 | ---- | M] (Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
PRC - [2010/12/14 10:15:52 | 001,515,352 | ---- | M] () -- C:\Program Files\Ashampoo\Ashampoo HDD Control 2\AHDDC2_Service.exe
PRC - [2010/12/03 11:35:08 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2010/12/03 11:35:08 | 000,016,856 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\plugin-container.exe
PRC - [2010/11/24 15:37:32 | 003,145,464 | ---- | M] (EAST Technologies) -- C:\Program Files\East-Tec Eraser 2011\etRiskMon.exe
PRC - [2010/03/29 20:26:00 | 000,227,712 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE
PRC - [2009/10/26 13:16:00 | 000,223,464 | ---- | M] (DeviceVM, Inc.) -- C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe
PRC - [2009/10/26 13:15:56 | 000,375,000 | ---- | M] (DeviceVM, Inc.) -- C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe
PRC - [2009/10/20 20:34:38 | 000,207,376 | ---- | M] (Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtblfs.exe
PRC - [2009/10/16 10:42:48 | 000,319,488 | -H-- | M] (DeviceVM, Inc.) -- C:\ASUS.SYS\config\DVMExportService.exe
PRC - [2009/08/19 03:56:38 | 000,090,112 | R--- | M] (ASUSTeK Computer Inc.) -- C:\Program Files\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe
PRC - [2009/02/23 11:43:54 | 000,307,200 | ---- | M] (Creative Technology Ltd) -- C:\Program Files\Creative\Shared Files\CTAudSvc.exe
PRC - [2008/08/13 15:34:08 | 001,891,416 | ---- | M] (GARMIN Corp.) -- C:\Garmin\gStart.exe
PRC - [2008/04/14 05:42:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007/05/10 21:12:28 | 000,546,304 | ---- | M] () -- C:\WINDOWS\system32\ASWL2K.exe
PRC - [2005/12/12 15:03:54 | 000,417,855 | ---- | M] (American Power Conversion Corporation) -- C:\Program Files\APC\APC PowerChute Personal Edition\apcsystray.exe
PRC - [2005/12/12 15:02:24 | 000,176,193 | ---- | M] (American Power Conversion Corporation) -- C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe
PRC - [2004/05/06 12:21:04 | 000,496,640 | ---- | M] () -- C:\WINDOWS\system32\ASWLSVC.exe
PRC - [2000/03/08 15:02:40 | 000,354,816 | ---- | M] (Young Digital Poland) -- C:\Program Files\YDP\YdpDict\Watch.exe
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - [2011/01/23 00:48:14 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Desktop\OTL.exe
MOD - [2010/08/23 08:12:02 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
MOD - [2010/02/04 10:17:27 | 000,129,984 | ---- | M] (SlySoft, Inc.) -- C:\Program Files\SlySoft\AnyDVD\ADvdDiscHlp.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - [2010/12/25 01:37:26 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010/12/21 22:03:35 | 000,340,520 | ---- | M] (Kaspersky Lab) [Auto | Running] -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe -- (AVP)
SRV - [2010/12/21 20:33:10 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service)
SRV - [2010/12/14 10:15:52 | 001,515,352 | ---- | M] () [Auto | Running] -- C:\Program Files\Ashampoo\Ashampoo HDD Control 2\AHDDC2_Service.exe -- (AHDDC2)
SRV - [2010/03/25 10:25:22 | 030,969,208 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service)
SRV - [2009/10/26 13:16:00 | 000,223,464 | ---- | M] (DeviceVM, Inc.) [Auto | Running] -- C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe -- (BCUService)
SRV - [2009/10/16 10:42:48 | 000,319,488 | -H-- | M] (DeviceVM, Inc.) [Auto | Running] -- C:\ASUS.SYS\config\DVMExportService.exe -- (DvmMDES)
SRV - [2009/08/24 21:16:36 | 000,406,016 | ---- | M] (mst software GmbH, Germany) [On_Demand | Stopped] -- C:\Program Files\Ashampoo\Ashampoo HDD Control 2\DfSdkS.exe -- (DfSdkS)
SRV - [2009/08/19 03:56:38 | 000,090,112 | R--- | M] (ASUSTeK Computer Inc.) [Auto | Running] -- C:\Program Files\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe -- (AsSysCtrlService)
SRV - [2009/02/23 11:43:54 | 000,307,200 | ---- | M] (Creative Technology Ltd) [Auto | Running] -- C:\Program Files\Creative\Shared Files\CTAudSvc.exe -- (CTAudSvcService)
SRV - [2005/12/12 15:02:24 | 000,176,193 | ---- | M] (American Power Conversion Corporation) [Auto | Running] -- C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe -- (APC UPS Service)
SRV - [2004/05/06 12:21:04 | 000,496,640 | ---- | M] () [Auto | Running] -- C:\WINDOWS\system32\ASWLSVC.exe -- (ASWLSVC)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2010/12/21 22:03:35 | 000,315,408 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\klif.sys -- (KLIF)
DRV - [2010/11/25 20:17:40 | 005,555,712 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2010/09/16 04:09:44 | 000,027,432 | ---- | M] (Elaborate Bytes AG) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ElbyCDIO.sys -- (ElbyCDIO)
DRV - [2010/09/14 05:16:06 | 000,108,480 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AnyDVD.sys -- (AnyDVD)
DRV - [2009/10/14 21:18:34 | 000,036,880 | ---- | M] (Kaspersky Lab) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\klbg.sys -- (klbg)
DRV - [2009/10/02 19:39:44 | 000,019,472 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\klmouflt.sys -- (klmouflt)
DRV - [2009/09/14 14:42:46 | 000,032,272 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\klim5.sys -- (klim5)
DRV - [2009/09/01 15:29:50 | 000,128,016 | ---- | M] (Kaspersky Lab) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\kl1.sys -- (kl1)
DRV - [2009/08/18 16:05:56 | 000,100,368 | ---- | M] (ATI Research Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV - [2009/08/03 18:28:18 | 000,011,296 | R--- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AsIO.sys -- (AsIO)
DRV - [2009/08/03 10:57:38 | 000,724,736 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\rt2870.sys -- (rt2870)
DRV - [2009/07/28 00:55:00 | 000,143,360 | R--- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2009/07/05 18:48:02 | 000,011,448 | R--- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AsUpIO.sys -- (AsUpIO)
DRV - [2009/06/04 02:48:12 | 001,177,624 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ha20x2k.sys -- (ha20x2k)
DRV - [2009/06/04 02:48:00 | 000,095,768 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\emupia2k.sys -- (emupia)
DRV - [2009/06/04 02:47:50 | 000,158,744 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctsfm2k.sys -- (ctsfm2k)
DRV - [2009/06/04 02:47:42 | 000,014,360 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctprxy2k.sys -- (ctprxy2k)
DRV - [2009/06/04 02:47:34 | 000,130,072 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctoss2k.sys -- (ossrv)
DRV - [2009/06/04 02:47:24 | 000,347,080 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ctdvda2k.sys -- (ctdvda2k)
DRV - [2009/06/04 02:47:14 | 000,526,232 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctaud2k.sys -- (ctaud2k) Creative Audio Driver (WDM)
DRV - [2009/06/04 02:47:06 | 000,511,000 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctac32k.sys -- (ctac32k)
DRV - [2009/06/04 02:46:56 | 001,324,056 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\CTEXFIFX.SYS -- (CTEXFIFX.SYS)
DRV - [2009/06/04 02:46:56 | 001,324,056 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CTEXFIFX.sys -- (CTEXFIFX)
DRV - [2009/06/04 02:46:42 | 000,072,728 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\CTHWIUT.SYS -- (CTHWIUT.SYS)
DRV - [2009/06/04 02:46:42 | 000,072,728 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CTHWIUT.sys -- (CTHWIUT)
DRV - [2009/06/04 02:46:34 | 000,171,032 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\CT20XUT.SYS -- (CT20XUT.SYS)
DRV - [2009/06/04 02:46:34 | 000,171,032 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CT20XUT.sys -- (CT20XUT)
DRV - [2008/07/08 22:11:34 | 000,022,016 | R--- | M] (Realtek Semiconductor Corporation                           ) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\RtNdPt5x.sys -- (RtNdPt5x)
DRV - [2008/05/26 05:42:06 | 000,017,408 | R--- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTLVLAN.SYS -- (RTLVLAN)
DRV - [2008/04/14 00:15:14 | 000,060,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\USBAUDIO.sys -- (usbaudio) USB Audio Driver (WDM)
DRV - [2008/04/13 22:06:06 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2008/01/23 04:00:44 | 000,025,984 | R--- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTLTEAMING.SYS -- (RTLTEAMING)
DRV - [2007/02/15 16:57:04 | 000,034,760 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ElbyCDFL.sys -- (ElbyCDFL)
DRV - [2006/11/28 21:46:28 | 000,052,800 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\PCASp50.sys -- (PCASp50)
DRV - [2004/08/12 18:56:20 | 000,005,810 | R--- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ASACPI.sys -- (MTsensor)
DRV - [2002/09/09 19:54:06 | 000,016,269 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\ASNDIS5.sys -- (ASNDIS5)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
 
IE - HKCU\..\URLSearchHook: {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll (DeviceVM, Inc.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3
FF - prefs.js..extensions.enabledItems: {9AA46F4F-4DC7-4c06-97AF-5035170634FE}:3.3.7
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.2
FF - prefs.js..extensions.enabledItems: linkfilter@kaspersky.ru:9.0.0.736
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
 
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/12/22 02:12:13 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/12/25 01:36:42 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\{eea12ec4-729d-4703-bc37-106ce9879ce2}: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\THBExt [2010/12/21 21:20:18 | 000,000,000 | ---D | M]
 
[2010/12/22 02:12:21 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Extensions
[2011/01/23 12:15:29 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\p9zfmx38.default\extensions
[2010/12/23 12:12:07 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\p9zfmx38.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011/01/22 22:08:06 | 000,000,000 | ---D | M] (ImTranslator) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\p9zfmx38.default\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}
[2011/01/21 22:50:34 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\p9zfmx38.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2010/12/28 21:22:16 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\p9zfmx38.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2011/01/23 12:15:29 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2010/12/24 02:35:26 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010/12/24 14:21:21 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
[2010/12/22 23:09:15 | 000,000,000 | ---D | M] (Kaspersky URL Advisor) -- C:\Program Files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru
[2010/12/24 02:35:19 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2010/11/12 18:53:06 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
 
O1 HOSTS File: ([2011/01/02 23:34:51 | 000,000,898 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: 127.0.0.1 serial.alcohol-soft.com
O1 - Hosts: 127.0.0.1 www.alcohol-soft.com
O1 - Hosts: 127.0.0.1 images.alcohol-soft.com
O1 - Hosts: 127.0.0.1 trial.alcohol-soft.com
O1 - Hosts: 127.0.0.1 alcohol-soft.com
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll (Kaspersky Lab)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll (Kaspersky Lab)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKCU\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avp] C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe (Kaspersky Lab)
O4 - HKLM..\Run: [BCU] C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe (DeviceVM, Inc.)
O4 - HKCU..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVDtray.exe (SlySoft, Inc.)
O4 - HKCU..\Run: [CTRegRun] C:\WINDOWS\Ctregrun.exe (Creative Technology Ltd )
O4 - HKCU..\Run: [Eraser RiskMonitor] C:\Program Files\East-Tec Eraser 2011\Launch.exe ()
O4 - HKCU..\Run: [gStart] C:\Garmin\gStart.exe (GARMIN Corp.)
O4 - Startup: C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Acrobat Speed Launcher.lnk = C:\WINDOWS\Installer\{AC76BA86-1029-0000-7760-000000000003}\_SC_Acrobat.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Acrobat Synchronizer.lnk = C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Aktywacja Testera.lnk = C:\Program Files\YDP\YdpDict\Watch.exe (Young Digital Poland)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\APC UPS Status.lnk = C:\Program Files\APC\APC PowerChute Personal Edition\Display.exe (American Power Conversion Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm ()
O8 - Extra context menu item: Dołącz do istniejącego pliku PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Konwertuj do Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Konwertuj docelowe łącza do istniejącego pliku PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Konwertuj docelowe łącze do formatu Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Konwertuj miejsce docelowe lacza do Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Konwertuj miejsce docelowe lacza do istniejacego pliku PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Konwertuj wybrane lacza do Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Konwertuj wybrane łącza do formatu Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Konwertuj wybrane łącza do istniejącego pliku PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Konwertuj zaznaczenie do Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Konwertuj zaznaczenie do istniejącego PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Konwertuj zaznaczenie do istniejacego pliku PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: &Virtual keyboard - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll (Kaspersky Lab)
O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: URLs c&heck - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll (Kaspersky Lab)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://go.microsoft.com/fwlink/?linkid=39204 (Windows Genuine Advantage Validation Tool)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} http://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab (Creative Software AutoUpdate Support Package)
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} http://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPID.cab (Creative Software AutoUpdate Support Package)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.1
O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\mzvkbd3.dll (Kaspersky Lab)
O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\kloehk.dll (Kaspersky Lab)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O20 - Winlogon\Notify\klogon: DllName - C:\WINDOWS\system32\klogon.dll - C:\WINDOWS\system32\klogon.dll (Kaspersky Lab)
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/12/21 19:03:41 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011/01/23 21:26:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Desktop\New Folder
[2011/01/23 21:17:07 | 000,000,000 | ---D | C] -- C:\_OTL
[2011/01/23 00:58:26 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2011/01/23 00:48:13 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Desktop\OTL.exe
[2011/01/23 00:45:40 | 000,595,000 | ---- | C] (Duplex Secure Ltd.) -- C:\Documents and Settings\Administrator\Desktop\SPTDinst-v176-x86.exe
[2011/01/22 00:59:22 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Administrator\My Documents\PP_MOTION.TMP
[2011/01/22 00:59:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\CyberLink
[2011/01/22 00:59:15 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Administrator\My Documents\PP_ROTATE_SLIDE.TMP
[2011/01/15 02:26:04 | 000,000,000 | ---D | C] -- C:\WINDOWS\Minidump
[2011/01/14 23:08:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Application Data\XnView
[2011/01/14 23:08:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\XnView
[2011/01/14 23:08:39 | 000,000,000 | ---D | C] -- C:\Program Files\XnView
[2011/01/14 11:31:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Desktop\USUNAC TRWALE3
[2011/01/14 10:52:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Desktop\USUNAC TRWALE2
[2011/01/13 11:42:39 | 000,000,000 | -H-D | C] -- C:\WINDOWS\PIF
[2011/01/05 02:11:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Creative
[2011/01/03 01:13:17 | 000,000,000 | ---D | C] -- C:\Program Files\East-Tec Eraser 2011
[2011/01/02 23:46:00 | 000,000,000 | ---D | C] -- C:\Program Files\Alcohol Soft
[2011/01/02 21:17:25 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\YDP
[2011/01/02 21:17:20 | 000,000,000 | ---D | C] -- C:\Program Files\YDP
[2011/01/02 00:21:01 | 000,000,000 | ---D | C] -- C:\Program Files\YDPDICT
[2011/01/01 23:16:37 | 000,000,000 | ---D | C] -- C:\Program Files\jv16 PowerTools 2010
[2011/01/01 22:24:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Start Menu\Programs\Dietetyk
[2011/01/01 21:08:28 | 000,995,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MSAJT200.DLL
[2011/01/01 21:08:28 | 000,302,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLE2.DLL
[2011/01/01 21:08:28 | 000,298,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\VBAR2.DLL
[2011/01/01 21:08:28 | 000,246,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\ODBCJT16.DLL
[2011/01/01 21:08:28 | 000,177,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\TYPELIB.DLL
[2011/01/01 21:08:28 | 000,164,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLE2DISP.DLL
[2011/01/01 21:08:28 | 000,150,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLE2NLS.DLL
[2011/01/01 21:08:28 | 000,108,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\COMPOBJ.DLL
[2011/01/01 21:08:28 | 000,092,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\ODBCINST.DLL
[2011/01/01 21:08:28 | 000,088,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\ODBCCURS.DLL
[2011/01/01 21:08:28 | 000,064,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\ODBCTL16.DLL
[2011/01/01 21:08:28 | 000,057,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLE2CONV.DLL
[2011/01/01 21:08:28 | 000,056,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\ODBC.DLL
[2011/01/01 21:08:28 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLE2PROX.DLL
[2011/01/01 21:08:28 | 000,041,124 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\VAEN2.OLB
[2011/01/01 21:08:28 | 000,027,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\CTL3DV2.DLL
[2011/01/01 21:08:28 | 000,015,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MSJETINT.DLL
[2011/01/01 21:08:28 | 000,011,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MSJETERR.DLL
[2011/01/01 21:08:28 | 000,010,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MSCPXLT.DLL
[2011/01/01 21:08:28 | 000,006,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\ODBCADM.EXE
[2011/01/01 21:08:28 | 000,001,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\VBAJET.DLL
[2011/01/01 21:08:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\ODBC
[2011/01/01 21:08:18 | 000,322,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MFC250.DLL
[2011/01/01 21:08:18 | 000,146,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MFCOLEUI.DLL
[2011/01/01 21:08:18 | 000,125,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MFCO250.DLL
[2011/01/01 21:06:16 | 000,271,248 | ---- | C] (InstallShield Software Corporation) -- C:\WINDOWS\ISUN16.EXE
[2011/01/01 21:06:16 | 000,026,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\CTL3D.DLL
[2011/01/01 21:06:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\WINDOWS
[2011/01/01 05:12:17 | 000,000,000 | ---D | C] -- C:\Program Files\CueMaker PORTABLE
[2010/12/31 01:57:44 | 000,000,000 | ---D | C] -- C:\Program Files\Dietetyk
[2010/12/31 01:57:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Dietetyk
[2010/12/31 01:57:44 | 000,000,000 | ---D | C] -- C:\Program Files\Borland
[2010/12/30 01:53:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Desktop\English
[2010/12/30 01:24:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Local Settings\Application Data\Help
[2010/12/30 01:24:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Application Data\Help
[2010/12/30 01:03:26 | 000,000,000 | ---D | C] -- C:\Program Files\AudacityPortable
[2010/12/30 00:33:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Local Settings\Application Data\DFX
[2010/12/30 00:30:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\DFX
[2010/12/30 00:30:10 | 000,000,000 | ---D | C] -- C:\Program Files\DFX
[2010/12/30 00:30:10 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DFX
[2010/12/30 00:02:24 | 000,017,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsg.dll
[2010/12/30 00:02:00 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Media Connect 2
[2010/12/30 00:00:37 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\UMDF
[2010/12/30 00:00:37 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\LogFiles
[2010/12/29 23:36:03 | 002,201,224 | ---- | C] (Adobe Systems, Inc.) -- C:\WINDOWS\System32\flash9.ocx
[2010/12/29 23:35:59 | 000,000,000 | ---D | C] -- C:\Program Files\Tajemnice umys³u
[2010/12/29 23:28:01 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Administrator\InstallAnywhere
[2010/12/29 23:02:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Sport
[2010/12/29 13:34:00 | 000,000,000 | ---D | C] -- C:\Program Files\CloneDVD2
[2010/12/29 00:38:15 | 000,000,000 | ---D | C] -- C:\Program Files\Edgard
[2010/12/29 00:33:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Local Settings\Application Data\IsolatedStorage
[2010/12/28 00:27:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Local Settings\Application Data\ZoneFiveSoftware
[2010/12/27 23:59:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Start Menu\Programs\Zone Five Software
[2010/12/27 23:58:48 | 000,000,000 | ---D | C] -- C:\Program Files\SportTracks 2.1
[2010/12/27 23:58:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\ZoneFiveSoftware
[2010/12/27 22:49:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\My Documents\Outlook Files
[2010/12/27 21:33:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\My Documents\OneNote Notebooks
[2010/12/27 21:27:11 | 000,274,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mucltui.dll
[2010/12/27 21:27:11 | 000,016,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mucltui.dll.mui
[2010/12/27 21:25:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Local Settings\Application Data\Canon Easy-PhotoPrint EX
[2010/12/27 21:23:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Canon MP560
[2010/12/27 21:14:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\SharePoint
[2010/12/27 21:14:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Office
[2010/12/27 21:13:46 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Synchronization Services
[2010/12/27 21:13:45 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER
[2010/12/27 21:13:24 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET
[2010/12/27 21:13:24 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Sync Framework
[2010/12/27 21:13:24 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft SQL Server Compact Edition
[2010/12/27 21:13:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Microsoft
[2010/12/27 21:10:44 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Visual Studio 8
[2010/12/27 21:09:17 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Analysis Services
[2010/12/27 21:09:04 | 000,000,000 | ---D | C] -- C:\WINDOWS\SHELLNEW
[2010/12/27 21:08:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft Help
[2010/12/27 21:08:34 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2010/12/27 21:08:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Microsoft Help
[2010/12/27 21:08:13 | 000,000,000 | RH-D | C] -- C:\MSOCache
[2010/12/27 17:09:14 | 001,310,720 | ---- | C] (CANON INC.) -- C:\WINDOWS\System32\CNC560C.dll
[2010/12/27 17:09:14 | 000,303,104 | ---- | C] (CANON INC.) -- C:\WINDOWS\System32\CNC560L.dll
[2010/12/27 17:09:14 | 000,110,592 | ---- | C] (CANON INC.) -- C:\WINDOWS\System32\CNC560I.dll
[2010/12/27 17:09:14 | 000,106,496 | ---- | C] (CANON INC.) -- C:\WINDOWS\System32\CNC560U.dll
[2010/12/27 17:09:14 | 000,015,872 | ---- | C] (CANON INC.) -- C:\WINDOWS\System32\CNHMCA.dll
[2010/12/27 17:09:14 | 000,015,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbscan.sys
[2010/12/27 17:05:19 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\CANON
[2010/12/27 17:04:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\CanonIJSetup000
[2010/12/27 17:01:46 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Application Data\CanonBJ
[2010/12/27 17:01:34 | 000,272,384 | ---- | C] (CANON INC.) -- C:\WINDOWS\System32\CNMLMA0.DLL
[2010/12/27 17:01:27 | 000,000,000 | -H-D | C] -- C:\WINDOWS\System32\CanonIJ Uninstaller Information
[2010/12/27 17:01:21 | 000,090,112 | ---- | C] (Canon Inc.) -- C:\WINDOWS\System32\CNC560O.dll
[2010/12/27 17:01:15 | 000,178,176 | ---- | C] (CANON INC.) -- C:\WINDOWS\System32\CNMIUA0.DLL
[2010/12/27 17:01:00 | 000,000,000 | -H-D | C] -- C:\Program Files\CanonBJ
[2010/12/27 17:00:40 | 000,137,216 | ---- | C] (CANON INC.) -- C:\WINDOWS\System32\CNMNPUI.DLL
[2010/12/27 17:00:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\STRING
[2010/12/27 17:00:39 | 000,353,792 | ---- | C] (CANON INC.) -- C:\WINDOWS\System32\CNMNPPM.DLL
[2010/12/27 17:00:37 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CHM
[2010/12/27 16:59:11 | 000,000,000 | ---D | C] -- C:\Program Files\Canon
[2010/12/27 01:25:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Outlook Express Backups
[2010/12/27 01:24:45 | 000,000,000 | ---D | C] -- C:\Program Files\Outlook Express Backup Restore
[2010/12/26 23:36:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\My Documents\My Backups
[2010/12/26 23:29:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Application Data\Genie-Soft
[2010/12/26 23:27:58 | 000,000,000 | ---D | C] -- C:\Program Files\Outlook Express Backup V6.5
[2010/12/26 23:00:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Desktop\Setup_SportTracks_2.1.3478
[2010/12/26 18:00:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\My Documents\My Garmin
[2010/12/26 18:00:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\GARMIN
[2010/12/26 18:00:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Application Data\GARMIN
[2010/12/26 17:53:06 | 000,000,000 | ---D | C] -- C:\Garmin
[2010/12/26 17:53:01 | 000,000,000 | ---D | C] -- C:\Program Files\DIFX
[2010/12/26 17:53:00 | 000,018,304 | ---- | C] (GARMIN Corp.) -- C:\WINDOWS\System32\drivers\grmngen.sys
[2010/12/26 17:52:59 | 000,000,000 | ---D | C] -- C:\Program Files\Garmin
[2010/12/25 22:44:00 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Administrator\IECompatCache
[2010/12/25 02:45:59 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\CyberLink
[2010/12/25 01:45:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\My Documents\Updater5
[2010/12/25 01:37:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\FLEXnet
[2010/12/25 01:37:25 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Macrovision Shared
[2010/12/25 01:37:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Local Settings\Application Data\Adobe
[2010/12/25 01:35:09 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2010/12/25 01:35:09 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
[2010/12/25 01:35:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Adobe
[2010/12/25 01:15:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Education
[2010/12/25 01:14:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Start Menu\Programs\Education
[2010/12/25 01:10:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Application Data\TypingMaster7
[2010/12/25 01:09:54 | 000,000,000 | ---D | C] -- C:\Program Files\Typing Master Pro 7.0.1.763 PORTABLE
[2010/12/25 00:04:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\My Documents\CyberLink
[2010/12/24 23:58:07 | 000,029,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msxml3a.dll
[2010/12/21 20:35:16 | 000,060,928 | ---- | C] ( ) -- C:\WINDOWS\System32\a3d.dll
[2 C:\Documents and Settings\Administrator\My Documents\*.tmp files -> C:\Documents and Settings\Administrator\My Documents\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2011/01/23 21:28:49 | 000,000,177 | -H-- | M] () -- C:\dvmexp.idx
[2011/01/23 21:20:14 | 000,002,337 | ---- | M] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Acrobat Speed Launcher.lnk
[2011/01/23 21:19:27 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/01/23 21:18:41 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/01/23 21:18:37 | 3757,166,592 | -HS- | M] () -- C:\hiberfil.sys
[2011/01/23 21:17:55 | 000,054,916 | ---- | M] () -- C:\WINDOWS\System32\BMXStateBkp-{00000004-00000000-00000001-00001102-00000005-00311102}.rfx
[2011/01/23 21:17:55 | 000,054,916 | ---- | M] () -- C:\WINDOWS\System32\BMXState-{00000004-00000000-00000001-00001102-00000005-00311102}.rfx
[2011/01/23 21:17:55 | 000,000,788 | ---- | M] () -- C:\WINDOWS\System32\DVCState-{00000004-00000000-00000001-00001102-00000005-00311102}.rfx
[2011/01/23 01:20:32 | 000,296,448 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\57qmo1ox.exe
[2011/01/23 00:48:14 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Desktop\OTL.exe
[2011/01/23 00:45:40 | 000,595,000 | ---- | M] (Duplex Secure Ltd.) -- C:\Documents and Settings\Administrator\Desktop\SPTDinst-v176-x86.exe
[2011/01/23 00:23:40 | 004,159,369 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\ComboFix.exe
[2011/01/17 01:00:17 | 000,000,428 | ---- | M] () -- C:\WINDOWS\tasks\OEB_New Backup Job.job
[2011/01/15 21:15:23 | 000,282,128 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011/01/14 23:09:48 | 000,000,606 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\XnView.lnk
[2011/01/14 23:05:29 | 000,091,648 | ---- | M] () -- C:\Documents and Settings\Administrator\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/01/13 11:14:34 | 000,000,124 | -HS- | M] () -- C:\Documents and Settings\All Users\Application Data\.zreglib
[2011/01/05 02:11:06 | 000,444,952 | ---- | M] (Creative Labs) -- C:\WINDOWS\System32\wrap_oal.dll
[2011/01/05 02:11:06 | 000,109,080 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\WINDOWS\System32\OpenAL32.dll
[2011/01/02 23:46:58 | 000,034,308 | ---- | M] () -- C:\WINDOWS\System32\BASSMOD.dll
[2011/01/02 23:35:22 | 000,000,110 | ---- | M] () -- C:\Documents and Settings\Administrator\My Documents\ax_files.xml
[2011/01/02 21:17:26 | 000,001,544 | ---- | M] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Aktywacja Testera.lnk
[2011/01/02 00:21:30 | 000,000,875 | ---- | M] () -- C:\WINDOWS\ODBC.INI
[2011/01/02 00:21:25 | 000,004,590 | ---- | M] () -- C:\WINDOWS\ODBCINST.INI
[2011/01/02 00:21:25 | 000,000,000 | ---- | M] () -- C:\WINDOWS\odbcddp.ini
[2011/01/01 23:16:54 | 000,000,022 | -HS- | M] () -- C:\Documents and Settings\Administrator\Application Data\Sys6925.Config Collection.sys
[2011/01/01 23:16:54 | 000,000,022 | -HS- | M] () -- C:\WINDOWS\Sys3390 SettingsCollection.bin
[2011/01/01 23:16:39 | 000,001,582 | ---- | M] () -- C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\jv16 PowerTools 2010.lnk
[2011/01/01 22:27:06 | 000,013,030 | ---- | M] () -- C:\PDOXUSRS.NET
[2010/12/31 03:01:23 | 000,001,393 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2010/12/30 00:13:11 | 000,000,800 | ---- | M] () -- C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2010/12/30 00:05:20 | 000,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb
[2010/12/30 00:05:20 | 000,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb
[2010/12/30 00:00:49 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\UMDF\MsftWdf_user_01_00_00.Wdf
[2010/12/29 23:40:01 | 000,001,875 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\Szybkie czytanie.lnk
[2010/12/29 23:38:44 | 000,001,811 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\Postrzeganie.lnk
[2010/12/29 23:36:02 | 000,001,711 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\Pamiêæ.lnk
[2010/12/29 14:43:57 | 000,000,382 | ---- | M] () -- C:\Documents and Settings\Administrator\Application Data\burnaware.ini
[2010/12/29 14:43:52 | 003,276,800 | ---- | M] () -- C:\Documents and Settings\Administrator\Application Data\burnaware.iso
[2010/12/28 21:17:11 | 000,000,933 | ---- | M] () -- C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk
[2010/12/27 22:49:25 | 000,000,790 | ---- | M] () -- C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\Microsoft Outlook.lnk
[2010/12/27 22:48:47 | 000,435,590 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010/12/27 22:48:47 | 000,068,360 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010/12/27 21:31:00 | 001,847,296 | ---- | M] () -- C:\Documents and Settings\Administrator\My Documents\Contacts.accdb
[2010/12/27 17:08:07 | 000,001,685 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Canon MP560 series User Registration.LNK
[2010/12/27 17:05:09 | 000,001,680 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Canon Solution Menu.lnk
[2010/12/27 17:04:55 | 000,001,734 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Canon Easy-PhotoPrint EX.lnk
[2010/12/27 17:04:02 | 000,001,736 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Canon MP Navigator EX 3.0.lnk
[2010/12/27 17:03:26 | 000,001,652 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Canon My Printer.lnk
[2010/12/27 17:03:04 | 000,001,967 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Canon MP560 series On-screen Manual.lnk
[2010/12/27 01:24:45 | 000,000,836 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\Outlook Express Backup Restore.lnk
[2010/12/25 04:00:19 | 000,029,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\msxml3a.dll
[2010/12/25 03:09:43 | 000,000,174 | ---- | M] () -- C:\ASWL2K.ini
[2010/12/25 01:36:42 | 000,001,800 | ---- | M] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Acrobat Synchronizer.lnk
[2 C:\Documents and Settings\Administrator\My Documents\*.tmp files -> C:\Documents and Settings\Administrator\My Documents\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011/01/23 01:20:32 | 000,296,448 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\57qmo1ox.exe
[2011/01/23 00:23:13 | 004,159,369 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\ComboFix.exe
[2011/01/15 21:15:23 | 000,282,128 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011/01/14 23:08:44 | 000,000,606 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\XnView.lnk
[2011/01/02 23:46:58 | 000,034,308 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll
[2011/01/02 21:17:26 | 000,001,544 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Aktywacja Testera.lnk
[2011/01/02 00:21:25 | 000,000,000 | ---- | C] () -- C:\WINDOWS\odbcddp.ini
[2011/01/01 23:16:54 | 000,000,022 | -HS- | C] () -- C:\Documents and Settings\Administrator\Application Data\Sys6925.Config Collection.sys
[2011/01/01 23:16:54 | 000,000,022 | -HS- | C] () -- C:\WINDOWS\Sys3390 SettingsCollection.bin
[2011/01/01 23:16:39 | 000,001,582 | ---- | C] () -- C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\jv16 PowerTools 2010.lnk
[2011/01/01 21:08:28 | 000,157,696 | ---- | C] () -- C:\WINDOWS\System\STORAGE.DLL
[2011/01/01 21:08:28 | 000,027,026 | ---- | C] () -- C:\WINDOWS\System\OLE2.REG
[2011/01/01 21:08:28 | 000,002,320 | ---- | C] () -- C:\WINDOWS\System\12500852.CPX
[2011/01/01 21:08:28 | 000,002,318 | ---- | C] () -- C:\WINDOWS\System\12510866.CPX
[2011/01/01 21:08:28 | 000,002,233 | ---- | C] () -- C:\WINDOWS\System\12520850.CPX
[2011/01/01 21:08:28 | 000,002,173 | ---- | C] () -- C:\WINDOWS\System\12520863.CPX
[2011/01/01 21:08:28 | 000,002,167 | ---- | C] () -- C:\WINDOWS\System\12520860.CPX
[2011/01/01 21:08:28 | 000,002,162 | ---- | C] () -- C:\WINDOWS\System\12520861.CPX
[2011/01/01 21:08:28 | 000,002,151 | ---- | C] () -- C:\WINDOWS\System\12520437.CPX
[2011/01/01 21:08:28 | 000,002,147 | ---- | C] () -- C:\WINDOWS\System\12520865.CPX
[2011/01/01 21:08:28 | 000,000,875 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2010/12/31 01:58:07 | 000,013,030 | ---- | C] () -- C:\PDOXUSRS.NET
[2010/12/30 00:00:49 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\UMDF\MsftWdf_user_01_00_00.Wdf
[2010/12/29 23:40:01 | 000,001,875 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\Szybkie czytanie.lnk
[2010/12/29 23:38:44 | 000,001,811 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\Postrzeganie.lnk
[2010/12/29 23:36:01 | 000,001,711 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\Pamiêæ.lnk
[2010/12/29 14:41:39 | 003,276,800 | ---- | C] () -- C:\Documents and Settings\Administrator\Application Data\burnaware.iso
[2010/12/27 22:49:25 | 000,000,790 | ---- | C] () -- C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\Microsoft Outlook.lnk
[2010/12/27 21:33:04 | 000,000,933 | ---- | C] () -- C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk
[2010/12/27 21:28:48 | 001,847,296 | ---- | C] () -- C:\Documents and Settings\Administrator\My Documents\Contacts.accdb
[2010/12/27 17:09:14 | 000,012,800 | ---- | C] () -- C:\WINDOWS\System32\CNC173ED.TBL
[2010/12/27 17:08:07 | 000,001,685 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Canon MP560 series User Registration.LNK
[2010/12/27 17:05:09 | 000,001,680 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Canon Solution Menu.lnk
[2010/12/27 17:04:55 | 000,001,734 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Canon Easy-PhotoPrint EX.lnk
[2010/12/27 17:04:02 | 000,001,736 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Canon MP Navigator EX 3.0.lnk
[2010/12/27 17:03:26 | 000,001,652 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Canon My Printer.lnk
[2010/12/27 17:03:04 | 000,001,967 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Canon MP560 series On-screen Manual.lnk
[2010/12/27 02:42:23 | 000,000,428 | ---- | C] () -- C:\WINDOWS\tasks\OEB_New Backup Job.job
[2010/12/27 01:24:45 | 000,000,836 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\Outlook Express Backup Restore.lnk
[2010/12/25 01:36:42 | 000,002,337 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Acrobat Speed Launcher.lnk
[2010/12/25 01:36:42 | 000,001,800 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Acrobat Synchronizer.lnk
[2010/12/24 00:29:36 | 000,000,382 | ---- | C] () -- C:\Documents and Settings\Administrator\Application Data\burnaware.ini
[2010/12/23 12:30:44 | 000,000,124 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\.zreglib
[2010/12/23 00:17:55 | 000,000,152 | ---- | C] () -- C:\WINDOWS\CoolPlay.ini
[2010/12/22 23:44:43 | 000,091,648 | ---- | C] () -- C:\Documents and Settings\Administrator\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/12/22 23:15:36 | 000,000,000 | ---- | C] () -- C:\WINDOWS\lgfwup.ini
[2010/12/21 20:35:24 | 000,000,285 | ---- | C] () -- C:\WINDOWS\System32\kill.ini
[2010/12/21 20:35:14 | 000,002,560 | ---- | C] () -- C:\WINDOWS\System32\CtxfiRes.dll
[2010/12/21 19:34:03 | 000,011,448 | R--- | C] () -- C:\WINDOWS\System32\drivers\AsUpIO.sys
[2010/12/21 19:25:03 | 000,024,576 | R--- | C] () -- C:\WINDOWS\System32\AsIO.dll
[2010/12/21 19:25:03 | 000,011,296 | R--- | C] () -- C:\WINDOWS\System32\drivers\AsIO.sys
[2010/12/21 19:25:01 | 000,011,832 | ---- | C] () -- C:\WINDOWS\System32\drivers\AsInsHelp64.sys
[2010/12/21 19:25:01 | 000,010,216 | ---- | C] () -- C:\WINDOWS\System32\drivers\AsInsHelp32.sys
[2010/12/21 19:23:09 | 000,073,728 | R--- | C] () -- C:\WINDOWS\System32\RtNicProp32.dll
[2010/12/21 19:19:53 | 000,005,810 | R--- | C] () -- C:\WINDOWS\System32\drivers\ASACPI.sys
[2010/12/21 19:19:50 | 000,001,769 | ---- | C] () -- C:\WINDOWS\Language_trs.ini
[2010/12/21 19:19:46 | 000,024,889 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini
[2010/12/21 19:19:46 | 000,010,296 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2010/12/21 10:54:47 | 000,004,590 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2009/06/04 01:37:08 | 000,021,093 | ---- | C] () -- C:\WINDOWS\System32\instwdm.ini
[2009/06/04 01:37:06 | 000,000,054 | ---- | C] () -- C:\WINDOWS\System32\ctzapxx.ini
[2009/06/04 00:55:20 | 000,002,560 | ---- | C] () -- C:\WINDOWS\CTXFIRES.DLL
[2008/12/01 18:32:32 | 000,362,029 | ---- | C] () -- C:\WINDOWS\System32\sqlite3.dll
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2011/01/03 01:14:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\EAST Technologies
[2010/12/26 18:00:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\GARMIN
[2010/12/26 23:29:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Genie-Soft
[2010/12/24 03:17:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Mp3tag
[2010/12/25 01:10:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\TypingMaster7
[2011/01/14 23:26:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\XnView
[2010/12/21 19:29:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ASUS OC Profiles
[2010/12/27 17:01:46 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\CanonBJ
[2010/12/27 17:04:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\CanonIJSetup000
[2010/12/30 00:30:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DFX
[2010/12/26 18:00:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\GARMIN
[2010/12/21 23:05:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\LightScribe
[2010/12/23 12:30:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SlySoft
[2011/01/23 21:33:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Temp
[2010/12/27 23:58:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ZoneFiveSoftware
[2011/01/17 01:00:17 | 000,000,428 | ---- | M] () -- C:\WINDOWS\Tasks\OEB_New Backup Job.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 184 bytes -> C:\Documents and Settings\All Users\Application Data\Temp:C97C8631

< End of report >