OTL logfile created on: 2011-02-09 21:20:55 - Run 5
OTL by OldTimer - Version 3.2.20.6     Folder = C:\Documents and Settings\user\Pulpit\Nowy folder
Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 74,00% Memory free
5,00 Gb Paging File | 4,00 Gb Available in Paging File | 88,00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 50,78 Gb Total Space | 1,20 Gb Free Space | 2,37% Space Free | Partition Type: NTFS
Drive D: | 78,31 Gb Total Space | 11,09 Gb Free Space | 14,16% Space Free | Partition Type: NTFS
Drive F: | 336,67 Gb Total Space | 12,92 Gb Free Space | 3,84% Space Free | Partition Type: NTFS
 
Computer Name: SNIFF210 | User Name: user | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2011-02-09 21:11:59 | 000,017,408 | ---- | M] () -- C:\WINDOWS\system32\rpcnetp.exe
PRC - [2011-02-08 22:21:33 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\user\Pulpit\Nowy folder\OTL_3.2.20.6(dobreprogramy.pl).exe
PRC - [2010-12-16 20:31:19 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2010-05-04 12:07:22 | 000,503,080 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Update\NASvc.exe
PRC - [2010-03-22 09:17:22 | 000,191,080 | ---- | M] (NVIDIA) -- C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
PRC - [2010-03-22 09:17:20 | 000,133,736 | ---- | M] (NVIDIA) -- C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe
PRC - [2009-11-06 13:24:52 | 000,195,176 | ---- | M] (NVIDIA) -- C:\Program Files\NVIDIA Corporation\System Update\UpdateCenterService.exe
PRC - [2009-08-26 08:07:05 | 000,072,704 | ---- | M] (Autodata Limited) -- C:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe
PRC - [2009-05-21 14:28:38 | 000,874,768 | ---- | M] (Intel(R) Corporation) -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe
PRC - [2009-05-21 13:49:36 | 001,372,160 | ---- | M] (Intel(R) Corporation) -- C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe
PRC - [2009-05-21 13:23:04 | 000,909,312 | ---- | M] (Intel(R) Corporation) -- C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
PRC - [2009-05-21 13:04:14 | 000,473,360 | ---- | M] (Intel(R) Corporation) -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
PRC - [2009-03-05 16:07:20 | 002,260,480 | ---- | M] (Safer-Networking Ltd.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
PRC - [2009-02-06 14:23:36 | 000,727,720 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe
PRC - [2009-02-06 14:23:12 | 002,021,400 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\egui.exe
PRC - [2008-11-22 14:12:34 | 001,333,016 | ---- | M] (Diskeeper Corporation) -- C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
PRC - [2008-08-18 10:27:32 | 000,117,304 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Hotkey\MsgTranAgt.exe
PRC - [2008-08-18 09:56:22 | 000,098,304 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
PRC - [2008-05-08 00:29:38 | 000,122,880 | ---- | M] (CrypKey (Canada) Ltd.) -- C:\WINDOWS\system32\Crypserv.exe
PRC - [2008-04-15 13:00:00 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2008-01-29 14:11:56 | 001,440,384 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
PRC - [2008-01-29 14:11:56 | 000,576,104 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
PRC - [2007-11-13 09:17:14 | 000,851,968 | ---- | M] (ATK) -- C:\Program Files\ASUS\Splendid\ACMON.exe
PRC - [2007-08-07 23:08:40 | 000,094,208 | ---- | M] () -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe
PRC - [2007-07-24 11:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) -- C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
PRC - [2006-11-02 07:27:32 | 000,061,440 | ---- | M] (ASUSTeK Computer INC.) -- C:\Program Files\ASUS\ATK Media\DMedia.exe
PRC - [2006-10-14 17:37:40 | 000,110,592 | R--- | M] () -- C:\WINDOWS\ATK0100\HControl.exe
PRC - [2006-08-10 22:08:04 | 002,379,776 | R--- | M] () -- C:\WINDOWS\ATK0100\ATKOSD.exe
PRC - [2006-08-04 11:35:54 | 000,217,088 | ---- | M] (VMware, Inc.) -- C:\Program Files\VMware\VMware Workstation\vmware-authd.exe
PRC - [2006-08-04 11:35:52 | 000,135,168 | ---- | M] (VMware, Inc.) -- C:\WINDOWS\system32\vmnat.exe
PRC - [2006-08-04 11:35:52 | 000,106,496 | ---- | M] (VMware, Inc.) -- C:\WINDOWS\system32\vmnetdhcp.exe
PRC - [2006-08-04 11:28:58 | 000,262,144 | ---- | M] (VMware, Inc.) -- C:\Program Files\Common Files\VMware\VMware Virtual Image Editing\vmount2.exe
PRC - [2005-07-06 14:43:42 | 000,155,648 | ---- | M] (ASUSTeK) -- C:\WINDOWS\system32\ACEngSvr.exe
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - [2011-02-08 22:21:33 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\user\Pulpit\Nowy folder\OTL_3.2.20.6(dobreprogramy.pl).exe
MOD - [2010-08-23 17:12:53 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
MOD - [2008-01-29 14:05:22 | 000,073,728 | ---- | M] (Broadcom Corporation.) -- C:\WINDOWS\system32\BtMmHook.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [On_Demand | Stopped] --  -- (AppMgmt)
SRV - [2011-02-09 21:12:35 | 000,017,408 | ---- | M] () [Unknown | Running] -- C:\WINDOWS\System32\rpcnetp.dll -- (rpcnetp)
SRV - [2010-05-04 12:07:22 | 000,503,080 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files\Nero\Update\NASvc.exe -- (NAUpdate)
SRV - [2010-03-22 09:17:22 | 000,191,080 | ---- | M] (NVIDIA) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe -- (nTuneService)
SRV - [2009-11-06 13:24:52 | 000,195,176 | ---- | M] (NVIDIA) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\System Update\UpdateCenterService.exe -- (UpdateCenterService)
SRV - [2009-08-26 08:07:05 | 000,072,704 | ---- | M] (Autodata Limited) [Auto | Running] -- C:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe -- (Autodata Limited License Service)
SRV - [2009-07-11 13:33:15 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2009-05-21 14:28:38 | 000,874,768 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng) Intel(R)
SRV - [2009-05-21 13:23:04 | 000,909,312 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\S24EvMon.exe -- (S24EventMonitor) Intel(R)
SRV - [2009-05-21 13:04:14 | 000,473,360 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc) Intel(R)
SRV - [2009-03-20 14:56:57 | 000,357,182 | ---- | M] () [Auto | Stopped] -- C:\WINDOWS\reset.exe -- (.EsetTrialReset)
SRV - [2009-02-06 14:27:06 | 000,020,680 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe -- (EhttpSrv)
SRV - [2009-02-06 14:23:36 | 000,727,720 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe -- (ekrn)
SRV - [2008-11-22 14:12:34 | 001,333,016 | ---- | M] (Diskeeper Corporation) [Auto | Running] -- C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe -- (Diskeeper)
SRV - [2008-05-08 00:29:38 | 000,122,880 | ---- | M] (CrypKey (Canada) Ltd.) [Auto | Running] -- C:\WINDOWS\System32\Crypserv.exe -- (Crypkey License)
SRV - [2007-08-07 23:08:40 | 000,094,208 | ---- | M] () [Auto | Running] -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv)
SRV - [2007-07-24 11:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) [Auto | Running] -- C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2)
SRV - [2006-08-04 11:35:54 | 000,217,088 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Program Files\VMware\VMware Workstation\vmware-authd.exe -- (VMAuthdService)
SRV - [2006-08-04 11:35:52 | 000,135,168 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\WINDOWS\system32\vmnat.exe -- (VMware NAT Service)
SRV - [2006-08-04 11:35:52 | 000,106,496 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\WINDOWS\system32\vmnetdhcp.exe -- (VMnetDHCP)
SRV - [2006-08-04 11:28:58 | 000,262,144 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Program Files\Common Files\VMware\VMware Virtual Image Editing\vmount2.exe -- (vmount2)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2010-10-16 19:55:00 | 009,623,680 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2010-09-07 21:08:58 | 000,100,712 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvhda32.sys -- (NVHDA)
DRV - [2009-12-23 13:11:56 | 000,004,032 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\hostnt.sys -- (HOSTNT)
DRV - [2009-12-23 13:11:49 | 000,033,824 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\oreans32.sys -- (oreans32)
DRV - [2009-07-09 10:46:25 | 000,223,128 | ---- | M] (DT Soft Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\Drivers\dtscsi.sys -- (dtscsi)
DRV - [2009-05-28 22:23:24 | 004,203,392 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NETw5x32.sys -- (NETw5x32) Intel(R)
DRV - [2009-02-17 13:19:00 | 000,057,672 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ftdibus.sys -- (FTDIBUS)
DRV - [2009-02-17 13:17:00 | 000,072,520 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ftser2k.sys -- (FTSER2K)
DRV - [2009-02-06 14:24:22 | 000,056,280 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\epfwtdi.sys -- (epfwtdi)
DRV - [2009-02-06 14:24:22 | 000,033,096 | ---- | M] (ESET) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\epfwndis.sys -- (Epfwndis)
DRV - [2009-02-06 14:24:18 | 000,130,952 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\epfw.sys -- (epfw)
DRV - [2009-02-06 14:23:18 | 000,106,208 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\ehdrv.sys -- (ehdrv)
DRV - [2009-02-06 14:19:52 | 000,113,448 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\eamon.sys -- (eamon)
DRV - [2008-11-23 10:23:06 | 000,097,792 | ---- | M] (T0r0 2008) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\NSHE.SYS -- (NSHE)
DRV - [2008-08-22 21:14:45 | 000,021,638 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\ckldrv.sys -- (NetworkX)
DRV - [2008-08-13 16:23:56 | 000,011,904 | ---- | M] (Intel Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\s24trans.sys -- (s24trans)
DRV - [2008-07-31 19:45:42 | 000,020,616 | ---- | M] (IVT Corporation.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\BtHidBus.sys -- (BtHidBus)
DRV - [2008-07-15 09:25:32 | 000,103,936 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ZTEusbser6k.sys -- (ZTEusbser6k)
DRV - [2008-07-15 09:25:30 | 000,103,936 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ZTEusbnmea.sys -- (ZTEusbnmea)
DRV - [2008-07-15 09:25:30 | 000,103,936 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ZTEusbmdm6k.sys -- (ZTEusbmdm6k)
DRV - [2008-07-02 13:58:48 | 000,026,248 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\IvtBtBus.sys -- (IvtBtBUs)
DRV - [2008-06-27 12:19:00 | 004,707,328 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2008-06-03 14:36:50 | 000,009,216 | ---- | M] (REALiX(tm)) [Kernel | Auto | Running] -- C:\Program Files\HWiNFO32\HWiNFO32.SYS -- (HWiNFO32)
DRV - [2008-04-15 13:00:00 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2008-04-15 13:00:00 | 000,040,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmnt.sys -- (nm)
DRV - [2008-04-01 08:13:58 | 001,807,744 | R--- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\snp2uvc.sys -- (SNP2UVC) USB2.0 PC Camera (SNP2UVC)
DRV - [2007-12-10 20:21:00 | 000,539,640 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btaudio.sys -- (btaudio)
DRV - [2007-12-06 11:12:48 | 000,196,400 | R--- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SynTP.sys -- (SynTP)
DRV - [2007-11-27 23:40:00 | 000,074,688 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB)
DRV - [2007-11-21 18:51:00 | 000,879,624 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL)
DRV - [2007-10-03 20:31:40 | 000,102,656 | R--- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2007-08-24 19:46:48 | 000,005,760 | R--- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ATKACPI.sys -- (MTsensor)
DRV - [2007-07-24 10:09:04 | 000,013,880 | ---- | M] () [Kernel | Auto | Running] -- C:\Program Files\ATKGFNEX\ASMMAP.sys -- (ASMMAP)
DRV - [2007-06-29 19:38:00 | 000,156,392 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btwdndis.sys -- (BTWDNDIS)
DRV - [2007-04-17 20:09:28 | 000,011,032 | ---- | M] (InterVideo) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\regi.sys -- (regi)
DRV - [2007-03-31 20:02:00 | 000,055,352 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwhid.sys -- (btwhid)
DRV - [2007-03-23 17:50:00 | 000,037,424 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btport.sys -- (BTDriver)
DRV - [2007-03-23 17:50:00 | 000,037,280 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwmodem.sys -- (btwmodem)
DRV - [2006-11-22 09:01:48 | 000,693,760 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\hardlock.sys -- (Hardlock)
DRV - [2006-08-04 11:35:56 | 000,023,296 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\vmnetbridge.sys -- (VMnetBridge)
DRV - [2006-08-04 11:35:56 | 000,015,616 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\vmnetuserif.sys -- (VMnetuserif)
DRV - [2006-08-04 11:35:56 | 000,009,600 | R--- | M] (VMware, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\vmnetadapter.sys -- (VMnetAdapter)
DRV - [2006-08-04 11:35:54 | 000,022,016 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\hcmon.sys -- (hcmon)
DRV - [2006-08-04 11:35:52 | 000,094,848 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\vmx86.sys -- (vmx86)
DRV - [2006-08-04 11:28:58 | 000,011,520 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Program Files\Common Files\VMware\VMware Virtual Image Editing\vstor2.sys -- (vstor2)
DRV - [2005-07-14 17:58:14 | 000,028,544 | ---- | M] (REDC) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2005-07-14 16:28:38 | 000,307,968 | ---- | M] (REDC) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rixdptsk.sys -- (rismxdp)
DRV - [2005-07-12 18:00:30 | 000,051,328 | ---- | M] (REDC) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2004-06-28 11:08:56 | 000,042,752 | R--- | M] (Prolific Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ser2pl.sys -- (Ser2pl)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = 
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-796845957-57989841-1801674531-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.onet.pl/
IE - HKU\S-1-5-21-796845957-57989841-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-796845957-57989841-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.selectedEngine: ""
FF - prefs.js..browser.search.useDBForOrder: ""
FF - prefs.js..browser.startup.homepage: ""
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3
FF - prefs.js..network.proxy.backup.ftp: "127.0.0.1"
FF - prefs.js..network.proxy.backup.ftp_port: 9666
FF - prefs.js..network.proxy.backup.gopher: "127.0.0.1"
FF - prefs.js..network.proxy.backup.gopher_port: 9666
FF - prefs.js..network.proxy.backup.socks: "127.0.0.1"
FF - prefs.js..network.proxy.backup.socks_port: 9666
FF - prefs.js..network.proxy.backup.ssl: "127.0.0.1"
FF - prefs.js..network.proxy.backup.ssl_port: 9666
FF - prefs.js..network.proxy.ftp: "127.0.0.1"
FF - prefs.js..network.proxy.ftp_port: 9666
FF - prefs.js..network.proxy.gopher: "127.0.0.1"
FF - prefs.js..network.proxy.gopher_port: 9666
FF - prefs.js..network.proxy.http: "127.0.0.1"
FF - prefs.js..network.proxy.http_port: 9666
FF - prefs.js..network.proxy.share_proxy_settings: true
FF - prefs.js..network.proxy.socks: "127.0.0.1"
FF - prefs.js..network.proxy.socks_port: 9666
FF - prefs.js..network.proxy.ssl: "127.0.0.1"
FF - prefs.js..network.proxy.ssl_port: 9666
FF - prefs.js..network.proxy.type: 0
 
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-01-04 16:49:38 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-01-04 16:49:38 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2009-11-12 19:39:44 | 000,000,000 | ---D | M]
 
[2009-07-09 10:43:56 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\user\Dane aplikacji\Mozilla\Extensions
[2011-02-09 21:16:32 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\user\Dane aplikacji\Mozilla\Firefox\Profiles\luv182mo.default\extensions
[2011-02-08 22:09:05 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\user\Dane aplikacji\Mozilla\Firefox\Profiles\luv182mo.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2011-02-09 18:26:30 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2009-07-09 11:48:41 | 000,000,000 | ---D | M] (BlueSoleil Extension) -- C:\Program Files\Mozilla Firefox\extensions\{231D7D17-4F1B-4933-AB61-E502DB82FD11}
[2010-04-24 08:25:50 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010-09-27 12:31:24 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010-12-27 14:31:04 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
[2009-07-09 13:28:54 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2010-08-24 10:31:30 | 000,773,120 | ---- | M] (BitComet) -- C:\Program Files\Mozilla Firefox\plugins\npBitCometAgent.dll
[2010-11-12 18:53:06 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2010-12-09 11:47:06 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npwachk.dll
[2010-03-16 20:50:20 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml
[2010-03-16 20:50:20 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml
[2010-03-16 20:50:20 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml
[2010-03-16 20:50:20 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml
[2010-03-16 20:50:20 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml
[2010-03-16 20:50:20 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2011-02-09 16:46:18 | 000,000,021 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O4 - HKLM..\Run: [ACMON] C:\Program Files\ASUS\Splendid\ACMON.exe (ATK)
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [ATKHOTKEY] C:\Program Files\ASUS\ATK Hotkey\HControl.exe (ASUS)
O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMedia.exe (ASUSTeK Computer INC.)
O4 - HKLM..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe ()
O4 - HKLM..\Run: [HControlUser] C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe (ASUS)
O4 - HKLM..\Run: [IntelZeroConfig] C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe (Intel(R) Corporation)
O4 - HKLM..\Run: [MsgTranAgt] C:\Program Files\ASUS\ATK Hotkey\MsgTranAgt.exe (ASUS)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKU\S-1-5-21-796845957-57989841-1801674531-1004..\Run: [eset] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
O4 - HKU\S-1-5-21-796845957-57989841-1801674531-1004..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\BTTray.lnk = C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\control panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\control panel present
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\restrictions present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\control panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\restrictions present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\control panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\restrictions present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\control panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\restrictions present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-796845957-57989841-1801674531-1004\Software\Policies\Microsoft\Internet Explorer\control panel present
O7 - HKU\S-1-5-21-796845957-57989841-1801674531-1004\Software\Policies\Microsoft\Internet Explorer\restrictions present
O7 - HKU\S-1-5-21-796845957-57989841-1801674531-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O7 - HKU\S-1-5-21-796845957-57989841-1801674531-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-796845957-57989841-1801674531-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutorunSetting = 1
O8 - Extra context menu item: Wyślij do interfejsu Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O8 - Extra context menu item: Wyślij do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Computer, Inc.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} Reg Error: Value error. (Reg Error: Key error.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\user\Dane aplikacji\ACD Systems\ACDSee\Tapeta ACD.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\user\Dane aplikacji\ACD Systems\ACDSee\Tapeta ACD.bmp
O32 - HKLM CDRom: AutoRun - 0
O32 - AutoRun File - [2009-06-08 20:56:44 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2010-04-19 19:26:54 | 000,015,629 | ---- | M] () - C:\AutoMapaSetupLog.txt -- [ NTFS ]
O33 - MountPoints2\{d6d737d9-1bd0-11e0-ba54-00261821fcb4}\Shell\ArcaVirMenu\command - "" = I:\ArcaVir2009USBMenu.exe
O33 - MountPoints2\{d6d737d9-1bd0-11e0-ba54-00261821fcb4}\Shell\AutoRun\command - "" = I:\ArcaVir2009USBMenu.exe
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011-02-09 21:10:08 | 000,000,000 | ---D | C] -- C:\_OTL
[2011-02-09 20:09:18 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\user\Recent
[2011-02-09 18:34:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Pulpit\Nowy folder
[2011-02-09 17:18:32 | 000,000,000 | ---D | C] -- C:\Program Files\STOPzilla!
[2011-02-09 16:39:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\STOPzilla!
[2011-02-09 14:13:08 | 000,595,000 | ---- | C] (Duplex Secure Ltd.) -- C:\Documents and Settings\user\Pulpit\SPTDinst-v176-x86.exe
[2011-02-08 22:39:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Tools
[2011-02-08 22:09:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Pulpit\Downloads
[2011-02-08 22:09:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Spybot - Search & Destroy
[2011-02-08 22:09:06 | 000,000,000 | ---D | C] -- C:\_OTL(2)
[2011-02-08 22:08:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Dane aplikacji\DivX
[2011-02-08 21:32:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Dane aplikacji\GetRightToGo
[2011-02-08 20:18:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Dane aplikacji\Malwarebytes
[2011-02-08 20:18:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes
[2011-02-08 19:59:31 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2011-02-08 17:37:04 | 000,000,000 | ---D | C] -- C:\Program Files\Pity Format 2010
[2011-02-06 11:22:19 | 000,019,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsg.dll
[2011-02-06 10:03:14 | 000,000,000 | ---D | C] -- C:\Program Files\Act-3D
[2011-02-06 09:50:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Pulpit\twingos_new_igo8_v2_fixed
[2011-02-05 19:23:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data
[2011-02-05 19:19:36 | 000,000,000 | ---D | C] -- C:\Program Files\MSECache
[2011-02-05 19:19:26 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\umdf
[2011-02-05 13:59:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\FinalWire
[2011-02-05 13:58:54 | 000,000,000 | ---D | C] -- C:\Program Files\FinalWire
[2011-01-26 16:20:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\user\Pulpit\Pen
[2011-01-25 15:43:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Apple
[2011-01-20 21:39:55 | 000,000,000 | ---D | C] -- C:\WINDOWS\XSxS
[2011-01-20 21:39:55 | 000,000,000 | ---D | C] -- C:\Program Files\Xenocode
[2011-01-19 21:24:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\SIW
[2011-01-19 21:24:11 | 000,000,000 | ---D | C] -- C:\Program Files\SIW
[2011-01-18 19:39:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\EA Sports
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2011-02-09 21:15:02 | 000,001,032 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011-02-09 21:15:02 | 000,001,028 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011-02-09 21:12:35 | 000,017,408 | ---- | M] () -- C:\WINDOWS\System32\rpcnetp.dll
[2011-02-09 21:12:21 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011-02-09 21:11:59 | 000,017,408 | ---- | M] () -- C:\WINDOWS\System32\rpcnetp.exe
[2011-02-09 20:57:00 | 000,001,128 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-796845957-57989841-1801674531-1004UA.job
[2011-02-09 20:14:44 | 000,044,544 | ---- | M] (Absolute Software Corp.) -- C:\WINDOWS\System32\agremove.exe
[2011-02-09 20:12:04 | 001,558,744 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011-02-09 20:08:36 | 000,001,355 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2011-02-09 19:57:29 | 000,001,008 | ---- | M] () -- C:\WINDOWS\System32\drivers\kgpcpy.cfg
[2011-02-09 18:03:11 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2011-02-09 17:57:20 | 000,000,156 | ---- | M] () -- C:\Documents and Settings\user\Moje dokumenty\MyPlaylist_003.cplist
[2011-02-09 17:56:20 | 000,002,828 | -HS- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\KGyGaAvL.sys
[2011-02-09 16:46:18 | 000,000,021 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2011-02-09 15:23:28 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011-02-09 14:13:08 | 000,595,000 | ---- | M] (Duplex Secure Ltd.) -- C:\Documents and Settings\user\Pulpit\SPTDinst-v176-x86.exe
[2011-02-09 09:17:35 | 000,000,078 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\PITY2010NG.index
[2011-02-09 09:14:51 | 000,000,720 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\Nowy .PITY2010NG
[2011-02-09 09:05:08 | 000,001,671 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\PITy 2010.lnk
[2011-02-09 08:09:17 | 000,002,267 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\Skype.lnk
[2011-02-08 21:21:15 | 000,000,933 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\Spybot - Search & Destroy.lnk
[2011-02-08 16:42:12 | 000,050,688 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\Odpowiedź na pozew .doc
[2011-02-08 16:16:47 | 000,173,568 | ---- | M] () -- C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-02-08 15:43:00 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2011-02-08 15:28:48 | 000,000,156 | ---- | M] () -- C:\Documents and Settings\user\Moje dokumenty\MyPlaylist_002.cplist
[2011-02-07 12:57:00 | 000,001,076 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-796845957-57989841-1801674531-1004Core.job
[2011-02-06 09:57:41 | 000,002,295 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\Google Chrome.lnk
[2011-02-05 13:59:05 | 000,000,798 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\AIDA64 Extreme Edition.lnk
[2011-02-04 17:18:41 | 000,000,828 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\Navigator 10 - Setup Utility.lnk
[2011-02-01 20:13:30 | 000,002,571 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\ACDSee Photo Manager 12.lnk
[2011-01-21 15:44:11 | 008,491,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shell32.dll
[2011-01-21 15:44:11 | 000,440,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shimgvw.dll
[2011-01-19 21:24:50 | 000,000,610 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\SIW.lnk
[2011-01-18 19:49:51 | 000,001,773 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\FIFA 11.lnk
[2011-01-14 19:50:30 | 000,003,964 | ---- | M] () -- C:\WINDOWS\VPlayer.INI
[2011-01-14 19:50:29 | 000,000,146 | ---- | M] () -- C:\WINDOWS\VplayerINI.vpl
[2011-01-13 21:05:26 | 019,786,733 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\Kaseta relaksacyjna  strona A.mp3
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011-02-09 21:12:35 | 000,017,408 | ---- | C] () -- C:\WINDOWS\System32\rpcnetp.dll
[2011-02-09 21:11:59 | 000,017,408 | ---- | C] () -- C:\WINDOWS\System32\rpcnetp.exe
[2011-02-09 20:08:16 | 000,001,355 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2011-02-09 19:57:19 | 000,001,008 | ---- | C] () -- C:\WINDOWS\System32\drivers\kgpcpy.cfg
[2011-02-09 17:57:20 | 000,000,156 | ---- | C] () -- C:\Documents and Settings\user\Moje dokumenty\MyPlaylist_003.cplist
[2011-02-09 12:02:19 | 000,296,448 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\gmer.exe
[2011-02-09 09:14:51 | 000,000,720 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\Nowy .PITY2010NG
[2011-02-09 09:14:51 | 000,000,078 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\PITY2010NG.index
[2011-02-09 09:05:08 | 000,001,671 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\PITy 2010.lnk
[2011-02-08 21:21:15 | 000,000,933 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\Spybot - Search & Destroy.lnk
[2011-02-08 16:42:11 | 000,050,688 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\Odpowiedź na pozew .doc
[2011-02-08 15:28:48 | 000,000,156 | ---- | C] () -- C:\Documents and Settings\user\Moje dokumenty\MyPlaylist_002.cplist
[2011-02-05 19:23:14 | 000,002,305 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Microsoft AutoRoute 2010.lnk
[2011-02-05 13:59:05 | 000,000,798 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\AIDA64 Extreme Edition.lnk
[2011-01-25 17:45:48 | 019,786,733 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\Kaseta relaksacyjna  strona A.mp3
[2011-01-19 21:24:50 | 000,000,610 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\SIW.lnk
[2011-01-18 19:49:51 | 000,001,773 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\FIFA 11.lnk
[2010-12-29 22:42:35 | 000,000,008 | RHS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\2191FABBEE.sys
[2010-12-29 22:42:34 | 000,002,828 | -HS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\KGyGaAvL.sys
[2010-12-23 13:05:57 | 000,404,960 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat
[2010-12-23 09:40:24 | 000,000,069 | ---- | C] () -- C:\WINDOWS\winamp.ini
[2010-11-07 20:10:53 | 000,000,422 | ---- | C] () -- C:\WINDOWS\CDPLAYER.INI
[2010-08-08 19:44:14 | 002,041,363 | ---- | C] () -- C:\WINDOWS\System32\x264vfw.dll
[2010-08-08 19:39:35 | 000,003,964 | ---- | C] () -- C:\WINDOWS\VPlayer.INI
[2010-08-08 19:37:17 | 000,164,352 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2010-08-08 19:37:16 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2010-08-08 19:37:03 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2010-05-06 13:09:25 | 000,153,088 | ---- | C] () -- C:\WINDOWS\System32\unrar_mpfc.dll
[2009-12-23 13:11:56 | 000,004,032 | ---- | C] () -- C:\WINDOWS\System32\drivers\hostnt.sys
[2009-12-23 13:11:49 | 000,033,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\oreans32.sys
[2009-12-17 12:15:11 | 000,162,304 | ---- | C] () -- C:\WINDOWS\System32\ztvunrar36.dll
[2009-12-17 12:15:11 | 000,153,088 | ---- | C] () -- C:\WINDOWS\System32\UNRAR3.dll
[2009-12-17 12:15:11 | 000,077,312 | ---- | C] () -- C:\WINDOWS\System32\ztvunace26.dll
[2009-12-17 12:15:11 | 000,075,264 | ---- | C] () -- C:\WINDOWS\System32\unacev2.dll
[2009-10-13 20:53:54 | 000,000,073 | ---- | C] () -- C:\WINDOWS\ETKINST.INI
[2009-10-02 16:06:06 | 000,000,203 | ---- | C] () -- C:\WINDOWS\Crypkey.ini
[2009-10-02 16:06:02 | 000,021,638 | ---- | C] () -- C:\WINDOWS\System32\Ckldrv.sys
[2009-10-02 16:06:02 | 000,018,432 | ---- | C] () -- C:\WINDOWS\Setup_ck.dll
[2009-08-28 14:10:05 | 000,000,000 | ---- | C] () -- C:\WINDOWS\winpm.INI
[2009-08-28 14:04:59 | 003,870,720 | ---- | C] () -- C:\WINDOWS\System32\qt-mt323.dll
[2009-07-27 19:43:02 | 000,120,200 | ---- | C] () -- C:\WINDOWS\System32\DLLDEV32i.dll
[2009-07-27 19:42:24 | 000,006,211 | ---- | C] () -- C:\WINDOWS\mgxoschk.ini
[2009-07-17 13:24:09 | 000,000,023 | ---- | C] () -- C:\WINDOWS\DownloadStudio.INI
[2009-07-17 13:21:56 | 000,000,033 | ---- | C] () -- C:\WINDOWS\DownloadStudioScheduleMonitor.INI
[2009-07-14 15:37:11 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2009-07-09 13:57:30 | 000,173,568 | ---- | C] () -- C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009-07-09 11:50:44 | 000,000,024 | ---- | C] () -- C:\WINDOWS\ATKPF.ini
[2009-06-08 22:36:31 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2009-06-08 21:35:19 | 001,060,424 | R--- | C] () -- C:\WINDOWS\System32\WdfCoInstaller01000.dll
[2009-06-08 21:31:35 | 000,016,480 | ---- | C] () -- C:\WINDOWS\System32\rixdicon.dll
[2009-06-08 21:30:30 | 000,028,160 | R--- | C] () -- C:\WINDOWS\System32\drivers\sncduvc.sys
[2009-06-08 21:30:29 | 001,807,744 | R--- | C] () -- C:\WINDOWS\System32\drivers\snp2uvc.sys
[2009-06-08 21:21:43 | 000,005,760 | R--- | C] () -- C:\WINDOWS\System32\drivers\ATKACPI.sys
[2008-01-29 14:05:48 | 002,842,624 | ---- | C] () -- C:\WINDOWS\System32\btwicons.dll
[2001-11-14 11:56:00 | 001,802,240 | ---- | C] () -- C:\WINDOWS\System32\lcppn21.dll
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2010-11-11 10:24:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ACD Systems
[2010-03-05 17:52:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Codemasters
[2010-12-21 08:57:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite
[2009-07-09 13:38:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Diskeeper Corporation
[2010-12-21 09:51:35 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DSS
[2010-12-24 09:24:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\EA Core
[2010-12-24 09:24:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Electronic Arts
[2009-07-09 09:53:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ESET
[2010-05-20 14:41:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10
[2010-10-30 21:04:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\KONAMI
[2009-07-27 19:53:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\MAGIX
[2010-12-02 14:57:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Navigator
[2010-04-02 10:26:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\organiser
[2011-01-05 16:38:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Research In Motion
[2009-12-17 12:14:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Simply Super Software
[2010-12-24 08:48:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Solidshield
[2011-02-09 19:57:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\STOPzilla!
[2010-04-02 10:39:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP
[2010-04-02 09:39:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\WorkshopData
[2010-11-11 10:27:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\ACD Systems
[2009-08-11 19:00:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\AIMP
[2011-01-03 13:43:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\BitComet
[2009-07-17 13:21:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\Conceiva
[2011-01-07 10:41:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\DMCache
[2010-06-02 18:53:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\dp3d
[2009-07-09 09:55:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\ESET
[2009-09-06 19:08:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\Gadu-Gadu
[2009-12-14 21:46:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\Gadu-Gadu 10
[2011-02-08 22:09:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\GetRightToGo
[2010-10-30 20:31:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\Leadertech
[2009-07-09 13:27:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\MAP&GUIDE
[2010-12-02 14:53:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\MapFactor
[2010-12-02 14:57:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\Navigator
[2010-05-15 11:55:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\pl-soft
[2011-01-05 16:39:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\Research In Motion
[2011-02-09 18:52:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\uTorrent
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 243 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:F46D2E85
@Alternate Data Stream - 128 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:CB0AACC9

< End of report >