OTL logfile created on: 2011-02-20 10:23:15 - Run 1 OTL by OldTimer - Version 3.2.20.6 Folder = C:\Documents and Settings\PAWEŁ\Pulpit\antywirusy Windows XP Home Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 79,00% Memory free 4,00 Gb Paging File | 4,00 Gb Available in Paging File | 93,00% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 97,65 Gb Total Space | 37,63 Gb Free Space | 38,53% Space Free | Partition Type: NTFS Drive E: | 200,43 Gb Total Space | 2,93 Gb Free Space | 1,46% Space Free | Partition Type: NTFS Computer Name: PAWEL | User Name: PAWEŁ | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-02-12 15:02:10 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\PAWEŁ\Pulpit\antywirusy\OTL.exe PRC - [2011-01-13 09:47:34 | 003,396,624 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe PRC - [2011-01-13 09:47:33 | 000,040,384 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe PRC - [2010-04-07 20:07:24 | 000,810,120 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe PRC - [2010-04-07 20:07:04 | 002,145,000 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\egui.exe PRC - [2006-03-02 13:00:00 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2005-06-06 18:08:58 | 001,273,344 | ---- | M] (OSA Technologies Inc.) -- C:\Acer\eManager\anbmServ.exe PRC - [2005-03-28 17:04:00 | 000,188,416 | ---- | M] (Acer Inc) -- C:\Acer\ePM\EPM-DM.exe PRC - [2004-12-09 11:50:00 | 000,311,296 | ---- | M] (Dritek System Inc.) -- C:\Program Files\Launch Manager\QtZgAcer.EXE PRC - [2004-10-15 10:24:48 | 000,360,521 | ---- | M] (Intel Corporation ) -- C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe PRC - [2004-10-15 10:22:14 | 000,086,016 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Wireless\Bin\EvtEng.exe PRC - [2004-10-15 10:21:38 | 000,139,264 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe PRC - [2004-06-09 10:15:30 | 000,417,792 | ---- | M] (INPROCOMM) -- C:\Program Files\acer\Wireless\Utility\wlanutil.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2011-02-12 15:02:10 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\PAWEŁ\Pulpit\antywirusy\OTL.exe MOD - [2011-01-13 09:47:35 | 000,189,728 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\snxhk.dll MOD - [2006-03-02 13:00:00 | 001,050,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Disabled | Stopped] -- -- (HidServ) SRV - File not found [On_Demand | Stopped] -- -- (AppMgmt) SRV - [2011-01-13 09:47:33 | 000,040,384 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus) SRV - [2010-06-14 14:07:14 | 000,615,936 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2010-04-07 20:10:38 | 000,033,560 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe -- (EhttpSrv) SRV - [2010-04-07 20:07:24 | 000,810,120 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe -- (ekrn) SRV - [2005-06-06 18:08:58 | 001,273,344 | ---- | M] (OSA Technologies Inc.) [Auto | Running] -- C:\Acer\eManager\anbmServ.exe -- (anbmService) SRV - [2004-10-15 10:24:48 | 000,360,521 | ---- | M] (Intel Corporation ) [Auto | Running] -- C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe -- (S24EventMonitor) SRV - [2004-10-15 10:22:14 | 000,086,016 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Wireless\Bin\EvtEng.exe -- (EvtEng) SRV - [2004-10-15 10:21:38 | 000,139,264 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe -- (RegSrvc) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2011-01-13 09:41:16 | 000,294,608 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP) DRV - [2011-01-13 09:40:16 | 000,047,440 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi) DRV - [2011-01-13 09:40:04 | 000,100,176 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2) DRV - [2011-01-13 09:37:30 | 000,023,632 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr) DRV - [2011-01-13 09:37:11 | 000,029,392 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4) DRV - [2011-01-13 09:37:09 | 000,017,744 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk) DRV - [2010-06-07 16:18:12 | 000,008,552 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\asctrm.sys -- (ASCTRM) DRV - [2010-06-07 13:55:53 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd) DRV - [2010-04-07 20:08:08 | 000,055,232 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\epfwtdi.sys -- (epfwtdi) DRV - [2010-04-07 20:08:06 | 000,032,584 | ---- | M] (ESET) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\epfwndis.sys -- (Epfwndis) DRV - [2010-04-07 20:08:04 | 000,134,488 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\epfw.sys -- (epfw) DRV - [2010-04-07 20:07:08 | 000,114,984 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ehdrv.sys -- (ehdrv) DRV - [2010-04-07 20:03:44 | 000,139,192 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\eamon.sys -- (eamon) DRV - [2010-02-26 13:32:58 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt) DRV - [2010-02-26 13:32:46 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev) DRV - [2010-02-26 13:32:44 | 000,022,528 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc) DRV - [2010-02-26 13:32:44 | 000,018,176 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd) DRV - [2008-08-26 09:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2005-06-30 15:58:24 | 000,007,296 | ---- | M] (OSA Technologies, An Avocent Company) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\osaio.sys -- (osaio) DRV - [2005-04-28 21:37:00 | 001,132,544 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag) DRV - [2005-03-24 15:54:08 | 000,078,208 | ---- | M] (Acer Value Labs, USA) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\epm-shd.sys -- (EpmShd) DRV - [2005-01-14 14:57:16 | 000,004,010 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\osanbm.sys -- (osanbm) DRV - [2004-12-08 13:10:00 | 000,016,896 | ---- | M] (Dritek System Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\DKbFltr.SYS -- (DKbFltr) DRV - [2004-10-29 17:48:10 | 003,222,784 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\w29n51.sys -- (w29n51) Sterownik karty Intel(R) DRV - [2004-10-15 10:20:04 | 000,011,354 | ---- | M] (Intel Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\s24trans.sys -- (s24trans) DRV - [2004-10-11 11:24:00 | 000,045,056 | R--- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\bcm4sbxp.sys -- (bcm4sbxp) DRV - [2004-07-19 12:10:00 | 000,004,096 | ---- | M] (Acer Value Labs, USA) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\epm-psd.sys -- (EpmPsd) DRV - [2004-06-25 13:31:00 | 000,276,480 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\camchal.sys -- (CAMCHALA) DRV - [2004-06-25 13:29:00 | 000,034,048 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\camcaud.sys -- (CAMCAUD) DRV - [2003-04-04 14:07:20 | 000,030,336 | ---- | M] (Politecnico di Torino) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\npf.sys -- (NPF) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1993962763-2049760794-1801674531-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://gazeta.pl/0,0.html?sc=1 IE - HKU\S-1-5-21-1993962763-2049760794-1801674531-1004\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1 IE - HKU\S-1-5-21-1993962763-2049760794-1801674531-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.gazeta.pl/0,0.html IE - HKU\S-1-5-21-1993962763-2049760794-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1993962763-2049760794-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2010-06-07 13:24:10 | 000,000,000 | ---D | M] O1 HOSTS File: ([2006-03-02 13:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O4 - HKLM..\Run: [acerWireless] C:\Program Files\acer\Wireless\Utility\wlanutil.exe (INPROCOMM) O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software) O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET) O4 - HKLM..\Run: [EPM-DM] c:\Acer\ePM\EPM-DM.exe (Acer Inc) O4 - HKLM..\Run: [ePowerManagement] C:\Acer\ePM\ePM.exe (Acer Value Labs, Taiwan) O4 - HKLM..\Run: [Lexmark X1100 Series] C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe (Lexmark International, Inc.) O4 - HKLM..\Run: [LManager] C:\Program Files\Launch Manager\QtZgAcer.EXE (Dritek System Inc.) O4 - HKLM..\Run: [TNOD UP] C:\Program Files\TNod User & Password Finder\TNODUP.exe (Tukero[X]Team) O4 - HKU\S-1-5-21-1993962763-2049760794-1801674531-1004..\Run: [MX Skype Recorder] File not found O4 - HKU\S-1-5-21-1993962763-2049760794-1801674531-1004..\Run: [n4JKpuh8] File not found O4 - HKU\S-1-5-21-1993962763-2049760794-1801674531-1004..\Run: [pVwHe0F8l] File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1993962763-2049760794-1801674531-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O15 - HKU\S-1-5-21-1993962763-2049760794-1801674531-1004\..Trusted Domains: polbank24.pl ([www] https in Zaufane witryny) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\PAWEŁ\Dane aplikacji\IrfanView\IrfanView_Wallpaper.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\PAWEŁ\Dane aplikacji\IrfanView\IrfanView_Wallpaper.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2010-06-01 18:12:12 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{1b2e636c-a966-11df-8254-0013ce763d2f}\Shell - "" = AutoRun O33 - MountPoints2\{1b2e636c-a966-11df-8254-0013ce763d2f}\Shell\AutoRun\command - "" = H:\AutoRun.exe O33 - MountPoints2\{25983a31-2d59-11e0-8309-0013ce763d2f}\Shell - "" = Autorun O33 - MountPoints2\{25983a31-2d59-11e0-8309-0013ce763d2f}\Shell\AutoRun\command - "" = H:\Install_Nokia_Ovi_Suite.exe O33 - MountPoints2\{e440db26-ad13-11df-825d-0013ce763d2f}\Shell - "" = Autorun O33 - MountPoints2\{e440db26-ad13-11df-825d-0013ce763d2f}\Shell\AutoRun\command - "" = H:\Install_Nokia_Ovi_Suite.exe O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011-02-19 18:59:55 | 000,494,628 | ---- | C] (Duplex Secure Ltd.) -- C:\Documents and Settings\PAWEŁ\Pulpit\SPTDinst-v177-x86.exe [2011-02-12 15:14:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\PAWEŁ\Pulpit\antywirusy [2011-02-11 22:23:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\PAWEŁ\Dane aplikacji\Malwarebytes [2011-02-11 22:22:40 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2011-02-11 22:22:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Malwarebytes' Anti-Malware [2011-02-11 22:22:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes [2011-02-11 22:22:34 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2011-02-11 22:22:34 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2011-02-11 21:17:59 | 007,734,208 | ---- | C] (Malwarebytes Corporation ) -- C:\Documents and Settings\PAWEŁ\Pulpit\mbam-setup-1.50.1.1100(dobreprogramy.pl).exe [2011-02-07 09:52:19 | 000,294,608 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSP.sys [2011-02-07 09:52:19 | 000,017,744 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys [2011-02-07 09:52:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\avast! Free Antivirus [2011-02-07 09:52:17 | 000,047,440 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys [2011-02-07 09:52:17 | 000,023,632 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys [2011-02-07 09:52:16 | 000,100,176 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys [2011-02-07 09:52:16 | 000,094,544 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswmon.sys [2011-02-07 09:52:16 | 000,029,392 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys [2011-02-07 09:51:59 | 000,038,848 | ---- | C] (AVAST Software) -- C:\WINDOWS\avastSS.scr [2011-02-07 09:51:57 | 000,188,216 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe [2011-02-06 22:27:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\PAWEŁ\Menu Start\Programy\Windows Disk [2011-02-06 20:44:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\PAWEŁ\Pulpit\EXPENCES [2011-01-31 17:50:36 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ptpusb.dll [2011-01-31 17:50:34 | 000,159,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ptpusd.dll [2011-01-31 17:43:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\PAWEŁ\Pulpit\Nokia E52 [2004-11-24 19:25:52 | 000,335,872 | ---- | C] ( ) -- C:\WINDOWS\System32\drvc.dll [5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011-02-20 10:16:52 | 000,000,462 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{6BB4F05F-A5F3-4043-BB47-41239FEA9465}.job [2011-02-20 10:12:16 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2011-02-20 10:12:02 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2011-02-20 10:11:55 | 2145,505,280 | -HS- | M] () -- C:\hiberfil.sys [2011-02-19 23:15:28 | 006,029,312 | -H-- | M] () -- C:\Documents and Settings\PAWEŁ\NTUSER.DAT [2011-02-19 23:15:28 | 000,000,188 | -HS- | M] () -- C:\Documents and Settings\PAWEŁ\ntuser.ini [2011-02-19 19:00:15 | 000,494,628 | ---- | M] (Duplex Secure Ltd.) -- C:\Documents and Settings\PAWEŁ\Pulpit\SPTDinst-v177-x86.exe [2011-02-19 18:01:17 | 000,127,488 | ---- | M] () -- C:\Documents and Settings\PAWEŁ\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-02-19 12:46:55 | 000,748,687 | ---- | M] () -- C:\Documents and Settings\PAWEŁ\Pulpit\umowa_hotel kaziemierz kraków.jpg [2011-02-19 12:36:00 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2011-02-11 22:23:13 | 000,000,788 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Malwarebytes' Anti-Malware.lnk [2011-02-11 21:25:13 | 000,000,336 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\pVwHe0F8l [2011-02-11 21:11:48 | 000,000,264 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\~n4JKpuh8 [2011-02-11 21:11:48 | 000,000,144 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\~n4JKpuh8r [2011-02-11 16:20:16 | 007,734,208 | ---- | M] (Malwarebytes Corporation ) -- C:\Documents and Settings\PAWEŁ\Pulpit\mbam-setup-1.50.1.1100(dobreprogramy.pl).exe [2011-02-07 09:52:19 | 000,001,704 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\avast! Free Antivirus.lnk [2011-02-07 09:52:17 | 000,002,645 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT [2011-02-07 09:51:03 | 049,958,824 | ---- | M] () -- C:\Documents and Settings\PAWEŁ\Pulpit\setup_av_free_pol_5.1.889(dobreprogramy.pl).exe [2011-02-07 09:12:19 | 000,002,267 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk [2011-02-06 22:26:59 | 000,000,336 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\n4JKpuh8 [2011-02-06 20:45:11 | 000,587,125 | ---- | M] () -- C:\Documents and Settings\PAWEŁ\Pulpit\Bilet PKP_Krakow-Warszawa.jpg [5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-02-19 12:46:54 | 000,748,687 | ---- | C] () -- C:\Documents and Settings\PAWEŁ\Pulpit\umowa_hotel kaziemierz kraków.jpg [2011-02-11 22:23:13 | 000,000,788 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Malwarebytes' Anti-Malware.lnk [2011-02-11 21:25:13 | 000,000,336 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\pVwHe0F8l [2011-02-07 09:52:19 | 000,001,704 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\avast! Free Antivirus.lnk [2011-02-07 09:51:06 | 049,958,824 | ---- | C] () -- C:\Documents and Settings\PAWEŁ\Pulpit\setup_av_free_pol_5.1.889(dobreprogramy.pl).exe [2011-02-06 22:27:01 | 000,000,264 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\~n4JKpuh8 [2011-02-06 22:27:01 | 000,000,144 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\~n4JKpuh8r [2011-02-06 22:26:59 | 000,000,336 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\n4JKpuh8 [2011-02-06 20:45:11 | 000,587,125 | ---- | C] () -- C:\Documents and Settings\PAWEŁ\Pulpit\Bilet PKP_Krakow-Warszawa.jpg [2010-12-13 17:06:15 | 000,000,038 | ---- | C] () -- C:\WINDOWS\AviSplitter.INI [2010-07-15 11:13:41 | 000,446,559 | ---- | C] () -- C:\Documents and Settings\PAWEŁ\Dane aplikacji\NMM-MetaData.db [2010-07-14 13:36:56 | 000,000,101 | ---- | C] () -- C:\WINDOWS\lexstat.ini [2010-07-14 13:36:35 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\lxbkvs.dll [2010-07-14 13:36:34 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\LXBKLCNP.DLL [2010-07-14 13:36:14 | 000,000,266 | ---- | C] () -- C:\WINDOWS\System32\lxbkcoin.ini [2010-06-07 13:55:53 | 000,691,696 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys [2010-06-03 09:52:27 | 000,127,488 | ---- | C] () -- C:\Documents and Settings\PAWEŁ\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-06-01 19:23:15 | 000,053,299 | ---- | C] () -- C:\WINDOWS\System32\pthreadVC.dll [2010-06-01 19:04:36 | 006,418,948 | -H-- | C] () -- C:\Documents and Settings\PAWEŁ\Ustawienia lokalne\Dane aplikacji\IconCache.db [2010-06-01 19:00:37 | 000,027,488 | ---- | C] () -- C:\Documents and Settings\PAWEŁ\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT [2010-06-01 18:31:04 | 000,000,062 | -HS- | C] () -- C:\Documents and Settings\PAWEŁ\Dane aplikacji\desktop.ini [2010-06-01 18:23:06 | 001,044,266 | ---- | C] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2010-06-01 18:23:05 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2010-06-01 18:22:35 | 000,000,062 | -HS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\desktop.ini [2010-06-01 18:12:12 | 000,000,000 | ---- | C] () -- C:\WINDOWS\control.ini [2010-06-01 18:09:02 | 000,000,037 | ---- | C] () -- C:\WINDOWS\vbaddin.ini [2010-06-01 18:09:02 | 000,000,036 | ---- | C] () -- C:\WINDOWS\vb.ini [2010-06-01 18:08:00 | 000,026,717 | ---- | C] () -- C:\WINDOWS\System32\tslabels.ini [2010-06-01 18:07:59 | 000,003,813 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.ini [2008-12-19 15:15:58 | 004,338,246 | ---- | C] () -- C:\WINDOWS\System32\libavcodec.dll [2008-12-17 17:41:18 | 000,884,237 | ---- | C] () -- C:\WINDOWS\System32\ff_x264.dll [2008-12-17 17:22:58 | 000,093,184 | ---- | C] () -- C:\WINDOWS\System32\ff_wmv9.dll [2008-12-17 17:22:48 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2008-12-17 17:17:34 | 000,239,247 | ---- | C] () -- C:\WINDOWS\System32\ff_theora.dll [2008-12-17 16:59:54 | 000,560,802 | ---- | C] () -- C:\WINDOWS\System32\libmplayer.dll [2008-12-11 11:27:02 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2006-03-02 13:00:00 | 001,015,477 | ---- | C] () -- C:\WINDOWS\System32\esentprf.ini [2006-03-02 13:00:00 | 000,733,696 | ---- | C] () -- C:\WINDOWS\System32\qedwipes.dll [2006-03-02 13:00:00 | 000,270,848 | ---- | C] () -- C:\WINDOWS\System32\sbe.dll [2006-03-02 13:00:00 | 000,253,440 | ---- | C] () -- C:\WINDOWS\System32\compatUI.dll [2006-03-02 13:00:00 | 000,199,168 | ---- | C] () -- C:\WINDOWS\System32\ir32_32.dll [2006-03-02 13:00:00 | 000,186,368 | ---- | C] () -- C:\WINDOWS\System32\encdec.dll [2006-03-02 13:00:00 | 000,094,282 | ---- | C] () -- C:\WINDOWS\System32\msencode.dll [2006-03-02 13:00:00 | 000,070,656 | ---- | C] () -- C:\WINDOWS\System32\amstream.dll [2006-03-02 13:00:00 | 000,053,478 | ---- | C] () -- C:\WINDOWS\System32\tcpmon.ini [2006-03-02 13:00:00 | 000,042,809 | ---- | C] () -- C:\WINDOWS\System32\key01.sys [2006-03-02 13:00:00 | 000,042,537 | ---- | C] () -- C:\WINDOWS\System32\keyboard.sys [2006-03-02 13:00:00 | 000,035,648 | ---- | C] () -- C:\WINDOWS\System32\ntio411.sys [2006-03-02 13:00:00 | 000,035,424 | ---- | C] () -- C:\WINDOWS\System32\ntio412.sys [2006-03-02 13:00:00 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\ntio804.sys [2006-03-02 13:00:00 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\ntio404.sys [2006-03-02 13:00:00 | 000,033,936 | ---- | C] () -- C:\WINDOWS\System32\ntio.sys [2006-03-02 13:00:00 | 000,029,370 | ---- | C] () -- C:\WINDOWS\System32\ntdos411.sys [2006-03-02 13:00:00 | 000,029,274 | ---- | C] () -- C:\WINDOWS\System32\ntdos412.sys [2006-03-02 13:00:00 | 000,029,146 | ---- | C] () -- C:\WINDOWS\System32\ntdos804.sys [2006-03-02 13:00:00 | 000,029,146 | ---- | C] () -- C:\WINDOWS\System32\ntdos404.sys [2006-03-02 13:00:00 | 000,027,898 | ---- | C] () -- C:\WINDOWS\System32\ntdos.sys [2006-03-02 13:00:00 | 000,027,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys [2006-03-02 13:00:00 | 000,027,097 | ---- | C] () -- C:\WINDOWS\System32\country.sys [2006-03-02 13:00:00 | 000,016,024 | ---- | C] () -- C:\WINDOWS\System32\rsvp.ini [2006-03-02 13:00:00 | 000,015,360 | ---- | C] () -- C:\WINDOWS\System32\tsd32.dll [2006-03-02 13:00:00 | 000,014,336 | ---- | C] () -- C:\WINDOWS\System32\msdmo.dll [2006-03-02 13:00:00 | 000,013,819 | ---- | C] () -- C:\WINDOWS\System32\pschdprf.ini [2006-03-02 13:00:00 | 000,013,312 | ---- | C] () -- C:\WINDOWS\System32\win87em.dll [2006-03-02 13:00:00 | 000,009,043 | ---- | C] () -- C:\WINDOWS\System32\ansi.sys [2006-03-02 13:00:00 | 000,006,074 | ---- | C] () -- C:\WINDOWS\System32\rasctrs.ini [2006-03-02 13:00:00 | 000,004,976 | ---- | C] () -- C:\WINDOWS\System32\himem.sys [2006-03-02 13:00:00 | 000,002,992 | ---- | C] () -- C:\WINDOWS\System32\perfci.ini [2006-03-02 13:00:00 | 000,002,890 | ---- | C] () -- C:\WINDOWS\System32\perfwci.ini [2006-03-02 13:00:00 | 000,001,405 | ---- | C] () -- C:\WINDOWS\msdfmap.ini [2006-03-02 13:00:00 | 000,001,295 | ---- | C] () -- C:\WINDOWS\System32\perffilt.ini [2006-03-02 13:00:00 | 000,000,477 | ---- | C] () -- C:\WINDOWS\win.ini [2006-03-02 13:00:00 | 000,000,359 | ---- | C] () -- C:\WINDOWS\System32\prodspec.ini [2006-03-02 13:00:00 | 000,000,231 | ---- | C] () -- C:\WINDOWS\system.ini [2004-10-03 17:50:54 | 000,129,024 | ---- | C] () -- C:\WINDOWS\System32\ff_mpeg2enc.dll [2001-10-26 18:29:42 | 000,157,696 | ---- | C] () -- C:\WINDOWS\System32\paqsp.dll [color=#E56717]========== LOP Check ==========[/color] [2010-06-01 19:33:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Alwil Software [2010-06-23 18:03:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ashampoo [2010-06-07 13:55:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite [2010-08-23 13:34:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Downloaded Installations [2010-06-07 13:24:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ESET [2010-08-23 13:29:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Installations [2010-07-01 07:17:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\MXSkypeRecorder [2010-07-14 11:36:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Suite [2010-06-07 01:17:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PAWEŁ\Dane aplikacji\IrfanView [2010-06-23 18:03:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PAWEŁ\Dane aplikacji\Ashampoo [2010-08-24 11:38:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PAWEŁ\Dane aplikacji\BESTplayer [2010-06-07 14:03:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PAWEŁ\Dane aplikacji\DAEMON Tools Lite [2010-07-14 11:39:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PAWEŁ\Dane aplikacji\DataLayer [2010-06-07 13:25:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PAWEŁ\Dane aplikacji\ESET [2010-06-07 14:39:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PAWEŁ\Dane aplikacji\Gadu-Gadu [2010-06-29 13:36:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PAWEŁ\Dane aplikacji\GHISLER [2010-08-23 13:44:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PAWEŁ\Dane aplikacji\Nokia [2010-06-02 20:51:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PAWEŁ\Dane aplikacji\Opera [2010-08-23 13:44:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PAWEŁ\Dane aplikacji\PC Suite [2010-09-14 21:16:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PAWEŁ\Dane aplikacji\PWNEncy2006 [2011-01-24 22:20:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PAWEŁ\Dane aplikacji\uTorrent [2011-02-20 10:16:52 | 000,000,462 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{6BB4F05F-A5F3-4043-BB47-41239FEA9465}.job [color=#E56717]========== Purity Check ==========[/color] < End of report >