OTL logfile created on: 2011-02-27 15:39:09 - Run 1
OTL by OldTimer - Version 3.2.22.1     Folder = C:\Users\Magda\Downloads
Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18999)
Locale: 00000415 | Country: Poland | Language: PLK | Date Format: yyyy-MM-dd
 
1 013,00 Mb Total Physical Memory | 204,00 Mb Available Physical Memory | 20,00% Memory free
2,00 Gb Paging File | 1,00 Gb Available in Paging File | 44,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 140,92 Gb Total Space | 68,25 Gb Free Space | 48,43% Space Free | Partition Type: NTFS
Drive D: | 8,13 Gb Total Space | 1,68 Gb Free Space | 20,70% Space Free | Partition Type: NTFS
 
Computer Name: MAGDA-PC | User Name: Magda | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 90 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2011-02-27 15:34:04 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Magda\Downloads\OTL.exe
PRC - [2010-12-20 20:43:48 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2010-11-29 00:37:35 | 000,201,992 | ---- | M] (Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
PRC - [2008-10-29 07:29:41 | 002,927,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2008-01-19 08:33:23 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RacAgent.exe
PRC - [2007-06-15 17:57:42 | 000,145,504 | ---- | M] (B.H.A Corporation) -- C:\Windows\System32\bgsvcgen.exe
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - [2011-02-27 15:34:04 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Magda\Downloads\OTL.exe
MOD - [2010-08-31 16:39:57 | 001,684,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18523_none_5cdd65e20837faf2\comctl32.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - [2010-11-29 00:37:35 | 000,201,992 | ---- | M] (Kaspersky Lab) [Auto | Running] -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe -- (AVP)
SRV - [2008-03-26 02:27:36 | 000,135,168 | ---- | M] (Hewlett-Packard Co.) [Auto | Running] -- C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqddsvc.dll -- (hpqddsvc)
SRV - [2008-03-26 01:38:24 | 000,217,088 | ---- | M] (Hewlett-Packard Co.) [On_Demand | Running] -- C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqcxs08.dll -- (hpqcxs08)
SRV - [2008-01-28 03:01:24 | 000,658,432 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2008-01-19 08:38:24 | 000,272,952 | ---- | M] (Microsoft Corporation) [Disabled | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007-06-15 17:57:42 | 000,145,504 | ---- | M] (B.H.A Corporation) [Auto | Running] -- C:\Windows\System32\bgsvcgen.exe -- (bgsvcgen)
SRV - [2007-03-29 21:59:42 | 000,176,128 | ---- | M] (Starz Entertainment Group LLC) [Disabled | Stopped] -- C:\Program Files\Vongo\VongoService.exe -- (Vongo Service)
SRV - [2007-03-29 01:45:38 | 000,118,877 | ---- | M] () [Disabled | Stopped] -- C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe -- (CLSched) CyberLink Task Scheduler (CTS)
SRV - [2007-03-29 01:45:34 | 000,270,431 | ---- | M] () [Disabled | Stopped] -- C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe -- (CLCapSvc) CyberLink Background Capture Service (CBCS)
SRV - [2007-01-09 22:55:34 | 000,110,592 | ---- | M] (Hewlett-Packard Development Company, L.P.) [On_Demand | Stopped] -- C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe -- (Com4Qlb)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2011-01-16 21:45:39 | 000,027,632 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\seehcri.sys -- (seehcri)
DRV - [2011-01-16 21:43:42 | 000,025,512 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ggsemc.sys -- (ggsemc)
DRV - [2011-01-16 21:43:42 | 000,013,224 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ggflt.sys -- (ggflt)
DRV - [2010-11-29 00:37:36 | 000,224,272 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\Windows\System32\drivers\klif.sys -- (KLIF)
DRV - [2010-11-29 00:37:36 | 000,033,808 | ---- | M] (Kaspersky Lab) [File_System | Boot | Running] -- C:\Windows\system32\drivers\klbg.sys -- (klbg)
DRV - [2010-06-22 21:16:23 | 000,083,360 | ---- | M] (LogMeIn, Inc.) [File_System | Disabled | Stopped] -- C:\Windows\System32\LMIRfsClientNP.dll -- (LMIRfsClientNP)
DRV - [2009-06-09 22:16:42 | 003,482,240 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\snp2uvc.sys -- (SNP2UVC) USB2.0 PC Camera (SNP2UVC)
DRV - [2008-08-11 18:41:00 | 000,047,640 | ---- | M] (LogMeIn, Inc.) [File_System | Auto | Running] -- C:\Windows\System32\drivers\LMIRfsDriver.sys -- (LMIRfsDriver)
DRV - [2008-05-10 02:33:10 | 000,113,664 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rmcast.sys -- (RMCAST) RMCAST (Pgm)
DRV - [2008-04-16 14:23:44 | 000,112,144 | ---- | M] (Kaspersky Lab) [Kernel | System | Running] -- C:\Windows\System32\drivers\kl1.sys -- (kl1)
DRV - [2008-03-26 13:10:16 | 000,020,496 | ---- | M] (Kaspersky Lab) [Kernel | System | Running] -- C:\Windows\System32\drivers\klim6.sys -- (KLIM6)
DRV - [2008-03-13 19:02:46 | 000,026,640 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\klfltdev.sys -- (KLFLTDEV)
DRV - [2007-09-13 15:49:47 | 000,180,272 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Symantec\Definitions\SymcData\idsdefs\20071020.002\IDSvix86.sys -- (IDSvix86)
DRV - [2007-02-07 22:15:14 | 001,786,880 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NETw3v32.sys -- (NETw3v32) Intel(R)
DRV - [2007-01-18 19:28:02 | 000,005,275 | ---- | M] (Cisco Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CVirtA.sys -- (CVirtA)
DRV - [2006-12-12 22:06:40 | 000,148,992 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CHDART.sys -- (HdAudAddService)
DRV - [2006-11-30 18:24:58 | 000,008,192 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | System | Running] -- C:\Windows\System32\drivers\eabfiltr.sys -- (eabfiltr)
DRV - [2006-11-28 17:44:52 | 000,008,192 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\XAudio.sys -- (XAudio)
DRV - [2006-11-16 10:16:24 | 000,032,256 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2006-11-16 05:42:46 | 000,043,520 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2006-11-16 03:35:20 | 000,037,376 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rixdptsk.sys -- (rismxdp)
DRV - [2006-06-28 17:54:00 | 000,009,472 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CPQBttn.sys -- (HBtnKey)
DRV - [2006-02-21 00:17:40 | 000,033,408 | ---- | M] (B.H.A Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\cdrbsdrv.sys -- (cdrbsdrv)
DRV - [2005-02-23 20:58:56 | 000,011,776 | ---- | M] (Arcsoft, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\afc.sys -- (Afc)
DRV - [2004-06-24 20:48:38 | 000,289,408 | ---- | M] (Roxio) [File_System | System | Running] -- C:\Windows\System32\drivers\Cdudf_xp.sys -- (cdudf_xp)
DRV - [2004-06-24 20:48:00 | 000,023,808 | ---- | M] (Roxio) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\dvd_2k.sys -- (dvd_2K)
DRV - [2004-06-24 20:39:12 | 000,141,184 | ---- | M] (Windows (R) 2000 DDK provider) [File_System | System | Running] -- C:\Windows\System32\drivers\DVDVRRdr_xp.sys -- (DVDVRRdr_xp)
DRV - [2004-06-24 20:36:00 | 000,200,704 | ---- | M] (Roxio) [File_System | System | Running] -- C:\Windows\System32\drivers\Udfreadr.sys -- (UDFReadr)
DRV - [2004-06-24 20:35:48 | 000,023,808 | ---- | M] (Roxio) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mmc_2k.sys -- (mmc_2K)
DRV - [2004-06-24 20:32:38 | 000,117,632 | ---- | M] (Roxio) [Kernel | System | Running] -- C:\Windows\System32\drivers\Pwd_2k.sys -- (pwd_2k)
DRV - [2002-06-21 02:45:42 | 000,020,128 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\WmFilter.sys -- (WmFilter)
DRV - [2002-06-21 02:45:40 | 000,010,144 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\WmBEnum.sys -- (WmBEnum)
DRV - [2002-06-21 02:45:36 | 000,005,728 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\WmVirHid.sys -- (WmVirHid)
DRV - [2002-06-21 02:45:34 | 000,039,776 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\WmXlCore.sys -- (WmXlCore)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=73&bd=Pavilion&pf=laptop
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-1840118185-2223366766-1246831725-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
IE - HKU\S-1-5-21-1840118185-2223366766-1246831725-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-1840118185-2223366766-1246831725-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1840118185-2223366766-1246831725-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.startup.homepage: "http://www.onet.pl"
FF - prefs.js..extensions.enabledItems: SignPlugin@bph.pl:1.4.0.3
FF - prefs.js..extensions.enabledItems: {097d3191-e6fa-4728-9826-b533d755359d}:0.7.12
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3
 
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-01-01 01:37:02 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-02-24 21:14:26 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\{eea12ec4-729d-4703-bc37-106ce9879ce2}: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\THBExt [2010-11-28 23:33:29 | 000,000,000 | ---D | M]
 
[2009-12-16 18:32:45 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Magda\AppData\Roaming\mozilla\Extensions
[2011-02-27 15:28:58 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Magda\AppData\Roaming\mozilla\Firefox\Profiles\yfd0sxjy.default\extensions
[2010-11-20 20:33:40 | 000,000,000 | ---D | M] (All-in-One Sidebar) -- C:\Users\Magda\AppData\Roaming\mozilla\Firefox\Profiles\yfd0sxjy.default\extensions\{097d3191-e6fa-4728-9826-b533d755359d}
[2010-04-28 20:27:49 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Magda\AppData\Roaming\mozilla\Firefox\Profiles\yfd0sxjy.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011-02-27 15:27:51 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Magda\AppData\Roaming\mozilla\Firefox\Profiles\yfd0sxjy.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010-09-16 14:43:54 | 000,000,000 | ---D | M] (BPH Sign Plugin) -- C:\Users\Magda\AppData\Roaming\mozilla\Firefox\Profiles\yfd0sxjy.default\extensions\SignPlugin@bph.pl
[2011-02-26 18:13:38 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2010-03-25 22:07:35 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2010-12-20 20:44:03 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml
[2010-12-20 20:44:03 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml
[2010-12-20 20:44:03 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml
[2010-12-20 20:44:03 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml
[2010-12-20 20:44:03 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml
[2010-12-20 20:44:03 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2011-02-26 19:03:40 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Yahoo! Toolbar Helper) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O2 - BHO: (HP Print Clips) - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\Hewlett-Packard\Smart Web Printing\hpswp_framework.dll (Hewlett-Packard Co.)
O2 - BHO: (CCHelper Class) - {0CF0B8EE-6596-11D5-A98E-0003470BB48E} - C:\Program Files\Panicware\Pop-Up Stopper Companion\CCHelper.dll ()
O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll (Kaspersky Lab)
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (Pop-Up Stopper &Companion) - {8F05B1A8-9D77-4B8F-AF54-6B2202066F95} - C:\Program Files\Panicware\Pop-Up Stopper Companion\popupus.dll ()
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O4 - HKLM..\Run: [AVP] C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe (Kaspersky Lab)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1840118185-2223366766-1246831725-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1840118185-2223366766-1246831725-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Add to Banner Ad Blocker - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm ()
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll (Sun Microsystems, Inc.)
O9 - Extra Button: Web traffic protection statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll (Kaspersky Lab)
O9 - Extra Button: HP Clipbook - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\Hewlett-Packard\Smart Web Printing\hpswp_extensions.dll (Hewlett-Packard Co.)
O9 - Extra Button: HP Smart Select - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\Hewlett-Packard\Smart Web Printing\hpswp_extensions.dll (Hewlett-Packard Co.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O15 - HKU\.DEFAULT\..Trusted Ranges: Range1 ([http] in Local intranet)
O15 - HKU\S-1-5-18\..Trusted Ranges: Range1 ([http] in Local intranet)
O15 - HKU\S-1-5-21-1840118185-2223366766-1246831725-1000\..Trusted Domains: msn.com ([www] * in Local intranet)
O15 - HKU\S-1-5-21-1840118185-2223366766-1246831725-1000\..Trusted Domains: starwoodgp.com ([www] http in Local intranet)
O15 - HKU\S-1-5-21-1840118185-2223366766-1246831725-1000\..Trusted Ranges: Range1 ([http] in Local intranet)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Java Plug-in 1.6.0_02)
O16 - DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab (Java Plug-in 1.6.0)
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Java Plug-in 1.6.0_02)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Java Plug-in 1.6.0_02)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} https://secure.logmein.com/activex/ractrl.cab?lmi=100 (Performance Viewer Activex Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.3.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\mzvkbd.dll (Kaspersky Lab)
O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\adialhk.dll (Kaspersky Lab)
O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\kloehk.dll (Kaspersky Lab)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\klogon: DllName - C:\Windows\system32\klogon.dll - C:\Windows\System32\klogon.dll (Kaspersky Lab)
O24 - Desktop WallPaper: C:\Users\Magda\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O24 - Desktop BackupWallPaper: C:\Users\Magda\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2007-04-19 20:20:31 | 000,000,074 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2005-09-11 16:18:54 | 000,000,340 | -HS- | M] () - D:\AUTOMODE -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 90 Days ==========[/color]
 
[2011-02-26 19:14:02 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2011-02-26 18:26:48 | 000,161,792 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2011-02-26 18:26:48 | 000,031,232 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2011-02-26 18:26:47 | 000,136,704 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2011-02-26 18:26:22 | 000,000,000 | ---D | C] -- C:\ComboFix
[2011-02-26 18:25:24 | 000,212,480 | ---- | C] (SteelWerX) -- C:\Windows\SWXCACLS.exe
[2011-02-26 18:25:16 | 000,000,000 | ---D | C] -- C:\32788R22FWJFW
[2011-02-26 18:24:06 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
[2011-02-26 18:18:32 | 000,000,000 | ---D | C] -- C:\Qoobox
[2011-02-24 20:49:13 | 000,000,000 | ---D | C] -- C:\Config.Msi
[2011-02-22 21:29:30 | 000,292,352 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2011-02-22 21:29:28 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
[2011-01-16 21:54:17 | 000,000,000 | ---D | C] -- C:\Users\Magda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sony Ericsson
[2011-01-16 21:51:41 | 000,000,000 | ---D | C] -- C:\Program Files\Sony Ericsson
[2011-01-16 21:45:39 | 000,027,632 | ---- | C] (Sony Ericsson Mobile Communications) -- C:\Windows\System32\drivers\seehcri.sys
[2011-01-16 21:43:42 | 001,112,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WdfCoInstaller01007.dll
[2011-01-16 21:43:42 | 000,025,512 | ---- | C] (Sony Ericsson Mobile Communications) -- C:\Windows\System32\drivers\ggsemc.sys
[2011-01-16 21:43:42 | 000,013,224 | ---- | C] (Sony Ericsson Mobile Communications) -- C:\Windows\System32\drivers\ggflt.sys
[2011-01-16 20:34:14 | 000,409,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbc32.dll
[2011-01-16 20:33:48 | 001,169,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdclt.exe
[2011-01-02 22:24:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
[2011-01-02 22:24:31 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight
[2010-12-20 21:13:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2010-12-20 21:10:30 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2010-12-20 21:10:16 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2010-12-15 21:59:07 | 000,357,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskschd.dll
[2010-12-15 21:59:07 | 000,345,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmicmiplugin.dll
[2010-12-15 21:59:05 | 000,270,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskcomp.dll
[2010-12-15 21:58:54 | 002,037,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2010-12-15 21:58:48 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\consent.exe
[2010-12-15 21:58:43 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fontsub.dll
[2010-12-15 21:58:30 | 000,611,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstime.dll
[2010-12-15 21:58:27 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2010-12-15 21:58:25 | 000,602,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2010-12-15 21:58:25 | 000,387,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2010-12-15 21:58:25 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2010-12-15 21:58:24 | 001,469,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2010-12-15 21:58:23 | 000,385,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2010-12-15 21:58:23 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2010-12-15 21:58:23 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2010-12-15 21:58:23 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2010-12-15 21:58:22 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2010-12-15 21:58:22 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2010-12-15 21:58:22 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2010-12-15 21:58:21 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2010-12-15 21:58:20 | 001,638,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2010-12-15 21:58:20 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2010-12-15 21:58:20 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2010-12-15 21:56:51 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
[2010-12-13 21:19:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
[2010-12-13 21:18:22 | 000,000,000 | ---D | C] -- C:\Program Files\QuickTime
[2010-11-29 17:38:30 | 000,094,208 | ---- | C] (Apple Inc.) -- C:\Windows\System32\QuickTimeVR.qtx
[2010-11-29 17:38:30 | 000,069,632 | ---- | C] (Apple Inc.) -- C:\Windows\System32\QuickTime.qts
[2007-07-05 02:28:52 | 000,176,128 | ---- | C] ( ) -- C:\Windows\System32\csnp2uvc.dll
[5 C:\Users\Magda\Documents\*.tmp files -> C:\Users\Magda\Documents\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 90 Days ==========[/color]
 
[2011-02-27 16:06:25 | 000,000,418 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{44943D58-3DAD-4EF7-AA8D-F80780DE73F7}.job
[2011-02-27 15:18:10 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011-02-27 15:18:09 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011-02-27 15:17:48 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011-02-27 15:17:46 | 1063,313,408 | -HS- | M] () -- C:\hiberfil.sys
[2011-02-26 22:21:03 | 001,007,648 | -HS- | M] () -- C:\Windows\System32\drivers\fidbox2.dat
[2011-02-26 22:21:03 | 000,076,076 | -HS- | M] () -- C:\Windows\System32\drivers\fidbox.idx
[2011-02-26 22:21:03 | 000,004,524 | -HS- | M] () -- C:\Windows\System32\drivers\fidbox2.idx
[2011-02-26 22:21:02 | 009,465,376 | -HS- | M] () -- C:\Windows\System32\drivers\fidbox.dat
[2011-02-26 22:10:25 | 000,000,266 | RHS- | M] () -- C:\ProgramData\ntuser.pol
[2011-02-26 19:49:50 | 000,607,406 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011-02-26 19:49:50 | 000,105,014 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011-02-26 19:03:40 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2011-02-24 22:04:26 | 000,024,576 | ---- | M] () -- C:\Users\Magda\Desktop\memtest.exe
[2011-02-24 22:03:24 | 000,000,393 | ---- | M] () -- C:\Users\Magda\Desktop\Pobieranie — skrót.lnk
[2011-02-24 21:14:29 | 000,001,923 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2011-02-24 21:07:06 | 000,001,594 | ---- | M] () -- C:\Windows\VPNUnInstall.MIF
[2011-02-24 20:01:30 | 000,357,416 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2011-02-22 20:30:22 | 000,000,322 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForMagda.job
[2011-02-02 17:11:20 | 000,222,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MpSigStub.exe
[2011-01-22 23:22:47 | 000,002,945 | ---- | M] () -- C:\Windows\System32\responseBody.xml
[2011-01-22 23:22:45 | 000,000,826 | ---- | M] () -- C:\Windows\System32\request.gzip
[2011-01-22 23:22:44 | 000,001,871 | ---- | M] () -- C:\Windows\System32\requestBody.xml
[2011-01-16 21:57:54 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_ggsemc_01007.Wdf
[2011-01-16 21:57:54 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_ggflt_01007.Wdf
[2011-01-16 21:54:17 | 000,001,074 | ---- | M] () -- C:\Users\Magda\Desktop\Update Service.lnk
[2011-01-16 21:45:39 | 000,027,632 | ---- | M] (Sony Ericsson Mobile Communications) -- C:\Windows\System32\drivers\seehcri.sys
[2011-01-16 21:43:43 | 001,112,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WdfCoInstaller01007.dll
[2011-01-16 21:43:42 | 000,025,512 | ---- | M] (Sony Ericsson Mobile Communications) -- C:\Windows\System32\drivers\ggsemc.sys
[2011-01-16 21:43:42 | 000,013,224 | ---- | M] (Sony Ericsson Mobile Communications) -- C:\Windows\System32\drivers\ggflt.sys
[2011-01-08 08:50:00 | 000,034,304 | ---- | M] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
[2011-01-08 06:57:10 | 000,292,352 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2010-12-28 15:57:35 | 000,409,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbc32.dll
[2010-12-20 21:13:14 | 000,001,700 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2010-12-14 16:49:30 | 001,169,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sdclt.exe
[2010-12-13 21:19:17 | 000,001,762 | ---- | M] () -- C:\Users\Public\Desktop\QuickTime Player.lnk
[2010-12-08 22:01:08 | 000,114,243 | ---- | M] () -- C:\Windows\System32\drivers\klin.dat
[2010-12-08 22:01:08 | 000,097,859 | ---- | M] () -- C:\Windows\System32\drivers\klick.dat
[2010-11-29 17:38:30 | 000,094,208 | ---- | M] (Apple Inc.) -- C:\Windows\System32\QuickTimeVR.qtx
[2010-11-29 17:38:30 | 000,069,632 | ---- | M] (Apple Inc.) -- C:\Windows\System32\QuickTime.qts
[5 C:\Users\Magda\Documents\*.tmp files -> C:\Users\Magda\Documents\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011-02-26 22:10:25 | 000,000,266 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2011-02-26 18:26:48 | 000,256,512 | ---- | C] () -- C:\Windows\PEV.exe
[2011-02-26 18:26:48 | 000,089,088 | ---- | C] () -- C:\Windows\MBR.exe
[2011-02-26 18:26:48 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2011-02-26 18:26:47 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2011-02-26 18:26:47 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2011-02-24 22:03:24 | 000,000,393 | ---- | C] () -- C:\Users\Magda\Desktop\Pobieranie — skrót.lnk
[2011-02-24 20:57:45 | 000,001,594 | ---- | C] () -- C:\Windows\VPNUnInstall.MIF
[2011-01-22 23:22:49 | 000,000,322 | ---- | C] () -- C:\Windows\tasks\HPCeeScheduleForMagda.job
[2011-01-16 21:57:54 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_ggsemc_01007.Wdf
[2011-01-16 21:57:54 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_ggflt_01007.Wdf
[2011-01-16 21:54:17 | 000,001,074 | ---- | C] () -- C:\Users\Magda\Desktop\Update Service.lnk
[2010-12-20 21:13:14 | 000,001,700 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2010-12-13 21:19:17 | 000,001,762 | ---- | C] () -- C:\Users\Public\Desktop\QuickTime Player.lnk
[2010-11-28 23:35:57 | 000,114,243 | ---- | C] () -- C:\Windows\System32\drivers\klin.dat
[2010-11-28 23:35:57 | 000,097,859 | ---- | C] () -- C:\Windows\System32\drivers\klick.dat
[2010-10-22 07:50:15 | 009,465,376 | -HS- | C] () -- C:\Windows\System32\drivers\fidbox.dat
[2010-10-22 07:50:15 | 001,007,648 | -HS- | C] () -- C:\Windows\System32\drivers\fidbox2.dat
[2010-01-02 20:09:44 | 000,000,056 | -H-- | C] () -- C:\Windows\System32\ezsidmv.dat
[2009-12-16 18:32:36 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2009-12-11 22:16:54 | 000,106,605 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2009-12-11 22:16:54 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2009-10-04 01:02:23 | 000,001,146 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_DU.dat
[2009-10-04 01:02:23 | 000,001,120 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_IT.dat
[2009-10-04 01:02:23 | 000,001,107 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_GE.dat
[2009-09-12 15:20:46 | 000,116,891 | ---- | C] () -- C:\Windows\hpqins00.dat
[2009-07-04 13:21:32 | 000,000,000 | ---- | C] () -- C:\Windows\OpPrintServer.INI
[2009-06-09 22:16:42 | 003,482,240 | ---- | C] () -- C:\Windows\System32\drivers\snp2uvc.sys
[2009-02-11 22:45:02 | 000,027,264 | ---- | C] () -- C:\Windows\System32\drivers\sncduvc.sys
[2009-01-01 23:43:25 | 000,024,206 | ---- | C] () -- C:\Users\Magda\AppData\Roaming\UserTile.png
[2008-12-27 01:40:00 | 000,007,680 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2008-12-27 00:00:30 | 000,009,728 | ---- | C] () -- C:\Users\Magda\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008-04-25 18:21:06 | 000,026,964 | ---- | C] () -- C:\Windows\System32\drivers\klopp.dat
[2008-04-24 15:45:22 | 000,139,143 | ---- | C] () -- C:\Windows\hpoins15.dat.temp
[2008-04-24 15:45:22 | 000,001,039 | ---- | C] () -- C:\Windows\hpomdl15.dat.temp
[2008-04-17 14:02:36 | 000,096,629 | ---- | C] () -- C:\Windows\hpqins16.dat
[2008-04-14 13:03:13 | 000,139,245 | ---- | C] () -- C:\Windows\hpoins15.dat
[2008-04-14 13:03:12 | 000,001,039 | ---- | C] () -- C:\Windows\hpomdl15.dat
[2008-03-07 23:26:20 | 000,000,097 | ---- | C] () -- C:\Windows\System32\PICSDK.ini
[2008-03-07 23:26:19 | 000,111,932 | ---- | C] () -- C:\Windows\System32\EPPICPrinterDB.dat
[2008-03-07 23:26:19 | 000,031,053 | ---- | C] () -- C:\Windows\System32\EPPICPattern131.dat
[2008-03-07 23:26:19 | 000,029,114 | ---- | C] () -- C:\Windows\System32\EPPICPattern1.dat
[2008-03-07 23:26:19 | 000,027,417 | ---- | C] () -- C:\Windows\System32\EPPICPattern121.dat
[2008-03-07 23:26:19 | 000,021,021 | ---- | C] () -- C:\Windows\System32\EPPICPattern3.dat
[2008-03-07 23:26:19 | 000,015,670 | ---- | C] () -- C:\Windows\System32\EPPICPattern5.dat
[2008-03-07 23:26:19 | 000,013,280 | ---- | C] () -- C:\Windows\System32\EPPICPattern2.dat
[2008-03-07 23:26:19 | 000,010,673 | ---- | C] () -- C:\Windows\System32\EPPICPattern4.dat
[2008-03-07 23:26:19 | 000,004,943 | ---- | C] () -- C:\Windows\System32\EPPICPattern6.dat
[2008-03-07 23:26:19 | 000,001,140 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_PT.dat
[2008-03-07 23:26:19 | 000,001,140 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_BP.dat
[2008-03-07 23:26:19 | 000,001,137 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_ES.dat
[2008-03-07 23:26:19 | 000,001,130 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_FR.dat
[2008-03-07 23:26:19 | 000,001,130 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_CF.dat
[2008-03-07 23:26:19 | 000,001,104 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_EN.dat
[2008-03-07 23:21:03 | 000,000,044 | ---- | C] () -- C:\Windows\EPCX8400.ini
[2007-11-21 16:02:51 | 000,000,376 | ---- | C] () -- C:\Windows\ODBC.INI
[2007-10-24 01:25:29 | 000,000,108 | ---- | C] () -- C:\Users\Magda\AppData\Roaming\wklnhst.dat
[2007-08-06 18:07:30 | 000,008,784 | ---- | C] () -- C:\Windows\System32\ractrlkeyhook.dll
[2007-04-19 20:04:34 | 000,103,489 | ---- | C] () -- C:\Windows\hpqins13.dat
[2007-02-27 21:43:02 | 000,000,000 | ---- | C] () -- C:\Windows\System32\px.ini
[2007-02-22 11:14:38 | 000,204,800 | ---- | C] () -- C:\Windows\System32\igfxCoIn_v1214.dll
[2007-02-22 09:50:42 | 000,245,760 | ---- | C] () -- C:\Windows\System32\igfxTMM.dll
[2006-12-14 07:01:36 | 000,520,192 | ---- | C] () -- C:\Windows\System32\CddbPlaylist2Roxio.dll
[2006-12-14 07:01:36 | 000,204,800 | ---- | C] () -- C:\Windows\System32\CddbFileTaggerRoxio.dll
[2006-11-02 13:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006-11-02 13:47:37 | 000,357,416 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006-11-02 13:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006-11-02 11:33:01 | 000,607,406 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2006-11-02 11:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2006-11-02 11:33:01 | 000,105,014 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2006-11-02 11:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2006-11-02 11:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2006-11-02 09:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006-11-02 09:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2006-11-02 08:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006-11-02 08:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2006-05-19 20:39:58 | 000,015,497 | ---- | C] () -- C:\Windows\snp2uvc.ini
[2006-03-10 01:58:00 | 001,060,424 | ---- | C] () -- C:\Windows\System32\WdfCoInstaller01000.dll
[2005-05-08 05:06:00 | 000,016,480 | ---- | C] () -- C:\Windows\System32\rixdicon.dll
[2003-01-07 21:05:08 | 000,002,695 | ---- | C] () -- C:\Windows\System32\OUTLPERF.INI
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2008-01-29 04:36:40 | 000,000,000 | ---D | M] -- C:\Users\Magda\AppData\Roaming\FDRLab
[2008-03-07 23:40:10 | 000,000,000 | ---D | M] -- C:\Users\Magda\AppData\Roaming\Leadertech
[2009-10-04 02:00:57 | 000,000,000 | ---D | M] -- C:\Users\Magda\AppData\Roaming\LimeWire
[2009-10-04 01:03:36 | 000,000,000 | ---D | M] -- C:\Users\Magda\AppData\Roaming\Panasonic
[2008-03-23 20:40:16 | 000,000,000 | ---D | M] -- C:\Users\Magda\AppData\Roaming\PlayFirst
[2007-10-24 01:25:31 | 000,000,000 | ---D | M] -- C:\Users\Magda\AppData\Roaming\Template
[2007-11-23 13:48:00 | 000,000,000 | ---D | M] -- C:\Users\Magda\AppData\Roaming\TomTom
[2010-04-11 16:24:58 | 000,000,000 | ---D | M] -- C:\Users\Magda\AppData\Roaming\Unity
[2008-03-19 19:06:33 | 000,000,000 | ---D | M] -- C:\Users\Magda\AppData\Roaming\WildTangent
[2011-02-26 22:20:33 | 000,032,566 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2011-02-27 16:06:25 | 000,000,418 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{44943D58-3DAD-4EF7-AA8D-F80780DE73F7}.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 126 bytes -> C:\ProgramData\TEMP:D1B5B4F1

< End of report >