OTL logfile created on: 2014-02-15 17:32:06 - Run 2 OTL by OldTimer - Version 3.2.58.1 Folder = C:\Documents and Settings\Administrator\Pulpit\Programy Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 0,90 Gb Available Physical Memory | 45,18% Memory free 3,85 Gb Paging File | 2,72 Gb Available in Paging File | 70,64% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 245,05 Gb Total Space | 13,72 Gb Free Space | 5,60% Space Free | Partition Type: NTFS Drive D: | 220,71 Gb Total Space | 174,42 Gb Free Space | 79,02% Space Free | Partition Type: NTFS Computer Name: NIGTELLIOS | User Name: Administrator | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2014-02-15 12:23:12 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2014-02-14 12:12:30 | 000,052,568 | ---- | M] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\PirritSuggestor\PirritService.exe PRC - [2014-02-14 12:12:28 | 000,190,808 | ---- | M] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\PirritSuggestor\PirritDesktop.exe PRC - [2014-02-11 06:45:53 | 001,824,000 | ---- | M] (Valve Corporation) -- D:\Program Files\Steam\Steam.exe PRC - [2014-01-10 14:58:54 | 000,055,296 | ---- | M] () -- C:\Program Files\Pirrit\AutoUpdater.exe PRC - [2013-12-18 21:05:43 | 000,182,696 | ---- | M] (Oracle Corporation) -- C:\Program Files\Java\jre7\bin\jqs.exe PRC - [2013-12-10 03:22:32 | 002,279,712 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe PRC - [2013-12-10 03:21:14 | 001,494,304 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe PRC - [2013-12-08 21:10:15 | 000,223,112 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Update\1.3.22.3\GoogleCrashHandler.exe PRC - [2013-11-29 21:26:33 | 009,547,240 | ---- | M] (TeamSpeak Systems GmbH) -- C:\Program Files\TeamSpeak 3 Client\ts3client_win32.exe PRC - [2013-08-27 22:16:14 | 001,028,896 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe PRC - [2013-04-16 17:46:20 | 000,122,880 | ---- | M] (Saitek) -- C:\Program Files\SmartTechnology\Software\SaiMfd.exe PRC - [2013-04-16 17:46:12 | 000,327,680 | ---- | M] (Saitek) -- C:\Program Files\SmartTechnology\Software\ProfilerU.exe PRC - [2013-04-04 13:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe PRC - [2012-10-14 21:21:42 | 000,763,856 | ---- | M] () -- C:\Program Files\Core Temp\Core Temp.exe PRC - [2012-08-20 21:16:09 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Pulpit\Programy\OTL.exe PRC - [2012-04-26 13:33:16 | 002,743,104 | ---- | M] (DT Soft Ltd) -- C:\Program Files\DAEMON Tools Pro\DTShellHlp.exe PRC - [2009-01-21 13:19:54 | 000,092,168 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\Gaming Software\LWEMon.exe PRC - [2008-08-21 15:55:22 | 000,487,424 | ---- | M] () -- C:\Program Files\WLAN_Software\ZD1211B\ZDWLan.EXE PRC - [2008-04-14 22:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2005-01-14 09:32:38 | 000,053,248 | ---- | M] () -- C:\WINDOWS\system32\PAStiSvc.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2014-02-15 12:23:12 | 003,578,992 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll MOD - [2014-02-14 12:12:30 | 000,052,568 | ---- | M] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\PirritSuggestor\PirritService.exe MOD - [2014-02-14 12:12:28 | 000,190,808 | ---- | M] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\PirritSuggestor\PirritDesktop.exe MOD - [2014-02-05 15:52:14 | 016,287,624 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32_12_0_0_44.dll MOD - [2014-01-27 20:02:52 | 001,138,088 | ---- | M] () -- D:\Program Files\Steam\bin\chromehtml.dll MOD - [2014-01-11 00:33:44 | 020,625,832 | ---- | M] () -- D:\Program Files\Steam\bin\libcef.dll MOD - [2014-01-11 00:33:42 | 000,717,312 | ---- | M] () -- D:\Program Files\Steam\SDL2.dll MOD - [2014-01-10 14:58:54 | 000,055,296 | ---- | M] () -- C:\Program Files\Pirrit\AutoUpdater.exe MOD - [2013-12-19 21:17:40 | 000,468,768 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\nview\nvShell.dll MOD - [2013-12-12 23:19:40 | 000,142,848 | ---- | M] () -- D:\Program Files\Steam\libavresample-1.dll MOD - [2013-11-29 21:26:33 | 000,555,496 | ---- | M] () -- C:\Program Files\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll MOD - [2013-11-29 21:26:33 | 000,431,080 | ---- | M] () -- C:\Program Files\TeamSpeak 3 Client\plugins\clientquery_plugin.dll MOD - [2013-11-29 21:26:33 | 000,230,376 | ---- | M] () -- C:\Program Files\TeamSpeak 3 Client\soundbackends\directsound_win32.dll MOD - [2013-11-05 02:12:06 | 000,890,592 | ---- | M] () -- D:\Program Files\Steam\libavutil-52.dll MOD - [2013-06-15 00:49:12 | 001,100,800 | ---- | M] () -- D:\Program Files\Steam\bin\avcodec-53.dll MOD - [2013-06-15 00:49:12 | 000,192,000 | ---- | M] () -- D:\Program Files\Steam\bin\avformat-53.dll MOD - [2013-06-15 00:49:12 | 000,124,416 | ---- | M] () -- D:\Program Files\Steam\bin\avutil-51.dll MOD - [2013-01-27 15:58:38 | 000,109,568 | ---- | M] () -- C:\Program Files\DAEMON Tools Pro\BRD.dll MOD - [2012-10-14 21:21:42 | 000,763,856 | ---- | M] () -- C:\Program Files\Core Temp\Core Temp.exe MOD - [2008-08-21 15:55:22 | 000,487,424 | ---- | M] () -- C:\Program Files\WLAN_Software\ZD1211B\ZDWLan.EXE MOD - [2008-07-21 13:10:48 | 000,045,056 | ---- | M] () -- C:\Program Files\WLAN_Software\ZD1211B\ZDWlan.DLL MOD - [2008-06-30 15:22:52 | 000,212,992 | ---- | M] () -- C:\Program Files\WLAN_Software\ZD1211B\dot1x_dll.dll MOD - [2005-01-14 09:32:38 | 000,053,248 | ---- | M] () -- C:\WINDOWS\system32\PAStiSvc.exe [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [On_Demand | Stopped] -- D:\Program Files\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe -- (DAUpdaterSvc) SRV - [2014-02-15 12:23:12 | 000,118,896 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2014-02-14 12:12:30 | 000,052,568 | ---- | M] () [Auto | Running] -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\PirritSuggestor\PirritService.exe -- (PirritDesktop) SRV - [2014-02-05 15:52:16 | 000,257,928 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2014-01-10 14:58:54 | 000,055,296 | ---- | M] () [Auto | Running] -- C:\Program Files\Pirrit\AutoUpdater.exe -- (PirritUpdater) SRV - [2013-12-18 21:05:43 | 000,182,696 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\Program Files\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService) SRV - [2013-12-10 03:21:14 | 001,494,304 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe -- (NvNetworkService) SRV - [2013-09-05 10:34:30 | 000,171,680 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2013-04-04 13:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService) SRV - [2013-04-04 13:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler) SRV - [2013-02-04 17:43:22 | 000,155,824 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion) SRV - [2012-11-14 13:45:30 | 000,526,208 | ---- | M] (Wacom Technology, Corp.) [Auto | Stopped] -- C:\Program Files\Tablet\Pen\WTabletServiceCon.exe -- (WTabletServiceCon) SRV - [2010-02-19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard) SRV - [2005-01-14 09:32:38 | 000,053,248 | ---- | M] () [Auto | Running] -- C:\WINDOWS\system32\PAStiSvc.exe -- (STI Simulator) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\XDva401.sys -- (XDva401) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | On_Demand | Unknown] -- C:\DOCUME~1\ADMINI~1\USTAWI~1\Temp\uwtiqfow.sys -- (uwtiqfow) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\EagleXNt.sys -- (EagleXNt) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\cmdatp.sys -- (ATP) DRV - File not found [Kernel | On_Demand | Running] -- C:\DOCUME~1\ADMINI~1\USTAWI~1\Temp\ALSysIO.sys -- (ALSysIO) DRV - [2013-11-28 14:38:20 | 000,129,312 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvhda32.sys -- (NVHDA) DRV - [2013-11-26 23:47:28 | 000,025,200 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ggsemc.sys -- (ggsemc) DRV - [2013-11-26 23:47:28 | 000,012,400 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ggflt.sys -- (ggflt) DRV - [2013-06-01 17:02:25 | 000,018,584 | ---- | M] (Echobit, LLC) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\evolve.sys -- (EvolveVirtualAdapter) DRV - [2013-04-30 11:58:40 | 000,046,624 | ---- | M] (Saitek) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SaiBus.sys -- (SaiNtBus) DRV - [2013-04-30 11:58:40 | 000,023,200 | ---- | M] (Saitek) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SaiMini.sys -- (SaiMini) DRV - [2013-04-04 13:50:32 | 000,022,856 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mbam.sys -- (MBAMProtector) DRV - [2013-03-29 01:52:12 | 000,033,512 | ---- | M] (AnchorFree Inc) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\taphss.sys -- (taphss) DRV - [2013-02-14 11:55:40 | 000,016,608 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\gdrv.sys -- (gdrv) DRV - [2013-01-27 15:57:59 | 000,242,240 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\dtsoftbus01.sys -- (dtsoftbus01) DRV - [2013-01-27 13:41:10 | 000,017,664 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ZDPSp50.sys -- (ZDPSp50) DRV - [2012-10-12 08:54:52 | 000,013,728 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\wacomrouterfilter.sys -- (wacomrouterfilter) DRV - [2012-10-12 08:20:38 | 000,069,024 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\wachidrouter.sys -- (WacHidRouter) DRV - [2012-10-12 08:20:38 | 000,011,680 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hidkmdf.sys -- (hidkmdf) DRV - [2012-09-20 14:48:46 | 000,145,216 | ---- | M] (Saitek) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SaiK1708.sys -- (SaiK1708) DRV - [2012-09-20 14:48:46 | 000,041,280 | ---- | M] (Saitek) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SaiU1708.sys -- (SaiU1708) DRV - [2011-12-15 18:29:42 | 000,026,624 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\tap0901.sys -- (tap0901) DRV - [2010-04-08 19:30:10 | 000,168,040 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\nvgts.sys -- (nvgts) DRV - [2009-12-30 11:20:56 | 000,027,064 | ---- | M] (VS Revo Group) [File_System | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\revoflt.sys -- (Revoflt) DRV - [2009-09-11 11:48:04 | 000,066,056 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\WmXlCore.sys -- (WmXlCore) DRV - [2009-09-11 11:47:54 | 000,014,984 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WmVirHid.sys -- (WmVirHid) DRV - [2009-09-11 11:47:42 | 000,031,752 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WmHidLo.sys -- (WmHidLo) DRV - [2009-09-11 11:47:32 | 000,035,592 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WmFilter.sys -- (WmFilter) DRV - [2009-09-11 11:47:22 | 000,022,792 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\WmBEnum.sys -- (WmBEnum) DRV - [2009-07-13 16:51:12 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\winusb.sys -- (WinUSB) DRV - [2009-03-18 16:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi) DRV - [2008-12-11 10:24:20 | 004,959,232 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) DRV - [2008-09-23 11:13:40 | 000,735,232 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ZD1211BU.SYS -- (ZD1211BU(Atheros) DRV - [2008-08-05 13:10:12 | 001,684,736 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt) DRV - [2007-06-29 14:47:34 | 000,034,304 | ---- | M] (AMD, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AmdLLD.sys -- (AmdLLD) DRV - [2006-11-27 16:33:54 | 000,019,968 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus) DRV - [2006-11-27 16:33:50 | 000,058,368 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD) DRV - [2006-10-18 16:31:38 | 000,105,472 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\nvata.sys -- (nvata) DRV - [2006-07-01 23:32:26 | 000,043,520 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8) DRV - [2006-01-04 08:41:48 | 001,389,056 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt) DRV - [2005-04-08 10:46:18 | 000,162,176 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\PFC027.sys -- (PAC207) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://search.v9.com/web/?q={searchTerms} IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.v9.com/web/?q={searchTerms} IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?utm_source=b&utm_medium=vlt&from=vlt&uid=SAMSUNG_HD502HJ_S20BJ90B725788&ts=1359298928 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=http://127.0.0.1:9881 [color=#E56717]========== FireFox ==========[/color] FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_12_0_0_44.dll () FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.51.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.51.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.7: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF - HKLM\Software\MozillaPlugins\@wacom.com/wtPlugin,version=2.1.0.2: C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll File not found FF - HKCU\Software\MozillaPlugins\@nsroblox.roblox.com/launcher: C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\RobloxVersions\version-8031f568a8214a5f\\NPRobloxProxy.dll () FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF - HKCU\Software\MozillaPlugins\facebook.com/fbDesktopPlugin: C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll (Facebook, Inc.) FF - HKCU\Software\MozillaPlugins\wacom.com/WacomTabletPlugin: C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn2 [2013-10-25 11:47:28 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2014-02-15 12:23:08 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn2 [2013-10-25 11:47:28 | 000,000,000 | ---D | M] [2013-06-02 13:44:55 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Extensions [2014-02-15 12:19:57 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\k6lxwlrt.default\extensions [2014-01-11 20:15:11 | 000,000,000 | ---D | M] (SaveSense) -- C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\k6lxwlrt.default\extensions\{8b337819-d1e8-48d3-8178-168ae8c99c36} [2013-08-07 22:43:53 | 000,000,000 | ---D | M] (Battlefield Play4Free) -- C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\k6lxwlrt.default\extensions\battlefieldplay4free@ea.com [2014-02-15 12:23:06 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2014-02-15 12:23:05 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions [2014-02-15 12:23:13 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [2012-06-28 16:42:00 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}, CHR - homepage: http://www.search.ask.com/?o=APN10640A&gct=hp&d=473-104&v=n9602-169&t=4 CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\31.0.1650.63\pdf.dll CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll CHR - plugin: Winamp Application Detector (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npwachk.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll CHR - plugin: Roblox Launcher Plugin (Enabled) = C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\RobloxVersions\version-bac2ef28b67142d0\\NPRobloxProxy.dll CHR - plugin: Unity Player (Enabled) = C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Unity\WebPlayer\loader\npUnity3D32.dll CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll CHR - plugin: Java(TM) Platform SE 7 U25 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll CHR - plugin: WacomTabletPlugin (Enabled) = C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll CHR - plugin: VLC Web Plugin (Enabled) = C:\Program Files\VideoLAN\VLC\npvlc.dll CHR - plugin: Windows Presentation Foundation (Enabled) = C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll CHR - plugin: Java Deployment Toolkit 7.0.250.17 (Enabled) = C:\WINDOWS\system32\npDeployJava1.dll CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll CHR - Extension: Pirrit Suggestor = C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\ammfplfdkakimnibcghcebgbiiphabgc\ CHR - Extension: Anonymous Web Surfing = C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\dngfidjcppkndibjldacllohbaegmbpo\1.3.6_0\ CHR - Extension: Ghostery = C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij\5.0.0_0\ CHR - Extension: Google Wallet = C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\ O1 HOSTS File: ([2013-01-11 13:23:39 | 000,000,897 | RHS- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: 212.59.241.155 google.pl O1 - Hosts: 212.59.241.155 www.google.pl O1 - Hosts: 212.59.241.155 v9.com O1 - Hosts: 212.59.241.155 www.v9.com O1 - Hosts: 127.0.0.1 mpa.one.microsoft.com O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found. O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [AdobeCS6ServiceManager] C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\ALCMTR.EXE (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe (AMD) O4 - HKLM..\Run: [BambooCore] C:\Program Files\Bamboo Dock\BambooCore.exe () O4 - HKLM..\Run: [GEST] = File not found O4 - HKLM..\Run: [NvBackend] C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\nvmctray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [Nvtmru] C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nview\nwiz.exe () O4 - HKLM..\Run: [ProfilerU] C:\Program Files\SmartTechnology\Software\ProfilerU.exe (Saitek) O4 - HKLM..\Run: [SaiMfd] C:\Program Files\SmartTechnology\Software\SaiMfd.exe (Saitek) O4 - HKLM..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe (Logitech Inc.) O4 - HKLM..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [ZDWLan_Utility] C:\Program Files\WLAN_Software\ZD1211B\ZDWLan.EXE () O4 - HKCU..\Run: [AdobeBridge] File not found O4 - HKCU..\Run: [Core Temp] C:\Program Files\Core Temp\Core Temp.exe () O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.) O9 - Extra Button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Administrator\Menu Start\Programy\IMVU\Run IMVU.lnk () O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.179.1.62 62.179.1.63 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2666B989-3743-40E0-822B-AD2D41CB66D6}: DhcpNameServer = 62.179.1.62 62.179.1.63 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20 - AppInit_DLLs: (c:\progra~1\movies~1\safety~1\safety~2.dll) - File not found O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O27 - HKLM IFEO\bitguard.exe: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\bprotect.exe: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\browsemngr.exe: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\browserdefender.exe: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\browsermngr.exe: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\browserprotect.exe: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\bundlesweetimsetup.exe: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\cltmngsvc.exe: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\delta babylon.exe: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\delta tb.exe: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\delta2.exe: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\deltainstaller.exe: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\deltasetup.exe: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\deltatb_2501-c733154b.exe: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\iminentsetup.exe: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\rjatydimofu.exe: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\sweetimsetup.exe: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\tbdelta.exetoolbar783881609.exe: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2013-01-27 13:34:45 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{833cb9f2-56c1-11e3-bbbe-0024d25e855c}\Shell - "" = AutoRun O33 - MountPoints2\{833cb9f2-56c1-11e3-bbbe-0024d25e855c}\Shell\AutoRun\command - "" = H:\Startme.exe O33 - MountPoints2\{96069824-687e-11e2-8860-a09a1dd1ef12}\Shell - "" = AutoRun O33 - MountPoints2\{96069824-687e-11e2-8860-a09a1dd1ef12}\Shell\AutoRun\command - "" = H:\Setup.exe O33 - MountPoints2\H\Shell - "" = AutoRun O33 - MountPoints2\H\Shell\AutoRun\command - "" = H:\Setup.exe O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O36 - AppCertDlls: x64 - (c:\program files\movies toolbar\safetynut\x64\safetycrt.dll) - File not found O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2014-02-15 17:32:18 | 000,000,000 | ---D | C] -- C:\FRST [2014-02-15 15:06:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Steam [2014-02-15 12:23:05 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox [2014-02-14 20:39:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\PirritSuggestor [2014-02-05 15:52:11 | 003,544,968 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerInstaller.exe [2014-01-29 23:40:14 | 001,049,888 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvdispco3233221.dll [2014-01-29 23:40:14 | 000,893,728 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvdispgenco3233221.dll [2014-01-27 13:23:43 | 000,264,616 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javaws.exe [2014-01-27 13:23:43 | 000,145,408 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javacpl.cpl [2014-01-27 13:23:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Java [2014-01-21 18:04:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Bohemia Interactive Studio [2014-01-21 17:58:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\ArmA 2 [2014-01-18 13:44:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\DayZCommander [2014-01-18 13:44:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Dotjosh Studios [2014-01-18 13:44:01 | 000,000,000 | ---D | C] -- C:\Program Files\Dotjosh Studios [2014-01-18 13:27:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Moje dokumenty\ArmA 2 Other Profiles [2014-01-18 13:04:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Menu Start\Programy\Bohemia Interactive [2014-01-18 13:02:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Moje dokumenty\ArmA 2 [2014-01-18 13:02:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\ArmA 2 OA [2013-01-27 15:08:21 | 000,047,360 | ---- | C] (VSO Software) -- C:\Documents and Settings\Administrator\Dane aplikacji\pcouffin.sys [8 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [5 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2014-02-15 17:28:27 | 000,038,864 | ---- | M] () -- C:\WINDOWS\System32\nvAppTimestamps [2014-02-15 17:15:46 | 000,001,050 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2014-02-15 17:15:00 | 000,000,432 | ---- | M] () -- C:\WINDOWS\tasks\At1.job [2014-02-15 16:52:00 | 000,000,930 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job [2014-02-15 16:49:00 | 000,001,034 | ---- | M] () -- C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-839522115-2052111302-2146896963-500UA.job [2014-02-15 15:06:09 | 000,000,544 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Steam.lnk [2014-02-15 14:00:38 | 000,001,046 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2014-02-15 14:00:35 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2014-02-14 19:49:02 | 000,001,012 | ---- | M] () -- C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-839522115-2052111302-2146896963-500Core.job [2014-02-10 16:12:00 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2014-02-05 15:52:15 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe [2014-02-05 15:52:15 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl [2014-02-05 15:52:11 | 003,544,968 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerInstaller.exe [2014-01-30 00:02:03 | 001,135,076 | ---- | M] () -- C:\WINDOWS\System32\nvdrsdb1.bin [2014-01-30 00:02:03 | 000,000,001 | ---- | M] () -- C:\WINDOWS\System32\nvdrssel.bin [2014-01-30 00:01:35 | 001,135,076 | ---- | M] () -- C:\WINDOWS\System32\nvdrsdb0.bin [2014-01-29 16:20:37 | 000,139,832 | ---- | M] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys [2014-01-29 16:20:29 | 000,281,768 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrB.xtr [2014-01-29 15:37:49 | 000,282,296 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrB.ex0 [2014-01-27 13:23:11 | 000,612,458 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2014-01-27 13:23:11 | 000,535,952 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2014-01-27 13:23:11 | 000,132,596 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2014-01-27 13:23:11 | 000,104,534 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2014-01-24 02:46:47 | 000,153,775 | ---- | M] () -- C:\Documents and Settings\Administrator\Moje dokumenty\ts3_clientui-win32-1382530211-2014-01-24 02_46_46..dmp [8 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [5 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2014-02-15 15:06:09 | 000,000,544 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Steam.lnk [2014-01-29 23:51:17 | 000,018,657 | ---- | C] () -- C:\WINDOWS\System32\nvinfo.pb [2014-01-24 02:46:46 | 000,153,775 | ---- | C] () -- C:\Documents and Settings\Administrator\Moje dokumenty\ts3_clientui-win32-1382530211-2014-01-24 02_46_46..dmp [2014-01-18 21:30:07 | 000,000,032 | R--- | C] () -- C:\Documents and Settings\All Users\hash.dat [2014-01-15 20:11:00 | 000,008,711 | ---- | C] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\recently-used.xbel [2014-01-12 20:15:06 | 000,000,057 | ---- | C] () -- C:\Documents and Settings\NetworkService\Dane aplikacji\WB.CFG [2013-12-21 19:32:19 | 000,000,132 | ---- | C] () -- C:\Documents and Settings\Administrator\Dane aplikacji\Preferencje formatu PNG CS6 firmy Adobe [2013-11-28 21:12:49 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Administrator\cd [2013-10-25 11:40:31 | 000,176,681 | ---- | C] () -- C:\WINDOWS\hpoins34.dat [2013-10-25 11:40:30 | 000,000,727 | ---- | C] () -- C:\WINDOWS\hpomdl34.dat [2013-09-12 18:30:46 | 000,012,005 | ---- | C] () -- C:\Documents and Settings\Administrator\Dane aplikacji\alsoft.ini [2013-08-29 15:49:57 | 002,434,856 | ---- | C] () -- C:\WINDOWS\System32\pbsvc_bc2.exe [2013-08-26 22:41:35 | 002,601,752 | ---- | C] () -- C:\WINDOWS\System32\pbsvc_moh.exe [2013-08-11 13:55:37 | 000,001,041 | ---- | C] () -- C:\Documents and Settings\Administrator\Dane aplikacji\vso_ts_preview.xml [2013-08-07 23:21:38 | 000,138,056 | ---- | C] () -- C:\Documents and Settings\Administrator\Dane aplikacji\PnkBstrK.sys [2013-06-02 13:16:38 | 000,120,832 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll [2013-05-28 16:54:07 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2013-05-12 21:16:40 | 000,125,799 | ---- | C] () -- C:\WINDOWS\hpoins34.dat.temp [2013-05-12 21:16:40 | 000,000,404 | ---- | C] () -- C:\WINDOWS\hpomdl34.dat.temp [2013-05-11 18:09:40 | 000,005,632 | ---- | C] () -- C:\Documents and Settings\Administrator\Dane aplikacji\Pokémon3D - Aktualisierung.exe [2013-05-11 18:09:40 | 000,000,218 | ---- | C] () -- C:\Documents and Settings\Administrator\Dane aplikacji\info.update [2013-05-11 18:09:37 | 000,221,184 | ---- | C] () -- C:\Documents and Settings\Administrator\Dane aplikacji\Pokemon3D.exe [2013-05-01 13:00:21 | 000,139,832 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys [2013-05-01 13:00:07 | 000,281,768 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe [2013-05-01 12:59:46 | 000,076,888 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe [2013-04-12 11:37:20 | 000,000,187 | ---- | C] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\rbxcsettings.rbx [2013-02-12 01:04:14 | 001,770,674 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-S-1-5-21-839522115-2052111302-2146896963-500-0.dat [2013-02-12 01:04:13 | 000,399,450 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-System.dat [2013-02-10 13:48:03 | 000,008,704 | ---- | C] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2013-01-28 15:42:30 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\PAStiSvc.exe [2013-01-27 16:34:42 | 000,764,240 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat [2013-01-27 15:08:21 | 000,087,608 | ---- | C] () -- C:\Documents and Settings\Administrator\Dane aplikacji\inst.exe [2013-01-27 15:08:21 | 000,007,887 | ---- | C] () -- C:\Documents and Settings\Administrator\Dane aplikacji\pcouffin.cat [2013-01-27 15:08:21 | 000,001,144 | ---- | C] () -- C:\Documents and Settings\Administrator\Dane aplikacji\pcouffin.inf [2013-01-27 14:26:50 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2013-01-27 14:24:13 | 003,623,600 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2013-01-27 14:21:26 | 001,135,076 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin [2013-01-27 14:21:26 | 001,135,076 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin [2013-01-27 14:21:26 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin [2013-01-27 14:21:18 | 003,557,400 | ---- | C] () -- C:\WINDOWS\System32\nvdata.data [2013-01-27 14:18:16 | 000,025,548 | ---- | C] () -- C:\WINDOWS\System32\drivers\RTAIODAT.DAT [2013-01-27 13:51:04 | 000,001,732 | ---- | C] () -- C:\WINDOWS\System32\drivers\nvphy.bin [2013-01-27 13:38:02 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2013-01-27 13:32:33 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat < End of report >