OTL logfile created on: 2011-04-06 14:51:33 - Run 2
OTL by OldTimer - Version 3.2.22.3     Folder = D:\!!!!rootkits
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
2,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 78,00% Memory free
4,00 Gb Paging File | 4,00 Gb Available in Paging File | 93,00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 32,81 Gb Total Space | 1,56 Gb Free Space | 4,76% Space Free | Partition Type: NTFS
Drive D: | 200,07 Gb Total Space | 2,61 Gb Free Space | 1,30% Space Free | Partition Type: NTFS
Drive F: | 93,14 Gb Total Space | 6,92 Gb Free Space | 7,43% Space Free | Partition Type: FAT32
Drive G: | 93,13 Gb Total Space | 0,12 Gb Free Space | 0,13% Space Free | Partition Type: FAT32
Drive J: | 15,11 Gb Total Space | 0,29 Gb Free Space | 1,90% Space Free | Partition Type: FAT32
 
Computer Name: PECET | User Name: Wszyscy chetni | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2011-04-05 20:39:56 | 000,580,608 | ---- | M] (OldTimer Tools) -- D:\!!!!rootkits\OTL.exe
PRC - [2011-02-26 19:05:52 | 003,246,040 | ---- | M] (Acronis) -- C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe
PRC - [2010-12-21 13:04:58 | 000,390,760 | ---- | M] (Acronis) -- C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
PRC - [2010-12-21 13:04:52 | 000,804,560 | ---- | M] (Acronis) -- C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
PRC - [2010-12-21 13:03:28 | 005,575,224 | ---- | M] (Acronis) -- D:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
PRC - [2009-07-20 13:30:50 | 000,813,584 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Logitech\SetPoint\SetPoint.exe
PRC - [2009-07-10 13:42:32 | 000,055,824 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.exe
PRC - [2008-04-14 19:21:16 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2008-03-20 12:04:46 | 002,127,296 | ---- | M] (Gadu-Gadu S.A.) -- D:\Gadu-Gadu\gg.exe
PRC - [2006-05-24 06:20:44 | 000,018,944 | ---- | M] (Creative Technology Ltd) -- C:\WINDOWS\system32\CTXFIHLP.EXE
PRC - [2006-05-24 06:20:41 | 000,017,920 | ---- | M] (Creative Technology Ltd) -- C:\WINDOWS\CTHELPER.EXE
PRC - [2006-05-24 06:05:45 | 000,730,112 | ---- | M] (Creative Technology Ltd) -- C:\WINDOWS\system32\CTXFISPI.EXE
PRC - [2006-01-09 04:43:42 | 000,053,340 | ---- | M] (Creative Technology Ltd) -- C:\Program Files\Creative\Shared Files\CTSched.exe
PRC - [2005-08-12 14:33:50 | 000,962,660 | ---- | M] () -- C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
PRC - [2003-08-31 02:08:12 | 000,850,432 | ---- | M] () -- D:\emule\partmetbackup\PartMet Backup.exe
PRC - [2003-01-22 12:58:28 | 000,073,728 | ---- | M] (Nokia Corp.) -- C:\Program Files\Common Files\Nokia\Services\ServiceLayer.exe
PRC - [2003-01-03 15:45:42 | 000,425,984 | ---- | M] (Nokia) -- C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe
PRC - [2001-12-12 02:42:30 | 000,196,608 | ---- | M] (HP) -- C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - [2011-04-05 20:39:56 | 000,580,608 | ---- | M] (OldTimer Tools) -- D:\!!!!rootkits\OTL.exe
MOD - [2010-08-23 18:12:53 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
MOD - [2009-07-20 13:29:06 | 000,045,584 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Logitech\SetPoint\lgscroll.dll
MOD - [2008-07-25 11:17:20 | 000,635,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcr80.dll
MOD - [2006-05-24 06:20:39 | 000,007,168 | ---- | M] (Creative Technology Ltd) -- C:\WINDOWS\system32\CTAGENT.DLL
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [Disabled | Stopped] --  -- (CLTNetCnService)
SRV - [2011-02-26 19:05:52 | 003,246,040 | ---- | M] (Acronis) [Auto | Running] -- C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe -- (afcdpsrv)
SRV - [2010-12-21 13:04:52 | 000,804,560 | ---- | M] (Acronis) [Auto | Running] -- C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe -- (AcrSch2Svc)
SRV - [2010-08-24 11:38:18 | 000,092,008 | ---- | M] (TomTom) [On_Demand | Stopped] -- C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe -- (TomTomHOMEService)
SRV - [2009-10-07 12:05:02 | 001,033,480 | ---- | M] (Raxco Software, Inc.) [On_Demand | Stopped] -- C:\Program Files\Raxco\PerfectDisk10\PDEngine.exe -- (PDEngine)
SRV - [2009-10-07 12:04:58 | 000,939,272 | ---- | M] (Raxco Software, Inc.) [On_Demand | Stopped] -- C:\Program Files\Raxco\PerfectDisk10\PDAgent.exe -- (PDAgent)
SRV - [2009-07-20 13:28:10 | 000,121,360 | ---- | M] (Logitech, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Logitech\Bluetooth\LBTServ.exe -- (LBTServ)
SRV - [2009-05-17 22:04:00 | 000,098,488 | ---- | M] (SiSoftware) [On_Demand | Stopped] -- C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2009.SP3c\RpcAgentSrv.exe -- (SandraAgentSrv)
SRV - [2008-01-31 18:11:19 | 000,000,000 | ---- | M] () [Auto | Stopped] -- C:\WINDOWS\system32\UTSCSI.EXE -- (UTSCSI)
SRV - [2007-11-15 18:07:45 | 000,446,464 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\ADSL Autoconnect\ADSL Autoconnect.exe -- (ADSLAutoconnect)
SRV - [2007-05-28 18:57:54 | 000,275,968 | ---- | M] (Rocket Division Software) [On_Demand | Stopped] -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE)
SRV - [2007-01-29 23:02:04 | 000,200,768 | ---- | M] (Kaspersky Lab) [On_Demand | Stopped] -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe -- (AVP)
SRV - [2007-01-25 19:31:34 | 000,093,048 | ---- | M] (CACE Technologies) [On_Demand | Stopped] -- C:\Program Files\WinPcap\rpcapd.exe -- (rpcapd) Remote Packet Capture Protocol v.0 (experimental)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2011-02-26 19:05:55 | 000,167,968 | ---- | M] (Acronis) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\afcdp.sys -- (afcdp)
DRV - [2011-02-26 19:05:43 | 000,752,128 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\tdrpm273.sys -- (tdrpman273) Acronis Try&Decide and Restore Points filter (build 273)
DRV - [2011-02-26 19:05:41 | 000,600,928 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\timntr.sys -- (timounter)
DRV - [2011-02-26 19:05:28 | 000,170,528 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\snapman.sys -- (snapman)
DRV - [2009-08-20 12:11:30 | 000,073,232 | ---- | M] (Raxco Software, Inc.) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\DefragFs.sys -- (DefragFS)
DRV - [2009-06-17 18:56:24 | 000,079,248 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LMouKE.Sys -- (LMouKE)
DRV - [2009-06-17 18:56:16 | 000,037,392 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LMouFilt.Sys -- (LMouFilt)
DRV - [2009-06-17 18:56:06 | 000,035,472 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LHidFilt.Sys -- (LHidFilt)
DRV - [2009-06-17 18:55:26 | 000,063,248 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\L8042mou.Sys -- (L8042mou)
DRV - [2009-06-17 18:55:18 | 000,020,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\L8042Kbd.sys -- (L8042Kbd)
DRV - [2009-05-05 23:37:52 | 000,026,216 | ---- | M] (SiSoftware) [Kernel | On_Demand | Stopped] -- C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2009.SP3c\WNt500x86\sandra.sys -- (SANDRA)
DRV - [2009-02-10 17:23:02 | 000,082,320 | ---- | M] (EZB Systems, Inc.) [File_System | System | Running] -- C:\Program Files\UltraISO\drivers\ISODrive.sys -- (ISODrive)
DRV - [2008-10-23 18:45:17 | 000,112,144 | ---- | M] (Kaspersky Lab) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\kl1.sys -- (kl1)
DRV - [2008-10-23 18:45:16 | 000,179,984 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\klif.sys -- (TSP)
DRV - [2008-10-23 18:45:16 | 000,179,984 | ---- | M] (Kaspersky Lab) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\klif.sys -- (klif)
DRV - [2008-04-13 20:53:09 | 000,040,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmnt.sys -- (nm)
DRV - [2008-01-25 11:12:34 | 000,025,088 | ---- | M] (TeamViewer GmbH) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\teamviewervpn.sys -- (teamviewervpn)
DRV - [2007-09-23 14:22:53 | 000,685,816 | ---- | M] (Duplex Secure Ltd.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2007-02-11 17:19:41 | 000,010,368 | ---- | M] (Padus, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\pfc.sys -- (pfc)
DRV - [2007-01-25 22:57:20 | 000,021,056 | ---- | M] (Webroot Software Inc (www.webroot.com)) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\sskbfd.sys -- (SSKBFD)
DRV - [2007-01-25 19:31:34 | 000,042,000 | ---- | M] (CACE Technologies) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\npf.sys -- (NPF)
DRV - [2006-08-29 18:32:12 | 000,039,424 | ---- | M] (Your Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\MSI\DualCoreCenter\RushTop.sys -- (RushTopDevice2)
DRV - [2006-08-29 15:08:46 | 000,027,648 | ---- | M] (MICRO-STAR INT'L CO., LTD.) [Kernel | On_Demand | Running] -- C:\Program Files\MSI\DualCoreCenter\NTGLM7X.sys -- (DigiCellDriver)
DRV - [2006-06-30 01:53:44 | 000,003,712 | ---- | M] (Logitech, Inc.) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\LBeepKE.sys -- (LBeepKE)
DRV - [2006-05-24 05:41:07 | 000,007,168 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctprxy2k.sys -- (ctprxy2k)
DRV - [2006-05-24 05:41:04 | 000,499,584 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctaud2k.sys -- (ctaud2k) Creative Audio Driver (WDM)
DRV - [2006-05-24 05:40:21 | 001,110,016 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ha20x2k.sys -- (ha20x2k)
DRV - [2006-05-24 05:38:30 | 000,116,224 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctoss2k.sys -- (ossrv)
DRV - [2006-05-24 05:38:08 | 000,143,872 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctsfm2k.sys -- (ctsfm2k)
DRV - [2006-05-24 05:38:01 | 000,078,336 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\emupia2k.sys -- (emupia)
DRV - [2006-05-24 05:37:44 | 000,502,272 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctac32k.sys -- (ctac32k)
DRV - [2006-05-10 10:56:54 | 000,027,264 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LHidKE.Sys -- (LHidKe)
DRV - [2006-02-23 23:03:42 | 000,008,576 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\KProcWatch.sys -- (KProcWatch)
DRV - [2005-11-10 11:06:04 | 000,340,704 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ctdvda2k.sys -- (ctdvda2k)
DRV - [2004-05-05 22:48:40 | 000,004,228 | ---- | M] (PowerQuest Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\PQNTDRV.sys -- (PQNTDrv)
DRV - [2004-03-02 09:26:58 | 000,050,007 | ---- | M] (Analog Deivces) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\adildr.sys -- (ADILOADER) General Purpose USB Driver (adildr.sys)
DRV - [2004-03-02 09:24:16 | 000,127,065 | ---- | M] (Analog Devices Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\adiusbaw.sys -- (adiusbaw)
DRV - [2002-07-17 08:53:02 | 000,016,877 | ---- | M] (Adaptec) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\ASPI32.SYS -- (Aspi32)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.pl
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-21-725345543-764733703-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
IE - HKU\S-1-5-21-725345543-764733703-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
 
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.16\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-03-23 21:50:21 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.16\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-03-23 21:50:21 | 000,000,000 | ---D | M]
 
[2010-06-29 22:30:36 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\Mozilla\Extensions
[2009-02-18 20:53:09 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\Mozilla\Extensions\home2@tomtom.com
[2011-04-05 19:17:38 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\Mozilla\Firefox\Profiles\l7dj6q1t.default\extensions
[2010-07-08 19:21:16 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\Mozilla\Firefox\Profiles\l7dj6q1t.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010-11-03 17:58:32 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\Mozilla\Firefox\Profiles\l7dj6q1t.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2011-04-05 19:17:38 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2010-11-13 18:52:44 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2010-12-18 11:42:55 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
[2011-02-26 15:27:00 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2010-11-13 18:52:05 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2011-02-02 22:40:24 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2011-03-08 16:25:12 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml
[2011-03-08 16:25:12 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml
[2011-03-08 16:25:13 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml
[2011-03-08 16:25:13 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml
[2011-03-08 16:25:13 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml
[2011-03-08 16:25:13 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2009-11-12 18:58:21 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (no name) - {3B2315D5-C53E-4376-8C66-535540F42312} - Reg Error: Value error. File not found
O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - No CLSID value found.
O2 - BHO: (no name) - {AB25C083-C1DD-40DA-815E-9A21F92C4D11} - Reg Error: Value error. File not found
O3 - HKU\S-1-5-21-725345543-764733703-839522115-1003\..\Toolbar\WebBrowser: (no name) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No CLSID value found.
O4 - HKLM..\Run: [CreativeTaskScheduler] C:\Program Files\Creative\Shared Files\CTSched.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [CTHelper] C:\WINDOWS\CTHELPER.EXE (Creative Technology Ltd)
O4 - HKLM..\Run: [CTxfiHlp] C:\WINDOWS\System32\CTXFIHLP.EXE (Creative Technology Ltd)
O4 - HKLM..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe (HP)
O4 - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\WINDOWS\KHALMNPR.Exe (Logitech, Inc.)
O4 - HKLM..\Run: [Nokia Tray Application] C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe (Nokia)
O4 - HKLM..\Run: [PartMet-BAcKup 2.11] D:\emule\partmetbackup\PartMet Backup.exe ()
O4 - HKLM..\Run: [TrueImageMonitor.exe] D:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe (Acronis)
O4 - HKLM..\Run: [UDC Integration]  File not found
O4 - HKLM..\Run: [UpdReg] C:\WINDOWS\Updreg.EXE (Creative Technology Ltd.)
O4 - HKLM..\Run: [Usługa Acronis Scheduler2] C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe (Acronis)
O4 - HKU\S-1-5-21-725345543-764733703-839522115-1003..\Run: [Gadu-Gadu] D:\Gadu-Gadu\gg.exe (Gadu-Gadu S.A.)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\DualCoreCenter.lnk = C:\Program Files\MSI\DualCoreCenter\StartUpDualCoreCenter.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe (Logitech, Inc.)
O4 - Startup: C:\Documents and Settings\Wszyscy chetni\Menu Start\Programy\Autostart\PartMetBackup.lnk = C:\Program Files\Java\jre6\bin\javaw.exe (Sun Microsystems, Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-725345543-764733703-839522115-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-725345543-764733703-839522115-1003\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-21-725345543-764733703-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-725345543-764733703-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-725345543-764733703-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewOnDrive = 0
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\DVDVideoSoftIEHelpers\youtubetomp3.htm ()
O9 - Extra Button: Web Anti-Virus statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll (Kaspersky Lab)
O15 - HKU\S-1-5-21-725345543-764733703-839522115-1003\..Trusted Domains:   ([]msn in Mój komputer)
O15 - HKU\S-1-5-21-725345543-764733703-839522115-1003\..Trusted Domains: com ([www.msi] http in Zaufane witryny)
O15 - HKU\S-1-5-21-725345543-764733703-839522115-1003\..Trusted Domains: com.tw ([asia.msi] http in Zaufane witryny)
O15 - HKU\S-1-5-21-725345543-764733703-839522115-1003\..Trusted Domains: com.tw ([global.msi] http in Zaufane witryny)
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} http://download.divx.com/webplayer/stage6/windows/DivXBrowserPlugin.cab (DivXBrowserPlugin Object)
O16 - DPF: {8167C273-DF59-4416-B647-C8BB2C7EE83E} http://liveupdate.msi.com.tw/autobios/LOnline/install.cab (WebSDev Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} Reg Error: Value error. (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} Reg Error: Value error. (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} Reg Error: Value error. (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} Reg Error: Value error. (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: {E6F480FC-BD44-4CBA-B74A-89AF7842937D} http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.3.1.0.cab (SysInfo Class)
O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll (Kaspersky Lab)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\klogon: DllName - C:\WINDOWS\system32\klogon.dll - C:\WINDOWS\system32\klogon.dll (Kaspersky Lab)
O20 - Winlogon\Notify\LBTWlgn: DllName - c:\program files\common files\logitech\bluetooth\LBTWlgn.dll - c:\Program Files\Common Files\Logitech\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O20 - Winlogon\Notify\WRNotifier: DllName - Reg Error: Value error. - Reg Error: Value error. File not found
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{43055797-fdb2-11dd-95a0-001617bb8a37}\Shell\AutoRun\command - "" = K:\InstallTomTomHOME.exe
O33 - MountPoints2\{450f2ea5-c674-11db-803c-4d6564696130}\Shell\AutoRun\command - "" = L:\USBNB.exe
O33 - MountPoints2\{b14072fe-9041-11df-94c6-001617bb8a37}\Shell - "" = Autorun
O33 - MountPoints2\{b14072fe-9041-11df-94c6-001617bb8a37}\Shell\AutoRun\command - "" = J:\Install_Nokia_Ovi_Suite.exe
O33 - MountPoints2\{b2f16a5f-62c9-11dd-8098-4d6564696130}\Shell\AutoRun\command - "" = M:\wd_windows_tools\setup.exe
O33 - MountPoints2\{c6889f61-d3a2-11db-bc23-4d6564696130}\Shell\AutoRun\command - "" = L:\USBNB.exe
O34 - HKLM BootExecute: (PDBoot.exe) - C:\WINDOWS\System32\PDBoot.exe (Raxco Software, Inc.)
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011-03-31 17:32:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Total Video Converter
[2011-03-19 17:14:40 | 000,000,000 | ---D | C] -- C:\Program Files\Passware
[2011-03-19 17:14:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Wszyscy chetni\Menu Start\Programy\Passware
[2011-03-08 11:35:10 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\NSV
[2010-11-15 15:53:25 | 000,047,360 | ---- | C] (VSO Software) -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\pcouffin.sys
[2006-05-24 06:38:39 | 000,033,792 | ---- | C] ( ) -- C:\WINDOWS\System32\a3d.dll
[2006-05-24 05:33:22 | 000,009,216 | ---- | C] ( ) -- C:\WINDOWS\System32\KILLAPPS.EXE
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[19 C:\Documents and Settings\All Users\Dane aplikacji\*.tmp files -> C:\Documents and Settings\All Users\Dane aplikacji\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2011-04-06 14:47:42 | 000,000,260 | ---- | M] () -- C:\WINDOWS\tasks\WGASetup.job
[2011-04-06 14:47:40 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011-04-06 14:46:10 | 000,064,900 | ---- | M] () -- C:\WINDOWS\System32\DVCState-{00000005-00000000-00000000-00001102-00000005-002C1102}.rfx
[2011-04-06 14:46:10 | 000,054,692 | ---- | M] () -- C:\WINDOWS\System32\BMXStateBkp-{00000005-00000000-00000000-00001102-00000005-002C1102}.rfx
[2011-04-06 14:46:10 | 000,054,692 | ---- | M] () -- C:\WINDOWS\System32\BMXState-{00000005-00000000-00000000-00001102-00000005-002C1102}.rfx
[2011-04-06 14:46:10 | 000,001,080 | ---- | M] () -- C:\WINDOWS\System32\settingsbkup.sfm
[2011-04-06 14:46:10 | 000,001,080 | ---- | M] () -- C:\WINDOWS\System32\settings.sfm
[2011-04-06 14:46:09 | 006,541,196 | -HS- | M] () -- C:\WINDOWS\System32\drivers\fidbox2.idx
[2011-04-06 14:46:07 | 069,695,008 | -HS- | M] () -- C:\WINDOWS\System32\drivers\fidbox2.dat
[2011-04-06 14:46:05 | 651,642,912 | -HS- | M] () -- C:\WINDOWS\System32\drivers\fidbox.dat
[2011-04-06 14:46:05 | 008,731,292 | -HS- | M] () -- C:\WINDOWS\System32\drivers\fidbox.idx
[2011-04-06 14:45:43 | 000,000,190 | ---- | M] () -- C:\Documents and Settings\Wszyscy chetni\defogger_reenable
[2011-04-06 11:08:07 | 000,000,725 | ---- | M] () -- C:\Documents and Settings\Wszyscy chetni\Pulpit\SpyRemover.lnk
[2011-04-06 09:39:20 | 000,057,856 | ---- | M] () -- C:\Documents and Settings\Wszyscy chetni\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-04-06 07:39:49 | 000,115,267 | ---- | M] () -- C:\WINDOWS\System32\drivers\klin.dat
[2011-04-06 07:39:49 | 000,097,859 | ---- | M] () -- C:\WINDOWS\System32\drivers\klick.dat
[2011-04-06 07:33:42 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011-04-05 20:41:47 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2011-04-02 19:35:25 | 000,054,156 | -H-- | M] () -- C:\WINDOWS\QTFont.qfn
[2011-04-02 19:35:25 | 000,001,409 | ---- | M] () -- C:\WINDOWS\QTFont.for
[2011-04-01 07:43:15 | 000,298,048 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011-03-31 17:32:51 | 000,000,567 | ---- | M] () -- C:\Documents and Settings\Wszyscy chetni\Pulpit\Total Video Converter.lnk
[2011-03-31 17:32:51 | 000,000,546 | ---- | M] () -- C:\Documents and Settings\Wszyscy chetni\Pulpit\Total Video Player.lnk
[2011-03-25 01:27:00 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2011-03-20 11:50:20 | 000,894,478 | ---- | M] () -- C:\Documents and Settings\Wszyscy chetni\Moje dokumenty\VAT-7(12)_v1-0[1]._022011.pdf
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[19 C:\Documents and Settings\All Users\Dane aplikacji\*.tmp files -> C:\Documents and Settings\All Users\Dane aplikacji\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011-04-06 14:45:31 | 000,000,190 | ---- | C] () -- C:\Documents and Settings\Wszyscy chetni\defogger_reenable
[2011-04-02 19:35:25 | 000,054,156 | -H-- | C] () -- C:\WINDOWS\QTFont.qfn
[2011-04-02 19:35:25 | 000,001,409 | ---- | C] () -- C:\WINDOWS\QTFont.for
[2011-03-31 17:32:51 | 000,000,567 | ---- | C] () -- C:\Documents and Settings\Wszyscy chetni\Pulpit\Total Video Converter.lnk
[2011-03-31 17:32:51 | 000,000,546 | ---- | C] () -- C:\Documents and Settings\Wszyscy chetni\Pulpit\Total Video Player.lnk
[2011-03-20 11:43:52 | 000,894,478 | ---- | C] () -- C:\Documents and Settings\Wszyscy chetni\Moje dokumenty\VAT-7(12)_v1-0[1]._022011.pdf
[2011-02-23 11:12:40 | 000,000,077 | ---- | C] () -- C:\WINDOWS\d.ini
[2011-01-07 18:15:32 | 000,167,864 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat
[2010-11-21 13:20:37 | 000,241,436 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2010-11-21 13:20:32 | 000,241,440 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2010-11-21 13:20:32 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin
[2010-11-21 13:20:07 | 002,293,194 | ---- | C] () -- C:\WINDOWS\System32\nvdata.bin
[2010-11-15 15:53:26 | 000,087,608 | ---- | C] () -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\inst.exe
[2010-11-15 15:53:26 | 000,007,887 | ---- | C] () -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\pcouffin.cat
[2010-11-15 15:53:25 | 000,001,144 | ---- | C] () -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\pcouffin.inf
[2009-12-19 17:05:51 | 000,169,224 | ---- | C] () -- C:\WINDOWS\hpoins29.dat
[2009-12-19 17:05:51 | 000,000,986 | ---- | C] () -- C:\WINDOWS\hpomdl29.dat
[2009-11-14 11:00:32 | 651,642,912 | -HS- | C] () -- C:\WINDOWS\System32\drivers\fidbox.dat
[2009-11-14 11:00:32 | 069,695,008 | -HS- | C] () -- C:\WINDOWS\System32\drivers\fidbox2.dat
[2009-08-31 13:26:42 | 000,000,195 | ---- | C] () -- C:\WINDOWS\IfoEdit.INI
[2009-06-17 17:47:35 | 010,440,704 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\sandra.mda
[2009-06-15 23:58:09 | 000,004,096 | -H-- | C] () -- C:\Documents and Settings\Wszyscy chetni\Ustawienia lokalne\Dane aplikacji\keyfile3.drm
[2009-05-07 09:53:06 | 000,067,849 | ---- | C] () -- C:\WINDOWS\System32\x264vfw-uninstall.exe
[2009-05-06 00:31:30 | 002,402,304 | ---- | C] () -- C:\WINDOWS\System32\x264vfw.dll
[2009-04-29 11:15:06 | 000,002,021 | ---- | C] () -- C:\WINDOWS\coolmp3.ini
[2009-04-25 06:38:46 | 000,168,448 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2009-04-25 06:38:24 | 000,795,648 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2009-04-25 06:38:24 | 000,130,048 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2009-04-25 06:38:23 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2009-04-25 06:38:17 | 000,084,480 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2009-04-17 02:14:45 | 000,000,000 | ---- | C] () -- C:\WINDOWS\COOLSYS.INI
[2009-04-17 02:14:43 | 000,010,677 | ---- | C] () -- C:\WINDOWS\coolkb2k.ini
[2009-04-17 02:13:52 | 000,000,027 | ---- | C] () -- C:\WINDOWS\winzip32.ini
[2009-04-17 02:10:29 | 000,008,196 | ---- | C] () -- C:\WINDOWS\COOL.INI
[2009-01-09 15:32:19 | 000,008,576 | ---- | C] () -- C:\WINDOWS\System32\drivers\KProcWatch.sys
[2008-10-23 18:27:04 | 000,115,267 | ---- | C] () -- C:\WINDOWS\System32\drivers\klin.dat
[2008-10-23 18:27:04 | 000,097,859 | ---- | C] () -- C:\WINDOWS\System32\drivers\klick.dat
[2008-09-08 16:13:14 | 000,012,852 | ---- | C] () -- C:\WINDOWS\scunin.dat
[2008-08-10 11:53:55 | 000,006,015 | ---- | C] () -- C:\WINDOWS\DiabUnin.dat
[2008-01-05 14:25:29 | 000,001,369 | ---- | C] () -- C:\WINDOWS\bestplayer.ini
[2008-01-02 13:53:54 | 000,000,046 | ---- | C] () -- C:\WINDOWS\System32\DonationCoder_urlsnooper_InstallInfo.dat
[2007-12-22 20:03:18 | 000,183,112 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe
[2007-12-22 20:02:58 | 000,066,872 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe
[2007-12-22 19:56:02 | 000,022,328 | ---- | C] () -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\PnkBstrK.sys
[2007-11-23 15:58:30 | 002,768,896 | ---- | C] () -- C:\WINDOWS\System32\GSDLL32.dll
[2007-11-23 15:58:30 | 000,126,976 | ---- | C] () -- C:\WINDOWS\System32\gswin32c.exe
[2007-11-23 15:58:29 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\PSConvert.exe
[2007-11-23 15:58:29 | 000,000,137 | ---- | C] () -- C:\WINDOWS\System32\psparam.ini
[2007-11-05 08:52:31 | 000,000,059 | ---- | C] () -- C:\WINDOWS\wpd99.drv
[2007-11-05 08:52:30 | 000,051,716 | ---- | C] () -- C:\WINDOWS\System32\pdf995mon.dll
[2007-10-31 15:08:26 | 000,000,072 | ---- | C] () -- C:\WINDOWS\EurekaLog.ini
[2007-10-31 08:28:57 | 000,074,752 | ---- | C] () -- C:\WINDOWS\cadkasdeinst01e.exe
[2007-08-27 11:08:21 | 000,000,212 | ---- | C] () -- C:\WINDOWS\wcx_ftp.ini
[2007-05-18 23:20:02 | 000,000,060 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2007-05-04 14:38:58 | 000,000,020 | ---- | C] () -- C:\WINDOWS\GndGGGg.dat
[2007-05-01 17:23:12 | 000,003,353 | ---- | C] () -- C:\WINDOWS\WINCMD.INI
[2007-04-08 09:01:57 | 000,225,280 | R--- | C] () -- C:\WINDOWS\DLR6310phmgunin.exe
[2007-03-21 18:08:27 | 000,000,035 | ---- | C] () -- C:\WINDOWS\ClonyCDs.ini
[2007-03-21 18:06:07 | 000,000,389 | ---- | C] () -- C:\WINDOWS\Clony2.ini
[2007-03-16 19:13:47 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\UTSCSI.EXE
[2007-03-10 17:39:29 | 000,043,520 | ---- | C] () -- C:\WINDOWS\System32\CmdLineExt03.dll
[2007-03-10 15:31:04 | 000,038,433 | ---- | C] () -- C:\WINDOWS\DIIUnin.dat
[2007-02-15 18:19:42 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2007-02-12 12:26:52 | 000,000,058 | ---- | C] () -- C:\WINDOWS\nfsc_patch.ini
[2007-02-12 09:36:55 | 000,000,427 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2007-02-11 18:07:22 | 000,006,550 | ---- | C] () -- C:\WINDOWS\jautoexp.dat
[2007-02-11 16:22:05 | 000,000,021 | ---- | C] () -- C:\WINDOWS\Fast800.ini
[2007-02-11 16:22:04 | 000,143,360 | ---- | C] () -- C:\WINDOWS\adiras.exe
[2007-02-11 16:22:04 | 000,000,894 | ---- | C] () -- C:\WINDOWS\adiras.ini
[2007-02-11 16:22:04 | 000,000,155 | ---- | C] () -- C:\WINDOWS\adidsl.ini
[2007-02-11 16:22:03 | 000,127,456 | ---- | C] () -- C:\WINDOWS\System32\ipdetect.exe
[2007-02-11 16:22:01 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\coclassfast.dll
[2007-02-11 16:22:01 | 000,046,892 | ---- | C] () -- C:\WINDOWS\System32\adadix16.dll
[2007-02-11 16:22:01 | 000,024,576 | ---- | C] () -- C:\WINDOWS\enddisk32.exe
[2007-02-11 16:21:59 | 000,143,360 | ---- | C] () -- C:\WINDOWS\autoclk.exe
[2007-02-11 16:21:59 | 000,022,395 | ---- | C] () -- C:\WINDOWS\System32\drivers\fpga.bin
[2007-02-08 19:14:26 | 000,057,856 | ---- | C] () -- C:\Documents and Settings\Wszyscy chetni\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007-02-08 18:51:22 | 000,034,308 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll
[2007-02-08 18:36:37 | 000,086,445 | ---- | C] () -- C:\WINDOWS\System32\instwdm.ini
[2007-02-08 18:36:37 | 000,000,191 | ---- | C] () -- C:\WINDOWS\System32\ctzapxx.ini
[2007-02-08 18:36:36 | 000,003,072 | ---- | C] () -- C:\WINDOWS\CTXFIRES.DLL
[2007-02-08 18:24:23 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2007-02-08 18:24:18 | 000,581,632 | ---- | C] () -- C:\WINDOWS\System32\nvhwvid.dll
[2007-02-08 18:21:05 | 000,273,408 | ---- | C] () -- C:\WINDOWS\NVGfxOgl.dll
[2007-02-08 11:28:05 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2007-02-08 11:24:04 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2007-02-08 11:20:18 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2007-02-08 11:19:23 | 000,298,048 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2007-01-29 23:09:14 | 000,023,196 | ---- | C] () -- C:\WINDOWS\System32\drivers\klop.dat
[2007-01-25 19:31:36 | 000,053,299 | ---- | C] () -- C:\WINDOWS\System32\pthreadVC.dll
[2006-05-24 07:00:48 | 000,037,888 | ---- | C] () -- C:\WINDOWS\System32\CTBURST.DLL
[2006-05-24 06:20:42 | 000,034,304 | ---- | C] () -- C:\WINDOWS\PSCONV.EXE
[2006-05-24 05:49:25 | 000,323,640 | ---- | C] () -- C:\WINDOWS\System32\ctdlang.dat
[2006-05-24 05:49:25 | 000,044,567 | ---- | C] () -- C:\WINDOWS\System32\ctdnlstr.dat
[2006-05-24 05:37:56 | 000,033,792 | ---- | C] () -- C:\WINDOWS\System32\REGPLIB.EXE
[2006-05-24 05:37:12 | 000,140,643 | ---- | C] () -- C:\WINDOWS\System32\CTBAS2W.DAT
[2006-05-24 05:34:34 | 000,264,526 | ---- | C] () -- C:\WINDOWS\System32\CTSBAS2W.DAT
[2006-05-24 05:34:14 | 000,113,221 | ---- | C] () -- C:\WINDOWS\System32\CTBASICW.DAT
[2006-05-24 05:34:13 | 000,231,281 | ---- | C] () -- C:\WINDOWS\System32\CTSBASW.DAT
[2006-05-24 05:33:34 | 000,053,932 | ---- | C] () -- C:\WINDOWS\System32\ctdaught.dat
[2006-05-24 05:33:33 | 000,313,207 | ---- | C] () -- C:\WINDOWS\System32\ctstatic.dat
[2006-05-24 05:33:29 | 000,004,096 | ---- | C] () -- C:\WINDOWS\System32\ENLOCSTR.EXE
[2005-07-27 07:13:12 | 000,000,214 | ---- | C] () -- C:\WINDOWS\System32\KILL.INI
[2005-06-07 15:10:50 | 000,070,656 | ---- | C] () -- C:\WINDOWS\System32\CTMMACTL.DLL
[2004-08-20 10:04:58 | 000,114,688 | ---- | C] () -- C:\WINDOWS\System32\wmatime.dll
[2004-08-02 15:20:40 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004-06-10 09:01:12 | 000,160,016 | ---- | C] () -- C:\WINDOWS\System32\awmpi.dll
[2002-09-20 18:19:46 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2002-03-21 16:39:02 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\UNACEV2.DLL
[2001-10-28 18:42:30 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\prnmnt.dll
[2001-10-26 18:15:16 | 000,490,902 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat
[2001-10-26 18:15:16 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat
[2001-10-26 18:15:16 | 000,084,154 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat
[2001-10-26 18:15:16 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat
[2001-08-23 15:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2001-08-23 15:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2001-08-17 23:30:24 | 000,432,766 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2001-08-17 23:30:24 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2001-08-17 23:30:24 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2001-08-17 23:30:22 | 000,067,722 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2001-08-17 23:15:38 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2001-07-22 00:36:48 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2001-07-22 00:36:04 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2001-07-22 00:24:16 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2007-02-11 17:19:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ACD Systems
[2011-02-26 18:52:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Acronis
[2007-10-02 19:44:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Azureus
[2010-11-21 11:44:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\EA Core
[2010-11-21 11:44:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Electronic Arts
[2007-11-05 09:02:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\pdf995
[2007-11-23 14:16:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PEERNET
[2010-11-21 11:44:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Solidshield
[2007-03-11 00:14:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\stamina
[2007-05-20 08:46:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Test Drive Unlimited
[2009-02-18 19:06:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TomTom
[2008-10-15 12:18:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\WhereIsIt
[2007-03-03 13:31:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\ACD Systems
[2011-02-26 19:12:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\Acronis
[2010-12-26 17:00:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\AnvSoft
[2007-10-02 19:47:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\Azureus
[2010-11-03 17:58:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\DVDVideoSoftIEHelpers
[2007-10-31 13:22:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\eXPert PDF Editor
[2008-04-22 22:06:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\Gadu-Gadu
[2009-01-24 23:52:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\GO
[2008-07-30 23:52:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\GO_Backup_2008.01.19
[2008-09-09 14:05:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\GO_backup_2008.09.09
[2008-11-16 10:16:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\GO_Backup_2008.11.16
[2007-07-28 20:04:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\GO_Backup_2009.01.24_2
[2007-12-05 15:05:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\iGO
[2008-12-01 14:26:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\Leadertech
[2007-04-08 09:02:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\MobileAction
[2010-11-03 17:52:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\mp3ripper
[2010-11-03 17:50:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\MSDLL
[2007-02-12 09:15:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\Opera
[2008-01-02 19:41:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\Orbit
[2007-11-23 14:16:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\PEERNET
[2008-01-31 18:11:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\PLAux
[2007-02-18 03:11:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\Reasonable Software
[2009-01-19 12:03:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\streamripper
[2011-03-15 15:24:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\TeamViewer
[2009-02-18 19:06:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\TomTom
[2010-11-28 01:32:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\uTorrent
[2010-11-15 15:54:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\Vso
[2009-09-07 12:51:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\Wireshark
[2007-11-23 12:00:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wszyscy chetni\Dane aplikacji\WordToPDF
[2011-04-06 14:47:42 | 000,000,260 | ---- | M] () -- C:\WINDOWS\Tasks\WGASetup.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 

< End of report >