OTL logfile created on: 2011-04-11 09:23:11 - Run 2
OTL by OldTimer - Version 3.2.22.3     Folder = G:\
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
3,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 87,00% Memory free
8,00 Gb Paging File | 8,00 Gb Available in Paging File | 96,00% Paging File free
Paging file location(s): C:\pagefile.sys 4989 7000 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 75,13 Gb Total Space | 53,15 Gb Free Space | 70,74% Space Free | Partition Type: NTFS
Drive D: | 195,31 Gb Total Space | 189,39 Gb Free Space | 96,97% Space Free | Partition Type: NTFS
Drive E: | 195,32 Gb Total Space | 139,08 Gb Free Space | 71,21% Space Free | Partition Type: NTFS
Drive G: | 998,00 Mb Total Space | 996,68 Mb Free Space | 99,87% Space Free | Partition Type: FAT32
 
Computer Name: PC | User Name: Administrator | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2011-04-11 08:52:04 | 000,580,608 | ---- | M] (OldTimer Tools) -- G:\OTL.com
PRC - [2011-01-24 15:56:18 | 002,609,992 | ---- | M] (COMODO) -- C:\Programy\Comodo\COMODO\COMODO Internet Security\cfp.exe
PRC - [2011-01-24 15:56:12 | 001,803,224 | ---- | M] (COMODO) -- C:\Programy\Comodo\COMODO\COMODO Internet Security\cmdagent.exe
PRC - [2010-12-02 13:15:06 | 001,496,528 | ---- | M] (TrueCrypt Foundation) -- C:\Programy\TrueCrypt\TrueCrypt.exe
PRC - [2009-07-07 23:32:11 | 002,761,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2004-09-19 20:27:44 | 000,065,536 | ---- | M] () -- C:\Program Files\LClock\LClock.exe
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - [2011-04-11 08:52:04 | 000,580,608 | ---- | M] (OldTimer Tools) -- G:\OTL.com
MOD - [2011-01-12 18:28:35 | 000,285,480 | ---- | M] (COMODO) -- C:\WINDOWS\system32\guard32.dll
MOD - [2008-04-15 14:00:00 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [On_Demand | Stopped] --  -- (MSIServer)
SRV - File not found [Disabled | Stopped] --  -- (HidServ)
SRV - [2011-01-24 15:56:12 | 001,803,224 | ---- | M] (COMODO) [Auto | Running] -- C:\Programy\Comodo\COMODO\COMODO Internet Security\cmdagent.exe -- (cmdAgent)
SRV - [2010-12-05 02:22:25 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010-12-02 11:41:02 | 000,435,016 | ---- | M] (TuneUp Software) [Disabled | Stopped] -- C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe -- (TuneUp.Defrag)
SRV - [2010-01-19 19:27:18 | 001,043,784 | ---- | M] (TuneUp Software) [Disabled | Stopped] -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe -- (TuneUp.UtilitiesSvc)
SRV - [2010-01-19 19:24:12 | 000,030,024 | ---- | M] (TuneUp Software) [Disabled | Stopped] -- C:\WINDOWS\system32\uxtuneup.dll -- (UxTuneUp)
SRV - [2007-05-28 18:57:54 | 000,275,968 | ---- | M] (Rocket Division Software) [Auto | Stopped] -- D:\Programy_i\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE)
SRV - [2006-10-27 01:47:54 | 000,065,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- D:\Programy_i\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Running] --  -- (aic32p)
DRV - [2011-01-12 18:28:34 | 000,094,784 | ---- | M] (COMODO) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\inspect.sys -- (Inspect)
DRV - [2011-01-12 18:28:31 | 000,027,576 | ---- | M] (COMODO) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\cmdhlp.sys -- (cmdHlp)
DRV - [2011-01-12 18:28:30 | 000,015,592 | ---- | M] (COMODO) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\cmderd.sys -- (cmderd)
DRV - [2011-01-12 18:28:29 | 000,239,368 | ---- | M] (COMODO) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\cmdGuard.sys -- (cmdGuard)
DRV - [2010-12-02 18:53:26 | 000,685,816 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2010-12-02 13:15:06 | 000,231,248 | ---- | M] (TrueCrypt Foundation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\truecrypt.sys -- (truecrypt)
DRV - [2010-11-02 20:36:26 | 006,188,648 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2010-10-28 16:58:00 | 000,272,232 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2010-04-07 19:43:58 | 000,062,208 | ---- | M] (Silicon Image, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\si3112.sys -- (Si3112)
DRV - [2009-11-18 08:17:00 | 001,395,800 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt)
DRV - [2009-11-18 08:16:00 | 001,691,480 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt)
DRV - [2009-11-02 10:39:30 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2009-10-14 08:24:44 | 000,010,064 | ---- | M] (TuneUp Software) [Kernel | Disabled | Stopped] -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys -- (TuneUpUtilitiesDrv)
DRV - [2009-03-20 11:01:26 | 000,121,856 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bmdm.sys -- (ss_bmdm)
DRV - [2009-03-20 11:01:26 | 000,090,112 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bbus.sys -- (ss_bbus) SAMSUNG USB Mobile Device (WDM)
DRV - [2009-03-20 11:01:26 | 000,014,976 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bmdfl.sys -- (ss_bmdfl) SAMSUNG USB Mobile Modem (Filter)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
 
 
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchURL\g, = http://www.google.com/search?q=%s
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchURL\g, = http://www.google.com/search?q=%s
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchURL\g, = http://www.google.com/search?q=%s
IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-21-682003330-1677128483-2147132391-500\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\S-1-5-21-682003330-1677128483-2147132391-500\Software\Microsoft\Internet Explorer\SearchURL\g, = http://www.google.com/search?q=%s
IE - HKU\S-1-5-21-682003330-1677128483-2147132391-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultengine: ""
FF - prefs.js..browser.search.defaultenginename: "Facemoods Search"
FF - prefs.js..browser.search.order.1: ""
FF - prefs.js..browser.search.selectedEngine: "Facemoods Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.google.pl/ig?hl=pl&source=iglk"
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.4
FF - prefs.js..extensions.enabledItems: {2E18002D-DF43-4c65-9FDA-40D02F066D9E}:1.6.1
FF - prefs.js..extensions.enabledItems: firebug@software.joehewitt.com:1.6.2
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: linky@gemal.dk:3.0.0
FF - prefs.js..extensions.enabledItems: bossknb@ttt-jl.blogspot.com:2.1
FF - prefs.js..extensions.enabledItems: {de1b245c-de57-11da-ba2d-0050c2490048}:1.0.8
FF - prefs.js..extensions.enabledItems: beta@linkdiagnosis.com:2.2.41
FF - prefs.js..extensions.enabledItems: {DB9127A2-3381-41ec-82B3-1B6ED4C6F29A}:1.0
FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.1
FF - prefs.js..extensions.enabledItems: {D249FD00-4DF9-11D9-9FDC-0080481ADA61}:1.5
FF - prefs.js..extensions.enabledItems: me@paprikka.pl:1.0
FF - prefs.js..extensions.enabledItems: {02450954-cdd9-410f-b1da-db804e18c671}:0.96.3
FF - prefs.js..extensions.enabledItems: {FBF6D7FB-F305-4445-BB3D-FEF66579A033}:5.0
FF - prefs.js..keyword.URL: "http://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q="
 
FF - HKLM\software\mozilla\Mozilla Firefox 4.0\extensions\\Components: C:\Programy\Mozilla Firefox\components [2011-03-23 23:10:25 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0\extensions\\Plugins: C:\Programy\Mozilla Firefox\plugins [2011-03-31 15:04:36 | 000,000,000 | ---D | M]
 
[2010-12-02 19:15:19 | 000,000,000 | ---D | M] (No name found) -- C:\D & S\Administrator\Dane aplikacji\Mozilla\Extensions
[2011-04-08 14:38:18 | 000,000,000 | ---D | M] (No name found) -- C:\D & S\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\1hqxq3qg.default\extensions
[2011-01-31 01:23:48 | 000,000,000 | ---D | M] (Screengrab) -- C:\D & S\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\1hqxq3qg.default\extensions\{02450954-cdd9-410f-b1da-db804e18c671}
[2010-12-02 19:16:21 | 000,000,000 | ---D | M] (Extended Copy Menu) -- C:\D & S\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\1hqxq3qg.default\extensions\{2E18002D-DF43-4c65-9FDA-40D02F066D9E}
[2010-12-02 19:16:21 | 000,000,000 | ---D | M] ("MinimizeToTray") -- C:\D & S\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\1hqxq3qg.default\extensions\{31513E58-F253-47ad-86DB-D5F21E905429}
[2011-04-01 18:43:35 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\D & S\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\1hqxq3qg.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2011-01-09 20:08:26 | 000,000,000 | ---D | M] (MetaProducts Integration) -- C:\D & S\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\1hqxq3qg.default\extensions\{D249FD00-4DF9-11D9-9FDC-0080481ADA61}
[2010-12-02 19:16:20 | 000,000,000 | ---D | M] (flashget3 Extension) -- C:\D & S\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\1hqxq3qg.default\extensions\{DB9127A2-3381-41ec-82B3-1B6ED4C6F29A}
[2010-12-02 19:16:20 | 000,000,000 | ---D | M] (MinimizeToTray Plus) -- C:\D & S\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\1hqxq3qg.default\extensions\{de1b245c-de57-11da-ba2d-0050c2490048}
[2011-01-27 20:54:48 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\D & S\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\1hqxq3qg.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2011-01-31 15:49:00 | 000,000,000 | ---D | M] ("MultirowBookmarksToolbar") -- C:\D & S\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\1hqxq3qg.default\extensions\{FBF6D7FB-F305-4445-BB3D-FEF66579A033}
[2010-12-02 19:16:23 | 000,000,000 | ---D | M] ("LinkDiagnosis 2.2") -- C:\D & S\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\1hqxq3qg.default\extensions\beta@linkdiagnosis.com
[2010-12-02 19:16:23 | 000,000,000 | ---D | M] (老板键鼠) -- C:\D & S\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\1hqxq3qg.default\extensions\bossknb@ttt-jl.blogspot.com
[2010-12-02 19:16:21 | 000,000,000 | ---D | M] (Linky) -- C:\D & S\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\1hqxq3qg.default\extensions\linky@gemal.dk
[2009-10-17 23:31:58 | 000,000,998 | ---- | M] () -- C:\D & S\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\1hqxq3qg.default\searchplugins\mininova.xml
[2011-03-28 15:03:20 | 000,002,039 | ---- | M] () -- C:\D & S\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\1hqxq3qg.default\searchplugins\torrentyorg.xml
File not found (No name found) -- 
() (No name found) -- C:\D & S\ADMINISTRATOR\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\1HQXQ3QG.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
() (No name found) -- C:\D & S\ADMINISTRATOR\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\1HQXQ3QG.DEFAULT\EXTENSIONS\FIREBUG@SOFTWARE.JOEHEWITT.COM.XPI
[2010-12-02 11:39:22 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
 
O1 HOSTS File: ([2010-12-19 12:17:03 | 000,000,813 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: 127.0.0.1 pagead2.googlesyndication.com
O3 - HKU\S-1-5-21-682003330-1677128483-2147132391-500\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: [COMODO Internet Security] C:\Programy\Comodo\COMODO\COMODO Internet Security\cfp.exe (COMODO)
O4 - HKLM..\Run: [UnlockerAssistant]  File not found
O4 - HKU\.DEFAULT..\Run: [LClock] C:\Program Files\LClock\LClock.exe ()
O4 - HKU\S-1-5-18..\Run: [LClock] C:\Program Files\LClock\LClock.exe ()
O4 - HKU\S-1-5-20..\Run: [LClock] C:\Program Files\LClock\LClock.exe ()
O4 - HKU\S-1-5-21-682003330-1677128483-2147132391-500..\Run: [LClock] C:\Program Files\LClock\LClock.exe ()
O4 - HKU\S-1-5-21-682003330-1677128483-2147132391-500..\Run: [TrueCrypt] C:\Programy\TrueCrypt\TrueCrypt.exe (TrueCrypt Foundation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktopCleanupWizard = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoInternetOpenWith = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableCAD = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableStatusMessages = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: VerboseStatus = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyPictures = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyPictures = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyPictures = 1
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1
O7 - HKU\S-1-5-21-682003330-1677128483-2147132391-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-682003330-1677128483-2147132391-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1
O7 - HKU\S-1-5-21-682003330-1677128483-2147132391-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyPictures = 1
O7 - HKU\S-1-5-21-682003330-1677128483-2147132391-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1
O7 - HKU\S-1-5-21-682003330-1677128483-2147132391-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktop = 0
O7 - HKU\S-1-5-21-682003330-1677128483-2147132391-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 0
O7 - HKU\S-1-5-21-682003330-1677128483-2147132391-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoNetHood = 0
O7 - HKU\S-1-5-21-682003330-1677128483-2147132391-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideClock = 0
O7 - HKU\S-1-5-21-682003330-1677128483-2147132391-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoManageMyComputerVerb = 0
O7 - HKU\S-1-5-21-682003330-1677128483-2147132391-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 0
O7 - HKU\S-1-5-21-682003330-1677128483-2147132391-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O7 - HKU\S-1-5-21-682003330-1677128483-2147132391-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuPinnedList = 0
O7 - HKU\S-1-5-21-682003330-1677128483-2147132391-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoUserNameInStartMenu = 0
O7 - HKU\S-1-5-21-682003330-1677128483-2147132391-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: StartmenuLogoff = 0
O7 - HKU\S-1-5-21-682003330-1677128483-2147132391-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuSubFolders = 0
O7 - HKU\S-1-5-21-682003330-1677128483-2147132391-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCommonGroups = 0
O7 - HKU\S-1-5-21-682003330-1677128483-2147132391-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoPrinterTabs = 0
O7 - HKU\S-1-5-21-682003330-1677128483-2147132391-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDeletePrinter = 0
O7 - HKU\S-1-5-21-682003330-1677128483-2147132391-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoAddPrinter = 0
O7 - HKU\S-1-5-21-682003330-1677128483-2147132391-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoPrinters = 0
O7 - HKU\S-1-5-21-682003330-1677128483-2147132391-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoNetworkConnections = 0
O7 - HKU\S-1-5-21-682003330-1677128483-2147132391-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFavoritesMenu = 0
O7 - HKU\S-1-5-21-682003330-1677128483-2147132391-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFind = 0
O7 - HKU\S-1-5-21-682003330-1677128483-2147132391-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoClose = 0
O7 - HKU\S-1-5-21-682003330-1677128483-2147132391-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetFolders = 0
O7 - HKU\S-1-5-21-682003330-1677128483-2147132391-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoChangeStartMenu = 0
O7 - HKU\S-1-5-21-682003330-1677128483-2147132391-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewContextMenu = 0
O7 - HKU\S-1-5-21-682003330-1677128483-2147132391-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFileMenu = 0
O7 - HKU\S-1-5-21-682003330-1677128483-2147132391-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-682003330-1677128483-2147132391-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
O7 - HKU\S-1-5-21-682003330-1677128483-2147132391-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoShellSearchButton = 0
O7 - HKU\S-1-5-21-682003330-1677128483-2147132391-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoToolbarCustomize = 0
O7 - HKU\S-1-5-21-682003330-1677128483-2147132391-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsNetHood = 0
O7 - HKU\S-1-5-21-682003330-1677128483-2147132391-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoChangeAnimation = 0
O7 - HKU\S-1-5-21-682003330-1677128483-2147132391-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoChangeKeyboardNavigationIndicators = 0
O7 - HKU\S-1-5-21-682003330-1677128483-2147132391-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoThemesTab = 0
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - D:\Programy_i\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\Programy_i\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: IE WebDeveloper V2 - {D851CEE8-86A0-440C-B8F4-DA7DA99B5765} - D:\Programy_i\IEInspector\IEWebDeveloperV2\IEWebDeveloperV2.dll (IEInspector Software)
O9 - Extra 'Tools' menuitem : IE WebDeveloper V2 - {D851CEE8-86A0-440C-B8F4-DA7DA99B5765} - Reg Error: Value error. File not found
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_19-windows-i586.cab (Java Plug-in 1.6.0_19)
O16 - DPF: {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_19-windows-i586.cab (Java Plug-in 1.6.0_19)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_19-windows-i586.cab (Java Plug-in 1.6.0_19)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.233.233.233 87.204.204.204
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\D & S\Administrator\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\D & S\Administrator\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - D:\Programy_i\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010-12-02 11:33:06 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{d1336203-23e3-11e0-86f7-001fd076471a}\Shell - "" = AutoRun
O33 - MountPoints2\{d1336203-23e3-11e0-86f7-001fd076471a}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RUNdLl32.ExE  .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn
O33 - MountPoints2\G\Shell - "" = AutoRun
O33 - MountPoints2\G\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RUNdLl32.ExE  .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011-04-11 00:27:06 | 000,000,000 | RH-D | C] -- C:\D & S\Administrator\Recent
[2011-04-11 00:14:04 | 000,000,000 | R--D | C] -- C:\32788R22FWJFW
[2011-04-11 00:07:39 | 000,000,000 | ---D | C] -- C:\Program Files\InterMute
[2011-04-11 00:03:48 | 000,000,000 | ---D | C] -- C:\D & S\Administrator\Ustawienia lokalne\Dane aplikacji\COMODO
[2011-04-10 21:13:48 | 000,527,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_7.dll
[2011-04-10 21:13:48 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_5.dll
[2011-04-10 21:13:43 | 000,239,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_7.dll
[2011-04-10 21:13:41 | 002,106,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_43.dll
[2011-04-10 21:13:41 | 001,868,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dcsx_43.dll
[2011-04-10 21:13:40 | 000,470,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_43.dll
[2011-04-10 21:13:40 | 000,248,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx11_43.dll
[2011-04-10 21:13:39 | 001,998,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_43.dll
[2011-04-05 00:07:08 | 000,000,000 | ---D | C] -- C:\D & S\Administrator\Dane aplikacji\Subversion
[2011-03-30 16:27:57 | 000,000,000 | ---D | C] -- C:\D & S\Administrator\Pulpit\Nowy folder (2)
[2011-03-30 16:19:58 | 000,000,000 | ---D | C] -- C:\D & S\Administrator\Pulpit\allegro
[2011-03-30 10:40:09 | 000,000,000 | ---D | C] -- C:\D & S\Administrator\Pulpit\WNP
[2011-03-27 16:00:06 | 000,000,000 | ---D | C] -- C:\Program Files\FunWebProducts
[2011-03-21 15:58:43 | 000,000,000 | ---D | C] -- C:\D & S\Administrator\Menu Start\Programy\The KMPlayer
[2008-08-14 09:14:14 | 000,996,720 | ---- | C] (Adobe Systems Incorporated) -- C:\D & S\All Users\Dane aplikacji\adobetmp000225153
[2008-08-14 09:14:14 | 000,079,240 | ---- | C] (Adobe Systems Incorporated) -- C:\D & S\All Users\Dane aplikacji\adobetmp000125153
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2011-04-11 09:17:39 | 000,000,598 | ---- | M] () -- C:\WINDOWS\tasks\Automatyczne wyszukiwanie problemów.job
[2011-04-11 09:17:36 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011-04-11 09:17:35 | 3488,014,336 | -HS- | M] () -- C:\hiberfil.sys
[2011-04-11 09:17:30 | 001,418,720 | ---- | M] () -- C:\WINDOWS\System32\drivers\sfi.dat
[2011-04-11 09:11:58 | 000,023,462 | ---- | M] () -- C:\WINDOWS\System32\Notepad.ini
[2011-04-11 09:01:00 | 000,000,250 | ---- | M] () -- C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
[2011-04-11 08:55:16 | 000,023,258 | ---- | M] () -- C:\WINDOWS\Notepad.ini
[2011-04-11 00:19:41 | 000,052,373 | ---- | M] () -- C:\D & S\Administrator\Pulpit\how-to-use-combofix.htm
[2011-04-11 00:07:40 | 000,001,725 | ---- | M] () -- C:\D & S\Administrator\Pulpit\CWShredder.lnk
[2011-04-10 23:44:33 | 000,000,211 | -HS- | M] () -- C:\boot.ini
[2011-04-10 21:33:07 | 000,002,184 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011-04-10 21:31:37 | 000,002,432 | ---- | M] () -- C:\TMPlf2352.html
[2011-04-10 21:31:37 | 000,002,432 | ---- | M] () -- C:\TMPah2352.html
[2011-04-10 21:31:37 | 000,002,089 | ---- | M] () -- C:\TMPTA2352.html
[2011-04-10 21:31:37 | 000,002,089 | ---- | M] () -- C:\TMPrM2352.html
[2011-04-10 21:14:07 | 000,001,299 | ---- | M] () -- C:\D & S\Administrator\Pulpit\Red Alert 3.lnk
[2011-04-10 18:04:19 | 000,003,398 | ---- | M] () -- C:\WINDOWS\WINCMD.INI
[2011-04-10 17:48:35 | 000,000,777 | ---- | M] () -- C:\WINDOWS\wcx_ftp.ini
[2011-04-10 15:51:41 | 000,106,496 | ---- | M] () -- C:\D & S\Administrator\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-04-10 12:04:29 | 083,116,641 | ---- | M] () -- C:\D & S\Administrator\Pulpit\Wypadki_kobiet_cz_2_-_Wykop_pl.flv
[2011-04-06 00:29:20 | 004,926,098 | ---- | M] () -- C:\D & S\Administrator\Pulpit\Prodigy - Voodoo people.mp3
[2011-04-05 20:04:30 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2011-04-05 13:45:43 | 000,114,029 | -H-- | M] () -- C:\treeinfo.wc
[2011-04-05 00:06:43 | 000,000,036 | ---- | M] () -- C:\D & S\Administrator\.org.eclipse.epp.usagedata.recording.userId
[2011-04-03 23:12:45 | 000,500,934 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2011-04-03 23:12:45 | 000,441,654 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011-04-03 23:12:45 | 000,088,500 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2011-04-03 23:12:45 | 000,070,770 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011-04-03 23:05:38 | 000,002,432 | ---- | M] () -- C:\TMPoN3248.html
[2011-04-03 23:05:38 | 000,002,432 | ---- | M] () -- C:\TMPNB3248.html
[2011-04-03 23:05:38 | 000,002,089 | ---- | M] () -- C:\TMPdL3248.html
[2011-04-03 23:05:38 | 000,002,089 | ---- | M] () -- C:\TMPae3248.html
[2011-03-31 19:17:10 | 000,002,432 | ---- | M] () -- C:\TMPdI5964.html
[2011-03-27 15:03:00 | 000,002,432 | ---- | M] () -- C:\TMPbi4204.html
[2011-03-23 23:10:29 | 000,000,673 | ---- | M] () -- C:\D & S\All Users\Pulpit\Mozilla Firefox.lnk
[2011-03-23 09:24:06 | 000,002,432 | ---- | M] () -- C:\TMPOi5124.html
[2011-03-23 09:24:06 | 000,002,089 | ---- | M] () -- C:\TMPir5124.html
[2011-03-22 00:12:55 | 000,002,432 | ---- | M] () -- C:\TMPWM1524.html
[2011-03-19 13:58:52 | 000,000,350 | ---- | M] () -- C:\D & S\Administrator\Pulpit\Downloads.lnk
[2011-03-16 01:54:01 | 000,002,432 | ---- | M] () -- C:\TMPRN6072.html
[2011-03-16 01:25:06 | 000,002,432 | ---- | M] () -- C:\TMPoI6072.html
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011-04-11 00:19:39 | 000,052,373 | ---- | C] () -- C:\D & S\Administrator\Pulpit\how-to-use-combofix.htm
[2011-04-11 00:07:40 | 000,001,725 | ---- | C] () -- C:\D & S\Administrator\Pulpit\CWShredder.lnk
[2011-04-10 21:14:06 | 000,001,299 | ---- | C] () -- C:\D & S\Administrator\Pulpit\Red Alert 3.lnk
[2011-04-10 12:02:48 | 083,116,641 | ---- | C] () -- C:\D & S\Administrator\Pulpit\Wypadki_kobiet_cz_2_-_Wykop_pl.flv
[2011-04-09 13:00:16 | 000,002,432 | ---- | C] () -- C:\TMPah2352.html
[2011-04-09 13:00:16 | 000,002,089 | ---- | C] () -- C:\TMPrM2352.html
[2011-04-09 12:59:55 | 000,002,432 | ---- | C] () -- C:\TMPlf2352.html
[2011-04-09 12:59:55 | 000,002,089 | ---- | C] () -- C:\TMPTA2352.html
[2011-04-06 00:25:14 | 004,926,098 | ---- | C] () -- C:\D & S\Administrator\Pulpit\Prodigy - Voodoo people.mp3
[2011-04-05 00:06:43 | 000,000,036 | ---- | C] () -- C:\D & S\Administrator\.org.eclipse.epp.usagedata.recording.userId
[2011-04-04 18:22:00 | 000,114,029 | -H-- | C] () -- C:\treeinfo.wc
[2011-04-03 13:01:39 | 000,002,432 | ---- | C] () -- C:\TMPoN3248.html
[2011-04-03 13:01:39 | 000,002,089 | ---- | C] () -- C:\TMPae3248.html
[2011-04-03 13:01:32 | 000,002,432 | ---- | C] () -- C:\TMPNB3248.html
[2011-04-03 13:01:32 | 000,002,089 | ---- | C] () -- C:\TMPdL3248.html
[2011-03-31 18:24:48 | 000,002,432 | ---- | C] () -- C:\TMPdI5964.html
[2011-03-23 23:10:29 | 000,000,679 | ---- | C] () -- C:\D & S\All Users\Menu Start\Programy\Mozilla Firefox.lnk
[2011-03-23 16:57:06 | 000,002,432 | ---- | C] () -- C:\TMPbi4204.html
[2011-03-22 23:02:28 | 000,002,432 | ---- | C] () -- C:\TMPOi5124.html
[2011-03-22 23:02:28 | 000,002,089 | ---- | C] () -- C:\TMPir5124.html
[2011-03-21 22:30:12 | 000,002,432 | ---- | C] () -- C:\TMPWM1524.html
[2011-03-19 13:58:52 | 000,000,350 | ---- | C] () -- C:\D & S\Administrator\Pulpit\Downloads.lnk
[2011-03-16 01:20:27 | 000,002,432 | ---- | C] () -- C:\TMPRN6072.html
[2011-03-16 01:20:17 | 000,002,432 | ---- | C] () -- C:\TMPoI6072.html
[2011-03-06 12:45:13 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2011-03-06 12:45:13 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2011-03-06 12:45:11 | 000,183,808 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2011-03-06 12:43:36 | 000,080,896 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2011-02-27 00:40:30 | 000,000,121 | ---- | C] () -- C:\D & S\Administrator\Ustawienia lokalne\Dane aplikacji\fusioncache.dat
[2011-02-20 13:10:10 | 000,810,496 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2011-02-20 12:58:05 | 000,017,694 | ---- | C] () -- C:\WINDOWS\irunin.ini
[2011-02-20 12:58:05 | 000,009,694 | ---- | C] () -- C:\WINDOWS\irunin.dat
[2010-12-12 01:22:27 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll
[2010-12-12 01:22:27 | 000,036,608 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys
[2010-12-12 01:21:59 | 000,002,528 | ---- | C] () -- C:\D & S\Administrator\Dane aplikacji\$_hpcst$.hpc
[2010-12-10 22:11:55 | 001,418,720 | ---- | C] () -- C:\WINDOWS\System32\drivers\sfi.dat
[2010-12-08 20:28:06 | 000,000,600 | ---- | C] () -- C:\D & S\Administrator\Ustawienia lokalne\Dane aplikacji\PUTTY.RND
[2010-12-04 01:24:48 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2010-12-02 18:24:16 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2010-12-02 17:52:56 | 000,000,777 | ---- | C] () -- C:\WINDOWS\wcx_ftp.ini
[2010-12-02 17:08:37 | 000,000,008 | ---- | C] () -- C:\WINDOWS\schedule.dat
[2010-12-02 17:07:41 | 000,003,398 | ---- | C] () -- C:\WINDOWS\WINCMD.INI
[2010-12-02 13:34:02 | 000,106,496 | ---- | C] () -- C:\D & S\Administrator\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-12-02 13:17:29 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2010-12-02 12:32:01 | 000,240,124 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2010-12-02 12:32:00 | 000,240,124 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2010-12-02 12:32:00 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin
[2010-12-02 12:31:56 | 002,293,194 | ---- | C] () -- C:\WINDOWS\System32\nvdata.bin
[2010-12-02 12:26:39 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2010-12-02 12:26:25 | 000,968,704 | ---- | C] () -- C:\WINDOWS\NOTEPAD.EXE
[2010-12-02 12:23:39 | 002,133,880 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010-12-02 12:21:41 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2010-12-02 12:00:44 | 000,110,602 | ---- | C] () -- C:\WINDOWS\System32\xcdsfx32.bin
[2010-12-02 11:50:37 | 000,000,000 | ---- | C] () -- C:\WINDOWS\WB.ini
[2010-12-02 11:43:43 | 004,156,179 | ---- | C] () -- C:\WINDOWS\System32\Mario.exe
[2010-12-02 11:43:43 | 000,802,304 | ---- | C] () -- C:\WINDOWS\System32\Warcaby.exe
[2010-12-02 11:43:43 | 000,393,216 | ---- | C] () -- C:\WINDOWS\System32\TURBO.exe
[2010-12-02 11:41:25 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2010-12-02 11:37:14 | 000,002,272 | ---- | C] () -- C:\D & S\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat
[2010-12-02 11:31:44 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2010-04-07 19:46:00 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\RtNicProp32.dll
[2010-04-07 19:41:40 | 000,058,792 | ---- | C] () -- C:\WINDOWS\System32\wbload.dll
[2009-09-02 21:55:03 | 000,976,896 | ---- | C] () -- C:\WINDOWS\System32\notepad.exe
[2009-09-02 21:54:12 | 000,023,462 | ---- | C] () -- C:\WINDOWS\System32\Notepad.ini
[2009-09-02 21:54:12 | 000,023,258 | ---- | C] () -- C:\WINDOWS\Notepad.ini
[2009-08-21 17:58:40 | 000,122,880 | ---- | C] () -- C:\WINDOWS\System32\AitVirtualComInstall.exe
[2009-07-20 21:10:48 | 000,307,200 | ---- | C] () -- C:\WINDOWS\System32\InstallVCOM.exe
[2009-02-27 10:00:07 | 000,150,016 | ---- | C] () -- C:\WINDOWS\System32\grpconv.exe
[2008-05-04 18:39:34 | 000,002,560 | ---- | C] () -- C:\WINDOWS\System32\ViaClassCoInstaller.dll
[2008-04-15 14:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2008-04-15 14:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2008-04-15 14:00:00 | 000,500,934 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat
[2008-04-15 14:00:00 | 000,441,654 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2008-04-15 14:00:00 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat
[2008-04-15 14:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2008-04-15 14:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2008-04-15 14:00:00 | 000,088,500 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat
[2008-04-15 14:00:00 | 000,070,770 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2008-04-15 14:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2008-04-15 14:00:00 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat
[2008-04-15 14:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2008-04-15 14:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2008-04-15 14:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2008-04-15 14:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin
[2007-10-25 18:26:10 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2002-05-04 13:04:46 | 000,046,080 | ---- | C] () -- C:\WINDOWS\COPYFSTQ.EXE
[2002-05-04 13:04:45 | 000,094,636 | ---- | C] () -- C:\WINDOWS\dropcpyr.dll
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2011-02-08 20:05:09 | 000,000,000 | ---D | M] -- C:\D & S\Administrator\Dane aplikacji\.anki
[2010-12-02 17:10:42 | 000,000,000 | ---D | M] -- C:\D & S\Administrator\Dane aplikacji\.wtw
[2010-12-25 12:41:52 | 000,000,000 | ---D | M] -- C:\D & S\Administrator\Dane aplikacji\Axialis
[2010-12-02 16:52:02 | 000,000,000 | ---D | M] -- C:\D & S\Administrator\Dane aplikacji\Blender Foundation
[2010-12-25 01:13:07 | 000,000,000 | ---D | M] -- C:\D & S\Administrator\Dane aplikacji\com.adobe.ExMan
[2010-12-02 17:06:40 | 000,000,000 | ---D | M] -- C:\D & S\Administrator\Dane aplikacji\Complay
[2010-12-02 16:53:21 | 000,000,000 | ---D | M] -- C:\D & S\Administrator\Dane aplikacji\Easeware
[2011-03-06 21:37:02 | 000,000,000 | ---D | M] -- C:\D & S\Administrator\Dane aplikacji\facemoods.com
[2010-12-27 17:44:25 | 000,000,000 | ---D | M] -- C:\D & S\Administrator\Dane aplikacji\Gadu-Gadu 10
[2010-12-02 16:59:03 | 000,000,000 | ---D | M] -- C:\D & S\Administrator\Dane aplikacji\Gzegzolka XP
[2010-12-02 18:27:45 | 000,000,000 | ---D | M] -- C:\D & S\Administrator\Dane aplikacji\Opera
[2011-02-18 21:52:25 | 000,000,000 | ---D | M] -- C:\D & S\Administrator\Dane aplikacji\Pamela
[2011-02-08 23:44:48 | 000,000,000 | ---D | M] -- C:\D & S\Administrator\Dane aplikacji\Rainmeter
[2011-02-13 19:55:46 | 000,000,000 | ---D | M] -- C:\D & S\Administrator\Dane aplikacji\ReGet Software
[2010-12-12 01:39:48 | 000,000,000 | ---D | M] -- C:\D & S\Administrator\Dane aplikacji\Samsung
[2011-04-05 00:07:08 | 000,000,000 | ---D | M] -- C:\D & S\Administrator\Dane aplikacji\Subversion
[2010-12-05 23:20:11 | 000,000,000 | ---D | M] -- C:\D & S\Administrator\Dane aplikacji\TrueCrypt
[2010-12-02 11:40:58 | 000,000,000 | ---D | M] -- C:\D & S\Administrator\Dane aplikacji\TuneUp Software
[2011-04-10 20:23:15 | 000,000,000 | ---D | M] -- C:\D & S\Administrator\Dane aplikacji\uTorrent
[2010-12-03 09:16:53 | 000,000,000 | ---D | M] -- C:\D & S\Administrator\Dane aplikacji\Workrave
[2010-12-02 16:52:02 | 000,000,000 | ---D | M] -- C:\D & S\All Users\Dane aplikacji\Blender Foundation
[2010-12-30 13:53:20 | 000,000,000 | ---D | M] -- C:\D & S\All Users\Dane aplikacji\BOINC
[2010-12-05 00:14:33 | 000,000,000 | -H-D | M] -- C:\D & S\All Users\Dane aplikacji\CanonBJ
[2010-12-25 14:37:17 | 000,000,000 | ---D | M] -- C:\D & S\All Users\Dane aplikacji\EA Core
[2010-12-25 14:37:17 | 000,000,000 | ---D | M] -- C:\D & S\All Users\Dane aplikacji\Electronic Arts
[2010-12-02 19:27:35 | 000,000,000 | ---D | M] -- C:\D & S\All Users\Dane aplikacji\Gadu-Gadu 10
[2010-12-02 18:35:41 | 000,000,000 | ---D | M] -- C:\D & S\All Users\Dane aplikacji\Tlen.pl
[2010-12-02 13:29:03 | 000,000,000 | ---D | M] -- C:\D & S\All Users\Dane aplikacji\TrueCrypt
[2010-12-02 11:40:55 | 000,000,000 | ---D | M] -- C:\D & S\All Users\Dane aplikacji\TuneUp Software
[2010-12-02 11:40:50 | 000,000,000 | -HSD | M] -- C:\D & S\All Users\Dane aplikacji\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
[2010-12-02 11:40:58 | 000,000,000 | ---D | M] -- C:\D & S\Default User\Dane aplikacji\TuneUp Software
[2011-04-11 09:17:39 | 000,000,598 | ---- | M] () -- C:\WINDOWS\Tasks\Automatyczne wyszukiwanie problemów.job
[2011-04-11 09:01:00 | 000,000,250 | ---- | M] () -- C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 

< End of report >