OTL logfile created on: 2011-05-17 20:43:19 - Run 2
OTL by OldTimer - Version 3.2.22.3     Folder = C:\Users\Ziggy\Downloads
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6002.18005)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 58,00% Memory free
8,00 Gb Paging File | 7,00 Gb Available in Paging File | 85,00% Paging File free
Paging file location(s): c:\pagefile.sys 5000 8000 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 298,09 Gb Total Space | 44,25 Gb Free Space | 14,84% Space Free | Partition Type: NTFS
Drive D: | 321,29 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
 
Computer Name: ZYGMUNT | User Name: Ziggy | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2011-05-17 20:42:52 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Ziggy\Downloads\OTL.exe
PRC - [2011-05-13 08:23:45 | 000,403,240 | ---- | M] (Valve Corporation) -- C:\Program Files\Common Files\Steam\SteamService.exe
PRC - [2011-04-30 00:00:07 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2011-02-23 16:04:20 | 003,451,496 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
PRC - [2011-02-23 16:04:19 | 000,042,184 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2011-01-30 15:44:15 | 001,242,448 | ---- | M] (Valve Corporation) -- C:\Program Files\Steam\Steam.exe
PRC - [2011-01-07 21:06:12 | 000,803,432 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
PRC - [2011-01-07 19:48:56 | 000,378,984 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2010-04-01 11:16:20 | 000,357,696 | ---- | M] (DT Soft Ltd) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe
PRC - [2009-04-11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009-04-11 08:27:28 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conime.exe
PRC - [2008-01-29 18:38:32 | 000,583,048 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - [2011-05-17 20:42:52 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Ziggy\Downloads\OTL.exe
MOD - [2011-02-23 16:04:17 | 000,197,208 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\snxhk.dll
MOD - [2010-08-31 17:43:52 | 001,686,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - [2011-05-13 08:23:45 | 000,403,240 | ---- | M] (Valve Corporation) [On_Demand | Running] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2011-02-23 16:04:19 | 000,042,184 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2011-01-07 19:48:56 | 000,378,984 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2009-10-28 20:59:48 | 000,065,536 | ---- | M] (ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM) [Disabled | Stopped] -- C:\Windows\System32\PrintCtrl.exe -- (Printer Control)
SRV - [2009-10-27 10:26:36 | 000,657,408 | ---- | M] (Nokia) [Disabled | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2008-01-29 18:38:32 | 000,583,048 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe -- (LiveUpdate Notice Service)
SRV - [2008-01-19 09:38:24 | 000,272,952 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2011-05-10 14:03:54 | 000,441,176 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2011-05-10 14:03:44 | 000,307,928 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2011-05-10 14:02:37 | 000,049,240 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2011-05-10 13:59:56 | 000,025,432 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2011-05-10 13:59:44 | 000,053,592 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2011-05-10 13:59:35 | 000,019,544 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2011-03-05 19:42:28 | 000,278,984 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\atksgt.sys -- (atksgt)
DRV - [2011-02-23 08:27:00 | 010,468,360 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2011-02-02 22:00:07 | 000,015,600 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\gdrv.sys -- (gdrv)
DRV - [2010-12-01 23:28:04 | 000,004,608 | ---- | M] (RealVNC Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vncmirror.sys -- (vncmirror)
DRV - [2010-11-12 01:10:50 | 000,122,984 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvhda32v.sys -- (NVHDA)
DRV - [2010-10-25 18:04:46 | 000,303,720 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)
DRV - [2010-03-14 11:30:03 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\sptd.sys -- (sptd)
DRV - [2009-10-06 12:52:50 | 000,007,936 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2009-10-06 12:52:34 | 000,022,016 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2009-10-06 12:52:34 | 000,017,664 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2009-10-06 12:52:34 | 000,007,936 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2009-01-13 20:13:52 | 000,049,160 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\WmXlCore.sys -- (WmXlCore)
DRV - [2009-01-13 20:13:44 | 000,014,728 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\WmVirHid.sys -- (WmVirHid)
DRV - [2009-01-13 20:13:36 | 000,031,240 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\WmHidLo.sys -- (WmHidLo)
DRV - [2009-01-13 20:13:28 | 000,029,192 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\WmFilter.sys -- (WmFilter)
DRV - [2009-01-13 20:13:20 | 000,019,336 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\WmBEnum.sys -- (WmBEnum)
DRV - [2009-01-01 15:19:06 | 000,005,632 | ---- | M] () [File_System | System | Running] -- C:\Windows\System32\drivers\StarOpen.sys -- (StarOpen)
DRV - [2008-08-26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2008-04-18 01:09:52 | 000,018,048 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2007-05-02 12:11:18 | 000,109,704 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_mdm.sys -- (ss_mdm)
DRV - [2007-05-02 12:11:18 | 000,015,112 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_mdfl.sys -- (ss_mdfl)
DRV - [2007-05-02 12:11:16 | 000,083,592 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_bus.sys -- (ss_bus) SAMSUNG Mobile USB Device 1.0 driver (WDM)
DRV - [2006-07-10 18:19:58 | 000,027,032 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sfsync02.sys -- (sfsync02) StarForce Protection Synchronization Driver (version 2.x)
DRV - [2006-07-05 14:39:29 | 000,059,256 | ---- | M] (Protection Technology (StarForce)) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sfdrv01.sys -- (sfdrv01) StarForce Protection Environment Driver (version 1.x)
DRV - [2006-06-14 16:56:56 | 000,013,680 | ---- | M] (Protection Technology (StarForce)) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sfhlp02.sys -- (sfhlp02) StarForce Protection Helper Driver (version 2.x)
DRV - [2002-07-17 17:20:32 | 000,084,832 | ---- | M] (Adaptec) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ASPI32.SYS -- (ASPI)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultenginename: "Yahoo"
FF - prefs.js..browser.search.order.1: "Yahoo"
FF - prefs.js..browser.search.param.yahoo-fr: "megaup"
FF - prefs.js..browser.search.param.yahoo-fr-cjkt: "megaup"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://pajacyk.pl/"
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.4
FF - prefs.js..extensions.enabledItems: {10187899-7ffe-4f9a-b9d2-35fdb3b49690}:0.6.3
FF - prefs.js..extensions.enabledItems: rozszerzenie@siepomaga.pl:0.2.3
FF - prefs.js..extensions.enabledItems: {40a1f5d7-afc2-498f-b264-02668d616ff6}:1.1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: {2c088200-b973-11db-8314-0800200c9a66}:1.7.1
FF - prefs.js..keyword.URL: "http://search.yahoo.com/search?ei=utf-8&fr=megaup&p="
 
FF - HKLM\software\mozilla\Firefox\Extensions\\bkmrksync@nokia.com: C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\ [2009-11-20 10:26:24 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-04-30 00:00:08 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-04-27 19:42:42 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 2.0.0.24\extensions\\Components: C:\Mozilla Thunderbird\components [2011-03-27 22:02:15 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 2.0.0.24\extensions\\Plugins: C:\Mozilla Thunderbird\plugins [2011-04-27 19:42:42 | 000,000,000 | ---D | M]
 
[2008-08-11 11:38:36 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Ziggy\AppData\Roaming\mozilla\Extensions
[2011-04-01 22:02:26 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Ziggy\AppData\Roaming\mozilla\Firefox\Profiles\pyn6ixxc.default\extensions
[2010-05-05 19:25:57 | 000,000,000 | ---D | M] (IMDb Preview) -- C:\Users\Ziggy\AppData\Roaming\mozilla\Firefox\Profiles\pyn6ixxc.default\extensions\{10187899-7ffe-4f9a-b9d2-35fdb3b49690}
[2010-05-05 19:25:57 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Ziggy\AppData\Roaming\mozilla\Firefox\Profiles\pyn6ixxc.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010-03-07 11:10:38 | 000,000,000 | ---D | M] (Harley Davidson) -- C:\Users\Ziggy\AppData\Roaming\mozilla\Firefox\Profiles\pyn6ixxc.default\extensions\{2c088200-b973-11db-8314-0800200c9a66}
[2010-03-24 16:17:00 | 000,000,000 | ---D | M] (Mega Manager Integration) -- C:\Users\Ziggy\AppData\Roaming\mozilla\Firefox\Profiles\pyn6ixxc.default\extensions\{40a1f5d7-afc2-498f-b264-02668d616ff6}
[2011-04-01 22:02:26 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Ziggy\AppData\Roaming\mozilla\Firefox\Profiles\pyn6ixxc.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2009-08-18 20:34:40 | 000,000,000 | ---D | M] ("Siepomaga") -- C:\Users\Ziggy\AppData\Roaming\mozilla\Firefox\Profiles\pyn6ixxc.default\extensions\rozszerzenie@siepomaga.pl
[2010-03-07 11:10:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Ziggy\AppData\Roaming\mozilla\Firefox\Profiles\pyn6ixxc.default\extensions\{2c088200-b973-11db-8314-0800200c9a66}\mozapps\extensions
[2008-02-29 09:46:31 | 000,002,920 | ---- | M] () -- C:\Users\Ziggy\AppData\Roaming\Mozilla\Firefox\Profiles\pyn6ixxc.default\searchplugins\daemon-search.xml
[2008-06-21 04:35:29 | 000,000,908 | ---- | M] () -- C:\Users\Ziggy\AppData\Roaming\Mozilla\Firefox\Profiles\pyn6ixxc.default\searchplugins\imdb.xml
[2008-02-20 10:25:48 | 000,001,068 | ---- | M] () -- C:\Users\Ziggy\AppData\Roaming\Mozilla\Firefox\Profiles\pyn6ixxc.default\searchplugins\wikipedia-english.xml
[2008-02-18 22:28:48 | 000,001,068 | ---- | M] () -- C:\Users\Ziggy\AppData\Roaming\Mozilla\Firefox\Profiles\pyn6ixxc.default\searchplugins\wikipedia-polski.xml
[2008-03-30 10:22:08 | 000,002,526 | ---- | M] () -- C:\Users\Ziggy\AppData\Roaming\Mozilla\Firefox\Profiles\pyn6ixxc.default\searchplugins\wookieepedia-english.xml
[2008-02-27 10:15:48 | 000,002,109 | ---- | M] () -- C:\Users\Ziggy\AppData\Roaming\Mozilla\Firefox\Profiles\pyn6ixxc.default\searchplugins\youtube-video-search.xml
[2011-03-24 09:48:08 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2010-05-05 19:25:23 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010-08-05 18:44:38 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010-11-01 21:30:09 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2011-01-01 14:33:28 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
[2011-03-02 08:00:22 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
File not found (No name found) -- 
[2011-04-30 00:00:07 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\browsercomps.dll
[2011-02-02 22:40:24 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2010-01-14 00:46:00 | 000,063,488 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npwachk.dll
[2010-01-01 10:00:00 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml
[2010-01-01 10:00:00 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml
[2010-01-01 10:00:00 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml
[2010-01-01 10:00:00 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml
[2010-01-01 10:00:00 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml
[2010-01-01 10:00:00 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2006-09-18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O2 - BHO: (HP Print Clips) - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll (Hewlett-Packard Co.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O4 - HKLM..\Run: [avast] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [Symantec PIF AlertEng] C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe (Symantec Corporation)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [Steam] C:\Program Files\Steam\steam.exe (Valve Corporation)
O4 - HKLM..\RunOnce: [aswAhAScr.dll] C:\Program Files\Alwil Software\Avast5\aswRegSvr.exe ()
O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe (PokerStars)
O9 - Extra Button: Kolekcja wycinków HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll (Hewlett-Packard Co.)
O9 - Extra Button: Zaznaczanie HP Smart - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll (Hewlett-Packard Co.)
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: clonewarsadventures.com ([]* in Lokalny intranet)
O15 - HKCU\..Trusted Domains: freerealms.com ([]* in Lokalny intranet)
O15 - HKCU\..Trusted Domains: soe.com ([]* in Lokalny intranet)
O15 - HKCU\..Trusted Domains: sony.com ([]* in Lokalny intranet)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: Microsoft XML Parser for Java file:///C:/Windows/Java/classes/xmldso.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Ziggy\AppData\Roaming\Mozilla\Firefox\Tapeta pulpitu.bmp
O24 - Desktop BackupWallPaper: C:\Users\Ziggy\AppData\Roaming\Mozilla\Firefox\Tapeta pulpitu.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010-02-12 13:57:29 | 000,000,083 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2007-06-06 01:07:33 | 000,506,749 | R--- | M] () - D:\autorun.inf -- [ CDFS ]
O33 - MountPoints2\{30df13ea-cc5d-11de-bf69-001d7d951f40}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL XErO.eXE
O33 - MountPoints2\{3ded7aea-e69a-11dc-8f7f-001d7d951f40}\Shell - "" = AutoRun
O33 - MountPoints2\{3ded7aea-e69a-11dc-8f7f-001d7d951f40}\Shell\AutoRun\command - "" = I:\Setup.exe
O33 - MountPoints2\{7b64ab19-e75d-11dc-8ea4-001d7d951f40}\Shell\AutoRun\command - "" = C:\Windows\explorer.exe -- [2009-04-11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation)
O33 - MountPoints2\{7b64ab19-e75d-11dc-8ea4-001d7d951f40}\Shell\explore\Command - "" = C:\Windows\explorer.exe -- [2009-04-11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation)
O33 - MountPoints2\{7b64ab19-e75d-11dc-8ea4-001d7d951f40}\Shell\open\Command - "" = C:\Windows\explorer.exe -- [2009-04-11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation)
O33 - MountPoints2\{b9a03ca2-af30-11dc-83b8-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{b9a03ca2-af30-11dc-83b8-806e6f6e6963}\Shell\AutoRun\command - "" = D:\Setup.exe -- [2007-03-16 04:50:26 | 000,554,584 | R--- | M] (Hewlett-Packard)
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011-05-17 20:28:16 | 000,000,000 | ---D | C] -- C:\Users\Ziggy\AppData\Roaming\HpUpdate
[2011-05-17 20:28:15 | 000,000,000 | ---D | C] -- C:\Windows\Hewlett-Packard
[2011-05-17 20:15:40 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2011-05-17 20:09:29 | 000,000,000 | ---D | C] -- C:\ProgramData\HP Product Assistant
[2011-05-17 20:02:34 | 000,404,640 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2011-05-11 20:59:34 | 000,000,000 | ---D | C] -- C:\Users\Ziggy\AppData\Local\GameSpy
[2011-05-11 20:59:29 | 000,000,000 | ---D | C] -- C:\Users\Ziggy\AppData\Local\ApplicationHistory
[2011-05-11 20:59:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GameSpy
[2011-05-11 20:59:19 | 000,000,000 | ---D | C] -- C:\Program Files\GameSpy
[2011-05-11 20:58:12 | 000,000,000 | ---D | C] -- C:\Windows\System32\URTTEMP
[2011-05-09 20:34:53 | 000,000,000 | ---D | C] -- C:\Users\Ziggy\Documents\SimCity 4
[2011-05-02 08:02:53 | 000,000,000 | ---D | C] -- C:\Users\Ziggy\Documents\Bioshock
[2011-05-02 08:02:53 | 000,000,000 | ---D | C] -- C:\Users\Ziggy\AppData\Roaming\Bioshock
[2011-04-27 08:33:04 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Apphlpdm.dll
[2011-04-27 08:33:03 | 004,240,384 | ---- | C] (Microsoft) -- C:\Windows\System32\GameUXLegacyGDFs.dll
[2011-04-27 08:32:32 | 000,876,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll
[2011-04-26 19:54:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pity Format 2010
[2011-04-26 19:54:25 | 000,000,000 | ---D | C] -- C:\Program Files\Pity Format 2010
[2011-04-18 19:04:26 | 000,000,000 | ---D | C] -- C:\Users\Ziggy\Documents\Games for Windows - LIVE Demos
[2011-04-18 13:27:34 | 000,941,160 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvdispco322090.dll
[2011-04-18 13:27:34 | 000,837,736 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvgenco322040.dll
[2011-04-18 12:50:50 | 000,262,144 | ---- | C] (Creative Labs) -- C:\Windows\System32\wrap_oal.dll
[2011-04-18 12:50:50 | 000,086,016 | ---- | C] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\System32\OpenAL32.dll
[2011-04-18 12:50:24 | 000,005,632 | ---- | C] (EnTech Taiwan) -- C:\Windows\System32\drivers\Entech64.sys
[2011-04-18 12:50:20 | 000,000,000 | ---D | C] -- C:\Windows\System32\Futuremark
[2011-04-18 12:49:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Futuremark
[2011-04-18 12:49:29 | 000,000,000 | ---D | C] -- C:\Program Files\Futuremark
[2011-04-18 12:18:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Easy Driver Pro
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2011-05-17 20:39:00 | 000,001,034 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011-05-17 20:33:16 | 447,940,090 | ---- | M] () -- C:\Users\Ziggy\Desktop\2011-05-17.reg
[2011-05-17 20:25:40 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt
[2011-05-17 20:22:44 | 000,001,030 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011-05-17 20:22:42 | 000,003,568 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011-05-17 20:22:42 | 000,003,568 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011-05-17 20:22:33 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011-05-17 20:22:31 | 3219,644,416 | -HS- | M] () -- C:\hiberfil.sys
[2011-05-17 20:21:15 | 000,004,096 | ---- | M] () -- C:\Users\Ziggy\Documents\cc_20110517_202109.reg
[2011-05-17 20:19:22 | 001,550,018 | ---- | M] () -- C:\Users\Ziggy\Documents\cc_20110517_201733.reg
[2011-05-17 20:15:40 | 000,000,764 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2011-05-17 20:10:58 | 000,153,534 | ---- | M] () -- C:\Windows\hpoins14.dat
[2011-05-17 20:10:01 | 000,001,932 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
[2011-05-17 20:02:34 | 000,404,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2011-05-17 18:55:52 | 000,681,512 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2011-05-17 18:55:52 | 000,604,566 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011-05-17 18:55:52 | 000,135,824 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2011-05-17 18:55:52 | 000,107,898 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011-05-17 18:54:10 | 000,073,728 | ---- | M] () -- C:\Users\Ziggy\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-05-12 07:55:08 | 000,377,808 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2011-05-11 20:59:29 | 000,000,093 | ---- | M] () -- C:\Users\Ziggy\AppData\Local\fusioncache.dat
[2011-05-11 20:57:27 | 000,022,328 | ---- | M] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2011-05-11 20:57:27 | 000,022,328 | ---- | M] () -- C:\Users\Ziggy\AppData\Roaming\PnkBstrK.sys
[2011-05-11 20:57:09 | 000,669,184 | ---- | M] () -- C:\Windows\System32\pbsvc.exe
[2011-05-10 14:10:59 | 000,040,112 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
[2011-05-10 14:10:55 | 000,199,304 | ---- | M] (AVAST Software) -- C:\Windows\System32\aswBoot.exe
[2011-05-10 14:03:54 | 000,441,176 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswSnx.sys
[2011-05-10 14:03:44 | 000,307,928 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswSP.sys
[2011-05-10 14:02:37 | 000,049,240 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswTdi.sys
[2011-05-10 13:59:56 | 000,025,432 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswRdr.sys
[2011-05-10 13:59:44 | 000,053,592 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswMonFlt.sys
[2011-05-10 13:59:35 | 000,019,544 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswFsBlk.sys
[2011-04-29 10:33:13 | 000,006,398 | ---- | M] () -- C:\Users\Ziggy\Documents\Maciej_Charytoniak_Deklaracje_podatkowe_2011-04-27.xml
[2011-04-27 08:57:07 | 000,246,173 | ---- | M] () -- C:\Users\Ziggy\Documents\pit 37 Maciek.xps
[2011-04-26 19:54:34 | 000,000,860 | ---- | M] () -- C:\Users\Public\Desktop\Pity Format 2010.lnk
[2011-04-18 13:30:00 | 000,000,680 | ---- | M] () -- C:\Users\Ziggy\AppData\Local\d3d9caps.dat
[2011-04-18 12:51:04 | 000,001,793 | ---- | M] () -- C:\Users\Public\Desktop\3DMark06.lnk
[2011-04-18 12:50:50 | 000,262,144 | ---- | M] (Creative Labs) -- C:\Windows\System32\wrap_oal.dll
[2011-04-18 12:50:50 | 000,086,016 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\System32\OpenAL32.dll
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011-05-17 20:32:31 | 447,940,090 | ---- | C] () -- C:\Users\Ziggy\Desktop\2011-05-17.reg
[2011-05-17 20:21:11 | 000,004,096 | ---- | C] () -- C:\Users\Ziggy\Documents\cc_20110517_202109.reg
[2011-05-17 20:17:38 | 001,550,018 | ---- | C] () -- C:\Users\Ziggy\Documents\cc_20110517_201733.reg
[2011-05-17 20:15:40 | 000,000,764 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2011-05-17 20:10:01 | 000,001,932 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
[2011-05-17 19:59:28 | 000,153,534 | ---- | C] () -- C:\Windows\hpoins14.dat
[2011-05-11 20:59:29 | 000,000,093 | ---- | C] () -- C:\Users\Ziggy\AppData\Local\fusioncache.dat
[2011-05-11 20:57:28 | 000,022,328 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2011-05-11 20:57:27 | 000,022,328 | ---- | C] () -- C:\Users\Ziggy\AppData\Roaming\PnkBstrK.sys
[2011-05-11 20:57:22 | 000,103,736 | ---- | C] () -- C:\Windows\System32\PnkBstrB.exe
[2011-05-11 20:57:09 | 000,669,184 | ---- | C] () -- C:\Windows\System32\pbsvc.exe
[2011-05-11 20:57:09 | 000,066,872 | ---- | C] () -- C:\Windows\System32\PnkBstrA.exe
[2011-04-27 09:09:25 | 000,006,398 | ---- | C] () -- C:\Users\Ziggy\Documents\Maciej_Charytoniak_Deklaracje_podatkowe_2011-04-27.xml
[2011-04-27 08:57:05 | 000,246,173 | ---- | C] () -- C:\Users\Ziggy\Documents\pit 37 Maciek.xps
[2011-04-26 19:54:34 | 000,000,860 | ---- | C] () -- C:\Users\Public\Desktop\Pity Format 2010.lnk
[2011-04-18 13:31:17 | 3219,644,416 | -HS- | C] () -- C:\hiberfil.sys
[2011-04-18 12:51:04 | 000,001,793 | ---- | C] () -- C:\Users\Public\Desktop\3DMark06.lnk
[2011-04-18 12:50:24 | 000,006,173 | ---- | C] () -- C:\Windows\System32\drivers\Entech.vxd
[2011-04-18 12:50:24 | 000,003,972 | ---- | C] () -- C:\Windows\System32\drivers\PciBus.sys
[2011-04-09 18:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat
[2011-04-03 23:17:10 | 000,080,416 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll
[2011-03-27 19:13:24 | 000,000,286 | ---- | C] () -- C:\Windows\reimage.ini
[2011-02-24 10:19:05 | 000,057,344 | ---- | C] () -- C:\Windows\rzrunins.exe
[2011-02-09 17:11:41 | 000,153,320 | ---- | C] () -- C:\Windows\hpoins14.dat.temp
[2011-02-09 17:11:41 | 000,002,000 | ---- | C] () -- C:\Windows\hpomdl14.dat.temp
[2011-02-08 10:58:18 | 000,014,368 | ---- | C] () -- C:\Windows\skype.dat
[2011-02-08 10:58:11 | 000,032,854 | ---- | C] () -- C:\Windows\iniLS.dat
[2011-01-12 08:53:28 | 001,391,616 | ---- | C] () -- C:\Windows\System32\ActPDF.dll
[2011-01-12 08:53:18 | 000,691,200 | ---- | C] () -- C:\Windows\System32\PrintLog.exe
[2011-01-12 08:53:18 | 000,524,288 | ---- | C] () -- C:\Windows\System32\PrtPass.exe
[2010-12-23 22:34:16 | 000,000,680 | ---- | C] () -- C:\Users\Ziggy\AppData\Local\d3d9caps.dat
[2010-09-02 05:07:24 | 000,007,282 | ---- | C] () -- C:\Windows\cadx2.ini
[2010-07-18 12:25:49 | 000,000,273 | ---- | C] () -- C:\Windows\thug2.ini
[2010-06-14 18:51:44 | 000,000,033 | ---- | C] () -- C:\Windows\lg.ini
[2010-04-13 22:18:20 | 000,000,137 | ---- | C] () -- C:\Windows\disney.ini
[2010-03-24 19:55:32 | 000,000,050 | ---- | C] () -- C:\Windows\MegaManager.INI
[2010-02-12 14:00:10 | 000,000,028 | ---- | C] () -- C:\Windows\ODBC.INI
[2010-02-12 13:57:24 | 000,006,550 | ---- | C] () -- C:\Windows\jautoexp.dat
[2010-02-12 13:57:13 | 000,081,920 | ---- | C] () -- C:\Windows\asr3232.dll
[2010-01-24 18:08:20 | 000,004,096 | ---- | C] () -- C:\Windows\d3dx.dat
[2009-11-08 14:36:41 | 000,019,541 | ---- | C] () -- C:\Windows\hpqins13.dat
[2009-10-21 12:19:36 | 000,168,448 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2009-09-24 18:38:09 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2009-09-24 18:38:08 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2009-08-08 16:46:35 | 000,000,694 | ---- | C] () -- C:\Windows\Thps3.INI
[2009-07-18 17:18:11 | 000,000,211 | ---- | C] () -- C:\Windows\Insurrec.ini
[2009-06-26 10:58:32 | 000,135,168 | ---- | C] () -- C:\Windows\System32\expat.dll
[2009-03-06 00:50:58 | 000,000,705 | ---- | C] () -- C:\Users\Ziggy\AppData\Roaming\MPQEditor.ini
[2009-03-03 17:38:52 | 000,000,476 | ---- | C] () -- C:\Windows\SIERRA.INI
[2009-02-28 18:29:05 | 000,086,528 | ---- | C] () -- C:\Windows\bnetunin.exe
[2009-02-28 18:29:05 | 000,061,440 | ---- | C] () -- C:\Windows\diabunin.exe
[2009-01-11 21:30:00 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2009-01-01 15:04:12 | 000,000,000 | ---- | C] () -- C:\ProgramData\LauncherAccess.dt
[2009-01-01 14:58:06 | 000,005,632 | ---- | C] () -- C:\Windows\System32\drivers\StarOpen.sys
[2008-12-09 10:20:47 | 000,000,604 | ---- | C] () -- C:\Windows\Sof2.INI
[2008-11-02 19:10:37 | 000,027,896 | ---- | C] () -- C:\Windows\scunin.dat
[2008-09-16 02:14:24 | 003,596,288 | ---- | C] () -- C:\Windows\System32\qt-dx331.dll
[2008-09-06 03:00:16 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2008-08-23 21:51:35 | 000,024,206 | ---- | C] () -- C:\Users\Ziggy\AppData\Roaming\UserTile.png
[2008-06-14 21:27:02 | 000,027,790 | ---- | C] () -- C:\Windows\DIIUnin.dat
[2008-04-18 01:10:01 | 000,278,984 | ---- | C] () -- C:\Windows\System32\drivers\atksgt.sys
[2008-04-18 01:09:52 | 000,018,048 | ---- | C] () -- C:\Windows\System32\drivers\lirsgt.sys
[2008-04-09 22:39:40 | 000,000,474 | ---- | C] () -- C:\Windows\EReg072.dat
[2008-04-09 22:39:24 | 000,010,240 | ---- | C] () -- C:\Windows\System32\vidx16.dll
[2008-04-09 21:06:48 | 000,043,520 | ---- | C] () -- C:\Windows\System32\CmdLineExt03.dll
[2008-03-20 14:45:17 | 000,001,118 | ---- | C] () -- C:\Windows\eReg.dat
[2008-02-17 02:35:48 | 000,073,728 | ---- | C] () -- C:\Users\Ziggy\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008-02-16 20:17:33 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2008-01-10 20:16:20 | 000,159,839 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2008-01-10 20:15:30 | 000,755,027 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2007-12-24 20:49:52 | 000,007,680 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2007-06-06 01:07:34 | 000,002,000 | ---- | C] () -- C:\Windows\hpomdl14.dat
[2007-02-06 02:05:26 | 000,000,038 | ---- | C] () -- C:\Windows\AviSplitter.INI
[2006-12-05 07:22:07 | 000,332,832 | ---- | C] () -- C:\Windows\System32\perfi015.dat
[2006-12-05 07:22:06 | 000,681,512 | ---- | C] () -- C:\Windows\System32\perfh015.dat
[2006-12-05 07:22:06 | 000,135,824 | ---- | C] () -- C:\Windows\System32\perfc015.dat
[2006-12-05 07:22:06 | 000,037,468 | ---- | C] () -- C:\Windows\System32\perfd015.dat
[2006-11-02 14:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006-11-02 14:47:37 | 000,377,808 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006-11-02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006-11-02 12:33:01 | 000,604,566 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2006-11-02 12:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2006-11-02 12:33:01 | 000,107,898 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2006-11-02 12:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2006-11-02 12:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2006-11-02 10:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006-11-02 10:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2006-11-02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006-11-02 09:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2004-09-01 17:49:17 | 003,375,104 | ---- | C] () -- C:\Windows\System32\qt-mt331.dll
[2004-03-17 19:15:00 | 000,000,117 | ---- | C] () -- C:\Windows\smp32.dll
[2003-04-09 11:28:44 | 000,233,472 | R--- | C] () -- C:\Windows\System32\MafiaSetup.exe
[2003-04-09 11:28:44 | 000,233,472 | R--- | C] () -- C:\Users\Ziggy\AppData\Roaming\MafiaSetup.exe
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 705 bytes -> C:\Users\Ziggy\Documents\potfory utfory _).eml:OECustomProperty
@Alternate Data Stream - 229 bytes -> C:\ProgramData\TEMP:8FF81EB0
@Alternate Data Stream - 143 bytes -> C:\ProgramData\TEMP:3DB0B938

< End of report >