OTL logfile created on: 2011-05-03 21:30:44 - Run 1
OTL by OldTimer - Version 3.2.22.3     Folder = C:\Documents and Settings\krzysztof\Desktop
Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Poland | Language: PLK | Date Format: yyyy-MM-dd
 
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 66,00% Memory free
3,00 Gb Paging File | 3,00 Gb Available in Paging File | 85,00% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 111,79 Gb Total Space | 16,10 Gb Free Space | 14,40% Space Free | Partition Type: NTFS
Drive D: | 284,12 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive I: | 29,84 Gb Total Space | 25,65 Gb Free Space | 85,97% Space Free | Partition Type: FAT32
 
Computer Name: NOTBUK | User Name: krzysztof | Logged in as Administrator.
Cannot determine boot mode. | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2011-05-03 21:24:11 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\krzysztof\Desktop\OTL.exe
PRC - [2011-04-14 18:59:13 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox 4.0 Beta 6\firefox.exe
PRC - [2011-01-12 17:00:42 | 000,013,336 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
PRC - [2011-01-12 13:06:22 | 002,398,536 | ---- | M] (O&O Software GmbH) -- C:\Program Files\OO Software\Defrag\oodag.exe
PRC - [2010-12-20 19:08:58 | 000,363,344 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2010-09-23 10:49:08 | 000,067,584 | ---- | M] (CobianSoft, Luis Cobian) -- C:\Program Files\Cobian Backup 10\cbVSCService.exe
PRC - [2010-03-25 14:39:22 | 000,490,280 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Update\NASvc.exe
PRC - [2008-04-14 02:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007-12-14 02:34:52 | 000,415,768 | ---- | M] (RoseCity Software) -- C:\Program Files\DiskMagik\DiskMgkS.exe
PRC - [2007-11-07 11:44:28 | 000,798,720 | ---- | M] (T-Mobile) -- C:\Program Files\T-Mobile\web'n'walk Manager\web'n'walk Manager.exe
PRC - [2007-11-05 14:28:10 | 000,204,915 | ---- | M] (Option) -- C:\Program Files\T-Mobile\web'n'walk Manager\GtDetectSc.exe
PRC - [2007-05-28 18:57:54 | 000,275,968 | ---- | M] (Rocket Division Software) -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
PRC - [2005-09-07 18:18:34 | 000,049,336 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Media Center Diagnostic Kit\Tests\Bin\ehMonitor.exe
PRC - [2005-01-27 16:33:00 | 000,036,864 | ---- | M] () -- C:\WINDOWS\system32\o2flash.exe
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - [2011-05-03 21:24:11 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\krzysztof\Desktop\OTL.exe
MOD - [2010-08-23 18:12:02 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
MOD - [2006-05-03 22:53:54 | 000,174,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\framedyn.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [Disabled | Stopped] --  -- (HidServ)
SRV - [2011-01-12 17:00:42 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) Intel(R)
SRV - [2011-01-12 13:06:22 | 002,398,536 | ---- | M] (O&O Software GmbH) [Auto | Running] -- C:\Program Files\OO Software\Defrag\oodag.exe -- (OODefragAgent)
SRV - [2010-12-20 19:08:58 | 000,363,344 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2010-12-08 15:31:06 | 000,628,736 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2010-10-28 12:13:30 | 000,293,456 | ---- | M] (Logitech, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\LogiShrd\Bluetooth\LBTServ.exe -- (LBTServ)
SRV - [2010-09-23 17:46:14 | 001,125,376 | ---- | M] (Luis Cobian, CobianSoft) [Auto | Stopped] -- C:\Program Files\Cobian Backup 10\cbService.exe -- (CobianBackup10)
SRV - [2010-09-23 10:49:08 | 000,067,584 | ---- | M] (CobianSoft, Luis Cobian) [Auto | Running] -- C:\Program Files\Cobian Backup 10\cbVSCService.exe -- (cbVSCService)
SRV - [2010-03-25 14:39:22 | 000,490,280 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files\Nero\Update\NASvc.exe -- (NAUpdate)
SRV - [2007-12-14 02:34:52 | 000,415,768 | ---- | M] (RoseCity Software) [Auto | Running] -- C:\Program Files\DiskMagik\DiskMgkS.exe -- (DiskMgkS)
SRV - [2007-11-05 14:28:10 | 000,204,915 | ---- | M] (Option) [Auto | Running] -- C:\Program Files\T-Mobile\web'n'walk Manager\GtDetectSc.exe -- (GtDetectSc)
SRV - [2007-05-28 18:57:54 | 000,275,968 | ---- | M] (Rocket Division Software) [Auto | Running] -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE)
SRV - [2005-09-07 18:18:34 | 000,049,336 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Media Center Diagnostic Kit\Tests\Bin\ehMonitor.exe -- (ehMonitor)
SRV - [2005-01-27 16:33:00 | 000,036,864 | ---- | M] () [Auto | Running] -- C:\WINDOWS\system32\o2flash.exe -- (o2flash)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2011-04-06 15:33:50 | 006,388,328 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2011-02-16 08:26:46 | 000,691,696 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Stopped] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2010-12-20 19:08:40 | 000,020,952 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2010-08-24 19:31:18 | 000,028,624 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LUsbFilt.sys -- (LUsbFilt)
DRV - [2010-08-24 19:31:02 | 000,037,328 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LMouFilt.Sys -- (LMouFilt)
DRV - [2010-08-24 19:30:52 | 000,038,864 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LHidFilt.Sys -- (LHidFilt)
DRV - [2010-08-24 19:30:18 | 000,010,448 | ---- | M] (Logitech, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\LBeepKE.sys -- (LBeepKE)
DRV - [2010-07-30 15:16:46 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2010-07-30 15:16:44 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2010-07-30 15:16:42 | 000,023,040 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2010-07-30 15:16:38 | 000,018,048 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2010-04-12 10:44:34 | 000,059,388 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\scdemu.sys -- (SCDEmu)
DRV - [2010-02-17 16:00:16 | 000,094,560 | ---- | M] (Softwareentwicklung Remus - ArchiCrypt - ) [Driver] [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\SleeN17.sys -- (SLEE_17_DRIVER)
DRV - [2009-11-18 07:17:00 | 001,395,800 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt)
DRV - [2009-11-18 07:16:00 | 001,691,480 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt)
DRV - [2009-07-24 18:33:24 | 000,100,736 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ewusbdev.sys -- (hwusbdev)
DRV - [2009-04-11 17:45:49 | 000,005,632 | ---- | M] () [File_System | System | Running] -- C:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen)
DRV - [2009-01-12 09:12:56 | 000,105,344 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ZTEusbnmea.sys -- (ZTEusbnmea)
DRV - [2009-01-04 17:29:50 | 000,104,960 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ZTEusbser6k.sys -- (ZTEusbser6k)
DRV - [2009-01-04 17:29:50 | 000,104,960 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ZTEusbmdm6k.sys -- (ZTEusbmdm6k)
DRV - [2008-10-29 16:35:32 | 000,007,680 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\massfilter.sys -- (massfilter)
DRV - [2008-09-26 18:01:12 | 000,113,664 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ewusbnet.sys -- (ewusbnet)
DRV - [2008-08-26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2008-07-15 11:44:30 | 000,027,936 | ---- | M] (RapidSolution Software AG) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\tbhsd.sys -- (tbhsd)
DRV - [2007-07-09 14:17:36 | 000,095,744 | ---- | M] (Option NV) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Gt51Ip.sys -- (GT72NDISIPXP)
DRV - [2007-07-03 16:58:20 | 000,106,792 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdmdm.sys -- (sscdmdm)
DRV - [2007-07-03 16:57:24 | 000,011,944 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdmdfl.sys -- (sscdmdfl)
DRV - [2007-07-03 16:54:24 | 000,080,552 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdbus.sys -- (sscdbus) SAMSUNG USB Composite Device driver (WDM)
DRV - [2007-06-26 13:38:46 | 000,051,968 | ---- | M] (Option N.V.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gt72ubus.sys -- (GT72UBUS)
DRV - [2007-04-20 10:40:34 | 000,100,992 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2007-03-30 13:38:14 | 000,008,064 | ---- | M] (Option N.V.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gtptser.sys -- (GTPTSER)
DRV - [2007-01-16 13:52:20 | 000,017,664 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ZDPSp50.sys -- (ZDPSp50)
DRV - [2007-01-10 10:14:34 | 000,450,560 | ---- | M] (ZyDAS Technology Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WlanBZXP.sys -- (SG762_XP)
DRV - [2006-02-27 15:00:00 | 000,034,880 | ---- | M] (O2Micro ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\o2media.sys -- (O2MDRDR)
DRV - [2006-02-27 06:46:20 | 000,081,408 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtnicxp.sys -- (RTL8023xp)
DRV - [2006-02-20 16:01:00 | 000,029,056 | ---- | M] (O2Micro ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\o2sd.sys -- (O2SDRDR)
DRV - [2006-01-20 13:44:42 | 000,862,340 | ---- | M] (Motorola Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\smserial.sys -- (smserial)
DRV - [2004-08-04 00:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Realtek RTL8139(A/B/C)
DRV - [2001-08-17 13:49:10 | 000,026,624 | ---- | M] (SigmaTel, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\irstusb.sys -- (STIrUsb)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=66028
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=101699&gct=&gc=1&q=
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = 
IE - HKLM\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-746137067-73586283-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKU\S-1-5-21-746137067-73586283-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = 
IE - HKU\S-1-5-21-746137067-73586283-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google
IE - HKU\S-1-5-21-746137067-73586283-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
IE - HKU\S-1-5-21-746137067-73586283-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.speedbit.com/?aff=205
IE - HKU\S-1-5-21-746137067-73586283-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKU\S-1-5-21-746137067-73586283-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKU\S-1-5-21-746137067-73586283-725345543-1003\..\URLSearchHook: {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\Program Files\Crawler\ctbr.dll (Crawler.com)
IE - HKU\S-1-5-21-746137067-73586283-725345543-1003\..\URLSearchHook: {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\prxtbfre0.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-746137067-73586283-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultenginename: "Crawler Search"
FF - prefs.js..browser.search.defaulturl: "http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&invocationType=tb50ffwinampie7&query="
FF - prefs.js..browser.search.order.1: "Crawler Search"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.google.pl/firefox"
 
 
FF - HKLM\software\mozilla\Firefox\extensions\\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}: C:\Program Files\Crawler\firefox\ [2010-05-18 23:03:44 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\extensions\\{09F060FA-566D-42D7-BF79-97AB30863433}: C:\Program Files\Steganos Privacy Suite 11\pfplugin [2011-01-08 17:23:03 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\extensions\\{00F0643E-B367-4779-B45D-7046EBA37A88}: C:\Program Files\Steganos Privacy Suite 11\spmplugin3 [2011-01-08 17:23:05 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\extensions\\searchpredict@speedbit.com: C:\Program Files\SearchPredict\PRFireFox [2011-03-26 17:02:31 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\extensions\\{0329E7D6-6F54-462D-93F6-F5C3118BADF2}: C:\Program Files\SpeedBit Video Downloader\SPFireFox
FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox 4.0 Beta 6\components [2011-05-02 17:32:12 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox 4.0 Beta 6\plugins [2011-05-03 14:21:57 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.7\extensions\\Components: C:\Program Files\Mozilla Thunderbird 3 Beta 2\components [2011-01-02 22:41:04 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.7\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird 3 Beta 2\plugins [2011-05-03 14:21:57 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\{CCB7D94B-CA92-4E3F-B79D-ADE0F07ADC74}: C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension\ [2011-02-27 19:32:56 | 000,000,000 | ---D | M]
 
[2009-03-15 01:11:42 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\krzysztof\Application Data\mozilla\Extensions
[2009-03-15 01:11:42 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\krzysztof\Application Data\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2011-05-03 20:22:06 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\krzysztof\Application Data\mozilla\Firefox\Profiles\eoeygvxy.default\extensions
[2011-05-03 20:22:06 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\krzysztof\Application Data\mozilla\Firefox\Profiles\eoeygvxy.default\extensions\{0329E7D6-6F54-462D-93F6-F5C3118BADF2}
[2011-04-20 20:50:00 | 000,000,000 | ---D | M] (Flagfox) -- C:\Documents and Settings\krzysztof\Application Data\mozilla\Firefox\Profiles\eoeygvxy.default\extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}
[2011-04-17 15:52:36 | 000,000,000 | ---D | M] (Flashblock) -- C:\Documents and Settings\krzysztof\Application Data\mozilla\Firefox\Profiles\eoeygvxy.default\extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a}
[2011-02-12 22:57:24 | 000,000,000 | ---D | M] (Fast Dial) -- C:\Documents and Settings\krzysztof\Application Data\mozilla\Firefox\Profiles\eoeygvxy.default\extensions\fastdial@telega.phpnet.us
[2011-01-06 18:31:04 | 000,000,000 | ---D | M] (Text to Voice) -- C:\Documents and Settings\krzysztof\Application Data\mozilla\Firefox\Profiles\eoeygvxy.default\extensions\text2voice@vik.josh
[2010-02-27 17:26:53 | 000,001,331 | ---- | M] () -- C:\Documents and Settings\krzysztof\Application Data\Mozilla\Firefox\Profiles\eoeygvxy.default\searchplugins\crawlersrch.xml
[2009-07-24 23:51:04 | 000,001,201 | ---- | M] () -- C:\Documents and Settings\krzysztof\Application Data\Mozilla\Firefox\Profiles\eoeygvxy.default\searchplugins\winamp-search.xml
File not found (No name found) -- 
() (No name found) -- C:\DOCUMENTS AND SETTINGS\KRZYSZTOF\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\EOEYGVXY.DEFAULT\EXTENSIONS\{A0D7CCB3-214D-498B-B4AA-0E8FDA9A7BF7}.XPI
() (No name found) -- C:\DOCUMENTS AND SETTINGS\KRZYSZTOF\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\EOEYGVXY.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
() (No name found) -- C:\DOCUMENTS AND SETTINGS\KRZYSZTOF\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\EOEYGVXY.DEFAULT\EXTENSIONS\{DB9127A2-3381-41EC-82B3-1B6ED4C6F29A}.XPI
() (No name found) -- C:\DOCUMENTS AND SETTINGS\KRZYSZTOF\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\EOEYGVXY.DEFAULT\EXTENSIONS\{F8A55C97-3DB6-4961-A81D-0DE0080E53CB}.XPI
() (No name found) -- C:\DOCUMENTS AND SETTINGS\KRZYSZTOF\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\EOEYGVXY.DEFAULT\EXTENSIONS\AUTOPAGER@MOZILLA.ORG.XPI
() (No name found) -- C:\DOCUMENTS AND SETTINGS\KRZYSZTOF\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\EOEYGVXY.DEFAULT\EXTENSIONS\TABSCOPE@XULDEV.ORG.XPI
() (No name found) -- C:\DOCUMENTS AND SETTINGS\KRZYSZTOF\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\EOEYGVXY.DEFAULT\EXTENSIONS\TESTPILOT@LABS.MOZILLA.COM.XPI
[2009-04-04 23:16:07 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2011-03-26 17:02:31 | 000,000,000 | ---D | M] (SearchPredict) -- C:\PROGRAM FILES\SEARCHPREDICT\PRFIREFOX
[2009-09-01 12:41:26 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION
[2008-07-25 10:31:48 | 000,028,672 | ---- | M] (flashget) -- C:\Program Files\Mozilla Firefox\components\flashgetXpi.dll
[2009-09-21 11:24:16 | 000,001,329 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\crawlersrch.bak
[2009-09-21 12:24:16 | 000,001,329 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\crawlersrch.xml
 
O1 HOSTS File: ([2004-08-10 21:00:00 | 000,000,734 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: () - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\Program Files\Crawler\ctbr.dll (Crawler.com)
O2 - BHO: (FG2CatchUrl) - {1F364306-AA45-47B5-9F9D-39A8B94E7EF1} - C:\Program Files\FlashGet Network\FlashGet universal\ComDlls\bhoCATCH.dll (FlashGet)
O2 - BHO: (AskBar BHO) - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com)
O2 - BHO: (Winamp Toolbar Loader) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O2 - BHO: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (SearchPredictObj Class) - {389943B0-C3A2-4E69-82CB-8596A84CB3DC} - C:\Program Files\SearchPredict\SearchPredict.dll (Speedbit Ltd.)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll (Google Inc.)
O2 - BHO: (Google Dictionary Compression sdch) - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll (Google Inc.)
O2 - BHO: (free-downloads.net Toolbar) - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\prxtbfre0.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Foxit Toolbar) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com)
O3 - HKLM\..\Toolbar: (Pasek &Crawler) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\Program Files\Crawler\ctbr.dll (Crawler.com)
O3 - HKLM\..\Toolbar: (Steganos Password Manager Toolbar) - {9C65D12D-CF9D-454D-8049-61965D8C6FFF} - C:\Program Files\Steganos Privacy Suite 11\SPMIEToolbar.dll (Steganos GmbH)
O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O3 - HKLM\..\Toolbar: (free-downloads.net Toolbar) - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\prxtbfre0.dll (Conduit Ltd.)
O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (Foxit Toolbar) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com)
O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (Pasek &Crawler) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\Program Files\Crawler\ctbr.dll (Crawler.com)
O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (Winamp Toolbar) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (Foxit Toolbar) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com)
O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (Pasek &Crawler) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\Program Files\Crawler\ctbr.dll (Crawler.com)
O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (Winamp Toolbar) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O3 - HKU\S-1-5-21-746137067-73586283-725345543-1003\..\Toolbar\ShellBrowser: (Winamp Toolbar) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O3 - HKU\S-1-5-21-746137067-73586283-725345543-1003\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll (Google Inc.)
O4 - HKLM..\Run: [BluetoothAuthenticationAgent] C:\WINDOWS\System32\bthprops.cpl (Microsoft Corporation)
O4 - HKLM..\Run: [Cobian Backup 10 Interface] C:\Program Files\Cobian Backup 10\cbInterface.exe (Luis Cobian, CobianSoft)
O4 - HKLM..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe (Logitech, Inc.)
O4 - HKLM..\Run: [IAStorIcon] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [NBAgent] C:\Program Files\Nero\Nero 10\Nero BackItUp\NBAgent.exe (Nero AG)
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [OODefragTray] C:\Program Files\OO Software\Defrag\oodtray.exe (O&O Software GmbH)
O4 - HKLM..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE (PowerISO Computing, Inc.)
O4 - HKLM..\Run: [SMSERIAL] C:\WINDOWS\sm56hlpr.exe (Motorola Inc.)
O4 - HKLM..\Run: [SSS2009 File Redirection Starter] C:\Program Files\Steganos Privacy Suite 11\fredirstarter.exe (Steganos GmbH)
O4 - HKLM..\Run: [SSS2009 HotKeys] C:\Program Files\Steganos Privacy Suite 11\SteganosHotKeyService.exe (Steganos GmbH)
O4 - HKU\S-1-5-21-746137067-73586283-725345543-1003..\Run: []  File not found
O4 - HKU\S-1-5-21-746137067-73586283-725345543-1003..\Run: [ccleaner] C:\Program Files\CCleaner\CCleaner.exe (Piriform Ltd)
O4 - HKU\S-1-5-21-746137067-73586283-725345543-1003..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKU\S-1-5-21-746137067-73586283-725345543-1003..\Run: [Memory Improve Professional] C:\Program Files\Memory Improve Professional\MemoryImproveProfessional.exe (Memory Solution Studio)
O4 - HKU\S-1-5-21-746137067-73586283-725345543-1003..\Run: [NokiaPCInternetAccess] C:\Program Files\Nokia\PC Internet Access\NPCIA.exe (Nokia)
O4 - HKU\S-1-5-21-746137067-73586283-725345543-1003..\Run: [RocketDock] C:\Program Files\RocketDock\RocketDock.exe ()
O4 - HKU\S-1-5-21-746137067-73586283-725345543-1003..\Run: [UpdateStar] C:\Documents and Settings\krzysztof\Application Data\UpdateStar\UpdateStar.exe (UpdateStar GmbH)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\DataViz Inc Messenger.lnk = C:\Program Files\Common Files\DataViz\DvzIncMsgr.exe (DataViz, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HOTSYNCSHORTCUTNAME.lnk = C:\Program Files\Palm\Hotsync.exe (PalmSource, Inc)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\web'n'walk Manager.lnk = C:\Program Files\T-Mobile\web'n'walk Manager\web'n'walk Manager.exe (T-Mobile)
O4 - Startup: C:\Documents and Settings\krzysztof\Start Menu\Programs\Startup\Logitech . Rejestracja produktu.lnk = C:\Program Files\Common Files\LogiShrd\eReg\SetPoint\eReg.exe (Leader Technologies/Logitech)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallVisualStyle = C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles (Microsoft)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallTheme = C:\WINDOWS\Resources\Themes\Royale.theme ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-746137067-73586283-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: &Pobierz wszystko przez FlashGet - C:\Program Files\FlashGet Network\FlashGet universal\ComDlls\Bhoall.htm ()
O8 - Extra context menu item: &Pobrane przez FlashGet - C:\Program Files\FlashGet Network\FlashGet universal\ComDlls\Bholink.htm ()
O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html ()
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: UseFlashGet - C:\Program Files\FlashGet Network\FlashGet universal\ComDlls\Bholink.htm ()
O8 - Extra context menu item: UseFlashGetDownloadAllLink - C:\Program Files\FlashGet Network\FlashGet universal\ComDlls\Bhoall.htm ()
O9 - Extra Button: Steganos Password Manager - {024538B9-3F39-49FF-9503-975F743210FA} - C:\Program Files\Steganos Privacy Suite 11\SPMIEToolbar.dll (Steganos GmbH)
O15 - HKU\S-1-5-21-746137067-73586283-725345543-1003\..Trusted Ranges: Range1979 ([http] in Trusted sites)
O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_19-windows-i586.cab (Java Plug-in 1.6.0_19)
O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_19-windows-i586.cab (Java Plug-in 1.6.0_19)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_19-windows-i586.cab (Java Plug-in 1.6.0_19)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 213.158.199.1 213.158.199.5
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\tbr {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\Program Files\Crawler\ctbr.dll (Crawler.com)
O18 - Protocol\Filter\x-sdch {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll (Google Inc.)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: TaskMan - (C:\Documents and Settings\krzysztof\ctfmon.exe) -  File not found
O20 - Winlogon\Notify\LBTWlgn: DllName - c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll - c:\Program Files\Common Files\LogiShrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O22 - SharedTaskScheduler: {1984DD45-52CF-49cd-AB77-18F378FEA264} - FencesShellExt - C:\Program Files\Stardock\Fences\FencesMenu.dll (Stardock)
O24 - Desktop WallPaper: C:\Documents and Settings\krzysztof\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\krzysztof\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-02-12 10:06:58 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2011-02-05 18:15:38 | 000,275,789 | ---- | M] () - C:\AutoMapaSetupLog.txt -- [ NTFS ]
O32 - AutoRun File - [2006-03-24 13:06:41 | 000,000,053 | R--- | M] () - D:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\{097e6a5a-bd24-11df-abae-00030d4ff325}\Shell - "" = AutoRun
O33 - MountPoints2\{097e6a5a-bd24-11df-abae-00030d4ff325}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{097e6a5d-bd24-11df-abae-00030d4ff325}\Shell - "" = AutoRun
O33 - MountPoints2\{097e6a5d-bd24-11df-abae-00030d4ff325}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{097e6a5f-bd24-11df-abae-00f1d000f1d0}\Shell - "" = AutoRun
O33 - MountPoints2\{097e6a5f-bd24-11df-abae-00f1d000f1d0}\Shell\AutoRun\command - "" = J:\AutoRun.exe
O33 - MountPoints2\{690d0cae-d941-11df-abca-00030d4ff325}\Shell - "" = AutoRun
O33 - MountPoints2\{690d0cae-d941-11df-abca-00030d4ff325}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{690d0cb1-d941-11df-abca-00030d4ff325}\Shell - "" = AutoRun
O33 - MountPoints2\{690d0cb1-d941-11df-abca-00030d4ff325}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{6f92cb32-f8d7-11dd-abd7-806d6172696f}\Shell - "" = AutoRun
O33 - MountPoints2\{6f92cb32-f8d7-11dd-abd7-806d6172696f}\Shell\AutoRun\command - "" = D:\reatogoMenu.exe -- [2005-07-16 23:36:50 | 000,240,128 | R--- | M] ()
O33 - MountPoints2\{7febce98-3ad6-11e0-ac38-00f1d000f1d0}\Shell - "" = AutoRun
O33 - MountPoints2\{7febce98-3ad6-11e0-ac38-00f1d000f1d0}\Shell\AutoRun\command - "" = H:\NokiaPCIA_Autorun.exe
O33 - MountPoints2\{850f551e-f8e1-11dd-a89e-00030d4ff325}\Shell - "" = AutoRun
O33 - MountPoints2\{850f551e-f8e1-11dd-a89e-00030d4ff325}\Shell\AutoRun\command - "" = E:\setup.exe AUTORUN=1
O33 - MountPoints2\{9b798b4a-932e-11de-a98a-00030d4ff325}\Shell - "" = AutoRun
O33 - MountPoints2\{9b798b4a-932e-11de-a98a-00030d4ff325}\Shell\AutoRun\command - "" = E:\Install.exe
O33 - MountPoints2\{9c62d4da-4c98-11de-a931-00f1d000f1d0}\Shell\AutoRun\command - "" = F:\EmDesk.exe
O33 - MountPoints2\{9c62d4da-4c98-11de-a931-00f1d000f1d0}\Shell\EmDesk\command - "" = F:\EmDesk.exe
O33 - MountPoints2\{b0a95771-c2a3-11df-abb7-00030d4ff325}\Shell - "" = AutoRun
O33 - MountPoints2\{b0a95771-c2a3-11df-abb7-00030d4ff325}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{c1206fbe-5df3-11df-ab07-00f1d000f1d0}\Shell\AutoRun\command - "" = G:\selomoje\\sranje.exe
O33 - MountPoints2\{c1206fbe-5df3-11df-ab07-00f1d000f1d0}\Shell\explore\command - "" = G:\selomoje\\\sranje.exe
O33 - MountPoints2\{c1206fbe-5df3-11df-ab07-00f1d000f1d0}\Shell\open\command - "" = G:\selomoje\\\sranje.exe
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O34 - HKLM BootExecute: (DiskMgkB) - C:\WINDOWS\System32\DiskMgkB.exe (RoseCity Software)
O34 - HKLM BootExecute: (OODBS) - C:\WINDOWS\System32\OODBS.exe (O&O Software GmbH)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011-05-03 21:24:11 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\krzysztof\Desktop\OTL.exe
[2011-05-03 20:26:30 | 098,078,016 | ---- | C] (Igor Pavlov) -- C:\Documents and Settings\krzysztof\Desktop\OTLPEStd.exe
[2011-05-03 20:15:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\LastGood
[2011-05-03 19:58:18 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\krzysztof\Recent
[2011-05-02 22:17:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Media Center Diagnostic Kit
[2011-05-02 22:17:55 | 000,000,000 | ---D | C] -- C:\Program Files\Media Center Diagnostic Kit
[2011-05-02 20:56:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\krzysztof\Application Data\ElevatedDiagnostics
[2011-05-02 20:54:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Windows PowerShell 1.0
[2011-05-02 20:54:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\windowspowershell
[2011-05-02 20:37:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Documents To Go
[2011-05-02 20:36:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Palm
[2011-05-02 20:34:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\krzysztof\Start Menu\Programs\Palm
[2011-05-02 14:06:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\krzysztof\Application Data\Stardock
[2011-05-02 14:05:57 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Application Data\{A3A26C56-02C3-4F76-A033-12EE2FB52AE6}
[2011-05-02 14:05:52 | 000,000,000 | ---D | C] -- C:\Program Files\Stardock
[2011-05-02 14:05:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Stardock
[2011-05-02 14:05:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\krzysztof\Local Settings\Application Data\PackageAware
[2011-05-02 13:16:44 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2011-05-02 13:16:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\AVAST Software
[2011-04-29 23:16:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\krzysztof\Application Data\ABBYY
[2011-04-26 00:12:52 | 000,000,000 | ---D | C] -- C:\f3c3f24c31aaa8d25d07817a
[2011-04-25 22:25:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\krzysztof\Application Data\Intel Corporation
[2011-04-25 17:34:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Intel
[2011-04-25 00:17:01 | 000,180,224 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxres.dll
[2011-04-25 00:12:57 | 000,053,248 | ---- | C] (Windows XP Bundled build C-Centric Single User) -- C:\WINDOWS\System32\CSVer.dll
[2011-04-25 00:11:19 | 000,056,976 | ---- | C] (O2Micro) -- C:\WINDOWS\System32\O2Icon_2.dll
[2011-04-25 00:11:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\SDA
[2011-04-25 00:11:18 | 000,000,000 | ---D | C] -- C:\Program Files\O2Micro Flash Memory Card Driver
[2011-04-25 00:08:07 | 000,016,400 | ---- | C] (Logitech, Inc.) -- C:\WINDOWS\System32\drivers\LNonPnP.sys
[2011-04-25 00:07:41 | 000,010,448 | ---- | C] (Logitech, Inc.) -- C:\WINDOWS\System32\drivers\LBeepKE.sys
[2011-04-25 00:07:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Documents\LogiShrd
[2011-04-25 00:07:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Logitech
[2011-04-25 00:07:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Logishrd
[2011-04-25 00:06:56 | 000,000,000 | ---D | C] -- C:\Program Files\Logitech
[2011-04-25 00:06:36 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\LogiShrd
[2011-04-25 00:06:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\krzysztof\Application Data\Logitech
[2011-04-25 00:06:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\krzysztof\Application Data\Logishrd
[2011-04-25 00:05:08 | 000,359,016 | ---- | C] (Realtek Semiconductor Crop.) -- C:\WINDOWS\vncutil.exe
[2011-04-25 00:05:06 | 000,129,640 | ---- | C] (Realtek Semiconductor) -- C:\WINDOWS\RtkAudioService.exe
[2011-04-25 00:05:06 | 000,056,936 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\RtkCoInstXP.dll
[2011-04-25 00:05:04 | 001,395,800 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\drivers\Monfilt.sys
[2011-04-25 00:05:03 | 001,691,480 | ---- | C] (Creative) -- C:\WINDOWS\System32\drivers\Ambfilt.sys
[2011-04-25 00:03:29 | 000,057,344 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igxprd32.dll
[2011-04-25 00:03:28 | 001,670,144 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igxpdv32.dll
[2011-04-25 00:03:28 | 000,151,040 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igxpgd32.dll
[2011-04-25 00:03:27 | 002,643,968 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igxpdx32.dll
[2011-04-25 00:03:27 | 000,176,128 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrsky.lrc
[2011-04-25 00:03:27 | 000,172,032 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrslv.lrc
[2011-04-25 00:03:24 | 000,920,088 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\igxpun.exe
[2011-04-25 00:03:24 | 000,319,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\difxapi.dll
[2011-04-25 00:03:19 | 000,000,000 | ---D | C] -- C:\Intel
[2011-04-24 22:05:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\krzysztof\My Documents\DriverGenius
[2011-04-24 22:00:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Driver Genius
[2011-04-24 22:00:32 | 000,000,000 | ---D | C] -- C:\Program Files\DriverGenius
[2011-04-24 21:22:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\krzysztof\My Documents\SuperSterownik
[2011-04-20 23:51:49 | 000,000,000 | ---D | C] -- C:\Program Files\FlashGet
[2011-04-20 23:46:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\krzysztof\Application Data\FlashGet
[2011-04-20 23:45:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\krzysztof\Application Data\FlashGetBHO
[2011-04-19 23:35:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\krzysztof\My Documents\Instrukcje kosiarki Honda
[2011-04-17 19:50:37 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot_bak
[2011-04-17 14:33:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\krzysztof\Start Menu\Programs\Revo Uninstaller
[2011-04-17 00:15:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files
[2011-04-13 07:21:17 | 000,000,000 | -HSD | C] -- C:\found.000
[2011-04-10 23:49:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\krzysztof\Desktop\Sałatki
[2011-04-10 21:40:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Product Key Explorer
[2011-04-10 21:40:04 | 000,000,000 | ---D | C] -- C:\Program Files\Nsasoft
[2011-02-16 00:47:04 | 000,047,360 | ---- | C] (VSO Software) -- C:\Documents and Settings\krzysztof\Application Data\pcouffin.sys
[33 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\*.tmp files -> C:\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2011-05-03 21:24:11 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\krzysztof\Desktop\OTL.exe
[2011-05-03 21:02:19 | 098,078,016 | ---- | M] (Igor Pavlov) -- C:\Documents and Settings\krzysztof\Desktop\OTLPEStd.exe
[2011-05-03 20:26:02 | 000,000,430 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{B9217D0E-8463-4C3E-8AE8-33B7AED64252}.job
[2011-05-03 20:18:37 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011-05-03 20:18:28 | 000,127,611 | ---- | M] () -- C:\WINDOWS\System32\oodbs.lor
[2011-05-03 20:15:27 | 000,002,577 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2011-05-03 16:31:01 | 000,000,465 | ---- | M] () -- C:\WINDOWS\lexstat.ini
[2011-05-03 14:21:57 | 000,001,729 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk
[2011-05-03 00:43:54 | 000,007,990 | ---- | M] () -- C:\Documents and Settings\krzysztof\Desktop\hijackthis.zip
[2011-05-03 00:40:04 | 000,475,418 | ---- | M] () -- C:\Documents and Settings\krzysztof\Desktop\Silent Runners.vbs
[2011-05-03 00:20:31 | 004,335,422 | ---- | M] () -- C:\Documents and Settings\krzysztof\Desktop\ComboFix.exe
[2011-05-02 22:42:58 | 000,510,630 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011-05-02 22:42:58 | 000,093,118 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011-05-02 22:38:18 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2011-05-02 20:37:32 | 000,000,812 | ---- | M] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\DataViz Inc Messenger.lnk
[2011-05-02 20:37:30 | 000,001,613 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Documents To Go.lnk
[2011-05-02 20:34:59 | 000,001,611 | ---- | M] () -- C:\Documents and Settings\krzysztof\Desktop\Palm Desktop.lnk
[2011-05-02 19:57:40 | 000,270,984 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011-05-02 17:32:14 | 000,000,823 | ---- | M] () -- C:\Documents and Settings\krzysztof\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011-05-02 14:07:00 | 000,001,667 | ---- | M] () -- C:\Documents and Settings\krzysztof\Desktop\Customize Fences.lnk
[2011-05-02 01:27:00 | 000,000,556 | ---- | M] () -- C:\Documents and Settings\krzysztof\My Documents\FIX.REG
[2011-05-01 18:48:11 | 000,016,400 | ---- | M] (Logitech, Inc.) -- C:\WINDOWS\System32\drivers\LNonPnP.sys
[2011-04-29 00:20:33 | 000,000,572 | ---- | M] () -- C:\Documents and Settings\krzysztof\My Documents\spider.sav
[2011-04-28 23:39:53 | 000,000,000 | -H-- | M] () -- C:\Documents and Settings\krzysztof\My Documents\Default.rdp
[2011-04-28 14:35:22 | 000,000,046 | ---- | M] () -- C:\WINDOWS\Resecik.ini
[2011-04-28 07:40:50 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011-04-27 06:22:53 | 000,000,951 | ---- | M] () -- C:\Documents and Settings\krzysztof\Start Menu\Programs\Startup\Logitech . Rejestracja produktu.lnk
[2011-04-25 23:02:03 | 003,311,010 | ---- | M] () -- C:\Documents and Settings\krzysztof\My Documents\2011-04-25 23;02;03.PDF
[2011-04-25 23:00:56 | 003,311,010 | ---- | M] () -- C:\Documents and Settings\krzysztof\My Documents\2011-04-25 23;00;56.PDF
[2011-04-25 23:00:01 | 003,311,010 | ---- | M] () -- C:\Documents and Settings\krzysztof\My Documents\2011-04-25 23;00;01.PDF
[2011-04-25 22:58:54 | 003,311,010 | ---- | M] () -- C:\Documents and Settings\krzysztof\My Documents\2011-04-25 22;58;54.PDF
[2011-04-25 22:47:29 | 003,311,010 | ---- | M] () -- C:\Documents and Settings\krzysztof\My Documents\2011-04-25 22;47;29.PDF
[2011-04-25 22:46:39 | 003,311,010 | ---- | M] () -- C:\Documents and Settings\krzysztof\My Documents\2011-04-25 22;46;39.PDF
[2011-04-25 22:44:38 | 003,311,010 | ---- | M] () -- C:\Documents and Settings\krzysztof\My Documents\2011-04-25 22;44;38.PDF
[2011-04-25 22:39:45 | 006,760,061 | ---- | M] () -- C:\Documents and Settings\krzysztof\My Documents\2011-04-25 22;39;45.PDF
[2011-04-25 22:38:10 | 006,760,061 | ---- | M] () -- C:\Documents and Settings\krzysztof\My Documents\2011-04-25 22;38;10.PDF
[2011-04-25 22:37:04 | 006,760,061 | ---- | M] () -- C:\Documents and Settings\krzysztof\My Documents\2011-04-25 22;37;03.PDF
[2011-04-25 22:33:18 | 006,760,061 | ---- | M] () -- C:\Documents and Settings\krzysztof\My Documents\2011-04-25 22;33;18.PDF
[2011-04-25 22:28:45 | 004,940,566 | ---- | M] () -- C:\Documents and Settings\krzysztof\My Documents\2011-04-25 22;28;39.PDF
[2011-04-25 00:13:47 | 000,022,504 | ---- | M] () -- C:\WINDOWS\System32\drivers\INFCACHE.1
[2011-04-25 00:13:47 | 000,004,384 | ---- | M] () -- C:\WINDOWS\System32\drivers\O2MDDISK.PNF
[2011-04-25 00:13:47 | 000,004,352 | ---- | M] () -- C:\WINDOWS\System32\drivers\O2SDDISK.PNF
[2011-04-25 00:12:18 | 000,013,096 | ---- | M] () -- C:\WINDOWS\System32\drivers\o2mwxp.PNF
[2011-04-25 00:12:16 | 000,006,748 | ---- | M] () -- C:\WINDOWS\System32\drivers\o2media.PNF
[2011-04-25 00:12:14 | 000,006,708 | ---- | M] () -- C:\WINDOWS\System32\drivers\o2sd.PNF
[2011-04-24 22:00:34 | 000,000,678 | ---- | M] () -- C:\Documents and Settings\krzysztof\Desktop\Driver Genius.lnk
[2011-04-21 20:15:00 | 000,000,838 | ---- | M] () -- C:\Documents and Settings\krzysztof\Desktop\Moon Phase Calculator.lnk
[2011-04-17 14:33:32 | 000,000,923 | ---- | M] () -- C:\Documents and Settings\krzysztof\Desktop\Revo Uninstaller.lnk
[2011-04-13 07:49:44 | 000,002,669 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Nero Burning ROM 10.lnk
[2011-04-10 21:40:05 | 000,000,834 | ---- | M] () -- C:\Documents and Settings\krzysztof\Desktop\Product Key Explorer.lnk
[2011-04-10 21:27:34 | 000,000,049 | ---- | M] () -- C:\WINDOWS\ProductKeyExplorer.INI
[2011-04-10 16:43:15 | 001,070,392 | ---- | M] () -- C:\Documents and Settings\krzysztof\Desktop\FTSDeskUpdate.exe
[2011-04-09 20:43:04 | 000,054,669 | ---- | M] () -- C:\Documents and Settings\krzysztof\Desktop\wniosek o przedłużenie pr.dypl.rtf
[2011-04-06 15:33:50 | 006,388,328 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\drivers\RtkHDAud.sys
[2011-04-04 17:22:10 | 000,053,248 | ---- | M] (Windows XP Bundled build C-Centric Single User) -- C:\WINDOWS\System32\CSVer.dll
[33 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\*.tmp files -> C:\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011-05-03 14:21:16 | 000,002,377 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Adobe Reader 9.lnk
[2011-05-03 14:21:16 | 000,001,729 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk
[2011-05-03 00:43:49 | 000,007,990 | ---- | C] () -- C:\Documents and Settings\krzysztof\Desktop\hijackthis.zip
[2011-05-03 00:39:50 | 000,475,418 | ---- | C] () -- C:\Documents and Settings\krzysztof\Desktop\Silent Runners.vbs
[2011-05-03 00:19:32 | 004,335,422 | ---- | C] () -- C:\Documents and Settings\krzysztof\Desktop\ComboFix.exe
[2011-05-02 20:34:59 | 000,001,611 | ---- | C] () -- C:\Documents and Settings\krzysztof\Desktop\Palm Desktop.lnk
[2011-05-02 14:06:20 | 000,001,667 | ---- | C] () -- C:\Documents and Settings\krzysztof\Desktop\Customize Fences.lnk
[2011-05-02 01:27:00 | 000,000,556 | ---- | C] () -- C:\Documents and Settings\krzysztof\My Documents\FIX.REG
[2011-04-29 00:15:28 | 000,000,572 | ---- | C] () -- C:\Documents and Settings\krzysztof\My Documents\spider.sav
[2011-04-28 23:39:53 | 000,000,000 | -H-- | C] () -- C:\Documents and Settings\krzysztof\My Documents\Default.rdp
[2011-04-27 06:22:53 | 000,000,951 | ---- | C] () -- C:\Documents and Settings\krzysztof\Start Menu\Programs\Startup\Logitech . Rejestracja produktu.lnk
[2011-04-25 23:02:03 | 003,311,010 | ---- | C] () -- C:\Documents and Settings\krzysztof\My Documents\2011-04-25 23;02;03.PDF
[2011-04-25 23:00:56 | 003,311,010 | ---- | C] () -- C:\Documents and Settings\krzysztof\My Documents\2011-04-25 23;00;56.PDF
[2011-04-25 23:00:01 | 003,311,010 | ---- | C] () -- C:\Documents and Settings\krzysztof\My Documents\2011-04-25 23;00;01.PDF
[2011-04-25 22:58:54 | 003,311,010 | ---- | C] () -- C:\Documents and Settings\krzysztof\My Documents\2011-04-25 22;58;54.PDF
[2011-04-25 22:47:29 | 003,311,010 | ---- | C] () -- C:\Documents and Settings\krzysztof\My Documents\2011-04-25 22;47;29.PDF
[2011-04-25 22:46:39 | 003,311,010 | ---- | C] () -- C:\Documents and Settings\krzysztof\My Documents\2011-04-25 22;46;39.PDF
[2011-04-25 22:44:38 | 003,311,010 | ---- | C] () -- C:\Documents and Settings\krzysztof\My Documents\2011-04-25 22;44;38.PDF
[2011-04-25 22:39:45 | 006,760,061 | ---- | C] () -- C:\Documents and Settings\krzysztof\My Documents\2011-04-25 22;39;45.PDF
[2011-04-25 22:38:10 | 006,760,061 | ---- | C] () -- C:\Documents and Settings\krzysztof\My Documents\2011-04-25 22;38;10.PDF
[2011-04-25 22:37:03 | 006,760,061 | ---- | C] () -- C:\Documents and Settings\krzysztof\My Documents\2011-04-25 22;37;03.PDF
[2011-04-25 22:33:18 | 006,760,061 | ---- | C] () -- C:\Documents and Settings\krzysztof\My Documents\2011-04-25 22;33;18.PDF
[2011-04-25 22:28:42 | 004,940,566 | ---- | C] () -- C:\Documents and Settings\krzysztof\My Documents\2011-04-25 22;28;39.PDF
[2011-04-25 00:13:47 | 000,004,352 | ---- | C] () -- C:\WINDOWS\System32\drivers\O2SDDISK.PNF
[2011-04-25 00:13:46 | 000,004,384 | ---- | C] () -- C:\WINDOWS\System32\drivers\O2MDDISK.PNF
[2011-04-25 00:12:18 | 000,013,096 | ---- | C] () -- C:\WINDOWS\System32\drivers\o2mwxp.PNF
[2011-04-25 00:12:15 | 000,006,748 | ---- | C] () -- C:\WINDOWS\System32\drivers\o2media.PNF
[2011-04-25 00:12:14 | 000,006,708 | ---- | C] () -- C:\WINDOWS\System32\drivers\o2sd.PNF
[2011-04-25 00:03:28 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4926.dll
[2011-04-24 22:00:34 | 000,000,678 | ---- | C] () -- C:\Documents and Settings\krzysztof\Desktop\Driver Genius.lnk
[2011-04-23 17:20:53 | 000,000,046 | ---- | C] () -- C:\WINDOWS\Resecik.ini
[2011-04-23 17:19:07 | 000,578,048 | ---- | C] () -- C:\Documents and Settings\krzysztof\Desktop\Wylacz2005.exe
[2011-04-15 21:34:25 | 000,000,823 | ---- | C] () -- C:\Documents and Settings\krzysztof\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011-04-15 21:34:25 | 000,000,811 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Mozilla Firefox.lnk
[2011-04-10 21:40:05 | 000,000,834 | ---- | C] () -- C:\Documents and Settings\krzysztof\Desktop\Product Key Explorer.lnk
[2011-04-10 21:27:34 | 000,000,049 | ---- | C] () -- C:\WINDOWS\ProductKeyExplorer.INI
[2011-04-10 16:43:14 | 001,070,392 | ---- | C] () -- C:\Documents and Settings\krzysztof\Desktop\FTSDeskUpdate.exe
[2011-04-09 20:43:03 | 000,054,669 | ---- | C] () -- C:\Documents and Settings\krzysztof\Desktop\wniosek o przedłużenie pr.dypl.rtf
[2011-03-27 20:45:14 | 000,002,560 | ---- | C] () -- C:\WINDOWS\_MSRSTRT.EXE
[2011-03-12 22:39:21 | 000,000,042 | ---- | C] () -- C:\WINDOWS\oodjobd.INI
[2011-02-16 00:59:51 | 000,000,055 | ---- | C] () -- C:\WINDOWS\ClonyDrives.ini
[2011-02-16 00:59:35 | 000,000,417 | ---- | C] () -- C:\WINDOWS\Clony2.ini
[2011-02-16 00:47:17 | 000,000,014 | ---- | C] () -- C:\WINDOWS\System32\systeminfo3.dll
[2011-02-16 00:47:04 | 000,087,608 | ---- | C] () -- C:\Documents and Settings\krzysztof\Application Data\inst.exe
[2011-02-16 00:47:04 | 000,007,887 | ---- | C] () -- C:\Documents and Settings\krzysztof\Application Data\pcouffin.cat
[2011-02-16 00:47:04 | 000,001,144 | ---- | C] () -- C:\Documents and Settings\krzysztof\Application Data\pcouffin.inf
[2011-01-17 21:54:08 | 000,000,251 | ---- | C] () -- C:\WINDOWS\gfscore.ini
[2011-01-17 21:50:32 | 000,000,018 | ---- | C] () -- C:\WINDOWS\gfact.ini
[2010-06-23 00:12:02 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2010-06-23 00:11:58 | 000,205,824 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2010-06-22 23:54:47 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2010-06-03 21:13:40 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Infob.dat
[2010-06-03 21:13:40 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Infoa.dat
[2010-06-03 18:15:45 | 000,000,049 | ---- | C] () -- C:\WINDOWS\SW_Win3112X32.DLL
[2010-06-03 18:15:24 | 001,802,240 | ---- | C] () -- C:\WINDOWS\System32\beconvlib.dll
[2010-06-03 18:15:24 | 000,282,624 | ---- | C] () -- C:\WINDOWS\System32\bprgcomm.dll
[2010-06-03 18:15:24 | 000,131,072 | ---- | C] () -- C:\WINDOWS\System32\CSVSpecialProcessing.dll
[2010-06-03 18:15:23 | 000,221,184 | ---- | C] () -- C:\WINDOWS\System32\SII_PDF.dll
[2010-06-03 18:15:23 | 000,098,304 | ---- | C] () -- C:\WINDOWS\System32\DVM.dll
[2010-06-03 18:15:23 | 000,000,530 | ---- | C] () -- C:\WINDOWS\System32\tx151ic.ini
[2010-06-03 18:15:22 | 000,102,400 | ---- | C] () -- C:\WINDOWS\System32\SARzilla.dll
[2010-06-03 18:15:22 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\RegisterExe.exe
[2010-05-19 21:37:03 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\krzysztof\Application Data\$_hpcst$.hpc
[2010-03-12 22:02:15 | 000,000,114 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\img5.key
[2010-03-12 22:00:01 | 000,000,012 | ---- | C] () -- C:\Documents and Settings\krzysztof\Application Data\9481
[2010-03-12 22:00:01 | 000,000,012 | ---- | C] () -- C:\Documents and Settings\krzysztof\Local Settings\Application Data\2631
[2010-03-12 22:00:01 | 000,000,012 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\1548
[2010-03-12 22:00:01 | 000,000,012 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\1477
[2010-03-12 22:00:01 | 000,000,012 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\0359
[2009-08-15 21:26:51 | 000,881,664 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2009-07-24 11:12:13 | 000,042,116 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2009-06-08 15:45:34 | 000,114,688 | ---- | C] () -- C:\WINDOWS\System32\WLANUTL.dll
[2009-05-26 00:09:32 | 000,000,000 | ---- | C] () -- C:\WINDOWS\QuickInstall.INI
[2009-04-07 23:30:08 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\LauncherAccess.dt
[2009-04-07 23:28:44 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2009-03-29 19:29:55 | 000,000,465 | ---- | C] () -- C:\WINDOWS\lexstat.ini
[2009-03-29 19:29:36 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\lxbfvs.dll
[2009-03-29 19:29:01 | 000,000,188 | ---- | C] () -- C:\WINDOWS\System32\lxbfcoin.ini
[2009-03-29 19:28:51 | 000,086,016 | ---- | C] () -- C:\WINDOWS\System32\LXBFIH.EXE
[2009-03-29 19:28:49 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\LXBFLCNP.DLL
[2009-03-29 19:28:49 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\INSTMON.EXE
[2009-03-08 15:28:05 | 000,025,600 | ---- | C] () -- C:\Documents and Settings\krzysztof\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009-03-03 01:24:23 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2009-02-23 00:34:23 | 000,320,961 | ---- | C] () -- C:\WINDOWS\uninstpso.exe
[2009-02-14 17:25:31 | 000,000,048 | ---- | C] () -- C:\WINDOWS\FileNamesinQueue.ini
[2009-02-14 15:16:53 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2009-02-13 22:36:16 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2009-02-13 20:11:50 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2009-02-13 20:11:46 | 000,000,132 | ---- | C] () -- C:\Documents and Settings\krzysztof\Local Settings\Application Data\fusioncache.dat
[2009-02-13 11:58:47 | 000,000,040 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\.zreglib
[2009-02-13 11:46:39 | 000,102,400 | ---- | C] () -- C:\WINDOWS\System32\aloaha_prntmon.dll
[2009-02-12 10:59:16 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2009-02-12 10:49:34 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2009-02-12 10:48:22 | 000,270,984 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2009-02-12 10:21:49 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2009-02-12 10:14:34 | 000,001,112 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2009-02-12 10:02:53 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2009-01-02 03:40:32 | 000,059,504 | ---- | C] () -- C:\WINDOWS\System32\zlib.dll
[2008-02-27 11:30:18 | 000,000,022 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\60a7806a-0eea-424c-a464-20f4730cd631
[2007-08-23 18:30:00 | 000,108,032 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2006-01-20 13:34:30 | 000,049,152 | ---- | C] () -- C:\WINDOWS\sm56cht.dll
[2006-01-20 13:34:28 | 000,061,440 | ---- | C] () -- C:\WINDOWS\sm56fra.dll
[2006-01-20 13:34:28 | 000,053,248 | ---- | C] () -- C:\WINDOWS\sm56jpn.dll
[2006-01-20 13:34:28 | 000,049,152 | ---- | C] () -- C:\WINDOWS\sm56chs.dll
[2006-01-20 13:34:26 | 000,069,632 | ---- | C] () -- C:\WINDOWS\sm56spn.dll
[2006-01-20 13:34:26 | 000,069,632 | ---- | C] () -- C:\WINDOWS\sm56itl.dll
[2006-01-20 13:34:26 | 000,069,632 | ---- | C] () -- C:\WINDOWS\sm56eng.dll
[2006-01-20 13:34:26 | 000,069,632 | ---- | C] () -- C:\WINDOWS\sm56brz.dll
[2006-01-20 13:34:26 | 000,061,440 | ---- | C] () -- C:\WINDOWS\sm56ger.dll
[2005-08-05 15:01:54 | 000,239,104 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2005-01-27 16:33:00 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\o2flash.exe
[2005-01-21 12:02:00 | 000,013,312 | ---- | C] () -- C:\WINDOWS\System32\RMDevice.dll
[2004-08-10 21:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2004-08-10 21:00:00 | 000,510,630 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2004-08-10 21:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2004-08-10 21:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2004-08-10 21:00:00 | 000,093,118 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2004-08-10 21:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2004-08-10 21:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2004-08-10 21:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004-08-10 21:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2004-08-10 21:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2003-07-30 11:48:28 | 000,004,711 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2003-07-30 10:49:22 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2001-03-30 22:58:36 | 000,135,168 | ---- | C] () -- C:\WINDOWS\System32\drivers\Property.dll
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2010-12-05 16:09:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ActMask EMF2PDF SDK
[2011-05-03 20:15:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AVAST Software
[2009-03-29 19:30:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\BVRP Software
[2011-02-16 08:26:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
[2010-04-21 00:42:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DataViz
[2010-03-10 19:02:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Global Graphics
[2009-02-14 17:09:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\HotSync
[2011-02-27 22:47:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Installations
[2010-04-17 23:49:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\livepim
[2011-02-27 22:35:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Nokia
[2011-02-11 23:41:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NokiaInstallerCache
[2011-02-11 23:48:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PC Suite
[2009-05-22 22:37:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\RapidSolution
[2009-02-13 11:58:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SlySoft
[2009-12-13 23:47:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Softland
[2011-01-08 17:29:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Soluto
[2011-03-26 16:09:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SpeedBit
[2011-04-17 14:25:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Temp
[2011-05-02 14:05:57 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\{A3A26C56-02C3-4F76-A033-12EE2FB52AE6}
[2009-09-30 23:37:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\Aston
[2010-03-22 01:50:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\Auslogics
[2010-06-22 23:49:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\BESTplayer
[2011-04-24 21:19:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\BITS
[2011-02-25 22:06:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\Braid
[2011-02-16 08:49:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\DAEMON Tools Lite
[2011-02-16 01:27:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\DVDFab
[2011-05-02 20:56:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\ElevatedDiagnostics
[2010-05-29 17:45:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\FKRMonitor
[2011-04-20 23:46:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\FlashGet
[2011-04-20 23:45:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\FlashGetBHO
[2009-02-13 11:26:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\Foxit
[2011-03-25 18:55:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\Foxit Software
[2010-05-09 16:16:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\GetRightToGo
[2009-02-14 17:07:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\HotSync
[2010-05-15 21:53:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\iambic
[2010-03-12 22:00:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\Imagic504N
[2009-03-14 23:53:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\Indentix
[2009-03-30 00:00:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\Itsth
[2009-05-10 18:44:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\IVONA Player
[2009-02-14 17:21:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\Leadertech
[2011-02-20 23:08:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\Moon Calculator
[2011-04-22 23:47:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\Nokia
[2011-02-20 21:49:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\Nokia Ovi Suite
[2010-03-02 21:02:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\Opera
[2011-04-22 21:14:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\PC Suite
[2009-08-27 19:26:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\Program Files
[2009-05-22 23:02:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\RTPlayer
[2009-04-08 08:54:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\Samsung
[2009-12-13 23:54:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\Softland
[2011-05-02 14:06:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\Stardock
[2011-05-02 16:08:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\Steganos
[2011-03-26 17:30:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\Thinstall
[2009-03-15 01:11:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\Thunderbird
[2011-04-19 22:28:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\Toolbar4
[2010-02-28 18:13:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\Tunebite
[2011-04-03 13:37:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\UpdateStar
[2011-03-10 22:35:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\uTorrent
[2011-02-16 08:31:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\Vso
[2009-05-18 00:20:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\VSRevoGroup
[2009-09-25 00:03:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\krzysztof\Application Data\WeatherWatcherLive
[2010-06-25 16:50:00 | 000,000,400 | ---- | M] () -- C:\WINDOWS\Tasks\Install.job
[2011-05-03 20:26:02 | 000,000,430 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{B9217D0E-8463-4C3E-8AE8-33B7AED64252}.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 24 bytes -> C:\WINDOWS:784A8695E5BD10F4
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Application Data\Temp:C5760A8B
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\Temp:A9662AE0

< End of report >