OTL logfile created on: 2011-05-31 11:13:52 - Run 1
OTL by OldTimer - Version 3.2.23.0     Folder = C:\Documents and Settings\Sitek\Pulpit
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
2,00 Gb Total Physical Memory | 1,46 Gb Available Physical Memory | 73,20% Memory free
3,80 Gb Paging File | 3,35 Gb Available in Paging File | 87,97% Paging File free
Paging file location(s): C:\pagefile.sys 2000 4000 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 29,29 Gb Total Space | 11,17 Gb Free Space | 38,14% Space Free | Partition Type: NTFS
Drive D: | 232,88 Gb Total Space | 15,33 Gb Free Space | 6,58% Space Free | Partition Type: NTFS
Drive E: | 146,48 Gb Total Space | 1,74 Gb Free Space | 1,18% Space Free | Partition Type: NTFS
Drive F: | 122,31 Gb Total Space | 2,73 Gb Free Space | 2,24% Space Free | Partition Type: NTFS
Drive G: | 232,88 Gb Total Space | 18,06 Gb Free Space | 7,76% Space Free | Partition Type: NTFS
 
Computer Name: SITEK-CA7A3EA8F | User Name: Sitek | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 60 Days
 
[color=#E56717]========== Processes (All) ==========[/color]
 
PRC - [2011-05-31 11:11:47 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Sitek\Pulpit\OTL.exe
PRC - [2011-05-02 18:03:46 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2011-04-08 07:14:00 | 002,218,600 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
PRC - [2011-04-07 22:16:24 | 000,155,752 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\nvsvc32.exe
PRC - [2011-03-17 19:04:58 | 000,075,136 | ---- | M] () -- C:\WINDOWS\system32\PnkBstrA.exe
PRC - [2010-11-22 19:33:03 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe
PRC - [2010-11-22 19:01:37 | 000,340,520 | ---- | M] (Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
PRC - [2010-08-17 15:17:06 | 000,058,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spoolsv.exe
PRC - [2010-02-15 13:58:34 | 000,025,256 | ---- | M] () -- C:\Program Files\Lexmark 4800 Series\lxdeamon.exe
PRC - [2010-02-15 13:58:32 | 000,455,336 | ---- | M] () -- C:\Program Files\Lexmark 4800 Series\lxdemon.exe
PRC - [2009-10-20 20:34:38 | 000,207,376 | ---- | M] (Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtblfs.exe
PRC - [2009-02-09 13:25:57 | 000,111,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\services.exe
PRC - [2008-09-16 13:03:18 | 000,169,312 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe
PRC - [2008-04-15 14:00:00 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2008-04-15 14:00:00 | 000,510,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\winlogon.exe
PRC - [2008-04-15 14:00:00 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\smss.exe
PRC - [2008-04-15 14:00:00 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\alg.exe
PRC - [2008-04-15 14:00:00 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\rundll32.exe
PRC - [2008-04-15 14:00:00 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\ctfmon.exe
PRC - [2008-04-15 14:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\svchost.exe  [RPCSS]
PRC - [2008-04-15 14:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\svchost.exe  [NETWORKSERVICE]
PRC - [2008-04-15 14:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\svchost.exe  [NETSVCS]
PRC - [2008-04-15 14:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\svchost.exe  [LOCALSERVICE]
PRC - [2008-04-15 14:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\svchost.exe  [LOCALSERVICE]
PRC - [2008-04-15 14:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\svchost.exe  [IMGSVC]
PRC - [2008-04-15 14:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\svchost.exe  [DCOMLAUNCH]
PRC - [2008-04-15 14:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\lsass.exe
PRC - [2008-04-15 14:00:00 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\csrss.exe
PRC - [2007-05-29 08:07:58 | 000,598,960 | ---- | M] ( ) -- C:\WINDOWS\system32\lxdecoms.exe
PRC - [2007-05-29 08:06:44 | 000,099,248 | ---- | M] (Lexmark International, Inc.) -- C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdeserv.exe
PRC - [2006-05-01 19:07:44 | 000,843,776 | R--- | M] (Analog Devices, Inc.) -- C:\Program Files\Analog Devices\Core\smax4pnp.exe
PRC - [2006-04-10 10:19:46 | 000,729,088 | ---- | M] (Analog Devices, Inc.) -- C:\Program Files\Analog Devices\SoundMAX\SMax4.exe
 
 
[color=#E56717]========== Modules (All) ==========[/color]
 
MOD - [2011-05-31 11:11:47 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Sitek\Pulpit\OTL.exe
MOD - [2011-01-21 16:44:11 | 008,491,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\shell32.dll
MOD - [2010-12-09 17:15:25 | 000,726,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\ntdll.dll
MOD - [2010-08-23 18:12:53 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
MOD - [2010-08-16 10:45:09 | 000,590,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\rpcrt4.dll
MOD - [2010-07-16 14:00:50 | 001,287,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\ole32.dll
MOD - [2009-12-08 11:25:45 | 000,474,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\shlwapi.dll
MOD - [2009-06-25 10:27:54 | 000,056,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\secur32.dll
MOD - [2009-03-21 16:08:59 | 001,018,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\kernel32.dll
MOD - [2009-02-09 12:53:44 | 000,686,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\advapi32.dll
MOD - [2008-10-23 14:42:41 | 000,286,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\gdi32.dll
MOD - [2008-04-15 14:00:00 | 000,997,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\setupapi.dll
MOD - [2008-04-15 14:00:00 | 000,822,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\comres.dll
MOD - [2008-04-15 14:00:00 | 000,580,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\user32.dll
MOD - [2008-04-15 14:00:00 | 000,551,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\oleaut32.dll
MOD - [2008-04-15 14:00:00 | 000,498,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\clbcatq.dll
MOD - [2008-04-15 14:00:00 | 000,343,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msvcrt.dll
MOD - [2008-04-15 14:00:00 | 000,297,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\MSCTF.dll
MOD - [2008-04-15 14:00:00 | 000,280,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\comdlg32.dll
MOD - [2008-04-15 14:00:00 | 000,219,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\uxtheme.dll
MOD - [2008-04-15 14:00:00 | 000,185,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\framedyn.dll
MOD - [2008-04-15 14:00:00 | 000,177,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\MSCTFIME.IME
MOD - [2008-04-15 14:00:00 | 000,146,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\winspool.drv
MOD - [2008-04-15 14:00:00 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx
MOD - [2008-04-15 14:00:00 | 000,110,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\imm32.dll
MOD - [2008-04-15 14:00:00 | 000,084,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\olepro32.dll
MOD - [2008-04-15 14:00:00 | 000,067,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\srclient.dll
MOD - [2008-04-15 14:00:00 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\psapi.dll
MOD - [2008-04-15 14:00:00 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\version.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - [2011-04-08 07:14:00 | 002,218,600 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2011-01-12 01:18:32 | 000,651,720 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010-11-22 19:01:37 | 000,340,520 | ---- | M] (Kaspersky Lab) [Auto | Running] -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe -- (AVP)
SRV - [2008-09-16 13:03:18 | 000,169,312 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor7.0)
SRV - [2007-05-29 08:07:58 | 000,598,960 | ---- | M] ( ) [Auto | Running] -- C:\WINDOWS\System32\lxdecoms.exe -- (lxde_device)
SRV - [2007-05-29 08:06:44 | 000,099,248 | ---- | M] () [Auto | Running] -- C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxdeserv.exe -- (lxdeCATSCustConnectService)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2011-01-31 23:42:41 | 000,010,368 | ---- | M] (Padus, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\pfc.sys -- (pfc)
DRV - [2011-01-04 21:22:13 | 000,281,760 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt)
DRV - [2011-01-04 21:22:11 | 000,025,888 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2010-11-22 19:27:53 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2010-11-22 19:01:37 | 000,315,408 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\klif.sys -- (KLIF)
DRV - [2010-08-18 22:00:00 | 000,234,392 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2009-10-14 21:18:34 | 000,036,880 | ---- | M] (Kaspersky Lab) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\klbg.sys -- (klbg)
DRV - [2009-10-02 19:39:44 | 000,019,472 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\klmouflt.sys -- (klmouflt)
DRV - [2009-09-14 14:42:46 | 000,032,272 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\klim5.sys -- (klim5)
DRV - [2009-09-01 15:29:50 | 000,128,016 | ---- | M] (Kaspersky Lab) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\kl1.sys -- (kl1)
DRV - [2007-03-24 12:20:24 | 000,046,208 | ---- | M] (JMicron Technology Corp.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\jraid.sys -- (Jraid)
DRV - [2006-03-18 03:18:58 | 000,392,960 | R--- | M] (Sensaura) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\senfilt.sys -- (SenFiltService)
DRV - [2006-02-07 20:52:58 | 000,006,912 | ---- | M] (JMicron ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\JGOGO.sys -- (JGOGO)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-1547161642-839522115-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://vshare.toolbarhome.com/?hp=df
IE - HKU\S-1-5-21-1547161642-839522115-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultenginename: "Web Search..."
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.google.pl/"
FF - prefs.js..extensions.enabledItems: linkfilter@kaspersky.ru:9.0.0.736
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.2.0.7165
FF - prefs.js..keyword.URL: "http://vshare.toolbarhome.com/search.aspx?srch=ku&q="
 
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-05-04 15:30:06 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-05-02 18:03:50 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.10\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2011-05-27 23:09:05 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.10\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins
FF - HKLM\software\mozilla\Thunderbird\Extensions\\{eea12ec4-729d-4703-bc37-106ce9879ce2}: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\THBExt [2010-11-22 18:50:22 | 000,000,000 | ---D | M]
 
[2010-11-29 16:43:14 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Sitek\Dane aplikacji\Mozilla\Extensions
[2010-11-29 16:43:14 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Sitek\Dane aplikacji\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2011-05-27 22:52:39 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Sitek\Dane aplikacji\Mozilla\Firefox\Profiles\fx54k5kg.default\extensions
[2011-03-15 22:33:10 | 000,001,583 | ---- | M] () -- C:\Documents and Settings\Sitek\Dane aplikacji\Mozilla\Firefox\Profiles\fx54k5kg.default\searchplugins\web-search.xml
[2011-05-30 11:06:35 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011-04-05 15:53:37 | 000,000,000 | ---D | M] (Skype extension) -- C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2010-11-22 19:29:44 | 000,000,000 | ---D | M] (Kaspersky URL Advisor) -- C:\Program Files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru
[2010-11-22 19:33:03 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2010-11-26 11:53:24 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION
[2011-03-22 20:38:12 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npwachk.dll
[2010-11-24 18:36:17 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml
[2010-11-24 18:36:17 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml
[2010-11-24 18:36:17 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml
[2010-11-24 18:36:17 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml
[2010-11-24 18:36:17 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml
[2010-11-24 18:36:17 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2008-04-15 14:00:00 | 000,000,783 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       mpa.one.microsoft.com
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll (Kaspersky Lab)
O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll (Kaspersky Lab)
O3 - HKLM\..\Toolbar: (&Tłumaczenie) - {0D704FAD-66E9-4F0A-BFED-4F665770DDB3} - C:\Program Files\Techland\Common\InternetTranslator\InternetTranslator.dll (Techland)
O4 - HKLM..\Run: [36X Raid Configurer] C:\WINDOWS\System32\xRaidSetup.exe (JMicron Technology Corp.)
O4 - HKLM..\Run: [AVP] C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe (Kaspersky Lab)
O4 - HKLM..\Run: [JMB36X IDE Setup] C:\WINDOWS\RaidTool\xInsIDE.exe ()
O4 - HKLM..\Run: [KernelFaultCheck]  File not found
O4 - HKLM..\Run: [lxdeamon] C:\Program Files\Lexmark 4800 Series\lxdeamon.exe ()
O4 - HKLM..\Run: [lxdemon.exe] C:\Program Files\Lexmark 4800 Series\lxdemon.exe ()
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\nvmctray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe ()
O4 - HKU\S-1-5-21-1547161642-839522115-682003330-1003..\Run: [jushed] C:\Documents and Settings\All Users\jushed.exe (                                                                               )
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1547161642-839522115-682003330-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1547161642-839522115-682003330-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Dodaj do blokowanych banerów - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm ()
O9 - Extra Button: &Wirtualna klawiatura - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll (Kaspersky Lab)
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : @C:\Program Files\Techland\Common\InternetTranslator\InternetTranslator.dll,-103 - {B46B0919-62BA-4D99-A5C4-916B57A6805C} - C:\Program Files\Techland\Common\InternetTranslator\InternetTranslator.dll (Techland)
O9 - Extra Button: &Sprawdzanie adresów - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll (Kaspersky Lab)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 155.158.102.7 8.8.8.8 155.158.59.10 155.158.99.2 213.227.98.2
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\mzvkbd3.dll (Kaspersky Lab)
O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\kloehk.dll (Kaspersky Lab)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\klogon: DllName - C:\WINDOWS\system32\klogon.dll - C:\WINDOWS\system32\klogon.dll (Kaspersky Lab)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Sitek\Dane aplikacji\Mozilla\Firefox\Tapeta pulpitu.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Sitek\Dane aplikacji\Mozilla\Firefox\Tapeta pulpitu.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010-11-22 18:05:39 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
NetSvcs: 6to4 -  File not found
NetSvcs: Ias -  File not found
NetSvcs: Iprip -  File not found
NetSvcs: Irmon -  File not found
NetSvcs: NWCWorkstation -  File not found
NetSvcs: Nwsapagent -  File not found
NetSvcs: WmdmPmSp -  File not found
 
MsConfig - StartUpReg: [b]Adobe Reader Speed Launcher[/b] - hkey= - key= - C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
MsConfig - StartUpReg: [b]DAEMON Tools Lite[/b] - hkey= - key= - C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
MsConfig - StartUpReg: [b]WinampAgent[/b] - hkey= - key= - C:\Program Files\Winamp\winampa.exe (Nullsoft, Inc.)
MsConfig - State: "system.ini" - 0
MsConfig - State: "win.ini" - 0
MsConfig - State: "bootini" - 0
MsConfig - State: "services" - 0
MsConfig - State: "startup" - 2
 
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: sermouse.sys - Driver
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vga.sys - Driver
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
 
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: sermouse.sys - Driver
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vga.sys - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
 
[color=#E56717]========== Files/Folders - Created Within 60 Days ==========[/color]
 
[2011-05-31 11:11:47 | 000,580,096 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Sitek\Pulpit\OTL.exe
[2011-05-28 13:44:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sitek\Moje dokumenty\Pobieranie
[2011-05-28 10:18:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\NVIDIA
[2011-05-28 10:17:58 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2011-05-28 00:23:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sitek\Pulpit\Red.avi
[2011-05-27 21:18:00 | 000,566,784 | RHS- | C] (                                                                               ) -- C:\Documents and Settings\All Users\jushed.exe
[2011-05-27 21:18:00 | 000,347,136 | RHS- | C] (NirSoft) -- C:\Documents and Settings\All Users\nircmd.exe
[2011-05-27 21:17:59 | 007,987,953 | ---- | C] (CCCP Project                                                ) -- C:\Documents and Settings\Sitek\Ustawienia lokalne\Dane aplikacji\Codecs.exe
[2011-05-27 21:17:59 | 000,566,784 | ---- | C] (                                                                               ) -- C:\Documents and Settings\Sitek\Ustawienia lokalne\Dane aplikacji\jushed.exe
[2011-05-27 21:17:59 | 000,347,136 | ---- | C] (NirSoft) -- C:\Documents and Settings\Sitek\Ustawienia lokalne\Dane aplikacji\nircmd.exe
[2011-05-27 21:05:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sitek\Moje dokumenty\The Witcher 2
[2011-05-27 15:15:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sitek\Pulpit\gpx
[2011-05-27 14:52:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sitek\Pulpit\mario
[2011-05-19 08:13:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sitek\Moje dokumenty\Witcher 2
[2011-05-19 08:13:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sitek\Ustawienia lokalne\Dane aplikacji\The Witcher 2
[2011-05-19 01:39:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Wiedźmin 2
[2011-05-18 21:50:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Convert FLV to MP3
[2011-05-18 21:50:11 | 000,000,000 | ---D | C] -- C:\Program Files\Convert FLV to MP3
[2011-05-15 23:35:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Dane aplikacji\Mozilla
[2011-05-12 02:00:54 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ODBC
[2011-05-06 21:59:17 | 000,000,000 | ---D | C] -- C:\Program Files\MSXML 6.0
[2011-05-06 21:46:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sitek\Ustawienia lokalne\Dane aplikacji\Aspyr
[2011-05-06 21:46:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sitek\Moje dokumenty\Aspyr
[2011-05-06 21:45:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Aspyr
[2011-05-04 09:43:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sitek\.gstreamer-0.10
[2011-05-04 09:43:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM
[2011-05-04 09:42:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sitek\Dane aplikacji\OpenFM
[2011-05-04 09:36:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sitek\Dane aplikacji\Gadu-Gadu 10
[2011-05-04 09:33:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10
[2011-05-04 09:32:49 | 000,000,000 | ---D | C] -- C:\Program Files\Gadu-Gadu 10
[2011-05-03 23:51:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\InterAction studios
[2011-05-03 23:50:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Chicken Invaders 4 The Ultimate Omelette
[2011-05-03 23:50:56 | 000,000,000 | ---D | C] -- C:\Program Files\Chicken Invaders 4 The Ultimate Omelette
[2011-05-03 23:36:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Big Fish Games
[2011-05-03 23:34:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\BigFishGamesCache
[2011-05-03 12:19:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sitek\Ustawienia lokalne\Dane aplikacji\AliensVsPredator
[2011-05-02 16:48:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sitek\Moje dokumenty\my games
[2011-04-29 10:49:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Lexmark 4800 Series
[2011-04-29 10:49:05 | 000,434,176 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdehcp.dll
[2011-04-29 10:49:05 | 000,356,352 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdeinpa.dll
[2011-04-29 10:49:05 | 000,339,968 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdeiesc.dll
[2011-04-29 10:49:04 | 001,200,128 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdeserv.dll
[2011-04-29 10:49:04 | 000,950,272 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdeusb1.dll
[2011-04-29 10:49:04 | 000,647,168 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdepmui.dll
[2011-04-29 10:49:04 | 000,565,248 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdelmpm.dll
[2011-04-29 10:49:04 | 000,053,248 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdeprox.dll
[2011-04-29 10:49:03 | 000,663,552 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdehbn3.dll
[2011-04-29 10:49:03 | 000,320,432 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdeih.exe
[2011-04-29 10:49:02 | 000,598,960 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdecoms.exe
[2011-04-29 10:49:02 | 000,364,544 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdecomm.dll
[2011-04-29 10:49:01 | 000,860,160 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdecomc.dll
[2011-04-29 10:49:01 | 000,365,488 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdecfg.exe
[2011-04-29 10:48:58 | 000,000,000 | ---D | C] -- C:\Program Files\Lexmark 4800 Series
[2011-04-28 18:28:15 | 000,000,000 | ---D | C] -- C:\lexmark
[2011-04-20 12:08:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sitek\Ustawienia lokalne\Dane aplikacji\OpenCandy
[2011-04-20 12:08:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sitek\Dane aplikacji\OpenCandy
[2011-04-15 16:49:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sitek\Moje dokumenty\Prototype
[2011-04-15 16:25:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Activision
[2011-04-15 16:15:55 | 000,000,000 | -HSD | C] -- C:\WINDOWS\ftpcache
[2011-04-12 18:42:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Razor 1911
[2011-04-05 15:54:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sitek\Dane aplikacji\skypePM
[2011-04-05 15:54:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sitek\Dane aplikacji\Skype
[2011-04-05 15:53:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Skype
[2011-04-05 15:53:25 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2011-04-05 15:53:24 | 000,000,000 | R--D | C] -- C:\Program Files\Skype
[2011-04-05 15:53:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Skype
[2011-04-01 15:02:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sitek\Moje dokumenty\Crysis2
[2011-04-01 14:59:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Electronic Arts
[2004-11-24 21:25:52 | 000,335,872 | ---- | C] ( ) -- C:\WINDOWS\System32\drvc.dll
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 60 Days ==========[/color]
 
[2011-05-31 11:11:47 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Sitek\Pulpit\OTL.exe
[2011-05-31 10:47:09 | 000,000,002 | ---- | M] () -- C:\Documents and Settings\All Users\timerxfile
[2011-05-31 10:47:09 | 000,000,002 | ---- | M] () -- C:\Documents and Settings\All Users\datesavefile
[2011-05-31 10:47:09 | 000,000,001 | ---- | M] () -- C:\Documents and Settings\All Users\varsavefile
[2011-05-31 10:47:05 | 000,001,030 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011-05-31 10:47:04 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011-05-31 10:47:02 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011-05-30 23:47:00 | 000,001,034 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011-05-28 18:22:06 | 000,108,544 | ---- | M] () -- C:\Documents and Settings\Sitek\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-05-28 10:17:03 | 000,259,604 | ---- | M] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2011-05-28 10:17:03 | 000,000,001 | ---- | M] () -- C:\WINDOWS\System32\nvdrssel.bin
[2011-05-28 10:17:00 | 000,259,604 | ---- | M] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2011-05-27 21:18:34 | 007,987,953 | ---- | M] (CCCP Project                                                ) -- C:\Documents and Settings\Sitek\Ustawienia lokalne\Dane aplikacji\Codecs.exe
[2011-05-27 21:18:34 | 000,566,784 | ---- | M] (                                                                               ) -- C:\Documents and Settings\Sitek\Ustawienia lokalne\Dane aplikacji\jushed.exe
[2011-05-27 21:18:34 | 000,347,136 | RHS- | M] (NirSoft) -- C:\Documents and Settings\All Users\nircmd.exe
[2011-05-27 21:18:34 | 000,347,136 | ---- | M] (NirSoft) -- C:\Documents and Settings\Sitek\Ustawienia lokalne\Dane aplikacji\nircmd.exe
[2011-05-27 21:18:34 | 000,004,768 | ---- | M] () -- C:\Documents and Settings\Sitek\Ustawienia lokalne\Dane aplikacji\operaprefs.ini
[2011-05-27 21:18:34 | 000,004,768 | ---- | M] () -- C:\Documents and Settings\All Users\operaprefs.ini
[2011-05-27 21:17:59 | 000,566,784 | RHS- | M] (                                                                               ) -- C:\Documents and Settings\All Users\jushed.exe
[2011-05-27 21:03:44 | 000,000,313 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Uruchom Wiedźmin 2.lnk
[2011-05-24 16:39:35 | 004,786,997 | ---- | M] () -- C:\Documents and Settings\Sitek\Pulpit\Wiedzmin_2_Poradnik.pdf
[2011-05-24 01:42:56 | 000,115,369 | ---- | M] () -- C:\WINDOWS\System32\drivers\klin.dat
[2011-05-20 14:07:08 | 000,003,312 | ---- | M] () -- C:\Documents and Settings\All Users\lxde
[2011-05-18 21:50:13 | 000,000,721 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Convert FLV to MP3.lnk
[2011-05-04 09:33:27 | 000,000,797 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\OpenFM.lnk
[2011-05-04 09:33:27 | 000,000,768 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Gadu-Gadu 10.lnk
[2011-05-03 23:50:59 | 000,000,881 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Chicken Invaders 4 The Ultimate Omelette.lnk
[2011-05-03 11:45:59 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2011-04-29 10:52:38 | 000,064,140 | ---- | M] () -- C:\WINDOWS\System32\LexFiles.ulf
[2011-04-29 10:51:42 | 000,000,746 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Lexmark Productivity Studio - 4800 Series.LNK
[2011-04-26 01:29:24 | 000,490,284 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2011-04-26 01:29:24 | 000,432,356 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011-04-26 01:29:24 | 000,083,660 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2011-04-26 01:29:24 | 000,067,312 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011-04-15 15:06:04 | 000,199,344 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011-04-15 14:40:55 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2011-04-12 13:10:54 | 000,002,267 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk
[2011-04-08 07:14:00 | 002,116,894 | ---- | M] () -- C:\WINDOWS\System32\nvdata.bin
[2011-04-08 07:14:00 | 000,061,440 | ---- | M] (Khronos Group) -- C:\WINDOWS\System32\OpenCL.dll
[2011-04-08 07:14:00 | 000,003,629 | ---- | M] () -- C:\WINDOWS\System32\nvinfo.pb
[2011-04-05 15:55:00 | 000,000,056 | -H-- | M] () -- C:\WINDOWS\System32\ezsidmv.dat
[2011-04-04 18:13:31 | 000,097,859 | ---- | M] () -- C:\WINDOWS\System32\drivers\klick.dat
[2011-04-01 14:59:33 | 000,001,711 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Crysis® 2.lnk
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011-05-27 21:55:31 | 004,786,997 | ---- | C] () -- C:\Documents and Settings\Sitek\Pulpit\Wiedzmin_2_Poradnik.pdf
[2011-05-27 21:18:00 | 000,004,768 | ---- | C] () -- C:\Documents and Settings\All Users\operaprefs.ini
[2011-05-27 21:18:00 | 000,000,002 | ---- | C] () -- C:\Documents and Settings\All Users\timerxfile
[2011-05-27 21:18:00 | 000,000,002 | ---- | C] () -- C:\Documents and Settings\All Users\datesavefile
[2011-05-27 21:18:00 | 000,000,001 | ---- | C] () -- C:\Documents and Settings\All Users\varsavefile
[2011-05-27 21:17:59 | 000,004,768 | ---- | C] () -- C:\Documents and Settings\Sitek\Ustawienia lokalne\Dane aplikacji\operaprefs.ini
[2011-05-27 21:03:44 | 000,000,313 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Uruchom Wiedźmin 2.lnk
[2011-05-18 21:50:13 | 000,000,721 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Convert FLV to MP3.lnk
[2011-05-04 09:33:27 | 000,000,797 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\OpenFM.lnk
[2011-05-04 09:33:27 | 000,000,768 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Gadu-Gadu 10.lnk
[2011-05-04 09:32:56 | 000,000,686 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Gadu-Gadu 10.lnk
[2011-05-04 02:10:44 | 000,002,272 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat
[2011-05-03 23:50:59 | 000,000,881 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Chicken Invaders 4 The Ultimate Omelette.lnk
[2011-04-29 10:52:10 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\lxdevs.dll
[2011-04-29 10:52:03 | 000,348,160 | ---- | C] () -- C:\WINDOWS\System32\lxdecoin.dll
[2011-04-29 10:51:45 | 000,692,224 | ---- | C] () -- C:\WINDOWS\System32\lxdedrs.dll
[2011-04-29 10:51:45 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\lxdecaps.dll
[2011-04-29 10:51:44 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\lxdecnv4.dll
[2011-04-29 10:51:42 | 000,000,746 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Lexmark Productivity Studio - 4800 Series.LNK
[2011-04-29 10:49:05 | 000,348,160 | ---- | C] () -- C:\WINDOWS\System32\lxdeinst.dll
[2011-04-29 10:49:03 | 001,063,250 | ---- | C] () -- C:\WINDOWS\System32\LXDEhelp.chm
[2011-04-29 10:49:02 | 000,208,896 | ---- | C] () -- C:\WINDOWS\System32\lxdegrd.dll
[2011-04-29 10:49:01 | 000,064,140 | ---- | C] () -- C:\WINDOWS\System32\LexFiles.ulf
[2011-04-29 10:49:01 | 000,002,180 | ---- | C] () -- C:\WINDOWS\System32\lxde.loc
[2011-04-05 15:55:00 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2011-04-05 15:53:26 | 000,002,267 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk
[2011-04-01 14:59:33 | 000,001,711 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Crysis® 2.lnk
[2011-03-17 19:04:59 | 000,189,248 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe
[2011-03-17 19:04:58 | 000,075,136 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe
[2011-02-20 17:51:56 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2011-01-31 00:02:42 | 000,005,642 | -HS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\KGyGaAvL.sys
[2011-01-31 00:02:42 | 000,000,008 | RHS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\72B41F4406.sys
[2011-01-28 18:01:05 | 000,012,288 | ---- | C] () -- C:\WINDOWS\System32\LXF3PMRC.DLL
[2011-01-19 02:17:08 | 000,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2011-01-04 21:22:13 | 000,281,760 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys
[2011-01-04 21:22:11 | 000,025,888 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys
[2010-11-23 23:07:36 | 000,108,544 | ---- | C] () -- C:\Documents and Settings\Sitek\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-11-22 19:26:40 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2010-11-22 18:56:45 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2010-11-22 18:55:48 | 000,199,344 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010-11-22 18:50:40 | 000,115,369 | ---- | C] () -- C:\WINDOWS\System32\drivers\klin.dat
[2010-11-22 18:50:40 | 000,097,859 | ---- | C] () -- C:\WINDOWS\System32\drivers\klick.dat
[2010-11-22 18:42:43 | 000,259,604 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2010-11-22 18:42:41 | 000,259,604 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2010-11-22 18:42:41 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin
[2010-11-22 18:42:34 | 002,116,894 | ---- | C] () -- C:\WINDOWS\System32\nvdata.bin
[2010-11-22 18:26:26 | 000,001,769 | ---- | C] () -- C:\WINDOWS\Language_trs.ini
[2010-11-22 18:08:52 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2010-11-22 18:02:54 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2010-08-18 22:00:00 | 000,080,416 | ---- | C] () -- C:\WINDOWS\System32\RtNicProp32.dll
[2009-09-09 19:01:40 | 000,027,675 | ---- | C] () -- C:\WINDOWS\System32\drivers\klopp.dat
[2008-12-19 17:15:58 | 004,338,246 | ---- | C] () -- C:\WINDOWS\System32\libavcodec.dll
[2008-12-17 19:41:18 | 000,884,237 | ---- | C] () -- C:\WINDOWS\System32\ff_x264.dll
[2008-12-17 19:22:58 | 000,093,184 | ---- | C] () -- C:\WINDOWS\System32\ff_wmv9.dll
[2008-12-17 19:22:48 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2008-12-17 19:17:34 | 000,239,247 | ---- | C] () -- C:\WINDOWS\System32\ff_theora.dll
[2008-12-17 18:59:54 | 000,560,802 | ---- | C] () -- C:\WINDOWS\System32\libmplayer.dll
[2008-04-15 14:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2008-04-15 14:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2008-04-15 14:00:00 | 000,490,284 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat
[2008-04-15 14:00:00 | 000,432,356 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2008-04-15 14:00:00 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat
[2008-04-15 14:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2008-04-15 14:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2008-04-15 14:00:00 | 000,083,660 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat
[2008-04-15 14:00:00 | 000,067,312 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2008-04-15 14:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2008-04-15 14:00:00 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat
[2008-04-15 14:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2008-04-15 14:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2008-04-15 14:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2008-04-15 14:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin
[2008-04-15 14:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2006-11-02 18:10:16 | 000,080,912 | ---- | C] () -- C:\WINDOWS\System32\sherlock2.exe
[2004-10-03 19:50:54 | 000,129,024 | ---- | C] () -- C:\WINDOWS\System32\ff_mpeg2enc.dll
[2002-03-21 16:39:02 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\UNACEV2.DLL
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2011-01-31 23:42:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ACD Systems
[2011-05-03 23:38:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Big Fish Games
[2010-11-22 19:27:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite
[2010-11-28 12:19:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\EA Core
[2010-11-28 12:19:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Electronic Arts
[2011-05-04 09:33:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10
[2011-05-03 23:51:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\InterAction studios
[2011-05-27 20:47:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM
[2011-02-15 23:13:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SmartSound Software Inc
[2011-01-04 21:22:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Tages
[2010-12-15 21:07:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Temp
[2011-03-17 19:07:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Ubisoft
[2011-01-31 23:43:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sitek\Dane aplikacji\ACD Systems
[2010-11-22 19:41:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sitek\Dane aplikacji\DAEMON Tools Lite
[2011-01-04 18:35:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sitek\Dane aplikacji\fltk.org
[2011-05-04 09:43:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sitek\Dane aplikacji\Gadu-Gadu 10
[2011-01-31 15:05:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sitek\Dane aplikacji\GARMIN
[2011-02-15 20:37:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sitek\Dane aplikacji\GetRightToGo
[2011-03-05 16:38:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sitek\Dane aplikacji\gnupg
[2011-01-05 13:44:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sitek\Dane aplikacji\Leadertech
[2011-04-29 10:57:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sitek\Dane aplikacji\Lexmark Productivity Studio
[2011-01-05 21:07:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sitek\Dane aplikacji\Nvu
[2011-04-20 12:08:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sitek\Dane aplikacji\OpenCandy
[2011-05-04 09:42:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sitek\Dane aplikacji\OpenFM
[2011-03-17 19:04:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sitek\Dane aplikacji\PunkBuster
[2011-02-15 23:14:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sitek\Dane aplikacji\RayV
[2010-11-29 16:43:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sitek\Dane aplikacji\Thunderbird
[2011-03-17 19:07:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Sitek\Dane aplikacji\Ubisoft
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Custom Scans ==========[/color]
 
 
[color=#A23BEC]< %systemdrive%\*.* >[/color]
[2010-11-22 18:05:39 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2010-11-22 20:03:43 | 000,000,211 | -HS- | M] () -- C:\boot.ini
[2008-04-15 14:00:00 | 000,004,952 | RHS- | M] () -- C:\Bootfont.bin
[2010-11-22 18:05:39 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2010-11-22 18:05:39 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2011-04-28 18:41:16 | 000,000,078 | ---- | M] () -- C:\lxde.log
[2010-11-22 18:05:39 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2008-04-15 14:00:00 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM
[2008-04-15 14:00:00 | 000,251,152 | RHS- | M] () -- C:\ntldr
[2011-05-31 10:46:59 | 2097,152,000 | -HS- | M] () -- C:\pagefile.sys
 
 
[color=#A23BEC]< MD5 for: AGP440.SYS  >[/color]
[2008-04-15 14:00:00 | 020,110,420 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:agp440.sys
 
[color=#A23BEC]< MD5 for: ATAPI.SYS  >[/color]
[2008-04-15 14:00:00 | 020,110,420 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2008-04-14 01:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\dllcache\atapi.sys
[2008-04-14 01:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2008-04-15 14:00:00 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\ReinstallBackups\0002\DriverFiles\i386\atapi.sys
[2008-04-14 01:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\ReinstallBackups\0003\DriverFiles\i386\atapi.sys
 
[color=#A23BEC]< MD5 for: BEEP.SYS  >[/color]
[2008-04-15 14:00:00 | 000,004,224 | ---- | M] (Microsoft Corporation) MD5=DA1F27D85E0D1525F6621372E7B685E9 -- C:\WINDOWS\system32\dllcache\beep.sys
[2008-04-15 14:00:00 | 000,004,224 | ---- | M] (Microsoft Corporation) MD5=DA1F27D85E0D1525F6621372E7B685E9 -- C:\WINDOWS\system32\drivers\beep.sys
 
[color=#A23BEC]< MD5 for: CDROM.SYS  >[/color]
[2008-04-15 14:00:00 | 020,110,420 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:cdrom.sys
[2008-04-15 14:00:00 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\system32\drivers\cdrom.sys
 
[color=#A23BEC]< MD5 for: EVENTLOG.DLL  >[/color]
[2008-04-15 14:00:00 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=35FCCFD093582FA9098762E6F84EE119 -- C:\WINDOWS\system32\dllcache\eventlog.dll
[2008-04-15 14:00:00 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=35FCCFD093582FA9098762E6F84EE119 -- C:\WINDOWS\system32\eventlog.dll
 
[color=#A23BEC]< MD5 for: NDIS.SYS  >[/color]
[2008-04-15 14:00:00 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\dllcache\ndis.sys
[2008-04-15 14:00:00 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\drivers\ndis.sys
 
[color=#A23BEC]< MD5 for: WINLOGON.EXE  >[/color]
[2008-04-15 14:00:00 | 000,510,464 | ---- | M] (Microsoft Corporation) MD5=51FD2E13D723857B9CA239AE77150F48 -- C:\WINDOWS\system32\dllcache\winlogon.exe
[2008-04-15 14:00:00 | 000,510,464 | ---- | M] (Microsoft Corporation) MD5=51FD2E13D723857B9CA239AE77150F48 -- C:\WINDOWS\system32\winlogon.exe

< End of report >