OTL logfile created on: 2011-06-09 14:01:31 - Run 1
OTL by OldTimer - Version 3.2.23.0     Folder = C:\Documents and Settings\KAZ\Moje dokumenty\Pobieranie
Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
2,00 Gb Total Physical Memory | 1,18 Gb Available Physical Memory | 59,17% Memory free
3,84 Gb Paging File | 3,09 Gb Available in Paging File | 80,32% Paging File free
Paging file location(s): c:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 29,29 Gb Total Space | 11,07 Gb Free Space | 37,78% Space Free | Partition Type: NTFS
Drive D: | 218,23 Gb Total Space | 213,15 Gb Free Space | 97,67% Space Free | Partition Type: NTFS
Drive E: | 218,23 Gb Total Space | 192,83 Gb Free Space | 88,36% Space Free | Partition Type: NTFS
 
Computer Name: KAZ-PC | User Name: KAZ | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2011-06-09 13:58:43 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\KAZ\Moje dokumenty\Pobieranie\OTL.exe
PRC - [2011-05-14 20:39:53 | 000,924,632 | ---- | M] (Mozilla Corporation) -- D:\Mozilla Firefox\firefox.exe
PRC - [2011-04-26 15:06:06 | 000,161,336 | ---- | M] (Google) -- C:\Documents and Settings\KAZ\Ustawienia lokalne\Dane aplikacji\Google\Google Talk Plugin\googletalkplugin.exe
PRC - [2011-04-08 07:14:00 | 002,218,600 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
PRC - [2010-10-03 14:48:24 | 000,319,488 | ---- | M] (PixArt Imaging Incorporation) -- C:\WINDOWS\PixArt\PAC7302\Monitor.exe
PRC - [2010-09-07 21:04:52 | 000,352,976 | ---- | M] (Kaspersky Lab ZAO) -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe
PRC - [2009-09-08 17:25:52 | 000,096,334 | ---- | M] (Canon Inc.) -- C:\Program Files\Canon\CAL\CALMAIN.exe
PRC - [2008-05-13 18:07:24 | 000,080,392 | ---- | M] () -- C:\Program Files\GIGABYTE\EnergySaver\GSvr.exe
PRC - [2008-04-15 14:00:00 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2006-11-13 15:57:16 | 001,289,000 | ---- | M] (Microsoft Corporation) -- E:\ActiveSync4,5\wcescomm.exe
PRC - [2006-11-13 15:57:06 | 000,199,464 | ---- | M] (Microsoft Corporation) -- E:\ActiveSync4,5\rapimgr.exe
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - [2011-06-09 13:58:43 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\KAZ\Moje dokumenty\Pobieranie\OTL.exe
MOD - [2010-08-23 18:12:53 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [On_Demand | Stopped] --  -- (getPlusHelper) getPlus(R)
SRV - File not found [On_Demand | Stopped] --  -- (AppMgmt)
SRV - [2011-04-08 07:14:00 | 002,218,600 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2010-09-07 21:04:52 | 000,352,976 | ---- | M] (Kaspersky Lab ZAO) [Auto | Running] -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe -- (AVP)
SRV - [2009-09-08 17:25:52 | 000,096,334 | ---- | M] (Canon Inc.) [Auto | Running] -- C:\Program Files\Canon\CAL\CALMAIN.exe -- (CCALib8)
SRV - [2009-08-24 22:16:36 | 000,406,016 | ---- | M] (mst software GmbH, Germany) [On_Demand | Stopped] -- D:\Ashampoo Burning Studio 2010\Ashampoo WinOptimizer 7\Dfsdks.exe -- (DfSdkS)
SRV - [2008-05-13 18:07:24 | 000,080,392 | ---- | M] () [Auto | Running] -- C:\Program Files\GIGABYTE\EnergySaver\GSvr.exe -- (GEST Service)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2011-06-09 13:33:16 | 000,016,608 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\gdrv.sys -- (gdrv)
DRV - [2011-03-03 17:34:30 | 000,218,688 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2010-12-21 07:55:02 | 000,123,648 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bmdm.sys -- (ss_bmdm)
DRV - [2010-12-21 07:55:02 | 000,100,224 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bserd.sys -- (ss_bserd)
DRV - [2010-12-21 07:55:02 | 000,098,432 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bbus.sys -- (ss_bbus) SAMSUNG USB Mobile Device (WDM)
DRV - [2010-12-21 07:55:02 | 000,014,848 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bmdfl.sys -- (ss_bmdfl) SAMSUNG USB Mobile Modem (Filter)
DRV - [2010-08-06 21:23:30 | 000,475,736 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\klif.sys -- (KLIF)
DRV - [2010-06-09 17:43:52 | 000,011,352 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\kl2.sys -- (kl2)
DRV - [2010-06-09 17:43:50 | 000,132,184 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\kl1.sys -- (KL1)
DRV - [2010-05-07 12:06:26 | 000,032,856 | ---- | M] (Kaspersky Lab ZAO) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\klim5.sys -- (klim5)
DRV - [2009-12-22 16:47:47 | 000,278,984 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt)
DRV - [2009-12-22 16:47:46 | 000,025,416 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2009-11-02 20:27:24 | 000,019,472 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\klmouflt.sys -- (klmouflt)
DRV - [2008-10-09 15:42:42 | 000,017,408 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\KMWDFILTER.sys -- (KMWDFILTER)
DRV - [2008-05-07 13:21:40 | 004,739,072 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2008-01-03 16:10:16 | 000,105,856 | R--- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2007-11-08 10:29:52 | 000,458,752 | ---- | M] (PixArt Imaging Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\PAC7302.SYS -- (PAC7302)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-790525478-1979792683-1801674531-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKU\S-1-5-21-790525478-1979792683-1801674531-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
IE - HKU\S-1-5-21-790525478-1979792683-1801674531-1004\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKU\S-1-5-21-790525478-1979792683-1801674531-1004\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKU\S-1-5-21-790525478-1979792683-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-790525478-1979792683-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = 81.255.146.85:3128
 
IE - HKU\S-1-5-21-790525478-1979792683-1801674531-1010\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultenginename: "Plasmoo"
FF - prefs.js..browser.search.defaultthis.engineName: "Plasmoo"
FF - prefs.js..browser.search.defaulturl: "http://plasmoo.com/index.htm?SearchMashine=true&q={searchTerms}"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "rix98.pl"
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.4
FF - prefs.js..extensions.enabledItems: KavAntiBanner@Kaspersky.ru:11.0.1.400
FF - prefs.js..extensions.enabledItems: linkfilter@kaspersky.ru:11.0.1.400
FF - prefs.js..extensions.enabledItems: personas@christopher.beard:1.6.2
FF - prefs.js..extensions.enabledItems: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1.6.2.90
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: tabscope@xuldev.org:1.1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {DDC359D1-844A-42a7-9AA1-88A850A938A8}:2.0.2
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {872b5b88-9db5-4310-bdd0-ac189557e5f5}:2.7.2.0
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..keyword.URL: "http://plasmoo.com/index.htm?SearchMashine=true&q="
 
FF - user.js..browser.search.openintab: false
 
FF - HKLM\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011-02-18 23:35:53 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Components: D:\Mozilla Firefox\components [2011-05-14 20:40:00 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Plugins: D:\Mozilla Firefox\plugins [2011-04-29 13:41:48 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\{eea12ec4-729d-4703-bc37-106ce9879ce2}: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\THBExt [2011-03-30 22:20:01 | 000,000,000 | ---D | M]
 
[2010-09-13 18:08:53 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\KAZ\Dane aplikacji\Mozilla\Extensions
[2011-05-25 16:13:17 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\KAZ\Dane aplikacji\Mozilla\Firefox\Profiles\ccxdh9w0.default\extensions
[2010-09-16 08:01:13 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\KAZ\Dane aplikacji\Mozilla\Firefox\Profiles\ccxdh9w0.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011-03-24 15:52:50 | 000,000,000 | ---D | M] (DVDVideoSoftTB Community Toolbar) -- C:\Documents and Settings\KAZ\Dane aplikacji\Mozilla\Firefox\Profiles\ccxdh9w0.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
[2011-05-14 10:51:08 | 000,000,000 | ---D | M] (Plasmoo Search Engine) -- C:\Documents and Settings\KAZ\Dane aplikacji\Mozilla\Firefox\Profiles\ccxdh9w0.default\extensions\engine@plasmoo.com
[2011-03-24 15:39:56 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\KAZ\Dane aplikacji\Mozilla\Firefox\Profiles\ccxdh9w0.default\extensions\nostmp
[2010-12-28 10:57:03 | 000,000,873 | ---- | M] () -- C:\Documents and Settings\KAZ\Dane aplikacji\Mozilla\Firefox\Profiles\ccxdh9w0.default\searchplugins\conduit.xml
[2011-04-28 19:42:58 | 000,001,975 | ---- | M] () -- C:\Documents and Settings\KAZ\Dane aplikacji\Mozilla\Firefox\Profiles\ccxdh9w0.default\searchplugins\plasmoo.xml
File not found (No name found) -- 
() (No name found) -- C:\DOCUMENTS AND SETTINGS\KAZ\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\CCXDH9W0.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
[2009-06-02 13:05:13 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2010-10-02 16:05:26 | 000,000,000 | ---D | M] (Java Console) -- D:\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010-10-18 18:05:55 | 000,000,000 | ---D | M] (Java Console) -- D:\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2011-01-27 14:26:28 | 000,000,000 | ---D | M] (Java Console) -- D:\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
[2011-02-19 18:51:35 | 000,000,000 | ---D | M] (Java Console) -- D:\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
 
O1 HOSTS File: ([2008-04-15 14:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\ievkbd.dll (Kaspersky Lab ZAO)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll (Google Inc.)
O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO)
O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10\_userdata\ggbho.2.dll (GG Network S.A.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] D:\Adobe\Reader\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [AVP] C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe (Kaspersky Lab ZAO)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\nvmctray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe ()
O4 - HKLM..\Run: [PAC7302_Monitor] C:\WINDOWS\PixArt\PAC7302\Monitor.exe (PixArt Imaging Incorporation)
O4 - HKU\.DEFAULT..\Run: [H/PC Connection Agent] E:\ActiveSync4,5\wcescomm.exe (Microsoft Corporation)
O4 - HKU\S-1-5-18..\Run: [H/PC Connection Agent] E:\ActiveSync4,5\wcescomm.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-790525478-1979792683-1801674531-1004..\Run: [H/PC Connection Agent] E:\ActiveSync4,5\wcescomm.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-790525478-1979792683-1801674531-1010..\Run: [H/PC Connection Agent] E:\ActiveSync4,5\wcescomm.exe (Microsoft Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Low Rights present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 189
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoPropertiesMyComputer = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewContextMenu = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFileAssociate = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFind = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoClose = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: StartMenuLogoff = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispCPL = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispBackgroundPage = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispSettingsPage = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispScrSavPage = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: VerboseStatus = 0
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-790525478-1979792683-1801674531-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-790525478-1979792683-1801674531-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O7 - HKU\S-1-5-21-790525478-1979792683-1801674531-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 1
O7 - HKU\S-1-5-21-790525478-1979792683-1801674531-1010\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Dodaj do listy blokowanych banerów - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\ie_banner_deny.htm ()
O8 - Extra context menu item: Funkcja Google Sidewiki - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll (Google Inc.)
O9 - Extra Button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - E:\ActiveSync4,5\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Utwórz Ulubione dla urządzenia przenośnego... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - E:\ActiveSync4,5\INetRepl.dll (Microsoft Corporation)
O9 - Extra Button: &Klawiatura wirtualna - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO)
O9 - Extra Button: &Sprawdzanie adresów internetowych - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Value error.)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 86.63.129.29 86.63.129.30
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - AppInit_DLLs: (C:\DOCUME~1\ALLUSE~1\AVP11\mzvkbd3.dll) - C:\Documents and Settings\All Users\AVP11\mzvkbd3.dll (Kaspersky Lab ZAO)
O20 - AppInit_DLLs: (C:\DOCUME~1\ALLUSE~1\AVP11\kloehk.dll) - C:\Documents and Settings\All Users\AVP11\kloehk.dll (Kaspersky Lab ZAO)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\klogon: DllName - C:\WINDOWS\system32\klogon.dll - C:\WINDOWS\system32\klogon.dll (Kaspersky Lab ZAO)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\KAZ\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\KAZ\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 0
O32 - AutoRun File - [2009-04-29 18:01:29 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011-06-09 13:55:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\HD Tune
[2011-06-09 11:53:09 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\KAZ\Recent
[2011-05-31 21:54:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Google Earth
[2011-05-29 15:14:10 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DirectX
[2011-05-14 10:29:59 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ie8
[2011-05-14 10:29:06 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\WPE
[2011-05-14 10:29:06 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Samsung
[2011-05-14 00:08:14 | 000,000,000 | ---D | C] -- C:\WINDOWS\ie8(2)
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2011-06-09 14:29:00 | 000,000,428 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{73AEBACE-9463-4133-8E50-09D42AF728DA}.job
[2011-06-09 14:01:00 | 000,001,128 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-790525478-1979792683-1801674531-1005UA.job
[2011-06-09 13:57:12 | 000,001,036 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011-06-09 13:33:16 | 000,016,608 | ---- | M] (Windows (R) 2000 DDK provider) -- C:\WINDOWS\gdrv.sys
[2011-06-09 13:33:08 | 000,001,124 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-790525478-1979792683-1801674531-1004UA.job
[2011-06-09 13:32:40 | 000,001,032 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011-06-09 13:32:39 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2011-06-09 13:32:37 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011-06-09 13:32:34 | 2145,898,496 | -HS- | M] () -- C:\hiberfil.sys
[2011-06-09 11:53:13 | 007,340,032 | ---- | M] () -- C:\Documents and Settings\KAZ\ntuser.dat
[2011-06-09 11:53:13 | 000,000,188 | -HS- | M] () -- C:\Documents and Settings\KAZ\ntuser.ini
[2011-06-09 11:53:06 | 015,500,214 | -H-- | M] () -- C:\Documents and Settings\KAZ\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2011-06-09 11:31:57 | 000,002,267 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk
[2011-06-06 21:33:00 | 000,001,072 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-790525478-1979792683-1801674531-1004Core.job
[2011-06-06 16:01:00 | 000,001,076 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-790525478-1979792683-1801674531-1005Core.job
[2011-06-05 22:22:14 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011-05-31 21:54:33 | 000,001,917 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Google Earth.lnk
[2011-05-29 10:07:44 | 000,000,460 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\CCleaner.lnk
[2011-05-28 00:52:28 | 000,000,935 | ---- | M] () -- C:\WINDOWS\win.ini
[2011-05-26 14:25:54 | 000,000,000 | -H-- | M] () -- C:\Documents and Settings\KAZ\Moje dokumenty\Default.rdp
[2011-05-23 23:30:47 | 000,000,261 | ---- | M] () -- C:\WINDOWS\AUDOZ3_0.INI
[2011-05-23 19:48:57 | 000,115,369 | ---- | M] () -- C:\WINDOWS\System32\drivers\klin.dat
[2011-05-19 15:58:49 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2011-05-19 08:24:53 | 000,000,407 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Purmo OZC.lnk
[2011-05-14 10:56:42 | 000,029,416 | ---- | M] () -- C:\Documents and Settings\KAZ\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
[2011-05-14 10:36:51 | 000,153,976 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011-05-31 21:54:33 | 000,001,917 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Google Earth.lnk
[2011-05-26 14:25:54 | 000,000,000 | -H-- | C] () -- C:\Documents and Settings\KAZ\Moje dokumenty\Default.rdp
[2011-05-19 08:24:53 | 000,000,407 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Purmo OZC.lnk
[2011-05-14 00:01:01 | 000,000,428 | -H-- | C] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{73AEBACE-9463-4133-8E50-09D42AF728DA}.job
[2011-04-08 23:24:31 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2011-04-08 23:24:30 | 000,631,808 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2011-04-08 23:24:30 | 000,243,200 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2011-04-08 23:24:30 | 000,080,896 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2011-04-08 23:24:30 | 000,000,590 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest
[2011-04-06 17:34:27 | 000,175,616 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2011-01-17 11:45:45 | 000,157,042 | ---- | C] () -- C:\WINDOWS\hpoins34.dat
[2011-01-17 11:45:45 | 000,000,404 | ---- | C] () -- C:\WINDOWS\hpomdl34.dat
[2011-01-04 17:10:56 | 000,974,848 | ---- | C] () -- C:\WINDOWS\System32\cis-2.4.dll
[2011-01-04 17:10:56 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\issacapi_bs-2.3.dll
[2011-01-04 17:10:56 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\issacapi_pe-2.3.dll
[2011-01-04 17:10:56 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\issacapi_se-2.3.dll
[2010-12-19 22:56:43 | 004,191,234 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-S-1-5-21-790525478-1979792683-1801674531-1004-0.dat
[2010-12-19 22:56:42 | 000,155,282 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-System.dat
[2010-12-02 21:21:32 | 000,115,369 | ---- | C] () -- C:\WINDOWS\System32\drivers\klin.dat
[2010-12-02 21:21:32 | 000,097,859 | ---- | C] () -- C:\WINDOWS\System32\drivers\klick.dat
[2010-10-05 20:35:26 | 000,022,816 | ---- | C] () -- C:\WINDOWS\hpqins15.dat.temp
[2010-10-03 22:07:42 | 000,024,944 | ---- | C] () -- C:\WINDOWS\System32\drivers\GVTDrv.sys
[2010-10-03 20:32:38 | 000,068,242 | ---- | C] () -- C:\WINDOWS\hpqins13.dat
[2010-10-03 18:03:54 | 000,259,604 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2010-10-03 18:03:49 | 000,259,604 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2010-10-03 18:03:49 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin
[2010-10-03 16:07:07 | 000,000,488 | RH-- | C] () -- C:\WINDOWS\System32\logonui.exe.manifest
[2010-09-27 23:58:32 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\LocalService\Dane aplikacji\$_hpcst$.hpc
[2010-09-12 22:57:21 | 002,700,280 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat
[2010-07-14 12:25:21 | 000,000,740 | ---- | C] () -- C:\WINDOWS\wcx_ftp.ini
[2010-07-10 05:38:00 | 002,116,894 | ---- | C] () -- C:\WINDOWS\System32\nvdata.bin
[2010-06-30 15:25:58 | 000,000,181 | ---- | C] () -- C:\WINDOWS\AudCO3_2.ini
[2010-06-29 22:26:28 | 000,000,105 | ---- | C] () -- C:\WINDOWS\HONCO3_5.ini
[2010-05-19 22:46:22 | 000,000,084 | ---- | C] () -- C:\WINDOWS\HONOZ3_0.ini
[2010-03-09 12:23:35 | 000,000,081 | ---- | C] () -- C:\WINDOWS\HERCO3_0.ini
[2010-03-01 19:12:13 | 000,000,137 | ---- | C] () -- C:\WINDOWS\HEROZ3_0.ini
[2010-02-13 00:08:59 | 000,000,034 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2010-02-02 01:30:10 | 000,000,323 | ---- | C] () -- C:\WINDOWS\System32\Remover.ini
[2010-02-02 01:30:08 | 000,040,960 | ---- | C] () -- C:\WINDOWS\98Setup.exe
[2010-02-02 01:30:04 | 000,000,566 | ---- | C] () -- C:\WINDOWS\System32\SP7302.INI
[2010-01-15 20:29:05 | 000,000,404 | ---- | C] () -- C:\WINDOWS\hpomdl34.dat.temp
[2010-01-15 20:19:05 | 000,077,485 | ---- | C] () -- C:\WINDOWS\hpqins05.dat.temp
[2010-01-15 18:55:21 | 000,023,230 | ---- | C] () -- C:\WINDOWS\hpqins15.dat
[2009-12-22 16:47:47 | 000,278,984 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys
[2009-12-22 16:47:46 | 000,025,416 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys
[2009-10-28 10:40:37 | 000,077,484 | ---- | C] () -- C:\WINDOWS\hpqins05.dat
[2009-10-15 12:34:57 | 002,529,622 | ---- | C] () -- C:\Documents and Settings\KAZ\Ustawienia lokalne\Dane aplikacji\[j0003]-[p20].bmp
[2009-10-15 12:34:53 | 002,529,622 | ---- | C] () -- C:\Documents and Settings\KAZ\Ustawienia lokalne\Dane aplikacji\[j0003]-[p19].bmp
[2009-10-15 12:34:51 | 002,529,622 | ---- | C] () -- C:\Documents and Settings\KAZ\Ustawienia lokalne\Dane aplikacji\[j0003]-[p18].bmp
[2009-10-15 12:34:49 | 002,529,622 | ---- | C] () -- C:\Documents and Settings\KAZ\Ustawienia lokalne\Dane aplikacji\[j0003]-[p17].bmp
[2009-10-15 12:34:47 | 002,529,622 | ---- | C] () -- C:\Documents and Settings\KAZ\Ustawienia lokalne\Dane aplikacji\[j0003]-[p16].bmp
[2009-10-15 12:34:45 | 002,529,622 | ---- | C] () -- C:\Documents and Settings\KAZ\Ustawienia lokalne\Dane aplikacji\[j0003]-[p15].bmp
[2009-10-15 12:34:42 | 002,529,622 | ---- | C] () -- C:\Documents and Settings\KAZ\Ustawienia lokalne\Dane aplikacji\[j0003]-[p14].bmp
[2009-10-15 12:34:39 | 002,529,622 | ---- | C] () -- C:\Documents and Settings\KAZ\Ustawienia lokalne\Dane aplikacji\[j0003]-[p13].bmp
[2009-10-15 12:34:37 | 002,529,622 | ---- | C] () -- C:\Documents and Settings\KAZ\Ustawienia lokalne\Dane aplikacji\[j0003]-[p12].bmp
[2009-10-15 12:34:34 | 002,529,622 | ---- | C] () -- C:\Documents and Settings\KAZ\Ustawienia lokalne\Dane aplikacji\[j0003]-[p11].bmp
[2009-10-15 12:34:32 | 002,529,622 | ---- | C] () -- C:\Documents and Settings\KAZ\Ustawienia lokalne\Dane aplikacji\[j0003]-[p10].bmp
[2009-10-15 12:34:30 | 002,529,622 | ---- | C] () -- C:\Documents and Settings\KAZ\Ustawienia lokalne\Dane aplikacji\[j0003]-[p09].bmp
[2009-10-15 12:34:28 | 002,529,622 | ---- | C] () -- C:\Documents and Settings\KAZ\Ustawienia lokalne\Dane aplikacji\[j0003]-[p08].bmp
[2009-09-28 10:52:56 | 000,709,641 | ---- | C] () -- C:\WINDOWS\unins000.exe
[2009-09-28 10:52:56 | 000,420,983 | ---- | C] () -- C:\WINDOWS\unins000.dat
[2009-09-26 21:14:32 | 000,020,480 | ---- | C] () -- C:\WINDOWS\FixCamera.exe
[2009-09-14 23:47:13 | 000,000,126 | ---- | C] () -- C:\WINDOWS\System32\mmc.exe.config
[2009-09-14 23:43:36 | 000,000,128 | ---- | C] () -- C:\Documents and Settings\KAZ\Ustawienia lokalne\Dane aplikacji\fusioncache.dat
[2009-09-09 20:01:40 | 000,027,675 | ---- | C] () -- C:\WINDOWS\System32\drivers\klopp.dat
[2009-08-25 14:07:46 | 000,000,532 | ---- | C] () -- C:\WINDOWS\eReg.dat
[2009-08-11 16:25:04 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\KAZ\Dane aplikacji\$_hpcst$.hpc
[2009-05-29 13:04:01 | 000,000,726 | ---- | C] () -- C:\Documents and Settings\KAZ\Ustawienia lokalne\Dane aplikacji\FASTWiz.html
[2009-05-13 10:59:55 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2009-05-07 22:18:02 | 000,000,000 | ---- | C] () -- C:\WINDOWS\hpqEmlSz.INI
[2009-04-30 13:31:07 | 000,078,336 | ---- | C] () -- C:\Documents and Settings\KAZ\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009-04-30 09:28:52 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2009-04-29 23:24:57 | 000,002,205 | ---- | C] () -- C:\WINDOWS\WINCMD.INI
[2009-04-29 23:20:28 | 000,000,261 | ---- | C] () -- C:\WINDOWS\AUDOZ3_0.INI
[2009-04-29 22:12:51 | 000,000,360 | ---- | C] () -- C:\WINDOWS\lgfwup.ini
[2009-04-29 21:01:25 | 000,023,172 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2009-04-29 19:52:21 | 001,407,410 | ---- | C] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2009-04-29 19:52:20 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2009-04-29 19:52:04 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2009-04-29 19:50:54 | 000,153,976 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2009-04-29 19:03:30 | 000,000,275 | ---- | C] () -- C:\WINDOWS\CO3_0.INI
[2009-04-29 18:49:26 | 000,029,416 | ---- | C] () -- C:\Documents and Settings\KAZ\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
[2009-04-29 18:30:58 | 005,413,664 | -HS- | C] () -- C:\WINDOWS\System32\drivers\fidbox.dat
[2009-04-29 18:30:58 | 000,499,744 | -HS- | C] () -- C:\WINDOWS\System32\drivers\fidbox2.dat
[2009-04-29 18:10:15 | 000,049,152 | R--- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2009-04-29 18:08:25 | 015,500,214 | -H-- | C] () -- C:\Documents and Settings\KAZ\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2009-04-29 18:03:01 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2009-04-29 18:01:29 | 000,000,000 | ---- | C] () -- C:\WINDOWS\control.ini
[2009-04-29 18:00:38 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\cdplayer.exe.manifest
[2009-04-29 17:59:02 | 000,023,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2009-04-29 17:58:51 | 000,000,037 | ---- | C] () -- C:\WINDOWS\vbaddin.ini
[2009-04-29 17:58:51 | 000,000,036 | ---- | C] () -- C:\WINDOWS\vb.ini
[2009-04-29 17:57:53 | 000,026,717 | ---- | C] () -- C:\WINDOWS\System32\tslabels.ini
[2009-04-29 17:57:52 | 000,003,813 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.ini
[2008-05-26 22:22:36 | 000,016,222 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini
[2008-05-26 22:22:34 | 000,021,728 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini
[2008-05-26 22:22:32 | 000,016,164 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini
[2008-05-26 21:59:42 | 000,018,904 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschematrivial.bin
[2008-05-26 21:59:40 | 000,106,605 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschema.bin
[2008-04-15 14:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2008-04-15 14:00:00 | 001,015,477 | ---- | C] () -- C:\WINDOWS\System32\esentprf.ini
[2008-04-15 14:00:00 | 000,733,696 | ---- | C] () -- C:\WINDOWS\System32\qedwipes.dll
[2008-04-15 14:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2008-04-15 14:00:00 | 000,621,086 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat
[2008-04-15 14:00:00 | 000,532,710 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2008-04-15 14:00:00 | 000,355,112 | ---- | C] () -- C:\WINDOWS\System32\msjetoledb40.dll
[2008-04-15 14:00:00 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat
[2008-04-15 14:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2008-04-15 14:00:00 | 000,270,848 | ---- | C] () -- C:\WINDOWS\System32\sbe.dll
[2008-04-15 14:00:00 | 000,253,440 | ---- | C] () -- C:\WINDOWS\System32\compatUI.dll
[2008-04-15 14:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2008-04-15 14:00:00 | 000,199,168 | ---- | C] () -- C:\WINDOWS\System32\ir32_32.dll
[2008-04-15 14:00:00 | 000,186,880 | ---- | C] () -- C:\WINDOWS\System32\encdec.dll
[2008-04-15 14:00:00 | 000,136,504 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat
[2008-04-15 14:00:00 | 000,100,744 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2008-04-15 14:00:00 | 000,094,282 | ---- | C] () -- C:\WINDOWS\System32\msencode.dll
[2008-04-15 14:00:00 | 000,070,656 | ---- | C] () -- C:\WINDOWS\System32\amstream.dll
[2008-04-15 14:00:00 | 000,070,622 | ---- | C] () -- C:\WINDOWS\System32\edit.com
[2008-04-15 14:00:00 | 000,053,920 | ---- | C] () -- C:\WINDOWS\System32\dosx.exe
[2008-04-15 14:00:00 | 000,053,478 | ---- | C] () -- C:\WINDOWS\System32\tcpmon.ini
[2008-04-15 14:00:00 | 000,051,823 | ---- | C] () -- C:\WINDOWS\System32\command.com
[2008-04-15 14:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2008-04-15 14:00:00 | 000,042,809 | ---- | C] () -- C:\WINDOWS\System32\key01.sys
[2008-04-15 14:00:00 | 000,042,537 | ---- | C] () -- C:\WINDOWS\System32\keyboard.sys
[2008-04-15 14:00:00 | 000,039,434 | ---- | C] () -- C:\WINDOWS\System32\mem.exe
[2008-04-15 14:00:00 | 000,035,648 | ---- | C] () -- C:\WINDOWS\System32\ntio411.sys
[2008-04-15 14:00:00 | 000,035,424 | ---- | C] () -- C:\WINDOWS\System32\ntio412.sys
[2008-04-15 14:00:00 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat
[2008-04-15 14:00:00 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\ntio804.sys
[2008-04-15 14:00:00 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\ntio404.sys
[2008-04-15 14:00:00 | 000,033,936 | ---- | C] () -- C:\WINDOWS\System32\ntio.sys
[2008-04-15 14:00:00 | 000,029,370 | ---- | C] () -- C:\WINDOWS\System32\ntdos411.sys
[2008-04-15 14:00:00 | 000,029,274 | ---- | C] () -- C:\WINDOWS\System32\ntdos412.sys
[2008-04-15 14:00:00 | 000,029,146 | ---- | C] () -- C:\WINDOWS\System32\ntdos804.sys
[2008-04-15 14:00:00 | 000,029,146 | ---- | C] () -- C:\WINDOWS\System32\ntdos404.sys
[2008-04-15 14:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2008-04-15 14:00:00 | 000,027,898 | ---- | C] () -- C:\WINDOWS\System32\ntdos.sys
[2008-04-15 14:00:00 | 000,027,097 | ---- | C] () -- C:\WINDOWS\System32\country.sys
[2008-04-15 14:00:00 | 000,020,986 | ---- | C] () -- C:\WINDOWS\System32\debug.exe
[2008-04-15 14:00:00 | 000,019,806 | ---- | C] () -- C:\WINDOWS\System32\graphics.com
[2008-04-15 14:00:00 | 000,016,024 | ---- | C] () -- C:\WINDOWS\System32\rsvp.ini
[2008-04-15 14:00:00 | 000,015,360 | ---- | C] () -- C:\WINDOWS\System32\tsd32.dll
[2008-04-15 14:00:00 | 000,014,913 | ---- | C] () -- C:\WINDOWS\System32\kb16.com
[2008-04-15 14:00:00 | 000,014,336 | ---- | C] () -- C:\WINDOWS\System32\msdmo.dll
[2008-04-15 14:00:00 | 000,013,819 | ---- | C] () -- C:\WINDOWS\System32\pschdprf.ini
[2008-04-15 14:00:00 | 000,013,312 | ---- | C] () -- C:\WINDOWS\System32\win87em.dll
[2008-04-15 14:00:00 | 000,012,866 | ---- | C] () -- C:\WINDOWS\System32\edlin.exe
[2008-04-15 14:00:00 | 000,012,594 | ---- | C] () -- C:\WINDOWS\System32\append.exe
[2008-04-15 14:00:00 | 000,011,859 | ---- | C] () -- C:\WINDOWS\System32\setver.exe
[2008-04-15 14:00:00 | 000,009,043 | ---- | C] () -- C:\WINDOWS\System32\ansi.sys
[2008-04-15 14:00:00 | 000,008,520 | ---- | C] () -- C:\WINDOWS\System32\exe2bin.exe
[2008-04-15 14:00:00 | 000,007,116 | ---- | C] () -- C:\WINDOWS\System32\nlsfunc.exe
[2008-04-15 14:00:00 | 000,006,074 | ---- | C] () -- C:\WINDOWS\System32\rasctrs.ini
[2008-04-15 14:00:00 | 000,004,976 | ---- | C] () -- C:\WINDOWS\System32\himem.sys
[2008-04-15 14:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2008-04-15 14:00:00 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2008-04-15 14:00:00 | 000,003,346 | ---- | C] () -- C:\WINDOWS\System32\redir.exe
[2008-04-15 14:00:00 | 000,002,992 | ---- | C] () -- C:\WINDOWS\System32\perfci.ini
[2008-04-15 14:00:00 | 000,002,890 | ---- | C] () -- C:\WINDOWS\System32\perfwci.ini
[2008-04-15 14:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin
[2008-04-15 14:00:00 | 000,001,405 | ---- | C] () -- C:\WINDOWS\msdfmap.ini
[2008-04-15 14:00:00 | 000,001,295 | ---- | C] () -- C:\WINDOWS\System32\perffilt.ini
[2008-04-15 14:00:00 | 000,001,168 | ---- | C] () -- C:\WINDOWS\System32\loadfix.com
[2008-04-15 14:00:00 | 000,000,935 | ---- | C] () -- C:\WINDOWS\win.ini
[2008-04-15 14:00:00 | 000,000,882 | ---- | C] () -- C:\WINDOWS\System32\share.exe
[2008-04-15 14:00:00 | 000,000,882 | ---- | C] () -- C:\WINDOWS\System32\fastopen.exe
[2008-04-15 14:00:00 | 000,000,817 | ---- | C] () -- C:\WINDOWS\System32\mscdexnt.exe
[2008-04-15 14:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2008-04-15 14:00:00 | 000,000,359 | ---- | C] () -- C:\WINDOWS\System32\prodspec.ini
[2008-04-15 14:00:00 | 000,000,227 | ---- | C] () -- C:\WINDOWS\system.ini
[2008-03-24 13:52:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2001-10-26 19:29:54 | 000,057,856 | ---- | C] () -- C:\WINDOWS\System32\dvdplay.exe
[2001-10-26 19:29:42 | 000,157,696 | ---- | C] () -- C:\WINDOWS\System32\paqsp.dll
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2009-10-28 21:14:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ashampoo
[2011-03-03 17:34:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite
[2010-03-30 16:08:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10
[2010-09-06 08:54:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla
[2009-10-08 19:12:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\MSScanAppDataDir
[2010-07-08 22:30:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PDF Writer
[2011-02-16 11:30:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Samsung
[2009-10-08 19:13:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SSScanAppDataDir
[2011-01-16 23:28:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP
[2011-03-03 17:29:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\WinZip
[2010-03-30 10:42:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\KAZ\Dane aplikacji\Ashampoo
[2010-11-04 15:00:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\KAZ\Dane aplikacji\Bobr
[2009-08-10 11:26:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\KAZ\Dane aplikacji\Canon
[2010-03-02 19:22:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\KAZ\Dane aplikacji\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2011-03-03 17:35:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\KAZ\Dane aplikacji\DAEMON Tools Lite
[2010-12-28 10:21:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\KAZ\Dane aplikacji\DVDVideoSoftIEHelpers
[2010-08-30 15:05:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\KAZ\Dane aplikacji\Gadu-Gadu 10
[2009-12-09 14:14:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\KAZ\Dane aplikacji\gtk-2.0
[2009-11-19 23:54:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\KAZ\Dane aplikacji\IObit
[2010-09-06 08:54:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\KAZ\Dane aplikacji\ipla
[2009-12-29 23:27:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\KAZ\Dane aplikacji\KC Softwares
[2010-07-08 22:30:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\KAZ\Dane aplikacji\PDF Writer
[2011-01-22 13:32:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\KAZ\Dane aplikacji\PriceGong
[2011-02-16 11:30:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\KAZ\Dane aplikacji\Samsung
[2011-01-26 14:39:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\KAZ\Dane aplikacji\TeamViewer
[2009-06-23 20:17:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\KAZ\Dane aplikacji\Thunderbird
[2011-05-14 08:53:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\KAZ\Dane aplikacji\Uniblue
[2011-05-19 16:43:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\KAZ\Dane aplikacji\uTorrent
[2009-05-27 12:39:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\KAZ\Dane aplikacji\Windows Desktop Search
[2009-05-27 12:40:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\KAZ\Dane aplikacji\Windows Search
[2011-06-09 14:29:00 | 000,000,428 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{73AEBACE-9463-4133-8E50-09D42AF728DA}.job
[2010-01-04 13:27:01 | 000,000,304 | ---- | M] () -- C:\WINDOWS\Tasks\WinXP Manager - Auto Shutdown.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 88 bytes -> C:\WINDOWS\amcap.exe:SummaryInformation
@Alternate Data Stream - 88 bytes -> C:\Documents and Settings\KAZ\Pulpit\debug.log:SummaryInformation
@Alternate Data Stream - 88 bytes -> C:\Documents and Settings\KAZ\ntuser.dat.rctemp:SummaryInformation
@Alternate Data Stream - 134 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:671329E4
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:8CE646EE
@Alternate Data Stream - 117 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:7311BB85

< End of report >