OTL logfile created on: 2011-07-23 18:53:30 - Run 2
OTL by OldTimer - Version 3.2.26.1     Folder = C:\Documents and Settings\xxx2xxx\Moje dokumenty\Downloads
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
1023,48 Mb Total Physical Memory | 787,19 Mb Available Physical Memory | 76,91% Memory free
2,40 Gb Paging File | 2,31 Gb Available in Paging File | 96,09% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 19,53 Gb Total Space | 2,42 Gb Free Space | 12,39% Space Free | Partition Type: NTFS
Drive D: | 54,99 Gb Total Space | 25,70 Gb Free Space | 46,73% Space Free | Partition Type: NTFS
 
Computer Name: XXXXX | User Name: xxx2xxx | Logged in as Administrator.
Boot Mode: SafeMode | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2011-07-23 18:06:22 | 000,579,584 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\xxx2xxx\Moje dokumenty\Downloads\OTL.exe
PRC - [2008-04-14 19:21:16 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007-05-30 14:31:10 | 000,312,880 | ---- | M] (GRISOFT s.r.o.) -- C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - [2011-07-23 18:06:22 | 000,579,584 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\xxx2xxx\Moje dokumenty\Downloads\OTL.exe
MOD - [2010-08-23 18:12:53 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [Auto | Stopped] --  -- (AODService)
SRV - [2011-07-13 18:28:41 | 000,269,480 | ---- | M] (Avira GmbH) [Auto | Stopped] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011-03-28 16:15:40 | 000,136,360 | ---- | M] (Avira GmbH) [Auto | Stopped] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2011-02-19 11:12:13 | 000,651,720 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010-08-05 08:46:02 | 000,583,640 | ---- | M] (PC Tools) [Auto | Stopped] -- C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe -- (PCToolsSSDMonitorSvc)
SRV - [2010-06-14 15:07:14 | 000,615,936 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2010-06-09 11:26:50 | 000,233,472 | ---- | M] (Teruten) [Auto | Stopped] -- C:\WINDOWS\system32\FsUsbExService.Exe -- (FsUsbExService)
SRV - [2010-06-09 11:24:34 | 000,095,568 | ---- | M] (Devguru Co., Ltd.) [Auto | Stopped] -- C:\WINDOWS\system32\dgdersvc.exe -- (dgdersvc)
SRV - [2010-01-18 06:35:02 | 009,201,664 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Samsung\Kies\WiselinkPro\WiselinkPro.exe -- (KiesAllShare)
SRV - [2009-09-23 14:38:18 | 000,935,208 | ---- | M] (Nero AG) [Auto | Stopped] -- C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0)
SRV - [2008-10-25 12:44:08 | 000,065,888 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- D:\Programy\Office 2007\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service)
SRV - [2007-05-30 14:31:10 | 000,312,880 | ---- | M] (GRISOFT s.r.o.) [Auto | Running] -- C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe -- (AVG Anti-Spyware Guard)
SRV - [2007-05-08 18:00:48 | 002,179,072 | ---- | M] (UASSOFT.COM) [Auto | Stopped] -- C:\Program Files\Multimedia Keyboard Driver\V5\KMWDSrv.exe -- (KMWDSERVICE)
SRV - [2003-04-07 08:21:46 | 000,065,795 | R--- | M] (HP) [On_Demand | Stopped] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2011-07-13 18:28:42 | 000,138,192 | ---- | M] (Avira GmbH) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2011-07-13 18:28:42 | 000,066,616 | ---- | M] (Avira GmbH) [File_System | Auto | Stopped] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2011-05-22 02:54:55 | 000,271,360 | ---- | M] () [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt)
DRV - [2011-05-22 02:54:49 | 000,018,048 | ---- | M] () [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2010-06-23 04:47:58 | 000,032,768 | ---- | M] (AnchorFree Inc) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\taphss.sys -- (taphss)
DRV - [2010-06-22 00:07:39 | 000,091,496 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nvhda32.sys -- (NVHDA)
DRV - [2010-06-17 15:27:22 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2010-06-17 15:27:12 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Stopped] -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2010-06-09 11:26:50 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2010-06-09 11:24:34 | 000,018,136 | ---- | M] (Devguru Co., Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\dgderdrv.sys -- (dgderdrv)
DRV - [2010-02-26 14:32:58 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2010-02-26 14:32:46 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2010-02-26 14:32:44 | 000,022,528 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2010-02-26 14:32:44 | 000,018,176 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2010-01-20 07:53:38 | 000,123,648 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdmdm.sys -- (sscdmdm)
DRV - [2010-01-20 07:53:38 | 000,098,560 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdbus.sys -- (sscdbus) SAMSUNG USB Composite Device driver (WDM)
DRV - [2010-01-20 07:53:38 | 000,014,848 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdmdfl.sys -- (sscdmdfl)
DRV - [2009-11-24 13:49:05 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2009-11-21 18:13:42 | 000,082,380 | ---- | M] (Oak Technology Inc.) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\AFS2K.SYS -- (AFS2K)
DRV - [2008-08-26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2007-05-30 14:10:42 | 000,011,000 | ---- | M] () [Kernel | System | Stopped] -- C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys -- (AVG Anti-Spyware Driver)
DRV - [2007-05-30 14:10:42 | 000,010,872 | ---- | M] (GRISOFT, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AvgAsCln.sys -- (AvgAsCln)
DRV - [2007-03-16 11:11:38 | 000,012,256 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | Auto | Stopped] -- C:\WINDOWS\System32\drivers\TBPanel.sys -- (TBPanel)
DRV - [2007-03-16 11:11:38 | 000,012,256 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\TBPanel.sys -- (Cardex)
DRV - [2006-10-01 20:37:02 | 000,026,624 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\tap0801.sys -- (tap0801)
DRV - [2006-09-24 15:28:46 | 000,005,248 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | Boot | Running] -- C:\WINDOWS\system32\speedfan.sys -- (speedfan)
DRV - [2005-05-17 11:45:08 | 000,092,800 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\nvatabus.sys -- (nvatabus)
DRV - [2005-04-05 21:22:30 | 000,012,928 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus)
DRV - [2005-04-05 21:22:28 | 000,033,536 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD)
DRV - [2005-03-09 16:53:00 | 000,043,008 | ---- | M] (Advanced Micro Devices) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8)
DRV - [2004-12-22 11:07:12 | 002,304,320 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM) Service for Realtek AC97 Audio (WDM)
DRV - [2001-06-08 15:02:04 | 000,291,648 | R--- | M] (Conexant Systems, Inc.) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\BT848.SYS -- (BT848)
DRV - [1996-04-03 21:33:26 | 000,005,248 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\giveio.sys -- (giveio)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=ironto&s={searchTerms}&f=4
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
IE - HKU\S-1-5-21-725345543-1592454029-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.qooqlle.com/
IE - HKU\S-1-5-21-725345543-1592454029-839522115-1003\..\URLSearchHook: {c95a4e8e-816d-4655-8c79-d736da1adb6d} - C:\Program Files\Hotspot_Shield\tbHot0.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-725345543-1592454029-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-725345543-1592454029-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@bittorrent.com/BitTorrentDNA: C:\Program Files\DNA\plugins\npbtdna.dll (BitTorrent, Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: D:\Programy\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60310.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@ngm.nexoneu.com/NxGame: C:\Documents and Settings\All Users\Dane aplikacji\NexonEU\NGM\npNxGameeu.dll (Nexon)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\xxx2xxx\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.57\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\xxx2xxx\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.57\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}: C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\ [2010-07-10 15:35:14 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\bkmrksync@nokia.com: C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\ [2010-10-31 15:33:11 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\{CCB7D94B-CA92-4E3F-B79D-ADE0F07ADC74}: C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension\ [2010-07-10 15:35:15 | 000,000,000 | ---D | M]
 
[2011-07-13 20:38:46 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\xxx2xxx\Dane aplikacji\Mozilla\Extensions
[2011-01-31 00:44:29 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\xxx2xxx\Dane aplikacji\Mozilla\Extensions\IMVUClientXUL@imvu.com
[2011-07-13 20:38:56 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2010-04-21 22:37:26 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010-08-08 15:14:14 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010-11-09 16:37:49 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2011-01-02 12:08:00 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
[2011-02-19 07:33:20 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011-07-08 01:47:11 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
[2011-05-04 04:52:23 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2010-04-30 11:36:08 | 000,238,776 | ---- | M] (Pando Networks) -- C:\Program Files\mozilla firefox\plugins\npPandoWebInst.dll
[2010-12-09 12:47:06 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll
[2011-05-30 21:46:26 | 000,002,049 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fcmdSrch.xml
 
O1 HOSTS File: ([2001-10-26 19:45:16 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - No CLSID value found.
O2 - BHO: (Winamp Toolbar Loader) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - D:\Programy\BitComet\tools\BitCometBHO_1.3.7.16.dll (BitComet)
O2 - BHO: (CescrtHlpr Object) - {64182481-4F71-486b-A045-B233BD0DA8FC} - C:\Program Files\facemoods.com\facemoods\1.4.17.6\bh\facemoods.dll (facemoods.com BHO)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Programy\Office 2007\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O2 - BHO: (Hotspot Shield Toolbar) - {c95a4e8e-816d-4655-8c79-d736da1adb6d} - C:\Program Files\Hotspot_Shield\tbHot0.dll (Conduit Ltd.)
O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - Reg Error: Value error. File not found
O3 - HKU\S-1-5-21-725345543-1592454029-839522115-1003\..\Toolbar\WebBrowser: (no name) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No CLSID value found.
O3 - HKU\S-1-5-21-725345543-1592454029-839522115-1003\..\Toolbar\WebBrowser: (Hotspot Shield Toolbar) - {C95A4E8E-816D-4655-8C79-D736DA1ADB6D} - C:\Program Files\Hotspot_Shield\tbHot0.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-725345543-1592454029-839522115-1003\..\Toolbar\WebBrowser: (Winamp Toolbar) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O4 - HKLM..\Run: [!AVG Anti-Spyware] C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe (GRISOFT s.r.o.)
O4 - HKLM..\Run: [avast5]  File not found
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [csrs] C:\Documents and Settings\All Users\csrs.exe (Created with WinAutomation (http://www.WinAutomation.com))
O4 - HKLM..\Run: [facemoods] C:\Program Files\facemoods.com\facemoods\1.4.17.6\facemoodssrv.exe (facemoods.com)
O4 - HKLM..\Run: [GrooveMonitor] D:\Programy\Office 2007\Office12\GrooveMonitor.exe (Microsoft Corporation)
O4 - HKLM..\Run: [KernelFaultCheck]  File not found
O4 - HKLM..\Run: [KMConfig]  File not found
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [svhost] C:\Program Files\Common Files\svhost.exe ()
O4 - HKLM..\Run: [winloqon] C:\Documents and Settings\All Users\winloqon.exe (Created with WinAutomation (http://www.WinAutomation.com))
O4 - HKU\S-1-5-21-725345543-1592454029-839522115-1003..\Run: [BitTorrent DNA] C:\Program Files\DNA\btdna.exe (BitTorrent, Inc.)
O4 - HKU\S-1-5-21-725345543-1592454029-839522115-1003..\Run: [Pando Media Booster] C:\Program Files\Pando Networks\Media Booster\PMB.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\hp psc 1000 series.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe (Hewlett-Packard Co.)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\hpoddt01.exe.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe (Hewlett-Packard)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-725345543-1592454029-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-725345543-1592454029-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Dane aplikacji\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html ()
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - D:\Programy\Office 2007\Office12\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Pobierz wszystkie VIdeo za pomocą BitComet - D:\Programy\BitComet\BitComet.exe (www.BitComet.com)
O8 - Extra context menu item: Pobierz wszystko za pomocą BitComet - D:\Programy\BitComet\BitComet.exe (www.BitComet.com)
O8 - Extra context menu item: Pobierz za pomocą BitComet - D:\Programy\BitComet\BitComet.exe (www.BitComet.com)
O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Programy\Office 2007\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Programy\Office 2007\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\Programy\Office 2007\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - D:\Programy\BitComet\tools\BitCometBHO_1.3.7.16.dll (BitComet)
O9 - Extra Button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} -  File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Computer, Inc.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Value error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 217.172.224.160 89.228.6.21
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\Programy\Office 2007\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\xxx2xxx\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\xxx2xxx\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {57B86673-276A-48B2-BAE7-C6DBB3020EB8} - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll (GRISOFT s.r.o.)
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - D:\Programy\Office 2007\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-11-21 17:11:44 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{36601df2-5858-11e0-9686-0014858c215b}\Shell\AutoRun\command - "" = I:\PMBP_Win.exe
O33 - MountPoints2\{8374e85a-0854-11df-90ee-0014858c215b}\Shell - "" = AutoRun
O33 - MountPoints2\{8374e85a-0854-11df-90ee-0014858c215b}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a
O33 - MountPoints2\{cd69c4c6-8c25-11df-938a-0014858c215b}\Shell - "" = Autorun
O33 - MountPoints2\{cd69c4c6-8c25-11df-938a-0014858c215b}\Shell\AutoRun\command - "" = G:\Install_Nokia_Ovi_Suite.exe
O33 - MountPoints2\G\Shell - "" = AutoRun
O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\0010.exe
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011-07-23 18:00:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\CSC
[2011-07-22 12:39:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\xxx2xxx\Menu Start\Programy\Ubisoft
[2011-07-21 19:03:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\xxx2xxx\Dane aplikacji\Registry Mechanic
[2011-07-16 00:52:33 | 001,101,824 | ---- | C] (Woodbury Associates Limited) -- C:\WINDOWS\System32\UniBox210.ocx
[2011-07-16 00:52:33 | 000,880,640 | ---- | C] (Woodbury Associates Limited) -- C:\WINDOWS\System32\UniBox10.ocx
[2011-07-16 00:52:33 | 000,212,992 | ---- | C] (Woodbury Associates Limited) -- C:\WINDOWS\System32\UniBoxVB12.ocx
[2011-07-16 00:52:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Registry Mechanic
[2011-07-16 00:52:32 | 000,658,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSCOMCT2.OCX
[2011-07-16 00:52:21 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\PC Tools
[2011-07-16 00:52:20 | 000,000,000 | ---D | C] -- C:\Program Files\Registry Mechanic
[2011-07-14 07:16:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\xxx2xxx\Moje dokumenty\Dokumenty i zdjęcia
[2011-07-13 21:37:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\xxx2xxx\Moje dokumenty\Downloads
[2011-07-13 20:50:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\xxx2xxx\Ustawienia lokalne\Dane aplikacji\searchplugins
[2011-07-13 20:40:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\xxx2xxx\Menu Start\Programy\Google Chrome
[2011-07-13 20:21:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\xxx2xxx\Dane aplikacji\Grisoft
[2011-07-13 20:21:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\AVG Anti-Spyware 7.5
[2011-07-13 20:21:03 | 000,010,872 | ---- | C] (GRISOFT, s.r.o.) -- C:\WINDOWS\System32\drivers\AvgAsCln.sys
[2011-07-13 20:21:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Grisoft
[2011-07-13 20:20:59 | 000,000,000 | ---D | C] -- C:\Program Files\Grisoft
[2011-07-10 20:52:31 | 000,000,000 | ---D | C] -- C:\Program Files\Combined Community Codec Pack
[2011-07-10 20:50:07 | 000,339,968 | RHS- | C] (Created with WinAutomation (http://www.WinAutomation.com)) -- C:\Documents and Settings\All Users\csrs.exe
[2011-07-10 20:50:07 | 000,331,776 | RHS- | C] (Created with WinAutomation (http://www.WinAutomation.com)) -- C:\Documents and Settings\All Users\winloqon.exe
[2011-07-10 13:07:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\JDownloader
[2011-07-08 01:47:25 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2011-07-08 01:47:08 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2011-07-08 01:47:08 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2011-07-08 01:47:08 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2011-06-26 13:09:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\K-Lite Codec Pack
[2011-06-26 13:09:14 | 000,232,448 | ---- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) -- C:\WINDOWS\System32\mp3fhg.acm
[2011-06-26 13:09:14 | 000,151,552 | ---- | C] (fccHandler) -- C:\WINDOWS\System32\ac3acm.acm
[2011-06-26 13:09:13 | 000,237,568 | ---- | C] (www.helixcommunity.org) -- C:\WINDOWS\System32\yv12vfw.dll
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2011-07-23 18:52:41 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011-07-23 16:09:05 | 000,001,140 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-725345543-1592454029-839522115-1003UA.job
[2011-07-23 14:26:22 | 000,000,406 | -H-- | M] () -- C:\WINDOWS\tasks\Norton Security Scan for xxx2xxx.job
[2011-07-22 20:22:45 | 000,051,200 | ---- | M] () -- C:\Documents and Settings\xxx2xxx\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-07-22 19:20:43 | 000,000,258 | ---- | M] () -- C:\WINDOWS\tasks\RMSchedule.job
[2011-07-22 17:09:01 | 000,001,088 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-725345543-1592454029-839522115-1003Core.job
[2011-07-22 16:43:17 | 000,000,332 | ---- | M] () -- C:\Documents and Settings\xxx2xxx\Pulpit\Resume Download of Operation 7.url
[2011-07-20 19:56:01 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011-07-16 01:41:20 | 000,000,524 | ---- | M] () -- C:\hpfr3420.xml
[2011-07-16 00:52:33 | 000,000,738 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Registry Mechanic.lnk
[2011-07-16 00:13:35 | 000,054,801 | ---- | M] () -- C:\Documents and Settings\xxx2xxx\Pulpit\pic16927002020959962825378.jpg
[2011-07-15 23:50:57 | 000,302,710 | ---- | M] () -- C:\Documents and Settings\xxx2xxx\Pulpit\nelly-furtado-say-it-right-1600-1200-1395.jpg
[2011-07-15 17:00:38 | 003,621,616 | ---- | M] () -- C:\Documents and Settings\xxx2xxx\Pulpit\Nelly Furtado- Say it right.mp3
[2011-07-13 20:41:02 | 000,002,318 | ---- | M] () -- C:\Documents and Settings\xxx2xxx\Pulpit\Google Chrome.lnk
[2011-07-13 20:21:07 | 000,000,849 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\AVG Anti-Spyware.lnk
[2011-07-13 18:28:42 | 000,138,192 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys
[2011-07-13 18:28:42 | 000,066,616 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntflt.sys
[2011-07-10 20:52:07 | 006,855,168 | RHS- | M] () -- C:\Program Files\Common Files\svhost.exe
[2011-07-10 20:52:07 | 000,339,968 | RHS- | M] (Created with WinAutomation (http://www.WinAutomation.com)) -- C:\Documents and Settings\All Users\csrs.exe
[2011-07-10 20:52:07 | 000,331,776 | RHS- | M] (Created with WinAutomation (http://www.WinAutomation.com)) -- C:\Documents and Settings\All Users\winloqon.exe
[2011-07-10 13:07:53 | 000,000,628 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\JDownloader.lnk
[2011-07-08 22:18:24 | 000,016,352 | ---- | M] () -- C:\Documents and Settings\xxx2xxx\Pulpit\fryzura-z-grzywka-4467.jpg
[2011-07-07 01:34:49 | 001,276,703 | ---- | M] () -- C:\Documents and Settings\xxx2xxx\Pulpit\IMAG0138.jpg
[2011-07-02 21:18:50 | 000,959,360 | ---- | M] () -- C:\Documents and Settings\xxx2xxx\Pulpit\IMAG0174.jpg
[2011-07-02 21:18:36 | 000,719,752 | ---- | M] () -- C:\Documents and Settings\xxx2xxx\Pulpit\IMAG0173.jpg
[2011-06-29 19:16:38 | 001,119,428 | ---- | M] () -- C:\Documents and Settings\xxx2xxx\Pulpit\IMAG0171.jpg
[2011-06-26 12:57:45 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011-07-22 16:43:17 | 000,000,332 | ---- | C] () -- C:\Documents and Settings\xxx2xxx\Pulpit\Resume Download of Operation 7.url
[2011-07-16 00:52:59 | 000,000,258 | ---- | C] () -- C:\WINDOWS\tasks\RMSchedule.job
[2011-07-16 00:52:33 | 000,037,336 | ---- | C] () -- C:\WINDOWS\System32\CleanMFT32.exe
[2011-07-16 00:52:33 | 000,000,738 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Registry Mechanic.lnk
[2011-07-16 00:13:38 | 000,054,801 | ---- | C] () -- C:\Documents and Settings\xxx2xxx\Pulpit\pic16927002020959962825378.jpg
[2011-07-15 23:51:01 | 000,302,710 | ---- | C] () -- C:\Documents and Settings\xxx2xxx\Pulpit\nelly-furtado-say-it-right-1600-1200-1395.jpg
[2011-07-15 16:57:37 | 003,621,616 | ---- | C] () -- C:\Documents and Settings\xxx2xxx\Pulpit\Nelly Furtado- Say it right.mp3
[2011-07-13 20:41:01 | 000,002,318 | ---- | C] () -- C:\Documents and Settings\xxx2xxx\Pulpit\Google Chrome.lnk
[2011-07-13 20:21:07 | 000,000,849 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\AVG Anti-Spyware.lnk
[2011-07-10 20:50:07 | 006,855,168 | RHS- | C] () -- C:\Program Files\Common Files\svhost.exe
[2011-07-10 13:07:53 | 000,000,628 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\JDownloader.lnk
[2011-07-08 22:18:28 | 000,016,352 | ---- | C] () -- C:\Documents and Settings\xxx2xxx\Pulpit\fryzura-z-grzywka-4467.jpg
[2011-07-07 01:31:29 | 001,276,703 | ---- | C] () -- C:\Documents and Settings\xxx2xxx\Pulpit\IMAG0138.jpg
[2011-07-07 01:31:29 | 001,119,428 | ---- | C] () -- C:\Documents and Settings\xxx2xxx\Pulpit\IMAG0171.jpg
[2011-07-07 01:31:29 | 000,959,360 | ---- | C] () -- C:\Documents and Settings\xxx2xxx\Pulpit\IMAG0174.jpg
[2011-07-07 01:31:29 | 000,719,752 | ---- | C] () -- C:\Documents and Settings\xxx2xxx\Pulpit\IMAG0173.jpg
[2011-06-26 13:09:16 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2011-06-26 13:09:13 | 000,644,608 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2011-06-26 13:09:13 | 000,243,200 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2011-06-26 13:09:13 | 000,073,216 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2011-05-22 02:54:55 | 000,271,360 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys
[2011-05-22 02:54:49 | 000,018,048 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys
[2011-03-15 23:05:52 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\SI.bin
[2011-01-19 15:01:11 | 000,232,968 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2011-01-19 15:01:10 | 000,232,968 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2011-01-19 15:01:10 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin
[2010-08-20 01:56:55 | 000,000,005 | ---- | C] () -- C:\WINDOWS\treeskp.sys
[2010-08-20 01:56:55 | 000,000,005 | ---- | C] () -- C:\WINDOWS\sbacknt.bin
[2010-08-05 12:15:30 | 002,195,030 | ---- | C] () -- C:\WINDOWS\System32\nvdata.bin
[2010-08-05 12:15:30 | 000,007,282 | ---- | C] () -- C:\WINDOWS\cadx2.ini
[2010-07-09 02:31:58 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\ImageSearchDLL.dll
[2010-07-03 08:36:07 | 000,878,208 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat
[2010-07-02 21:56:02 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll
[2010-07-02 21:56:02 | 000,036,608 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys
[2010-07-02 21:55:41 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\xxx2xxx\Dane aplikacji\$_hpcst$.hpc
[2010-06-06 22:20:21 | 000,002,302 | ---- | C] () -- C:\WINDOWS\TSCTNDBG.INI
[2010-05-21 08:47:08 | 000,000,023 | ---- | C] () -- C:\WINDOWS\BlendSettings.ini
[2010-03-01 11:24:45 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\xxx2xxx\Dane aplikacji\downloads.m3u
[2010-02-13 02:58:46 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2010-02-06 16:11:22 | 000,018,455 | ---- | C] () -- C:\WINDOWS\TSCTVMSG.INI
[2010-02-06 16:11:22 | 000,010,686 | ---- | C] () -- C:\WINDOWS\TSCTVDIV.INI
[2010-02-06 16:11:22 | 000,000,025 | ---- | C] () -- C:\WINDOWS\TSCFM.INI
[2010-02-06 16:07:09 | 000,001,303 | ---- | C] () -- C:\WINDOWS\TSCTV.INI
[2010-02-02 16:51:28 | 000,014,422 | ---- | C] () -- C:\WINDOWS\TSCTVFMO.INI
[2010-02-02 16:46:36 | 000,000,804 | ---- | C] () -- C:\WINDOWS\TSCTVDIV.BIN
[2010-02-02 16:45:31 | 000,000,130 | ---- | C] () -- C:\WINDOWS\IFOLDER.INI
[2010-01-08 00:44:22 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2009-12-25 20:27:39 | 000,005,370 | ---- | C] () -- C:\Documents and Settings\xxx2xxx\Dane aplikacji\Cabos.plist
[2009-11-25 22:00:38 | 000,000,145 | ---- | C] () -- C:\Documents and Settings\xxx2xxx\Dane aplikacji\default.rss
[2009-11-25 22:00:28 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2009-11-23 00:16:30 | 000,303,104 | ---- | C] () -- C:\WINDOWS\System32\qscl.dll
[2009-11-23 00:16:30 | 000,303,104 | ---- | C] () -- C:\WINDOWS\System32\ammpp.dll
[2009-11-23 00:16:30 | 000,233,472 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll
[2009-11-23 00:16:30 | 000,212,992 | ---- | C] () -- C:\WINDOWS\System32\amrdec.dll
[2009-11-23 00:16:30 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\qcpsdk.dll
[2009-11-23 00:16:30 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\a1.dll
[2009-11-22 16:30:08 | 000,051,200 | ---- | C] () -- C:\Documents and Settings\xxx2xxx\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009-11-21 18:26:14 | 000,175,616 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2009-11-21 18:11:03 | 000,020,458 | ---- | C] () -- C:\WINDOWS\hpoins01.dat
[2009-11-21 18:11:03 | 000,016,622 | ---- | C] () -- C:\WINDOWS\hpomdl01.dat
[2009-11-21 18:09:01 | 000,000,513 | ---- | C] () -- C:\WINDOWS\DFC.INI
[2009-11-21 18:03:32 | 000,026,624 | R--- | C] () -- C:\WINDOWS\TBZoom.exe
[2009-11-21 18:03:32 | 000,005,120 | R--- | C] () -- C:\WINDOWS\TBManage.dll
[2009-11-21 18:02:01 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2009-11-21 18:00:41 | 001,560,896 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2009-11-21 17:21:46 | 000,000,164 | ---- | C] () -- C:\WINDOWS\avrack.ini
[2009-11-21 17:21:43 | 000,156,672 | ---- | C] () -- C:\WINDOWS\System32\RTLCPAPI.dll
[2009-11-21 17:21:42 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2009-11-21 17:14:29 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2009-11-21 17:07:47 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2009-11-16 04:00:26 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\MAMACExtract.dll
[2009-11-09 04:55:50 | 000,974,848 | ---- | C] () -- C:\WINDOWS\System32\cis-2.4.dll
[2009-11-09 04:55:50 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\issacapi_bs-2.3.dll
[2009-11-09 04:55:50 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\issacapi_pe-2.3.dll
[2009-11-09 04:55:50 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\issacapi_se-2.3.dll
[2006-11-02 17:10:16 | 000,080,912 | ---- | C] () -- C:\WINDOWS\System32\sherlock2.exe
[2004-08-04 00:56:48 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2004-08-02 14:20:40 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2003-04-07 08:21:58 | 000,561,152 | ---- | C] () -- C:\WINDOWS\System32\hpotscl.dll
[2001-10-26 20:15:16 | 000,502,302 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat
[2001-10-26 20:15:16 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat
[2001-10-26 20:15:16 | 000,088,526 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat
[2001-10-26 20:15:16 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat
[2001-08-23 17:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2001-08-23 17:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2001-08-18 01:30:24 | 000,443,722 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2001-08-18 01:30:24 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2001-08-18 01:30:24 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2001-08-18 01:30:22 | 000,071,682 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2001-08-18 01:15:38 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2001-07-22 02:36:48 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2001-07-22 02:36:04 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2001-07-22 02:24:16 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2001-01-08 12:09:20 | 000,012,285 | ---- | C] () -- C:\WINDOWS\Cadx3.ini
[1996-04-03 21:33:26 | 000,005,248 | ---- | C] () -- C:\WINDOWS\System32\giveio.sys
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2010-06-21 15:39:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Alwil Software
[2010-04-21 22:44:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Avery
[2011-07-11 20:40:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\boost_interprocess
[2009-11-24 13:48:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite
[2010-04-29 18:40:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ESET
[2010-02-25 20:30:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10
[2011-07-13 20:21:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Grisoft
[2010-10-31 15:30:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Installations
[2010-04-30 11:25:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla
[2010-09-21 23:31:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Nexon
[2010-09-21 23:31:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\NexonEU
[2010-10-30 16:18:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Nokia
[2010-07-10 15:33:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\NokiaInstallerCache
[2010-07-10 15:37:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\NokiaMusic
[2011-07-23 13:31:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM
[2011-05-30 10:36:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Suite
[2011-07-22 16:38:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PMB Files
[2010-07-02 22:20:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Samsung
[2011-07-22 19:20:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP
[2010-05-14 15:31:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx2xxx\Dane aplikacji\Cabos
[2010-09-28 16:21:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx2xxx\Dane aplikacji\CometPlayer
[2010-05-21 13:07:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx2xxx\Dane aplikacji\DAEMON Tools Lite
[2011-07-23 18:42:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx2xxx\Dane aplikacji\DNA
[2011-05-30 22:09:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx2xxx\Dane aplikacji\facemoods.com
[2011-07-16 18:25:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx2xxx\Dane aplikacji\foobar2000
[2010-03-22 15:58:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx2xxx\Dane aplikacji\Gadu-Gadu
[2011-04-27 23:44:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx2xxx\Dane aplikacji\Gadu-Gadu 10
[2010-01-22 01:06:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx2xxx\Dane aplikacji\GanymedeNet
[2011-02-03 00:51:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx2xxx\Dane aplikacji\GG Tools
[2010-10-31 16:01:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx2xxx\Dane aplikacji\GHISLER
[2011-07-13 20:21:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx2xxx\Dane aplikacji\Grisoft
[2010-12-01 00:28:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx2xxx\Dane aplikacji\gtk-2.0
[2011-02-27 16:22:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx2xxx\Dane aplikacji\IObit
[2011-05-08 15:21:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx2xxx\Dane aplikacji\ipla
[2010-08-26 21:23:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx2xxx\Dane aplikacji\Nokia
[2010-08-26 21:23:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx2xxx\Dane aplikacji\Nokia Ovi Suite
[2010-03-24 00:05:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx2xxx\Dane aplikacji\Nowe Gadu-Gadu
[2010-01-03 16:54:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx2xxx\Dane aplikacji\OpenFM
[2009-11-21 18:19:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx2xxx\Dane aplikacji\Opera
[2010-07-10 15:44:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx2xxx\Dane aplikacji\PC Suite
[2010-05-14 15:13:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx2xxx\Dane aplikacji\QuickScan
[2011-03-06 13:12:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx2xxx\Dane aplikacji\RDRM
[2011-07-21 19:03:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx2xxx\Dane aplikacji\Registry Mechanic
[2010-07-02 21:50:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx2xxx\Dane aplikacji\Samsung
[2010-09-25 16:20:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx2xxx\Dane aplikacji\TigerPlayer
[2011-07-03 15:15:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx2xxx\Dane aplikacji\TS3Client
[2011-01-31 00:53:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xxx2xxx\Dane aplikacji\Vivox
[2010-02-27 22:48:15 | 000,000,346 | ---- | M] () -- C:\WINDOWS\Tasks\FRU Task #Hewlett-Packard#hp psc 1200 series#1259268467.job
[2011-07-22 19:20:43 | 000,000,258 | ---- | M] () -- C:\WINDOWS\Tasks\RMSchedule.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 144 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:C43ED645
@Alternate Data Stream - 129 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:D1B5B4F1

< End of report >