OTL logfile created on: 2011-11-21 16:10:33 - Run 2 OTL by OldTimer - Version 3.2.31.0 Folder = E:\Wojtek Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 7.0.5730.11) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1022,42 Mb Total Physical Memory | 456,93 Mb Available Physical Memory | 44,69% Memory free 2,40 Gb Paging File | 1,85 Gb Available in Paging File | 77,18% Paging File free Paging file location(s): C:\pagefile.sys 1536 3072 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 37,26 Gb Total Space | 11,60 Gb Free Space | 31,13% Space Free | Partition Type: NTFS Drive D: | 70,00 Gb Total Space | 24,01 Gb Free Space | 34,30% Space Free | Partition Type: NTFS Drive E: | 162,84 Gb Total Space | 79,10 Gb Free Space | 48,57% Space Free | Partition Type: NTFS Computer Name: KOMPUTER | User Name: User | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - File not found -- PRC - [2011-11-21 16:03:55 | 000,584,192 | ---- | M] (OldTimer Tools) -- E:\Wojtek\OTL.exe PRC - [2011-11-11 14:33:01 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2011-11-09 13:24:28 | 010,089,472 | ---- | M] (Creative Team S.A.) -- E:\Program Files\WapSter\WapSter AQQ\AQQ.exe PRC - [2011-08-15 15:18:10 | 001,361,288 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe PRC - [2011-07-09 06:38:12 | 000,550,912 | ---- | M] (NETIA S.A.) -- C:\Program Files\Netia\Net\netianet.exe PRC - [2010-03-06 04:04:24 | 000,310,224 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe PRC - [2008-06-27 04:36:58 | 001,482,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2004-01-26 10:38:38 | 000,924,160 | ---- | M] (THOMSON Telecom Belgium) -- C:\Program Files\Thomson\SpeedTouch USB\dragdiag.exe PRC - [2003-03-20 13:21:00 | 001,912,832 | ---- | M] (C-Media Electronic Inc. (www.cmedia.com.tw)) -- C:\WINDOWS\mixer.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2011-11-21 15:51:02 | 000,081,920 | ---- | M] () -- C:\WINDOWS\system32\ro327185.dll MOD - [2011-11-19 11:01:34 | 000,081,920 | ---- | M] () -- C:\WINDOWS\system32\or327185.dll MOD - [2011-11-14 18:03:36 | 008,527,008 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll MOD - [2011-11-11 14:32:57 | 001,989,592 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll MOD - [2011-11-09 13:18:20 | 000,983,552 | ---- | M] () -- E:\Program Files\WapSter\WapSter AQQ\System\Shared\Plugins\SMS.dll MOD - [2011-11-08 12:07:30 | 001,198,080 | ---- | M] () -- E:\Program Files\WapSter\WapSter AQQ\System\Shared\Plugins\GGNet.dll MOD - [2011-06-06 11:55:36 | 000,300,544 | ---- | M] () -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.POL MOD - [2010-08-25 10:41:20 | 000,304,640 | ---- | M] () -- E:\Program Files\WapSter\WapSter AQQ\System\Shared\Plugins\Contact.dll MOD - [2010-01-30 01:41:12 | 004,254,560 | ---- | M] () -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF MOD - [2008-06-16 02:28:36 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2011-09-04 16:28:20 | 000,008,192 | ---- | M] () [Disabled | Stopped] -- C:\WINDOWS\system32\srvany.exe -- (KMService) SRV - [2011-08-15 15:18:10 | 001,361,288 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc) SRV - [2010-03-25 09:25:22 | 030,969,208 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service) SRV - [2010-03-04 22:38:00 | 000,071,096 | ---- | M] () [Disabled | Stopped] -- C:\Program Files\CDBurnerXP\NMSAccessU.exe -- (NMSAccess) SRV - [2010-02-19 13:37:14 | 000,513,024 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2011-11-16 16:00:30 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd) DRV - [2011-04-06 05:06:40 | 006,575,616 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag) DRV - [2009-11-12 13:48:56 | 000,005,504 | ---- | M] () [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen) DRV - [2009-03-25 14:29:52 | 000,130,432 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtnicxp.sys -- (RTL8023xp) DRV - [2009-03-18 16:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi) DRV - [2008-06-16 02:28:36 | 000,062,208 | ---- | M] (Silicon Image, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\si3112.sys -- (Si3112) DRV - [2008-06-16 02:28:36 | 000,035,840 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8) DRV - [2008-04-13 21:15:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum) DRV - [2003-12-08 10:53:48 | 000,053,600 | ---- | M] (THOMSON) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\alcan5wn.sys -- (alcan5wn) SpeedTouch USB ADSL PPP Networking Driver (NDISWAN) DRV - [2003-12-08 10:53:46 | 000,070,688 | ---- | M] (THOMSON) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\alcaudsl.sys -- (alcaudsl) DRV - [2003-03-25 17:50:46 | 000,004,096 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\siside.sys -- (SiSide) DRV - [2002-11-18 14:51:40 | 000,377,358 | ---- | M] (C-Media Inc) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\cmaudio.sys -- (cmpci) C-Media PCI Audio Driver (WDM) DRV - [2002-10-17 15:14:46 | 000,049,024 | ---- | M] (Windows (R) 2000 DDK provider) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\sisidex.sys -- (sisidex) DRV - [2002-08-20 17:19:08 | 000,009,472 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sisperf.sys -- (sisperf) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/ IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKU\S-1-5-21-1177238915-1580436667-682003330-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/ IE - HKU\S-1-5-21-1177238915-1580436667-682003330-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1 IE - HKU\S-1-5-21-1177238915-1580436667-682003330-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "AutoConfigURL" = http://www.tvfree.xaa.pl/ [color=#E56717]========== FireFox ==========[/color] FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=1.1.7: C:\Program Files\VideoLAN\VLC\npvlc.dll (the VideoLAN Team) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-11-11 14:33:02 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-11-19 21:57:42 | 000,000,000 | ---D | M] [2011-10-09 14:59:23 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\User\Dane aplikacji\Mozilla\Extensions [2011-10-09 14:56:30 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2011-11-11 14:33:01 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2011-09-29 01:52:42 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2011-09-29 01:52:42 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2011-09-29 01:52:42 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2011-09-29 01:52:42 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2011-09-29 01:52:42 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2011-09-29 01:52:42 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms} CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\15.0.874.121\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll CHR - plugin: Java Deployment Toolkit 6.0.270.7 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 6 U27 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\15.0.874.121\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\15.0.874.121\pdf.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll CHR - plugin: Google Update (Enabled) = C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.79\npGoogleUpdate3.dll CHR - plugin: Windows Presentation Foundation (Enabled) = C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll CHR - plugin: Default Plug-in (Enabled) = default_plugin CHR - Extension: Angry Birds = C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj\1.1.2.1_0\ CHR - Extension: Learn Languages = C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\bpojnkkdeegokioflneiljheajpnckcg\1.0_0\ CHR - Extension: FlashBlock = C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\cdngiadmnkhgemkimkhiilgffbjijcie\1.2.11.10_0\ CHR - Extension: NFS Underground = C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\cemknpokkpnacjgejbbaojlhcggpimea\1.3.1_0\ CHR - Extension: Vividas Player Plugin = C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\choofoanehnlponopnapopbnkeldllka\4.1_0\ CHR - Extension: Popular Engineering = C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\cmmhkolgphgidehofpbcplckoogmlkbh\1.2_0\ CHR - Extension: Flight Simulator = C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\lcohjlfmcpocjbijmaleelejkmeobmnk\1.0_0\ CHR - Extension: Social TV = C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\lgngdongggnefkmefanocbikldkboaaj\1.2.3_0\ CHR - Extension: Google Books = C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\mmimngoggfoobjdlefbcabngfnmieonb\0.0.0.5_0\ CHR - Extension: TV = C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nglcdapdbodjpbmedgdiecmbfobdnepi\1.0_0\ CHR - Extension: Kontomierz = C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\oadpkafcajjphgkeclfkjdfholgbkebi\4.0_0\ O1 HOSTS File: ([2008-06-16 02:28:36 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [C-Media Mixer] C:\WINDOWS\mixer.exe (C-Media Electronic Inc. (www.cmedia.com.tw)) O4 - HKLM..\Run: [MSConfig] C:\WINDOWS\System32\msconfig.exe (Microsoft Corporation) O4 - HKLM..\Run: [NETIANET] C:\Program Files\Netia\Net\netianet.exe (NETIA S.A.) O4 - HKLM..\Run: [SpeedTouch USB Diagnostics] C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe (THOMSON Telecom Belgium) O4 - HKLM..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated) O4 - HKU\S-1-5-21-1177238915-1580436667-682003330-1001..\Run: [AQQ] E:\Program Files\WapSter\WapSter AQQ\AQQ.exe (Creative Team S.A.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktopCleanupWizard = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\NoDriveTypeAutoRun: NoDriveTypeAutoRun = 177 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoInternetOpenWith = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableStatusMessages = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: VerboseStatus = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyPictures = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyPictures = 1 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyPictures = 1 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyPictures = 1 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1 O7 - HKU\S-1-5-21-1177238915-1580436667-682003330-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 177 O7 - HKU\S-1-5-21-1177238915-1580436667-682003330-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 0 O7 - HKU\S-1-5-21-1177238915-1580436667-682003330-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyPictures = 1 O7 - HKU\S-1-5-21-1177238915-1580436667-682003330-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1 O7 - HKU\S-1-5-21-1177238915-1580436667-682003330-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1 O7 - HKU\S-1-5-21-1177238915-1580436667-682003330-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1 O7 - HKU\S-1-5-21-1177238915-1580436667-682003330-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1 O7 - HKU\S-1-5-21-1177238915-1580436667-682003330-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1 O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab (MksSkanerOnline Class) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27) O16 - DPF: {CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2F0E2BF4-8F21-4456-ACFA-EEDEAEFF7243}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{43FF42FC-58A3-475F-A2A3-14F6CF209B84}: NameServer = 62.233.233.233 87.204.204.204 O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.) O24 - Desktop Components:0 (Bieżąca strona główna) - About:Home O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 0 O32 - AutoRun File - [2011-09-04 07:39:47 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011-11-20 20:15:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\Pulpit\salitykiller [2011-11-19 20:11:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\Menu Start\Programy\Jollygood Games [2011-11-19 20:06:09 | 000,000,000 | ---D | C] -- C:\Program Files\Jollygood Games [2011-11-19 18:38:04 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss [2011-11-19 17:17:21 | 000,000,000 | ---D | C] -- C:\Program Files\SkanerOnline [2011-11-19 12:31:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\Menu Start\Programy\Fraps [2011-11-19 10:10:33 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\User\Recent [2011-11-17 07:21:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\Dane aplikacji\vlc [2011-11-17 06:58:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\VideoLAN [2011-11-17 06:57:08 | 000,000,000 | ---D | C] -- C:\Program Files\VideoLAN [2011-11-16 15:52:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\appmgmt [2011-11-14 17:42:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\regid.1986-12.com.adobe [2011-11-14 17:38:39 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe Media Player [2011-11-14 17:38:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Adobe [2011-11-12 13:53:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\Moje dokumenty\SCi [2011-11-12 13:47:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\Menu Start\Programy\Conflict Desert Storm II [2011-11-11 12:04:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\Dane aplikacji\IBAGroup [2011-11-11 10:04:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\Moje dokumenty\NeocoreGames [2011-11-11 09:34:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\Dane aplikacji\AIMP3 [2011-11-11 09:34:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\AIMP3 [2011-11-09 19:57:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\Moje dokumenty\Kalypso Media [2011-11-09 19:57:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Airline Tycoon 2 [2011-11-09 19:51:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\Dane aplikacji\Kalypso Media [2011-11-09 16:31:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\Pulpit\898428-mix-musierowicz-malgorzata-opium-w-rosole_pliki [2011-11-09 07:51:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\Dane aplikacji\Gabob.NowBoarding.75EFD321A77FF3E9D3E8C023673644AB2F392162.1 [2011-11-09 07:51:11 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe AIR [2011-11-08 17:28:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\Dane aplikacji\COMODO [2011-11-08 17:26:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\COMODO [2011-11-05 18:47:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\Menu Start\Programy\Network Addon Mod [2011-11-05 18:47:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Network Addon Mod [2011-11-05 14:14:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\Moje dokumenty\SimCity 4 [2011-11-05 14:14:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Maxis [2011-11-05 11:59:52 | 000,139,264 | ---- | C] (Creative Technology Ltd) -- C:\WINDOWS\System32\eax.dll [2011-11-05 11:59:52 | 000,000,000 | ---D | C] -- C:\Program Files\Creative [2011-11-05 11:59:51 | 000,306,688 | ---- | C] (InstallShield Software Corporation) -- C:\WINDOWS\IsUninst.exe [2011-11-04 16:08:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\JDownloader [2011-11-01 10:41:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\WapSter [2011-10-31 18:02:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\Menu Start\Programy\WapSter [2011-10-31 17:45:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dokumenty\DAEMON Tools Images [2011-10-30 18:57:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\Moje dokumenty\Atari [2011-10-30 17:26:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Total Gameplay [2011-10-30 14:24:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Synetic [2011-10-30 14:20:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Cobra 11 - Burning Wheels [2011-10-29 11:53:27 | 000,000,000 | R--D | C] -- C:\Documents and Settings\User\Moje dokumenty\Wideo [2011-10-28 19:31:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\MailShare [2011-10-28 19:31:17 | 000,000,000 | ---D | C] -- C:\Program Files\MailShare [2011-10-28 17:03:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\LogFiles [2011-10-26 05:57:17 | 000,000,000 | -HSD | C] -- C:\found.000 [2011-10-23 19:07:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\TeamSpeak 3 Client [2011-10-23 19:07:46 | 000,000,000 | ---D | C] -- C:\Program Files\TeamSpeak 3 Client [2011-10-23 08:21:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\Menu Start\Programy\Avalon [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011-11-21 16:06:31 | 000,044,686 | -H-- | M] () -- C:\WINDOWS\System32\or327185.dl_ [2011-11-21 15:51:19 | 000,044,686 | -H-- | M] () -- C:\WINDOWS\System32\ro327185.dl_ [2011-11-21 15:51:02 | 000,081,920 | ---- | M] () -- C:\WINDOWS\System32\ro327185.dll [2011-11-21 15:29:16 | 000,001,128 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1177238915-1580436667-682003330-1001UA.job [2011-11-21 14:50:55 | 000,023,552 | ---- | M] () -- C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-11-21 08:29:08 | 000,001,076 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1177238915-1580436667-682003330-1001Core.job [2011-11-21 02:00:01 | 000,000,340 | ---- | M] () -- C:\WINDOWS\tasks\AdobeAAMUpdater-1.0-KOMPUTER-User.job [2011-11-19 20:13:35 | 000,000,904 | ---- | M] () -- C:\Documents and Settings\User\Pulpit\Speedway Turbo Sliders.lnk [2011-11-19 20:11:18 | 000,000,840 | ---- | M] () -- C:\Documents and Settings\User\Pulpit\Turbo Sliders.lnk [2011-11-19 20:07:44 | 000,081,920 | ---- | M] () -- C:\WINDOWS\System32\st329213.dll [2011-11-19 20:07:44 | 000,044,686 | -H-- | M] () -- C:\WINDOWS\System32\st329213.dl_ [2011-11-19 18:39:00 | 000,000,211 | -HS- | M] () -- C:\boot.ini [2011-11-19 16:35:00 | 000,081,920 | ---- | M] () -- C:\WINDOWS\System32\vo327185.dll [2011-11-19 16:35:00 | 000,044,686 | -H-- | M] () -- C:\WINDOWS\System32\vo327185.dl_ [2011-11-19 12:31:25 | 000,000,428 | ---- | M] () -- C:\Documents and Settings\User\Pulpit\Fraps.lnk [2011-11-19 11:01:34 | 000,081,920 | ---- | M] () -- C:\WINDOWS\System32\or327185.dll [2011-11-19 11:01:28 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2011-11-18 21:34:21 | 000,002,295 | ---- | M] () -- C:\Documents and Settings\User\Pulpit\Google Chrome.lnk [2011-11-18 17:16:12 | 000,132,869 | ---- | M] () -- C:\Documents and Settings\User\Moje dokumenty\ts3_clientui-win32-1321432557-2011-11-18 17_16_04.406250.dmp [2011-11-18 16:48:55 | 004,592,684 | ---- | M] () -- C:\Documents and Settings\User\Moje dokumenty\ts3_recording_11_11_18_16_48_27.wav [2011-11-17 20:39:37 | 000,081,920 | ---- | M] () -- C:\WINDOWS\System32\qo327185.dll [2011-11-17 20:39:37 | 000,044,686 | -H-- | M] () -- C:\WINDOWS\System32\qo327185.dl_ [2011-11-17 16:54:49 | 000,124,595 | ---- | M] () -- C:\Documents and Settings\User\Pulpit\top.jpg [2011-11-17 08:42:52 | 000,081,920 | ---- | M] () -- C:\WINDOWS\System32\gr327185.dll [2011-11-17 08:42:52 | 000,044,686 | -H-- | M] () -- C:\WINDOWS\System32\gr327185.dl_ [2011-11-17 06:58:48 | 000,000,719 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\VLC media player.lnk [2011-11-17 06:00:17 | 003,574,936 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2011-11-16 18:22:30 | 004,204,844 | ---- | M] () -- C:\Documents and Settings\User\Moje dokumenty\ts3_recording_11_11_16_18_22_2.wav [2011-11-16 18:05:05 | 000,153,203 | ---- | M] () -- C:\Documents and Settings\User\Moje dokumenty\ts3_clientui-win32-15001-2011-11-16 18_05_01.390625.dmp [2011-11-16 18:00:35 | 003,022,124 | ---- | M] () -- C:\Documents and Settings\User\Moje dokumenty\ts3_recording_11_11_16_17_59_59.wav [2011-11-16 17:07:20 | 000,002,441 | ---- | M] () -- C:\Documents and Settings\User\Pulpit\HiJackThis.lnk [2011-11-16 15:40:09 | 000,556,342 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2011-11-16 15:40:09 | 000,493,834 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2011-11-16 15:40:09 | 000,104,304 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2011-11-16 15:40:09 | 000,083,432 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2011-11-14 18:03:36 | 000,414,368 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl [2011-11-13 14:48:01 | 000,000,637 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\JDownloader.lnk [2011-11-13 08:30:08 | 000,000,000 | ---- | M] () -- C:\WINDOWS\MEMORY.DMP [2011-11-12 21:12:48 | 000,000,025 | ---- | M] () -- C:\WINDOWS\mixerdef.ini [2011-11-12 07:27:13 | 000,000,092 | ---- | M] () -- C:\WINDOWS\CMISETUP.INI [2011-11-12 07:27:12 | 000,000,026 | ---- | M] () -- C:\WINDOWS\CMCDPLAY.INI [2011-11-11 09:34:46 | 000,000,498 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\AIMP3.lnk [2011-11-09 16:31:18 | 000,129,227 | ---- | M] () -- C:\Documents and Settings\User\Pulpit\898428-mix-musierowicz-malgorzata-opium-w-rosole.html [2011-11-09 16:30:20 | 000,000,101 | ---- | M] () -- C:\WINDOWS\CMMIXER.INI [2011-11-09 07:51:24 | 000,000,542 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\NowBoarding.lnk [2011-11-07 17:23:05 | 000,164,714 | ---- | M] () -- C:\Documents and Settings\User\Pulpit\sodalitatisatra5611blank.psd [2011-11-06 10:04:53 | 000,002,184 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2011-10-31 18:02:19 | 000,000,473 | ---- | M] () -- C:\Documents and Settings\User\Pulpit\AQQ.lnk [2011-10-31 14:19:19 | 000,000,728 | ---- | M] () -- C:\Documents and Settings\User\Pulpit\Energy Tycoon.lnk [2011-10-29 10:20:24 | 000,022,328 | ---- | M] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys [2011-10-29 10:20:24 | 000,022,328 | ---- | M] () -- C:\Documents and Settings\User\Dane aplikacji\PnkBstrK.sys [2011-10-29 10:20:01 | 000,682,280 | ---- | M] () -- C:\WINDOWS\System32\pbsvc.exe [2011-10-28 19:31:27 | 000,000,694 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\MailShare.lnk [2011-10-26 19:42:58 | 001,950,593 | ---- | M] () -- C:\Documents and Settings\User\Moje dokumenty\minecraft.jar [2011-10-23 19:07:53 | 000,000,837 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\TeamSpeak 3 Client.lnk [2011-10-23 08:21:35 | 000,000,729 | ---- | M] () -- C:\Documents and Settings\User\Pulpit\Projektant 3D -DOM i OGRÓD.lnk [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-11-19 20:11:18 | 000,000,840 | ---- | C] () -- C:\Documents and Settings\User\Pulpit\Turbo Sliders.lnk [2011-11-19 20:07:22 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\st329213.dll [2011-11-19 20:07:22 | 000,044,686 | -H-- | C] () -- C:\WINDOWS\System32\st329213.dl_ [2011-11-19 20:07:10 | 000,000,904 | ---- | C] () -- C:\Documents and Settings\User\Pulpit\Speedway Turbo Sliders.lnk [2011-11-19 15:16:00 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\vo327185.dll [2011-11-19 15:16:00 | 000,044,686 | -H-- | C] () -- C:\WINDOWS\System32\vo327185.dl_ [2011-11-19 12:31:25 | 000,000,428 | ---- | C] () -- C:\Documents and Settings\User\Pulpit\Fraps.lnk [2011-11-18 17:16:04 | 000,132,869 | ---- | C] () -- C:\Documents and Settings\User\Moje dokumenty\ts3_clientui-win32-1321432557-2011-11-18 17_16_04.406250.dmp [2011-11-18 16:48:31 | 004,592,684 | ---- | C] () -- C:\Documents and Settings\User\Moje dokumenty\ts3_recording_11_11_18_16_48_27.wav [2011-11-17 20:39:37 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\qo327185.dll [2011-11-17 20:39:37 | 000,044,686 | -H-- | C] () -- C:\WINDOWS\System32\qo327185.dl_ [2011-11-17 16:54:27 | 000,124,595 | ---- | C] () -- C:\Documents and Settings\User\Pulpit\top.jpg [2011-11-17 14:45:38 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\ro327185.dll [2011-11-17 14:45:38 | 000,044,686 | -H-- | C] () -- C:\WINDOWS\System32\ro327185.dl_ [2011-11-17 14:44:28 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\or327185.dll [2011-11-17 14:44:28 | 000,044,686 | -H-- | C] () -- C:\WINDOWS\System32\or327185.dl_ [2011-11-17 07:54:16 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\gr327185.dll [2011-11-17 07:54:16 | 000,044,686 | -H-- | C] () -- C:\WINDOWS\System32\gr327185.dl_ [2011-11-17 06:58:48 | 000,000,719 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\VLC media player.lnk [2011-11-16 18:22:07 | 004,204,844 | ---- | C] () -- C:\Documents and Settings\User\Moje dokumenty\ts3_recording_11_11_16_18_22_2.wav [2011-11-16 18:05:01 | 000,153,203 | ---- | C] () -- C:\Documents and Settings\User\Moje dokumenty\ts3_clientui-win32-15001-2011-11-16 18_05_01.390625.dmp [2011-11-16 18:00:18 | 003,022,124 | ---- | C] () -- C:\Documents and Settings\User\Moje dokumenty\ts3_recording_11_11_16_17_59_59.wav [2011-11-14 17:46:29 | 000,000,340 | ---- | C] () -- C:\WINDOWS\tasks\AdobeAAMUpdater-1.0-KOMPUTER-User.job [2011-11-14 17:41:44 | 000,000,669 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Adobe Photoshop CS5.lnk [2011-11-14 17:40:28 | 000,000,643 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Adobe Bridge CS5.lnk [2011-11-14 17:39:55 | 000,000,706 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Adobe Device Central CS5.lnk [2011-11-14 17:38:07 | 000,000,763 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Adobe Extension Manager CS5.lnk [2011-11-14 17:37:57 | 000,001,144 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Adobe ExtendScript Toolkit CS5.lnk [2011-11-14 17:37:04 | 000,000,728 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Adobe Help.lnk [2011-11-13 14:48:01 | 000,000,637 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\JDownloader.lnk [2011-11-11 09:34:46 | 000,000,498 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\AIMP3.lnk [2011-11-09 16:31:15 | 000,129,227 | ---- | C] () -- C:\Documents and Settings\User\Pulpit\898428-mix-musierowicz-malgorzata-opium-w-rosole.html [2011-11-09 07:51:24 | 000,000,542 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\NowBoarding.lnk [2011-11-09 07:51:24 | 000,000,542 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\NowBoarding.lnk [2011-11-07 17:23:04 | 000,164,714 | ---- | C] () -- C:\Documents and Settings\User\Pulpit\sodalitatisatra5611blank.psd [2011-11-05 11:53:38 | 000,233,472 | R--- | C] () -- C:\WINDOWS\System32\MafiaSetup.exe [2011-10-31 18:02:19 | 000,000,473 | ---- | C] () -- C:\Documents and Settings\User\Pulpit\AQQ.lnk [2011-10-31 14:19:19 | 000,000,728 | ---- | C] () -- C:\Documents and Settings\User\Pulpit\Energy Tycoon.lnk [2011-10-28 19:31:27 | 000,000,694 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\MailShare.lnk [2011-10-28 17:04:24 | 000,022,328 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys [2011-10-28 17:04:24 | 000,022,328 | ---- | C] () -- C:\Documents and Settings\User\Dane aplikacji\PnkBstrK.sys [2011-10-28 17:04:00 | 000,107,832 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe [2011-10-28 17:03:59 | 000,682,280 | ---- | C] () -- C:\WINDOWS\System32\pbsvc.exe [2011-10-28 17:03:59 | 000,066,872 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe [2011-10-26 19:41:45 | 001,950,593 | ---- | C] () -- C:\Documents and Settings\User\Moje dokumenty\minecraft.jar [2011-10-23 19:07:53 | 000,000,837 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\TeamSpeak 3 Client.lnk [2011-10-23 08:21:35 | 000,000,729 | ---- | C] () -- C:\Documents and Settings\User\Pulpit\Projektant 3D -DOM i OGRÓD.lnk [2011-10-13 15:25:45 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat [2011-10-10 19:59:42 | 000,005,606 | ---- | C] () -- C:\WINDOWS\System32\stci.dll [2011-10-04 16:56:42 | 000,000,101 | ---- | C] () -- C:\WINDOWS\CMMIXER.INI [2011-10-02 15:14:02 | 000,005,504 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys [2011-09-21 19:08:04 | 000,000,004 | ---- | C] () -- C:\Documents and Settings\User\Dane aplikacji\steam_md4.dat [2011-09-18 13:33:49 | 000,175,616 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2011-09-18 13:33:48 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini [2011-09-18 13:33:47 | 000,243,200 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2011-09-18 13:33:45 | 000,074,752 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2011-09-18 12:51:06 | 000,650,752 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2011-09-18 12:51:06 | 000,258,048 | ---- | C] () -- C:\WINDOWS\System32\libFLAC.dll [2011-09-16 14:15:08 | 000,023,552 | ---- | C] () -- C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-09-04 16:31:32 | 000,146,136 | ---- | C] () -- C:\WINDOWS\hpoins27.dat [2011-09-04 16:31:32 | 000,000,932 | ---- | C] () -- C:\WINDOWS\hpomdl27.dat [2011-09-04 16:29:30 | 000,008,192 | ---- | C] () -- C:\WINDOWS\System32\srvany.exe [2011-09-04 09:48:34 | 000,002,272 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat [2011-09-04 09:30:47 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2011-09-04 09:29:24 | 003,574,936 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2011-09-04 08:05:20 | 000,000,025 | ---- | C] () -- C:\WINDOWS\mixerdef.ini [2011-09-04 08:01:56 | 000,139,264 | ---- | C] () -- C:\WINDOWS\System32\IDEproperty.dll [2011-09-04 08:00:43 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\RtNicProp32.dll [2011-09-04 07:59:12 | 000,039,279 | ---- | C] () -- C:\WINDOWS\cmijack.ini [2011-09-04 07:59:12 | 000,039,279 | ---- | C] () -- C:\WINDOWS\cmijack.dat [2011-09-04 07:59:12 | 000,023,041 | ---- | C] () -- C:\WINDOWS\cmaudio.dat [2011-09-04 07:59:12 | 000,000,092 | ---- | C] () -- C:\WINDOWS\CMISETUP.INI [2011-09-04 07:59:12 | 000,000,026 | ---- | C] () -- C:\WINDOWS\CMCDPLAY.INI [2011-09-04 07:51:24 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin [2011-09-04 07:51:15 | 000,887,724 | ---- | C] () -- C:\WINDOWS\System32\ativva6x.dat [2011-09-04 07:51:13 | 000,231,925 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat [2011-09-04 07:51:13 | 000,000,003 | ---- | C] () -- C:\WINDOWS\System32\ativva5x.dat [2011-09-04 07:40:49 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2011-09-04 07:37:02 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2011-04-05 21:09:48 | 000,059,904 | ---- | C] () -- C:\WINDOWS\System32\OVDecode.dll [2010-11-06 18:42:11 | 000,163,840 | ---- | C] () -- C:\WINDOWS\System32\property.dll [2008-07-03 22:54:20 | 000,000,818 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini [2008-06-16 02:28:36 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin [2008-06-16 02:28:36 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat [2008-06-16 02:28:36 | 000,556,342 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat [2008-06-16 02:28:36 | 000,493,834 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat [2008-06-16 02:28:36 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat [2008-06-16 02:28:36 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat [2008-06-16 02:28:36 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat [2008-06-16 02:28:36 | 000,104,304 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat [2008-06-16 02:28:36 | 000,083,432 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat [2008-06-16 02:28:36 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin [2008-06-16 02:28:36 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat [2008-06-16 02:28:36 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat [2008-06-16 02:28:36 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat [2008-06-16 02:28:36 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat [2008-06-16 02:28:36 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin [color=#E56717]========== LOP Check ==========[/color] [2011-11-09 19:57:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Airline Tycoon 2 [2011-10-02 15:15:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Canneverbe Limited [2011-10-12 17:55:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Codemasters [2011-11-14 18:01:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite [2011-09-05 14:46:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ESET [2011-11-19 15:16:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\regid.1986-12.com.adobe [2011-10-30 14:24:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Synetic [2011-09-06 17:09:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TmForever [2011-10-30 17:26:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Total Gameplay [2011-11-13 20:06:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\.minecraft [2011-11-16 18:24:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\AIMP3 [2011-10-02 15:15:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\Canneverbe Limited [2011-09-14 20:39:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\DAEMON Tools Lite [2011-10-03 14:19:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\EurekaLog [2011-11-09 07:51:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\Gabob.NowBoarding.75EFD321A77FF3E9D3E8C023673644AB2F392162.1 [2011-11-11 12:04:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\IBAGroup [2011-11-09 19:51:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\Kalypso Media [2011-09-19 05:42:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\RedDotGames [2011-09-15 05:22:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\Rock Manager [2011-11-19 08:28:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\TS3Client [2011-11-15 08:44:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\uTorrent [2011-11-11 07:24:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\YoudaGames [color=#E56717]========== Purity Check ==========[/color] < End of report >