OTL logfile created on: 2012-02-09 22:29:53 - Run 1 OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Grisza\Downloads 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 4,00 Gb Total Physical Memory | 2,40 Gb Available Physical Memory | 60,15% Memory free 7,99 Gb Paging File | 5,98 Gb Available in Paging File | 74,79% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 149,05 Gb Total Space | 62,45 Gb Free Space | 41,90% Space Free | Partition Type: NTFS Drive D: | 163,92 Gb Total Space | 97,54 Gb Free Space | 59,51% Space Free | Partition Type: NTFS Drive E: | 263,67 Gb Total Space | 224,94 Gb Free Space | 85,31% Space Free | Partition Type: NTFS Computer Name: ASUS-N52DA | User Name: Grisza | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-02-09 22:19:10 | 002,343,936 | ---- | C] (Helge Klein) -- C:\Windows\SetACL.exe [2012-02-09 19:52:27 | 000,000,000 | R--D | C] -- C:\Users\Grisza\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices [2012-02-08 14:20:26 | 000,000,000 | ---D | C] -- C:\Documents and settings [2012-02-07 21:19:40 | 000,000,000 | ---D | C] -- C:\SymCache [2012-02-07 21:00:46 | 000,000,000 | ---D | C] -- C:\LOGI [2012-02-07 19:58:04 | 000,000,000 | ---D | C] -- C:\Users\Grisza\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Windows Performance Toolkit [2012-02-07 19:58:03 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Windows Performance Toolkit [2012-02-07 19:47:08 | 003,022,624 | ---- | C] (Sysinternals - www.sysinternals.com) -- C:\Users\Grisza\Desktop\Procmon.exe [2012-02-07 19:46:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Windows SDK v7.0 [2012-02-07 19:46:08 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft SDKs [2012-02-06 17:40:45 | 000,000,000 | ---D | C] -- C:\Users\Grisza\VirtualBox VMs [2012-02-06 13:36:01 | 000,000,000 | ---D | C] -- C:\Users\Grisza\.VirtualBox [2012-02-06 13:35:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox [2012-02-06 13:34:54 | 000,000,000 | ---D | C] -- C:\Program Files\Oracle [2012-02-05 14:20:21 | 000,000,000 | ---D | C] -- C:\PerfLogs [2012-02-03 19:29:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Western Digital Corporation [2012-02-03 19:29:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Western Digital Corporation [2012-01-31 16:55:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab [2012-01-25 12:41:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET [2012-01-25 11:26:52 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\catroot2 [2012-01-22 15:00:56 | 000,000,000 | ---D | C] -- C:\ProgramData\dbg [2012-01-19 22:25:43 | 000,000,000 | ---D | C] -- C:\Users\Grisza\AppData\Roaming\BatteryCare [2012-01-19 22:25:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BatteryCare [2012-01-19 22:25:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BatteryCare [2012-01-18 16:36:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AIMP3 [2012-01-15 11:42:50 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\catroot2.bak [2012-01-15 11:13:37 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Nowy folder [2012-01-11 18:09:12 | 001,447,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll [2012-01-11 18:09:12 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\webio.dll [2012-01-11 18:09:12 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\webio.dll [2012-01-11 18:09:12 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll [2012-01-11 18:09:12 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll [2012-01-11 18:09:12 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll [2012-01-11 17:57:47 | 001,572,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\quartz.dll [2012-01-11 17:57:46 | 001,328,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\quartz.dll [2012-01-11 17:57:46 | 000,514,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qdvd.dll [2012-01-11 17:57:46 | 000,366,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qdvd.dll [2012-01-11 17:57:43 | 001,731,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll [2012-01-11 17:57:42 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\packager.dll [2012-01-11 17:57:42 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\packager.dll [2011-02-19 22:08:14 | 000,121,344 | ---- | C] ( ) -- C:\Windows\SysWow64\lagarith.dll [2008-08-11 21:45:20 | 000,155,648 | ---- | C] (ASUS) -- C:\Program Files (x86)\Common Files\MSIactionall.dll [8 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ] [5 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ] [2 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-02-09 22:31:42 | 001,474,832 | ---- | M] () -- C:\Windows\SysNative\drivers\sfi.dat [2012-02-09 20:16:53 | 000,051,097 | ---- | M] () -- C:\Users\Grisza\Desktop\users.JPG [2012-02-09 19:59:20 | 000,019,056 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012-02-09 19:59:20 | 000,019,056 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012-02-09 19:52:26 | 000,000,035 | ---- | M] () -- C:\Users\Public\Documents\AtherosServiceConfig.ini [2012-02-09 19:51:51 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012-02-09 19:51:47 | 3219,509,248 | -HS- | M] () -- C:\hiberfil.sys [2012-02-08 23:28:38 | 000,414,368 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2012-02-08 22:59:12 | 000,076,873 | ---- | M] () -- C:\Users\Grisza\Desktop\użytkownicy.JPG [2012-02-08 22:32:09 | 000,007,605 | ---- | M] () -- C:\Users\Grisza\AppData\Local\Resmon.ResmonCfg [2012-02-07 13:49:00 | 000,015,120 | ---- | M] () -- C:\Users\Grisza\Desktop\Bez tytułu 1.ods [2012-02-07 13:45:27 | 000,004,647 | ---- | M] () -- C:\Users\Grisza\Desktop\plan_zajęć_semetr_letni.html [2012-02-06 22:38:43 | 001,545,652 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2012-02-06 22:38:43 | 000,696,876 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2012-02-06 22:38:43 | 000,614,866 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2012-02-06 22:38:43 | 000,134,382 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2012-02-06 22:38:43 | 000,105,850 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2012-02-06 17:34:03 | 000,002,059 | ---- | M] () -- C:\Windows\SysNative\AutoRunFilter.ini [2012-02-03 10:14:53 | 000,001,763 | ---- | M] () -- C:\Windows\SysNative\ServiceFilter.ini [2012-02-02 21:48:51 | 000,002,050 | ---- | M] () -- C:\Users\Grisza\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk [2012-01-31 13:54:33 | 000,020,950 | ---- | M] () -- C:\Users\Grisza\Documents\cc_20120131_135429.reg [2012-01-25 11:38:40 | 001,641,198 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2012-01-24 23:24:08 | 000,000,080 | ---- | M] () -- C:\Windows\SysNative\Defrag.ini [2012-01-24 23:07:05 | 000,000,105 | ---- | M] () -- C:\Windows\SysNative\FastBoot.ini [2012-01-23 11:58:36 | 000,021,903 | ---- | M] () -- C:\Users\Grisza\Documents\całka.JPG [8 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ] [5 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ] [2 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-02-09 20:16:52 | 000,051,097 | ---- | C] () -- C:\Users\Grisza\Desktop\users.JPG [2012-02-09 13:22:57 | 3219,509,248 | -HS- | C] () -- C:\hiberfil.sys [2012-02-08 22:59:10 | 000,076,873 | ---- | C] () -- C:\Users\Grisza\Desktop\użytkownicy.JPG [2012-02-07 13:48:58 | 000,015,120 | ---- | C] () -- C:\Users\Grisza\Desktop\Bez tytułu 1.ods [2012-02-07 13:45:22 | 000,004,647 | ---- | C] () -- C:\Users\Grisza\Desktop\plan_zajęć_semetr_letni.html [2012-01-31 13:54:32 | 000,020,950 | ---- | C] () -- C:\Users\Grisza\Documents\cc_20120131_135429.reg [2012-01-29 23:34:38 | 000,002,855 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SRS Premium Sound.lnk [2012-01-23 11:58:35 | 000,021,903 | ---- | C] () -- C:\Users\Grisza\Documents\całka.JPG [2011-11-22 19:54:08 | 000,009,728 | ---- | C] () -- C:\Users\Grisza\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-11-10 03:36:06 | 000,204,960 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat [2011-11-10 03:36:06 | 000,157,152 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat [2011-11-09 22:39:44 | 000,059,904 | ---- | C] () -- C:\Windows\SysWow64\OpenVideo.dll [2011-11-09 22:39:32 | 000,054,784 | ---- | C] () -- C:\Windows\SysWow64\OVDecode.dll [2011-10-27 11:07:12 | 000,000,193 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc [2011-09-20 21:35:31 | 002,469,760 | ---- | C] () -- C:\Windows\SysWow64\BootMan.exe [2011-09-20 21:35:31 | 000,086,408 | ---- | C] () -- C:\Windows\SysWow64\setupempdrv03.exe [2011-09-20 21:35:31 | 000,019,840 | ---- | C] () -- C:\Windows\SysWow64\EuEpmGdi.dll [2011-09-20 21:35:31 | 000,014,216 | ---- | C] () -- C:\Windows\SysWow64\epmntdrv.sys [2011-09-20 21:35:31 | 000,008,456 | ---- | C] () -- C:\Windows\SysWow64\EuGdiDrv.sys [2011-09-20 08:45:44 | 000,020,480 | ---- | C] () -- C:\Users\Grisza\AppData\Roaming\client.db [2011-09-16 11:54:48 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe [2011-09-13 00:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat [2011-07-26 16:26:46 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll [2011-07-26 16:26:46 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll [2011-07-26 16:26:46 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll [2011-07-26 16:26:46 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll [2011-02-19 22:08:18 | 000,165,376 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll [2011-02-19 22:08:16 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini [2011-02-19 22:08:14 | 000,183,808 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll [2011-02-19 22:08:13 | 000,080,896 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll [2011-02-04 14:11:42 | 000,007,605 | ---- | C] () -- C:\Users\Grisza\AppData\Local\Resmon.ResmonCfg [2011-01-30 16:09:43 | 000,000,024 | ---- | C] () -- C:\Windows\ATKPF.ini [2011-01-30 15:37:41 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\LogonStart.dll [2011-01-30 14:52:05 | 001,641,198 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2011-01-30 14:41:51 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2011-01-30 14:33:22 | 000,000,758 | ---- | C] () -- C:\Windows\War3Unin.dat [2010-08-01 12:14:15 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin [2010-08-01 11:55:21 | 000,131,368 | ---- | C] () -- C:\ProgramData\FullRemove.exe [2010-02-09 08:07:38 | 000,020,480 | ---- | C] () -- C:\Windows\OOBEPlayer.exe [2010-02-09 08:07:38 | 000,000,269 | ---- | C] () -- C:\Windows\OOBEPlayer.ini [2009-10-06 08:16:00 | 000,819,200 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll [2009-07-29 06:20:40 | 000,000,010 | ---- | C] () -- C:\Windows\SysWow64\ABLKSR.ini [2009-07-14 06:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2009-07-14 03:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT [2009-07-14 03:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat [2009-07-14 01:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2009-07-14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009-07-13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2009-06-10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat [2009-04-08 10:31:56 | 000,106,496 | ---- | C] () -- C:\Program Files (x86)\Common Files\CPInstallAction.dll [2009-02-26 07:50:32 | 000,000,176 | ---- | C] () -- C:\Windows\explorer.exe.config [2008-12-02 02:32:32 | 000,362,029 | ---- | C] () -- C:\Windows\SysWow64\sqlite3.dll [2008-05-22 08:35:54 | 000,051,962 | ---- | C] () -- C:\Program Files (x86)\Common Files\banner.jpg [2006-05-19 04:39:57 | 000,015,497 | ---- | C] () -- C:\Windows\snp2uvc.ini [2002-09-17 23:45:00 | 000,119,808 | ---- | C] () -- C:\Windows\lsb_un20.exe [2002-07-05 15:12:06 | 000,027,136 | ---- | C] () -- C:\Windows\SysWow64\authdvd.dll [color=#E56717]========== Custom Scans ==========[/color] [color=#A23BEC]< C:\*. /RP /s >[/color] [color=#E56717]========== Hard Links - Junction Points - Mount Points - Symbolic Links ==========[/color] [C:\Documents and settings] -> C:\Users -> Junction [C:\ProgramData\Application Data] -> C:\ProgramData -> Junction [C:\ProgramData\Desktop] -> C:\Users\Public\Desktop -> Junction [C:\ProgramData\Documents] -> C:\Users\Public\Documents -> Junction [C:\ProgramData\Favorites] -> C:\Users\Public\Favorites -> Junction [C:\ProgramData\Start Menu] -> C:\ProgramData\Microsoft\Windows\Start Menu -> Junction [C:\ProgramData\Templates] -> C:\ProgramData\Microsoft\Windows\Templates -> Junction [C:\Users\All Users\Application Data] -> C:\ProgramData -> Junction [C:\Users\All Users\Desktop] -> C:\Users\Public\Desktop -> Junction [C:\Users\All Users\Documents] -> C:\Users\Public\Documents -> Junction [C:\Users\All Users\Favorites] -> C:\Users\Public\Favorites -> Junction [C:\Users\All Users\Start Menu] -> C:\ProgramData\Microsoft\Windows\Start Menu -> Junction [C:\Users\All Users\Templates] -> C:\ProgramData\Microsoft\Windows\Templates -> Junction [C:\Users\All Users] -> -> Unknown point type [C:\Users\Default User] -> C:\Users\Default -> Junction [C:\Users\Grisza\AppData\Local\Application Data] -> C:\Users\Grisza\AppData\Local -> Junction [C:\Users\Grisza\AppData\Local\Dane aplikacji] -> C:\Users\Grisza\AppData\Local -> Junction [C:\Users\Grisza\AppData\Local\Historia] -> C:\Users\Grisza\AppData\Local\Microsoft\Windows\History -> Junction [C:\Users\Grisza\AppData\Local\History] -> C:\Users\Grisza\AppData\Local\Microsoft\Windows\History -> Junction [C:\Users\Grisza\AppData\Local\Temporary Internet Files] -> C:\Users\Grisza\AppData\Local\Microsoft\Windows\Temporary Internet Files -> Junction [C:\Users\Grisza\AppData\Roaming\Microsoft\Windows\Start Menu\Programy] -> C:\Users\Grisza\AppData\Roaming\Microsoft\Windows\Start Menu\Programs -> Junction [C:\Users\Grisza\Application Data] -> C:\Users\Grisza\AppData\Roaming -> Junction [C:\Users\Grisza\Cookies] -> C:\Users\Grisza\AppData\Roaming\Microsoft\Windows\Cookies -> Junction [C:\Users\Grisza\Dane aplikacji] -> C:\Users\Grisza\AppData\Roaming -> Junction [C:\Users\Grisza\Documents\Moja muzyka] -> C:\Users\Grisza\Music -> Junction [C:\Users\Grisza\Documents\Moje obrazy] -> C:\Users\Grisza\Pictures -> Junction [C:\Users\Grisza\Documents\Moje wideo] -> C:\Users\Grisza\Videos -> Junction [C:\Users\Grisza\Documents\My Music] -> C:\Users\Grisza\Music -> Junction [C:\Users\Grisza\Documents\My Pictures] -> C:\Users\Grisza\Pictures -> Junction [C:\Users\Grisza\Documents\My Videos] -> C:\Users\Grisza\Videos -> Junction [C:\Users\Grisza\Local Settings] -> C:\Users\Grisza\AppData\Local -> Junction [C:\Users\Grisza\Menu Start] -> C:\Users\Grisza\AppData\Roaming\Microsoft\Windows\Start Menu -> Junction [C:\Users\Grisza\Moje dokumenty] -> C:\Users\Grisza\Documents -> Junction [C:\Users\Grisza\My Documents] -> C:\Users\Grisza\Documents -> Junction [C:\Users\Grisza\NetHood] -> C:\Users\Grisza\AppData\Roaming\Microsoft\Windows\Network Shortcuts -> Junction [C:\Users\Grisza\PrintHood] -> C:\Users\Grisza\AppData\Roaming\Microsoft\Windows\Printer Shortcuts -> Junction [C:\Users\Grisza\Recent] -> C:\Users\Grisza\AppData\Roaming\Microsoft\Windows\Recent -> Junction [C:\Users\Grisza\SendTo] -> C:\Users\Grisza\AppData\Roaming\Microsoft\Windows\SendTo -> Junction [C:\Users\Grisza\Start Menu] -> C:\Users\Grisza\AppData\Roaming\Microsoft\Windows\Start Menu -> Junction [C:\Users\Grisza\Szablony] -> C:\Users\Grisza\AppData\Roaming\Microsoft\Windows\Templates -> Junction [C:\Users\Grisza\Templates] -> C:\Users\Grisza\AppData\Roaming\Microsoft\Windows\Templates -> Junction [C:\Users\Grisza\Ustawienia lokalne] -> C:\Users\Grisza\AppData\Local -> Junction [C:\Users\Public\Documents\My Music] -> C:\Users\Public\Music -> Junction [C:\Users\Public\Documents\My Pictures] -> C:\Users\Public\Pictures -> Junction [C:\Users\Public\Documents\My Videos] -> C:\Users\Public\Videos -> Junction [C:\Windows\System32\config\systemprofile\AppData\Local\Dane aplikacji] -> C:\Windows\system32\config\systemprofile\AppData\Local -> Junction [C:\Windows\System32\config\systemprofile\AppData\Local\Historia] -> C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History -> Junction [C:\Windows\System32\config\systemprofile\AppData\Local\Temporary Internet Files] -> C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files -> Junction [C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programy] -> C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs -> Junction [C:\Windows\System32\config\systemprofile\Cookies] -> C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies -> Junction [C:\Windows\System32\config\systemprofile\Dane aplikacji] -> C:\Windows\system32\config\systemprofile\AppData\Roaming -> Junction [C:\Windows\System32\config\systemprofile\Documents\Moja muzyka] -> C:\Windows\system32\config\systemprofile\Music -> Junction [C:\Windows\System32\config\systemprofile\Documents\Moje obrazy] -> C:\Windows\system32\config\systemprofile\Pictures -> Junction [C:\Windows\System32\config\systemprofile\Documents\Moje wideo] -> C:\Windows\system32\config\systemprofile\Videos -> Junction [C:\Windows\System32\config\systemprofile\Menu Start] -> C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu -> Junction [C:\Windows\System32\config\systemprofile\Moje dokumenty] -> C:\Windows\system32\config\systemprofile\Documents -> Junction [C:\Windows\System32\config\systemprofile\NetHood] -> C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts -> Junction [C:\Windows\System32\config\systemprofile\PrintHood] -> C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts -> Junction [C:\Windows\System32\config\systemprofile\Recent] -> C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent -> Junction [C:\Windows\System32\config\systemprofile\SendTo] -> C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo -> Junction [C:\Windows\System32\config\systemprofile\Szablony] -> C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Templates -> Junction [C:\Windows\System32\config\systemprofile\Ustawienia lokalne] -> C:\Windows\system32\config\systemprofile\AppData\Local -> Junction [C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Dane aplikacji] -> C:\Windows\system32\config\systemprofile\AppData\Local -> Junction [C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Historia] -> C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History -> Junction [C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Temporary Internet Files] -> C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files -> Junction [C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programy] -> C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs -> Junction [C:\Windows\SysWOW64\config\systemprofile\Cookies] -> C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies -> Junction [C:\Windows\SysWOW64\config\systemprofile\Dane aplikacji] -> C:\Windows\system32\config\systemprofile\AppData\Roaming -> Junction [C:\Windows\SysWOW64\config\systemprofile\Documents\Moja muzyka] -> C:\Windows\system32\config\systemprofile\Music -> Junction [C:\Windows\SysWOW64\config\systemprofile\Documents\Moje obrazy] -> C:\Windows\system32\config\systemprofile\Pictures -> Junction [C:\Windows\SysWOW64\config\systemprofile\Documents\Moje wideo] -> C:\Windows\system32\config\systemprofile\Videos -> Junction [C:\Windows\SysWOW64\config\systemprofile\Menu Start] -> C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu -> Junction [C:\Windows\SysWOW64\config\systemprofile\Moje dokumenty] -> C:\Windows\system32\config\systemprofile\Documents -> Junction [C:\Windows\SysWOW64\config\systemprofile\NetHood] -> C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts -> Junction [C:\Windows\SysWOW64\config\systemprofile\PrintHood] -> C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts -> Junction [C:\Windows\SysWOW64\config\systemprofile\Recent] -> C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent -> Junction [C:\Windows\SysWOW64\config\systemprofile\SendTo] -> C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo -> Junction [C:\Windows\SysWOW64\config\systemprofile\Szablony] -> C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Templates -> Junction [C:\Windows\SysWOW64\config\systemprofile\Ustawienia lokalne] -> C:\Windows\system32\config\systemprofile\AppData\Local -> Junction [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 130 bytes -> C:\Users\All Users\Temp:638E6F6B @Alternate Data Stream - 130 bytes -> C:\ProgramData\Temp:638E6F6B < End of report >