OTL logfile created on: 2012-03-17 15:39:54 - Run 1 OTL by OldTimer - Version 3.2.39.1 Folder = C:\Documents and Settings\Adam\Moje dokumenty\Pobieranie Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 1,44 Gb Available Physical Memory | 72,20% Memory free 3,85 Gb Paging File | 3,49 Gb Available in Paging File | 90,75% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 182,22 Gb Total Space | 18,27 Gb Free Space | 10,03% Space Free | Partition Type: NTFS Drive H: | 50,67 Gb Total Space | 6,49 Gb Free Space | 12,81% Space Free | Partition Type: NTFS Computer Name: DZIECIAK | User Name: Adam | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-03-17 15:39:44 | 000,594,432 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Adam\Moje dokumenty\Pobieranie\OTL.exe PRC - [2012-03-17 15:27:17 | 000,924,600 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2011-08-03 12:49:00 | 002,255,464 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe PRC - [2011-08-02 15:38:20 | 002,248,704 | ---- | M] () -- C:\Program Files\Vtune\TBPANEL.exe PRC - [2011-07-21 23:07:38 | 000,718,720 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE PRC - [2010-12-14 13:27:22 | 000,066,560 | ---- | M] (Nalpeiron Ltd.) -- C:\WINDOWS\system32\nlssrv32.exe PRC - [2008-04-14 21:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2007-06-05 13:20:32 | 000,177,704 | ---- | M] () -- C:\WINDOWS\system32\PSIService.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012-03-17 15:27:15 | 001,969,080 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll MOD - [2012-03-10 12:45:11 | 008,527,520 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll MOD - [2011-08-02 15:38:20 | 002,248,704 | ---- | M] () -- C:\Program Files\Vtune\TBPANEL.exe MOD - [2011-03-17 00:11:16 | 004,297,568 | ---- | M] () -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF MOD - [2007-06-05 13:20:32 | 000,177,704 | ---- | M] () -- C:\WINDOWS\system32\PSIService.exe MOD - [1998-10-31 04:55:56 | 000,005,120 | ---- | M] () -- C:\Program Files\Vtune\TBMANAGE.DLL [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ) SRV - [2011-11-09 23:01:43 | 000,008,192 | ---- | M] () [Auto | Stopped] -- C:\WINDOWS\system32\srvany.exe -- (KMService) SRV - [2011-08-03 12:49:00 | 002,255,464 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService) SRV - [2011-06-12 11:15:00 | 031,125,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service) SRV - [2010-12-14 13:27:22 | 000,066,560 | ---- | M] (Nalpeiron Ltd.) [Auto | Running] -- C:\WINDOWS\system32\nlssrv32.exe -- (nlsX86cc) SRV - [2009-06-06 22:57:28 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2007-06-05 13:20:32 | 000,177,704 | ---- | M] () [Auto | Running] -- C:\WINDOWS\system32\PSIService.exe -- (ProtexisLicensing) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\Adam\USTAWI~1\Temp\pnicml.sys -- (pnicml) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\Adam\USTAWI~1\Temp\OnlineScanner\Anti-Virus\fsgk.sys -- (F-Secure Standalone Minifilter) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - File not found [Kernel | Auto | Stopped] -- -- (adfs) DRV - File not found [Kernel | Auto | Stopped] -- C:\DOCUME~1\Adam\USTAWI~1\Temp\5689.sys -- (5689) DRV - [2011-05-10 10:41:30 | 000,119,528 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvhda32.sys -- (NVHDA) DRV - [2009-07-11 21:36:41 | 000,016,608 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\gdrv.sys -- (gdrv) DRV - [2009-05-21 21:37:33 | 000,278,984 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt) DRV - [2008-10-04 17:20:12 | 000,685,816 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sptd.sys -- (sptd) DRV - [2008-09-28 10:11:31 | 000,018,048 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt) DRV - [2008-05-02 10:58:14 | 000,020,864 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc) DRV - [2008-05-02 10:58:12 | 000,017,536 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd) DRV - [2008-04-13 23:26:50 | 000,012,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usb8023.sys -- (USB_RNDIS) DRV - [2008-04-13 23:10:32 | 000,096,512 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\atapi.sys -- (atapi) DRV - [2008-02-14 10:04:06 | 004,676,096 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2008-01-03 15:10:16 | 000,105,856 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp) DRV - [2007-11-06 08:06:48 | 000,131,672 | ---- | M] (Paragon) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\Uim_IM.sys -- (Uim_IM) DRV - [2007-11-06 08:06:48 | 000,039,472 | ---- | M] (Paragon Software Group) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\hotcore3.sys -- (hotcore3) DRV - [2007-11-06 08:06:48 | 000,032,080 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\UimBus.sys -- (UimBus) DRV - [2007-03-16 10:11:38 | 000,012,256 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\TBPanel.sys -- (TBPanel) DRV - [2007-03-16 10:11:38 | 000,012,256 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\TBPanel.sys -- (Cardex) DRV - [2004-04-30 09:37:02 | 000,160,640 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\a347bus.sys -- (a347bus) DRV - [2004-04-30 09:33:00 | 000,005,248 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\a347scsi.sys -- (a347scsi) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2052111302-1844237615-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie IE - HKU\S-1-5-21-2052111302-1844237615-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com IE - HKU\S-1-5-21-2052111302-1844237615-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1 IE - HKU\S-1-5-21-2052111302-1844237615-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google IE - HKU\S-1-5-21-2052111302-1844237615-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 IE - HKU\S-1-5-21-2052111302-1844237615-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?AF=110143&babsrc=HP_ss&mntrId=8cdc60b2000000000000001d7d7cfe35 IE - HKU\S-1-5-21-2052111302-1844237615-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKU\S-1-5-21-2052111302-1844237615-725345543-1003\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} IE - HKU\S-1-5-21-2052111302-1844237615-725345543-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC IE - HKU\S-1-5-21-2052111302-1844237615-725345543-1003\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&AF=110143&babsrc=SP_ss&mntrId=8cdc60b2000000000000001d7d7cfe35 IE - HKU\S-1-5-21-2052111302-1844237615-725345543-1003\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7SUNA_enPL293 IE - HKU\S-1-5-21-2052111302-1844237615-725345543-1003\..\SearchScopes\{7A341636-C8CB-4561-845F-F170FD3D41B0}: "URL" = http://www.nasza-klasa.pl/szukaj/profile?q={searchTerms} IE - HKU\S-1-5-21-2052111302-1844237615-725345543-1003\..\SearchScopes\{7C0C56C2-C6C9-4DF7-A63F-03EEA1DA06FB}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7SUNA_en IE - HKU\S-1-5-21-2052111302-1844237615-725345543-1003\..\SearchScopes\{EC0B5F48-E7F8-4B7C-87C2-992B214C4309}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC IE - HKU\S-1-5-21-2052111302-1844237615-725345543-1003\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&q={searchTerms} IE - HKU\S-1-5-21-2052111302-1844237615-725345543-1003\..\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: "URL" = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&query={searchTerms}&invocationType=tb50winampie7 IE - HKU\S-1-5-21-2052111302-1844237615-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2052111302-1844237615-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local IE - HKU\S-1-5-21-2052111302-1844237615-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:56889 IE - HKU\S-1-5-21-2052111302-1844237615-725345543-1007\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultenginename: "Search the web (Babylon)" FF - prefs.js..browser.search.defaulturl: "" FF - prefs.js..browser.search.order.1: "Search the web (Babylon)" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.wp.pl/" FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {46551EC9-40F0-4e47-8E18-8E5CF550CFB8}:1.1.2 FF - prefs.js..keyword.URL: "http://search.babylon.com/?AF=110143&babsrc=adbartrp&mntrId=8cdc60b2000000000000001d7d7cfe35&q=" FF - prefs.js..network.proxy.backup.ftp: "" FF - prefs.js..network.proxy.backup.ftp_port: 0 FF - prefs.js..network.proxy.backup.socks: "" FF - prefs.js..network.proxy.backup.socks_port: 0 FF - prefs.js..network.proxy.backup.ssl: "" FF - prefs.js..network.proxy.backup.ssl_port: 0 FF - prefs.js..network.proxy.ftp: "127.0.0.1" FF - prefs.js..network.proxy.ftp_port: 56889 FF - prefs.js..network.proxy.http: "127.0.0.1" FF - prefs.js..network.proxy.http_port: 56889 FF - prefs.js..network.proxy.share_proxy_settings: true FF - prefs.js..network.proxy.socks: "127.0.0.1" FF - prefs.js..network.proxy.socks_port: 56889 FF - prefs.js..network.proxy.ssl: "127.0.0.1" FF - prefs.js..network.proxy.ssl_port: 56889 FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: "" FF - prefs.js..sweetim.toolbar.previous.browser.search.defaulturl: "" FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: "" FF - prefs.js..browser.startup.homepage: "http://www.wp.pl/" FF - prefs.js..sweetim.toolbar.previous.keyword.URL: "" FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@ganymede/GanymedeNetPlugin,version=1.0: C:\Program Files\Ganymede\Plugins\npganymedenet.dll ( ) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.0.61118.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=14: C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2571: C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1739: C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-03-17 15:27:19 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-03-08 20:20:26 | 000,000,000 | ---D | M] [2010-06-03 16:59:26 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Adam\Dane aplikacji\Mozilla\Extensions [2012-02-29 16:45:17 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Adam\Dane aplikacji\Mozilla\Firefox\Profiles\8z37amkf.default\extensions [2010-06-24 16:33:10 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Adam\Dane aplikacji\Mozilla\Firefox\Profiles\8z37amkf.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2011-11-04 09:46:01 | 000,000,000 | ---D | M] (SweetIM Toolbar for Firefox) -- C:\Documents and Settings\Adam\Dane aplikacji\Mozilla\Firefox\Profiles\8z37amkf.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847} [2012-03-03 17:08:34 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2011-12-08 11:07:02 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} () (No name found) -- C:\DOCUMENTS AND SETTINGS\ADAM\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\8Z37AMKF.DEFAULT\EXTENSIONS\{46551EC9-40F0-4E47-8E18-8E5CF550CFB8}.XPI () (No name found) -- C:\DOCUMENTS AND SETTINGS\ADAM\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\8Z37AMKF.DEFAULT\EXTENSIONS\{DD05FD3D-18DF-4CE4-AE53-E795339C5F01}.XPI [2012-03-17 15:27:18 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2009-08-31 13:54:30 | 000,882,176 | ---- | M] (Ganymede Technologies) -- C:\Program Files\mozilla firefox\plugins\NPDARTS.dll [2012-03-03 16:49:19 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2008-07-24 16:02:40 | 000,120,296 | ---- | M] ( ) -- C:\Program Files\mozilla firefox\plugins\npganymedenet.dll [2012-02-16 12:12:03 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2012-02-11 22:26:50 | 000,002,310 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml [2012-02-16 12:12:03 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2012-02-16 12:12:03 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2012-02-16 12:12:03 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2012-02-16 12:12:03 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2012-02-16 12:12:03 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\8.0.552.215\pdf.dll CHR - plugin: Google Gears 0.5.33.0 (Enabled) = C:\Program Files\Google\Chrome\Application\8.0.552.215\gears.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\8.0.552.215\gcswf32.dll CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll CHR - plugin: Java(TM) Platform SE 6 U20 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll CHR - plugin: Ganymede Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\NPDARTS.dll CHR - plugin: Java Deployment Toolkit 6.0.200.2 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll CHR - plugin: GanymedeNet.Detector (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npganymedenet.dll CHR - plugin: Microsoft Office 2003 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\NPOFFICE.DLL CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll CHR - plugin: Google Updater (Enabled) = C:\Program Files\Google\Google Updater\2.4.1536.6592\npCIDetect13.dll CHR - plugin: Picasa (Enabled) = C:\Program Files\Google\Picasa3\npPicasa3.dll CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.2.183.39\npGoogleOneClick8.dll CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll CHR - plugin: Shockwave for Director (Enabled) = C:\WINDOWS\system32\Adobe\Director\np32dsw.dll CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\4.0.50917.0\npctrl.dll CHR - plugin: Default Plug-in (Enabled) = default_plugin O1 HOSTS File: ([2009-06-06 23:20:33 | 000,000,772 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: 127.0.0.1 activate.adobe.com O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll (Google Inc.) O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) O3 - HKU\S-1-5-21-2052111302-1844237615-725345543-1003\..\Toolbar\WebBrowser: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found. O4 - HKLM..\Run: [BCSSync] C:\Program Files\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation) O4 - HKLM..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k File not found O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe () O4 - HKU\S-1-5-21-2052111302-1844237615-725345543-1003..\Run: [OfficeSyncProcess] C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE (Microsoft Corporation) O4 - HKU\S-1-5-21-2052111302-1844237615-725345543-1003..\Run: [TBPanel] C:\Program Files\Vtune\TBPanel.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 60 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-2052111302-1844237615-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149 O7 - HKU\S-1-5-21-2052111302-1844237615-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: EditLevel = 0 O7 - HKU\S-1-5-21-2052111302-1844237615-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoClose = 0 O7 - HKU\S-1-5-21-2052111302-1844237615-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSaveSettings = 0 O7 - HKU\S-1-5-21-2052111302-1844237615-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFileMenu = 0 O7 - HKU\S-1-5-21-2052111302-1844237615-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCommonGroups = 0 O7 - HKU\S-1-5-21-2052111302-1844237615-725345543-1007\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: Search the Web - C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\menuext.html File not found O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe File not found O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe File not found O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Computer, Inc.) O16 - DPF: {00000161-0000-0010-8000-00AA00389B71} http://codecs.microsoft.com/codecs/i386/msaudio.cab (Reg Error: Key error.) O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} http://download.microsoft.com/download/e/4/9/e494c802-dd90-4c6b-a074-469358f075a6/OGAControl.cab (Office Genuine Advantage Validation Tool) O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/C/0/C/C0CBBA88-A6F2-48D9-9B0E-1719D1177202/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool) O16 - DPF: {18506D80-9B80-11D4-82C2-0080C8D7ED4A} http://cached.gamedesire.com/g_bin/pl/roulette_2_0_0_27.cab (GameDesire Roulette) O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab (Reg Error: Key error.) O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB (Reg Error: Key error.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {A854AD6D-6DB5-41FB-8044-0BD38092A007} http://cached.gamedesire.com/g_bin/pl/sudoku_2_0_0_15.cab (Ganymede Sudoku) O16 - DPF: {BFA1F11D-3121-AFE1-4112-983219421AEF} http://cached.gamedesire.com/g_bin/pl/wordssingle_2_0_0_48.cab (GameDesire 1Player Word Games) O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07) O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {E23FABEE-12E3-33DA-DA12-195DAC123984} http://cached.gamedesire.com/g_bin/pl/mahjong_2_0_0_31.cab (GameDesire Mahjong) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O16 - DPF: {E95CF138-A587-4C54-8175-3AD80997CB14} http://cached.gamedesire.com/g_bin/pl/soccer_2_0_0_20.cab (GameDesire Soccer) O16 - DPF: {FDDBE2B8-6602-4AD8-946D-94C5A32FA6C5} http://download.gamedesire.com/g_bin/pl/snooker_2_0_0_35.cab (GameDesire Snooker) O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.76.34.50 212.76.34.49 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B10955E5-A9F4-4180-AA63-490274831C98}: DhcpNameServer = 212.76.34.50 212.76.34.49 O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O20 - HKU\S-1-5-21-2052111302-1844237615-725345543-1003 Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKU\S-1-5-21-2052111302-1844237615-725345543-1003 Winlogon: Shell - ("C:\Documents and Settings\Adam\winlogon.exe") - File not found O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\Adam\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Adam\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 0 O32 - AutoRun File - [2008-09-19 20:05:12 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{1416ebf0-ad11-11df-b2de-001d7d7cfe35}\Shell - "" = AutoRun O33 - MountPoints2\{1416ebf0-ad11-11df-b2de-001d7d7cfe35}\Shell\AutoRun\command - "" = E:\LaunchU3.exe -a O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-03-15 17:53:38 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ie8 [2012-03-15 17:46:24 | 000,000,000 | -HSD | C] -- C:\Config.Msi [2012-03-14 17:13:19 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Sync Framework [2012-03-12 09:20:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adam\Ustawienia lokalne\Dane aplikacji\Apple Computer [2012-03-10 12:43:51 | 000,414,368 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl [2012-03-10 12:40:53 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight [2012-03-09 18:12:17 | 000,065,536 | ---- | C] (Apple Computer, Inc.) -- C:\WINDOWS\System32\QuickTimeVR.qtx [2012-03-09 18:12:17 | 000,049,152 | ---- | C] (Apple Computer, Inc.) -- C:\WINDOWS\System32\QuickTime.qts [2012-03-09 18:12:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Apple Computer [2012-03-09 18:12:13 | 000,185,952 | ---- | C] (RealNetworks, Inc.) -- C:\WINDOWS\System32\rmoc3260.dll [2012-03-09 18:12:10 | 000,217,088 | ---- | C] (www.helixcommunity.org) -- C:\WINDOWS\System32\yv12vfw.dll [2012-03-09 18:12:10 | 000,118,784 | ---- | C] (fccHandler) -- C:\WINDOWS\System32\ac3acm.acm [2012-03-09 18:12:09 | 001,044,480 | ---- | C] (The OpenSSL Project, http://www.openssl.org/) -- C:\WINDOWS\System32\libdivx.dll [2012-03-09 18:12:09 | 000,639,066 | ---- | C] (DivX, Inc.) -- C:\WINDOWS\System32\divx.dll [2012-03-09 18:12:09 | 000,200,704 | ---- | C] (The OpenSSL Project, http://www.openssl.org/) -- C:\WINDOWS\System32\ssldivx.dll [2012-03-09 18:12:09 | 000,196,608 | ---- | C] (DivX, Inc.) -- C:\WINDOWS\System32\dtu100.dll [2012-03-09 18:12:09 | 000,073,728 | ---- | C] (DivX, Inc.) -- C:\WINDOWS\System32\dpl100.dll [2012-03-09 18:12:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Real [2012-03-09 18:12:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adam\Dane aplikacji\Real [2012-03-09 18:11:01 | 000,000,000 | ---D | C] -- C:\Program Files\RealMedia [2012-03-09 17:17:32 | 000,000,000 | ---D | C] -- C:\Program Files\PlayReady [2012-03-05 10:45:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adam\Dane aplikacji\FileZilla [2012-03-04 12:01:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adam\Dane aplikacji\Media Player Classic [2012-03-04 12:00:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\K-Lite Codec Pack [2012-03-04 12:00:37 | 000,000,000 | ---D | C] -- C:\Program Files\K-Lite Codec Pack [2012-03-04 11:57:42 | 000,006,656 | ---- | C] (RealNetworks, Inc.) -- C:\WINDOWS\System32\pndx5016.dll [2012-03-04 11:57:42 | 000,005,632 | ---- | C] (RealNetworks, Inc.) -- C:\WINDOWS\System32\pndx5032.dll [2012-03-04 11:57:41 | 000,278,528 | ---- | C] (Real Networks, Inc) -- C:\WINDOWS\System32\pncrt.dll [2012-03-03 20:47:16 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Adam\Recent [2012-03-03 16:49:32 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe [2012-03-03 16:49:32 | 000,149,280 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe [2012-03-03 16:49:32 | 000,149,280 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe [2012-03-03 16:24:29 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft SQL Server Compact Edition [2012-02-27 20:33:06 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Common Files [2012-02-27 20:30:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\MFAData [2012-02-27 20:28:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Dane aplikacji\McAfee [2012-02-22 21:01:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adam\Dane aplikacji\8CDC6 [5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-03-17 15:40:38 | 000,021,511 | ---- | M] () -- C:\Documents and Settings\Adam\Pulpit\bez tytułu.JPG [2012-03-17 15:11:00 | 000,001,036 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2012-03-17 15:10:36 | 000,000,236 | ---- | M] () -- C:\WINDOWS\tasks\OGALogon.job [2012-03-17 15:10:35 | 002,363,344 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2012-03-17 15:10:35 | 000,001,032 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2012-03-17 15:10:28 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2012-03-17 14:54:00 | 000,000,476 | ---- | M] () -- C:\WINDOWS\tasks\At3.job [2012-03-17 14:00:00 | 000,000,476 | ---- | M] () -- C:\WINDOWS\tasks\At4.job [2012-03-17 10:10:00 | 000,000,476 | ---- | M] () -- C:\WINDOWS\tasks\At1.job [2012-03-17 08:57:07 | 000,000,211 | RHS- | M] () -- C:\boot.ini [2012-03-17 08:55:55 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2012-03-16 12:05:00 | 000,000,868 | ---- | M] () -- C:\WINDOWS\tasks\Google Software Updater.job [2012-03-15 22:18:39 | 000,057,856 | ---- | M] () -- C:\Documents and Settings\Adam\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-03-15 20:40:00 | 000,000,476 | ---- | M] () -- C:\WINDOWS\tasks\At2.job [2012-03-15 17:56:32 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2012-03-15 00:01:22 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Adam\Moje dokumenty\IMG_4680.JPG [2012-03-14 22:45:22 | 000,001,909 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\The Sims™ 3 Zostań gwiazdą.lnk [2012-03-14 13:14:09 | 000,752,222 | ---- | M] () -- C:\Documents and Settings\Adam\Moje dokumenty\Zdjęcie1737.jpg [2012-03-14 13:14:08 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Adam\Moje dokumenty\Zdjęcie1739.jpg [2012-03-14 13:13:58 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Adam\Moje dokumenty\Zdjęcie1738.jpg [2012-03-14 00:50:03 | 001,394,508 | ---- | M] () -- C:\Documents and Settings\Adam\Moje dokumenty\IMG_4589.JPG [2012-03-13 23:43:19 | 001,376,474 | ---- | M] () -- C:\Documents and Settings\Adam\Moje dokumenty\IMG_4579.JPG [2012-03-13 23:43:12 | 001,379,340 | ---- | M] () -- C:\Documents and Settings\Adam\Moje dokumenty\IMG_4652.JPG [2012-03-13 23:41:43 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Adam\Moje dokumenty\IMG_4577.JPG [2012-03-13 23:41:35 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Adam\Moje dokumenty\IMG_4648.JPG [2012-03-13 23:41:34 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Adam\Moje dokumenty\IMG_4650.JPG [2012-03-13 23:41:29 | 001,369,527 | ---- | M] () -- C:\Documents and Settings\Adam\Moje dokumenty\IMG_4666(1).JPG [2012-03-13 23:39:34 | 001,315,376 | ---- | M] () -- C:\Documents and Settings\Adam\Moje dokumenty\IMG_4665.JPG [2012-03-13 23:38:38 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Adam\Moje dokumenty\IMG_4666.JPG [2012-03-13 17:52:55 | 000,002,324 | ---- | M] () -- C:\WINDOWS\epplauncher.mif [2012-03-13 17:52:43 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2012-03-13 11:19:12 | 000,002,265 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk [2012-03-13 10:07:02 | 000,054,156 | -H-- | M] () -- C:\WINDOWS\QTFont.qfn [2012-03-12 09:20:42 | 000,001,409 | ---- | M] () -- C:\WINDOWS\QTFont.for [2012-03-10 12:45:11 | 000,414,368 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl [2012-03-09 18:11:46 | 000,506,850 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2012-03-09 18:11:46 | 000,447,504 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2012-03-09 18:11:46 | 000,092,670 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2012-03-09 18:11:46 | 000,074,360 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2012-03-09 17:24:53 | 000,017,408 | ---- | M] () -- C:\Documents and Settings\Adam\Ustawienia lokalne\Dane aplikacji\WebpageIcons.db [2012-03-08 20:17:41 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx [2012-03-08 20:17:37 | 000,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb [2012-03-08 20:17:37 | 000,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb [2012-03-07 18:21:19 | 000,011,761 | ---- | M] () -- C:\Documents and Settings\Adam\Ustawienia lokalne\Dane aplikacji\unins000.msg [2012-03-07 18:21:19 | 000,003,867 | ---- | M] () -- C:\Documents and Settings\Adam\Ustawienia lokalne\Dane aplikacji\unins000.dat [2012-03-07 18:20:56 | 000,707,504 | ---- | M] () -- C:\Documents and Settings\Adam\Ustawienia lokalne\Dane aplikacji\unins000.exe [2012-03-03 17:08:35 | 000,000,724 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk [2012-03-03 16:49:19 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll [2012-03-03 16:49:19 | 000,157,472 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe [2012-03-03 16:49:19 | 000,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe [2012-03-03 16:49:19 | 000,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe [2012-03-03 16:49:19 | 000,073,728 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl [5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-03-17 15:40:37 | 000,021,511 | ---- | C] () -- C:\Documents and Settings\Adam\Pulpit\bez tytułu.JPG [2012-03-15 00:01:22 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Adam\Moje dokumenty\IMG_4680.JPG [2012-03-14 22:45:22 | 000,001,909 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\The Sims™ 3 Zostań gwiazdą.lnk [2012-03-14 13:14:08 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Adam\Moje dokumenty\Zdjęcie1739.jpg [2012-03-14 13:13:58 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Adam\Moje dokumenty\Zdjęcie1738.jpg [2012-03-14 13:13:31 | 000,752,222 | ---- | C] () -- C:\Documents and Settings\Adam\Moje dokumenty\Zdjęcie1737.jpg [2012-03-14 00:49:02 | 001,394,508 | ---- | C] () -- C:\Documents and Settings\Adam\Moje dokumenty\IMG_4589.JPG [2012-03-13 23:41:43 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Adam\Moje dokumenty\IMG_4577.JPG [2012-03-13 23:41:41 | 001,376,474 | ---- | C] () -- C:\Documents and Settings\Adam\Moje dokumenty\IMG_4579.JPG [2012-03-13 23:41:35 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Adam\Moje dokumenty\IMG_4648.JPG [2012-03-13 23:41:34 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Adam\Moje dokumenty\IMG_4650.JPG [2012-03-13 23:41:33 | 001,379,340 | ---- | C] () -- C:\Documents and Settings\Adam\Moje dokumenty\IMG_4652.JPG [2012-03-13 23:40:30 | 001,369,527 | ---- | C] () -- C:\Documents and Settings\Adam\Moje dokumenty\IMG_4666(1).JPG [2012-03-13 23:38:38 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Adam\Moje dokumenty\IMG_4666.JPG [2012-03-13 23:38:37 | 001,315,376 | ---- | C] () -- C:\Documents and Settings\Adam\Moje dokumenty\IMG_4665.JPG [2012-03-13 17:52:55 | 000,002,324 | ---- | C] () -- C:\WINDOWS\epplauncher.mif [2012-03-12 09:20:42 | 000,054,156 | -H-- | C] () -- C:\WINDOWS\QTFont.qfn [2012-03-12 09:20:42 | 000,001,409 | ---- | C] () -- C:\WINDOWS\QTFont.for [2012-03-09 18:12:10 | 000,765,952 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2012-03-09 18:12:10 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2012-03-09 18:12:09 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2012-03-09 18:12:09 | 000,010,752 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2012-03-09 17:24:48 | 000,017,408 | ---- | C] () -- C:\Documents and Settings\Adam\Ustawienia lokalne\Dane aplikacji\WebpageIcons.db [2012-03-07 18:21:19 | 000,011,761 | ---- | C] () -- C:\Documents and Settings\Adam\Ustawienia lokalne\Dane aplikacji\unins000.msg [2012-03-07 18:20:59 | 000,707,504 | ---- | C] () -- C:\Documents and Settings\Adam\Ustawienia lokalne\Dane aplikacji\unins000.exe [2012-03-05 18:11:33 | 000,001,374 | ---- | C] () -- C:\WINDOWS\imsins.BAK [2012-03-04 12:00:39 | 000,175,616 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2012-03-03 17:08:35 | 000,000,724 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk [2012-02-27 20:48:02 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll [2012-02-27 20:48:02 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\dllcache\iacenc.dll [2012-01-23 22:38:01 | 000,280,276 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin [2012-01-23 22:38:01 | 000,280,276 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin [2012-01-23 22:38:01 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin [2012-01-23 22:37:43 | 002,128,778 | ---- | C] () -- C:\WINDOWS\System32\nvdata.data [2011-11-26 16:34:34 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4926.dll [2011-11-09 23:02:11 | 000,008,192 | ---- | C] () -- C:\WINDOWS\System32\srvany.exe [2011-11-03 21:09:13 | 000,000,223 | ---- | C] () -- C:\WINDOWS\EasyPhotoFrame.INI [2011-09-25 08:48:25 | 000,000,129 | ---- | C] () -- C:\Documents and Settings\Adam\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [2011-07-27 10:16:00 | 000,004,096 | ---- | C] () -- C:\WINDOWS\d3dx.dat [2011-07-20 15:57:07 | 000,061,440 | ---- | C] () -- C:\Documents and Settings\Adam\Dane aplikacji\chrtmp [2011-03-08 21:07:57 | 000,003,867 | ---- | C] () -- C:\Documents and Settings\Adam\Ustawienia lokalne\Dane aplikacji\unins000.dat [2011-03-02 22:28:27 | 000,204,800 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4764.dll [2011-02-12 11:02:12 | 000,000,088 | RHS- | C] () -- C:\WINDOWS\System32\FD8823DAB0.sys [2011-02-12 10:58:26 | 000,002,516 | -HS- | C] () -- C:\WINDOWS\System32\KGyGaAvL.sys [2010-10-27 21:30:52 | 000,000,022 | -HS- | C] () -- C:\Documents and Settings\Adam\Dane aplikacji\Sys6925.Config Collection.sys [2010-10-27 21:30:52 | 000,000,022 | -HS- | C] () -- C:\WINDOWS\Sys3390 SettingsCollection.bin [2010-10-26 18:39:15 | 000,000,083 | ---- | C] () -- C:\WINDOWS\wa.INI [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 784 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\Tiffen:45684614-4E3E-4a9e-B027-9752F01A2EF1 < End of report >