OTL logfile created on: 2010-09-04 16:51:28 - Run 4 OTL by OldTimer - Version 3.2.11.0 Folder = E:\PROGRAMY Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 7.0.5730.13) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1 015,00 Mb Total Physical Memory | 313,00 Mb Available Physical Memory | 31,00% Memory free 2,00 Gb Paging File | 2,00 Gb Available in Paging File | 66,00% Paging File free Paging file location(s): C:\pagefile.sys 1522 1522 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 74,22 Gb Total Space | 41,93 Gb Free Space | 56,50% Space Free | Partition Type: NTFS D: Drive not present or media not loaded Drive E: | 74,83 Gb Total Space | 0,18 Gb Free Space | 0,24% Space Free | Partition Type: NTFS F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: SPECIAL-XP Current User Name: Adam Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2010-09-04 16:43:52 | 000,574,976 | ---- | M] (OldTimer Tools) -- E:\PROGRAMY\OTL-raportWINXP.exe PRC - [2010-09-02 23:23:18 | 000,396,288 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\HijackThis\HijackThis.exe PRC - [2010-08-20 14:08:28 | 003,467,096 | ---- | M] (IObit) -- C:\Program Files\IObit\IObit Security 360\is360.exe PRC - [2010-08-10 15:13:42 | 002,349,776 | ---- | M] (IObit) -- C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe PRC - [2010-08-09 15:27:06 | 000,836,464 | ---- | M] (Opera Software) -- C:\Program Files\Opera\opera.exe PRC - [2010-06-11 18:14:24 | 001,280,344 | ---- | M] (IObit) -- C:\Program Files\IObit\IObit Security 360\is360tray.exe PRC - [2010-06-11 18:14:22 | 000,312,152 | ---- | M] (IObit) -- C:\Program Files\IObit\IObit Security 360\is360srv.exe PRC - [2010-05-05 20:48:18 | 000,248,368 | ---- | M] () -- C:\Program Files\Hotspot Shield\bin\openvpnas.exe PRC - [2010-04-01 02:24:08 | 000,194,608 | ---- | M] () -- C:\Program Files\Hotspot Shield\bin\hsswd.exe PRC - [2010-03-26 21:07:02 | 000,331,824 | ---- | M] (AnchorFree Inc.) -- C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe PRC - [2010-03-04 23:38:00 | 000,071,096 | ---- | M] () -- C:\Program Files\CDBurnerXP\NMSAccessU.exe PRC - [2010-03-01 01:49:44 | 000,053,248 | ---- | M] () -- C:\Program Files\Ashampoo\Ashampoo Anti-Malware\AAMW_WSC_Service_XP.exe PRC - [2009-07-21 14:34:33 | 000,185,089 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe PRC - [2009-05-13 16:48:22 | 000,108,289 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe PRC - [2009-04-10 19:30:40 | 001,435,488 | ---- | M] (Nullsoft) -- C:\Program Files\Winamp\winamp.exe PRC - [2009-03-27 19:10:56 | 000,014,336 | ---- | M] (LSI Corporation) -- C:\Program Files\LSI SoftModem\agrsmsvc.exe PRC - [2009-03-02 13:08:47 | 000,209,153 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe PRC - [2008-04-14 22:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2007-12-13 20:10:56 | 001,688,872 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe PRC - [2007-04-23 13:04:52 | 000,159,744 | ---- | M] (Locktime Software) -- C:\Program Files\NetLimiter 2 Pro\NLClient.exe PRC - [2007-04-21 10:36:50 | 000,270,336 | ---- | M] () -- C:\WINDOWS\tsnp325.exe PRC - [2007-03-21 20:57:56 | 000,516,096 | ---- | M] (Locktime Software) -- C:\Program Files\NetLimiter 2 Pro\nlsvc.exe PRC - [2007-01-05 18:36:48 | 000,872,448 | ---- | M] (Analog Devices, Inc.) -- C:\Program Files\Analog Devices\Core\smax4pnp.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2010-09-04 16:43:52 | 000,574,976 | ---- | M] (OldTimer Tools) -- E:\PROGRAMY\OTL-raportWINXP.exe MOD - [2010-07-30 10:18:26 | 000,232,960 | ---- | M] (IObit) -- C:\Program Files\IObit\IObit Security 360\is360mon.dll MOD - [2008-04-14 22:46:34 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2010-07-05 16:35:36 | 001,311,064 | ---- | M] () [Auto | Stopped] -- C:\Program Files\Ashampoo\Ashampoo Anti-Malware\AAMW_Service.exe -- (AAMWService) SRV - [2010-06-14 15:07:14 | 000,615,936 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2010-06-11 18:14:22 | 000,312,152 | ---- | M] (IObit) [Auto | Running] -- C:\Program Files\IObit\IObit Security 360\is360srv.exe -- (IS360service) SRV - [2010-05-05 20:48:58 | 000,057,640 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Hotspot Shield\bin\HssTrayService.exe -- (HssTrayService) SRV - [2010-05-05 20:48:18 | 000,248,368 | ---- | M] () [Auto | Running] -- C:\Program Files\Hotspot Shield\bin\openvpnas.exe -- (HotspotShieldService) SRV - [2010-04-01 02:24:08 | 000,194,608 | ---- | M] () [Auto | Running] -- C:\Program Files\Hotspot Shield\bin\hsswd.exe -- (HssWd) SRV - [2010-03-26 21:07:02 | 000,331,824 | ---- | M] (AnchorFree Inc.) [Auto | Running] -- C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe -- (HssSrv) SRV - [2010-03-04 23:38:00 | 000,071,096 | ---- | M] () [Auto | Running] -- C:\Program Files\CDBurnerXP\NMSAccessU.exe -- (NMSAccess) SRV - [2010-03-01 01:49:44 | 000,053,248 | ---- | M] () [Auto | Running] -- C:\Program Files\Ashampoo\Ashampoo Anti-Malware\AAMW_WSC_Service_XP.exe -- (AAMW_WSC_Service_XP) SRV - [2009-07-21 14:34:33 | 000,185,089 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2009-05-13 16:48:22 | 000,108,289 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2009-03-27 19:10:56 | 000,014,336 | ---- | M] (LSI Corporation) [Auto | Running] -- C:\Program Files\LSI SoftModem\agrsmsvc.exe -- (AgereModemAudio) SRV - [2007-03-21 20:57:56 | 000,516,096 | ---- | M] (Locktime Software) [Auto | Running] -- C:\Program Files\NetLimiter 2 Pro\nlsvc.exe -- (nlsvc) SRV - [2005-11-17 14:18:52 | 001,527,900 | ---- | M] (MAGIX®) [On_Demand | Stopped] -- C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe -- (FirebirdServerMAGIXInstance) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2010-03-26 21:07:02 | 000,037,376 | ---- | M] (AnchorFree Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HssDrv.sys -- (HssDrv) DRV - [2010-03-26 21:07:02 | 000,032,768 | ---- | M] (AnchorFree Inc) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\taphss.sys -- (taphss) DRV - [2010-03-23 19:33:56 | 000,056,816 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt) DRV - [2010-03-22 19:24:30 | 001,287,552 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\BCMWL5.SYS -- (BCM43XX) DRV - [2010-02-26 14:32:58 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt) DRV - [2010-02-26 14:32:46 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev) DRV - [2010-02-26 14:32:44 | 000,022,528 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc) DRV - [2010-02-26 14:32:44 | 000,018,176 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd) DRV - [2009-11-12 14:48:56 | 000,007,168 | ---- | M] () [File_System | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen) DRV - [2009-11-09 05:21:18 | 000,059,388 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\scdemu.sys -- (SCDEmu) DRV - [2009-07-21 15:18:58 | 001,161,760 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem) DRV - [2009-06-18 01:59:58 | 000,234,496 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\e1e5132.sys -- (e1express) Intel(R) DRV - [2009-05-11 10:12:24 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv) DRV - [2009-03-30 10:33:07 | 000,096,104 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb) DRV - [2009-02-13 12:35:05 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio) DRV - [2008-08-26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2008-05-02 08:48:55 | 000,062,208 | ---- | M] (Silicon Image, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\si3112.sys -- (Si3112) DRV - [2008-04-28 16:22:10 | 000,009,344 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\CPQBttn.sys -- (HBtnKey) DRV - [2008-04-24 15:28:08 | 000,281,600 | ---- | M] (Analog Devices, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ADIHdAud.sys -- (ADIHdAudAddService) DRV - [2008-04-14 01:15:14 | 000,060,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\USBAUDIO.sys -- (usbaudio) Sterownik audio USB (WDM) DRV - [2008-04-13 22:06:06 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus) DRV - [2008-03-27 19:14:06 | 000,224,672 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SynTP.sys -- (SynTP) DRV - [2008-03-17 22:45:50 | 005,955,872 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\igxpmp32.sys -- (ialm) DRV - [2007-06-18 18:12:04 | 000,016,768 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HpqKbFiltr.sys -- (HpqKbFiltr) DRV - [2007-04-23 13:03:04 | 000,082,200 | ---- | M] (Locktime Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\nltdi.sys -- (nltdi) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKU\S-1-5-21-1454471165-1757981266-1801674531-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie IE - HKU\S-1-5-21-1454471165-1757981266-1801674531-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com IE - HKU\S-1-5-21-1454471165-1757981266-1801674531-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://google.pl/ IE - HKU\S-1-5-21-1454471165-1757981266-1801674531-1003\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKU\S-1-5-21-1454471165-1757981266-1801674531-1003\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKU\S-1-5-21-1454471165-1757981266-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 FF - HKLM\software\mozilla\Firefox\Extensions\\{A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}: C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\ [2010-07-22 17:40:29 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Thunderbird\Extensions\\{CCB7D94B-CA92-4E3F-B79D-ADE0F07ADC74}: C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension\ [2010-07-22 17:40:31 | 000,000,000 | ---D | M] O1 HOSTS File: ([2001-10-26 17:45:16 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (Hotspot Shield Class) - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files\Hotspot Shield\hssie\HssIE.dll (AnchorFree Inc.) O4 - HKLM..\Run: [Ashampoo Anti-Malware Guard] C:\Program Files\Ashampoo\Ashampoo Anti-Malware\AAMW_Guard.exe (Ashampoo Development GmbH & Co. KG) O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [IObit Security 360] C:\Program Files\IObit\IObit Security 360\IS360tray.exe (IObit) O4 - HKLM..\Run: [KernelFaultCheck] File not found O4 - HKLM..\Run: [NBKeyScan] C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe (Nero AG) O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe (Nero AG) O4 - HKLM..\Run: [NokiaMusic FastStart] C:\Program Files\Nokia\Ovi Player\NokiaOviPlayer.exe (Nokia) O4 - HKLM..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe (Analog Devices, Inc.) O4 - HKLM..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe (Analog Devices, Inc.) O4 - HKLM..\Run: [tsnp325] C:\WINDOWS\tsnp325.exe () O4 - HKU\S-1-5-21-1454471165-1757981266-1801674531-1003..\Run: [Advanced SystemCare 3] C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe (IObit) O4 - HKU\S-1-5-21-1454471165-1757981266-1801674531-1003..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe (Nero AG) O4 - HKU\S-1-5-21-1454471165-1757981266-1801674531-1003..\Run: [RegistryBooster] C:\Program Files\Uniblue\RegistryBooster\launcher.exe File not found O4 - HKU\S-1-5-21-1454471165-1757981266-1801674531-1003..\Run: [WITaj!] C:\Program Files\WITaj!\Wit2000.exe () O4 - HKU\S-1-5-19..\RunOnce: [nltide_2] File not found O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutorunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1454471165-1757981266-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-21-1454471165-1757981266-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutorunSetting = 1 O7 - HKU\S-1-5-21-1454471165-1757981266-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255 O7 - HKU\S-1-5-21-1454471165-1757981266-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0 O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.) O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\Adam\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Adam\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2010-03-22 18:50:26 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2010-09-04 16:08:19 | 000,000,000 | ---D | C] -- C:\Program Files\Uniblue [2010-09-04 07:27:56 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Adam\Recent [2010-09-03 00:38:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adam\Dane aplikacji\Malwarebytes [2010-09-03 00:38:03 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2010-09-03 00:38:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes [2010-09-03 00:38:01 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2010-09-03 00:38:01 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2010-09-02 23:23:18 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro [2010-09-02 07:37:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Uniblue [2010-09-01 18:19:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adam\Dane aplikacji\Uniblue [2010-08-31 23:41:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adam\eTeks [2010-08-31 23:09:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adam\Moje dokumenty\Moje pobrane pliki [2010-08-31 21:27:41 | 000,000,000 | ---D | C] -- C:\Program Files\Sweet Home 3D [2010-08-29 21:39:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Ulead Systems [2010-08-29 21:39:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adam\Dane aplikacji\Ulead Systems [2010-08-29 21:38:28 | 001,056,768 | ---- | C] (Blue Sky Software Corporation.) -- C:\WINDOWS\System32\ROBOEX32.DLL [2010-08-29 21:38:28 | 000,049,152 | ---- | C] (Blue Sky Software Corporation.) -- C:\WINDOWS\System32\INETWH32.dll [2010-08-29 21:38:28 | 000,000,000 | ---D | C] -- C:\Program Files\Ulead Systems [2010-08-29 21:38:10 | 000,000,000 | ---D | C] -- C:\WINDOWS\Noslip [2010-08-29 00:31:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adam\Ustawienia lokalne\Dane aplikacji\MediaMonkey [2010-08-29 00:31:29 | 000,000,000 | ---D | C] -- C:\Program Files\MediaMonkey [2010-08-28 01:46:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adam\Dane aplikacji\Intermedia Software [2010-08-28 01:45:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Intermedia Software [2010-08-28 01:45:35 | 000,000,000 | ---D | C] -- C:\Program Files\Intermedia Software [2010-08-28 01:45:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adam\Moje dokumenty\Helium Music Manager 7 [2010-08-27 19:09:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adam\Ustawienia lokalne\Dane aplikacji\Collectorz.com [2010-08-27 19:02:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adam\Moje dokumenty\Music Collector [2010-08-27 19:02:48 | 000,000,000 | ---D | C] -- C:\Program Files\Collectorz.com [2010-08-26 23:37:40 | 000,000,000 | ---D | C] -- C:\Program Files\PopCap Games [2010-08-25 21:22:18 | 000,000,000 | ---D | C] -- C:\Program Files\Q-Typing [2010-08-25 21:13:32 | 000,000,000 | ---D | C] -- C:\NET+ 2010 [2010-08-24 22:40:29 | 000,307,200 | ---- | C] (InstallShield Software Corporation) -- C:\WINDOWS\IsUn0415.exe [2010-08-24 21:43:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adam\Ustawienia lokalne\Dane aplikacji\Google [2010-08-24 21:43:39 | 000,000,000 | ---D | C] -- C:\Program Files\Google [2010-08-23 20:31:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\PopCap Games [2010-08-22 20:42:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adam\Dane aplikacji\PhotoScape [2010-08-22 20:39:59 | 000,000,000 | ---D | C] -- C:\Program Files\PhotoScape [2010-08-22 20:08:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adam\Dane aplikacji\Ashampoo [2010-08-22 19:46:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\ashampoo [2010-08-22 19:46:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adam\Ustawienia lokalne\Dane aplikacji\ashampoo [2010-08-22 19:45:38 | 000,000,000 | ---D | C] -- C:\Program Files\Ashampoo [2010-08-22 19:07:46 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\corpol.dll [2010-08-22 19:07:43 | 000,192,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iepeers.dll [2010-08-22 19:07:43 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieencode.dll [2010-08-21 17:19:00 | 000,354,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srv.sys [2010-08-21 17:18:34 | 000,000,000 | ---D | C] -- C:\Program Files\MSXML 4.0 [2010-08-21 16:39:51 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\schannel.dll [2010-08-21 16:39:12 | 001,172,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msxml3.dll [2010-08-21 16:38:46 | 001,852,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\win32k.sys [2010-08-21 16:37:58 | 008,491,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shell32.dll [2010-08-21 16:37:11 | 000,226,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tcpip6.sys [2010-08-21 16:37:11 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\6to4svc.dll [2010-08-21 16:36:51 | 000,455,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mrxsmb.sys [2010-08-21 16:36:28 | 001,295,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\quartz.dll [2010-08-21 16:36:28 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msyuv.dll [2010-08-21 16:36:10 | 000,474,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shlwapi.dll [2010-08-21 16:35:12 | 000,247,326 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\strmdll.dll [2010-08-21 16:33:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\ie7updates [2010-08-21 16:33:46 | 000,765,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\vgx.dll [2010-08-21 14:36:45 | 000,000,000 | ---D | C] -- C:\Program Files\Codemasters [2010-08-21 07:36:56 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java [2010-08-21 07:36:43 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe [2010-08-21 07:36:43 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe [2010-08-21 07:36:43 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe [2010-08-20 00:15:50 | 003,558,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\moviemk.exe [2010-08-20 00:15:00 | 000,744,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\helpsvc.exe [2010-08-20 00:14:45 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\asycfilt.dll [2010-08-20 00:14:12 | 000,285,696 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\dllcache\atmfd.dll [2010-08-20 00:13:54 | 000,691,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetcomm.dll [2010-08-20 00:13:38 | 000,430,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\vbscript.dll [2010-08-20 00:13:22 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cabview.dll [2010-08-20 00:12:50 | 000,345,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mspaint.exe [2010-08-20 00:12:29 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iyuv_32.dll [2010-08-20 00:12:29 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msvidc32.dll [2010-08-20 00:12:29 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msrle32.dll [2010-08-20 00:12:28 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\avifil32.dll [2010-08-20 00:12:28 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tsbyuv.dll [2010-08-20 00:12:10 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\csrsrv.dll [2010-08-20 00:11:54 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\t2embed.dll [2010-08-20 00:11:54 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fontsub.dll [2010-08-20 00:11:38 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\oakley.dll [2010-08-20 00:11:22 | 000,150,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rastls.dll [2010-08-20 00:11:22 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\raschap.dll [2010-08-20 00:11:06 | 001,439,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\query.dll [2010-08-20 00:10:51 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msasn1.dll [2010-08-20 00:10:25 | 000,512,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jscript.dll [2010-08-20 00:10:12 | 000,132,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wkssvc.dll [2010-08-20 00:09:59 | 000,205,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mswebdvd.dll [2010-08-20 00:09:44 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tlntsess.exe [2010-08-20 00:09:44 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\telnet.exe [2010-08-20 00:09:32 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\atl.dll [2010-08-20 00:08:33 | 002,191,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntoskrnl.exe [2010-08-20 00:08:32 | 000,731,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lsasrv.dll [2010-08-20 00:08:31 | 002,147,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrnlmp.exe [2010-08-20 00:08:30 | 002,025,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrpamp.exe [2010-08-20 00:08:01 | 000,138,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\afd.sys [2010-08-20 00:07:49 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\netapi32.dll [2010-08-20 00:07:26 | 000,273,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bthport.sys [2010-08-20 00:07:15 | 000,203,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rmcast.sys [2010-08-19 19:47:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adam\Dane aplikacji\FastStone [2010-08-19 19:47:14 | 000,000,000 | ---D | C] -- C:\Program Files\FastStone Image Viewer [2010-08-18 19:32:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\RFA_Backups [2010-08-18 19:32:40 | 000,000,000 | ---D | C] -- C:\Program Files\RFA [2010-08-18 19:10:53 | 000,000,000 | ---D | C] -- C:\Program Files\MOV Player [2010-08-18 16:20:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adam\Moje dokumenty\Deluxe Ski Jump 3 [2010-08-18 16:19:42 | 000,000,000 | ---D | C] -- C:\Program Files\Deluxe Ski Jump 3 [2010-08-17 18:19:02 | 000,000,000 | ---D | C] -- C:\Temp [2010-08-15 20:50:26 | 000,000,000 | ---D | C] -- C:\Program Files\Metropolis Software [2010-08-14 08:58:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Adam\Dane aplikacji\Tlen.pl [2010-08-14 08:58:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Tlen.pl [2010-08-14 08:58:00 | 000,000,000 | ---D | C] -- C:\Program Files\Tlen.pl [2010-03-22 19:09:05 | 000,147,456 | ---- | C] ( ) -- C:\WINDOWS\System32\rsnp325.dll [2010-03-22 19:09:05 | 000,057,344 | ---- | C] ( ) -- C:\WINDOWS\System32\vsnp325.dll [2010-03-22 19:09:05 | 000,053,248 | ---- | C] ( ) -- C:\WINDOWS\System32\csnp325.dll [3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2010-09-04 16:34:38 | 006,029,312 | ---- | M] () -- C:\Documents and Settings\Adam\NTUSER.DAT [2010-09-04 16:08:20 | 000,000,774 | ---- | M] () -- C:\Documents and Settings\Adam\Pulpit\ProcessScanner.lnk [2010-09-04 13:32:38 | 000,000,374 | ---- | M] () -- C:\WINDOWS\tasks\AWC AutoSweep.job [2010-09-04 13:32:24 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2010-09-04 13:32:23 | 000,000,310 | -HS- | M] () -- C:\WINDOWS\tasks\jpeljmsor.job [2010-09-04 13:32:22 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2010-09-04 07:45:15 | 000,000,188 | -HS- | M] () -- C:\Documents and Settings\Adam\ntuser.ini [2010-09-04 07:45:08 | 002,871,408 | -H-- | M] () -- C:\Documents and Settings\Adam\Ustawienia lokalne\Dane aplikacji\IconCache.db [2010-09-04 00:48:56 | 001,122,002 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2010-09-04 00:48:56 | 000,503,064 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2010-09-04 00:48:56 | 000,444,420 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2010-09-04 00:48:56 | 000,089,052 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2010-09-04 00:48:56 | 000,072,128 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2010-09-03 19:12:48 | 000,000,791 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Ashampoo Anti-Malware.lnk [2010-09-03 18:47:24 | 000,000,386 | ---- | M] () -- C:\WINDOWS\tasks\AWC Update.job [2010-09-03 00:38:05 | 000,000,696 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Malwarebytes' Anti-Malware.lnk [2010-09-02 23:23:18 | 000,001,734 | ---- | M] () -- C:\Documents and Settings\Adam\Pulpit\HijackThis.lnk [2010-09-02 20:12:29 | 000,000,592 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Opera.lnk [2010-09-01 00:47:12 | 001,427,885 | ---- | M] () -- C:\Documents and Settings\Adam\Moje dokumenty\Kris.sh3d [2010-08-31 23:13:58 | 000,000,050 | ---- | M] () -- C:\WINDOWS\MegaManager.INI [2010-08-31 21:41:21 | 000,002,513 | ---- | M] () -- C:\Documents and Settings\Adam\Pulpit\Microsoft Office Word 2007.lnk [2010-08-30 07:26:48 | 000,088,880 | ---- | M] () -- C:\Documents and Settings\Adam\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT [2010-08-30 07:25:49 | 000,310,784 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010-08-29 22:10:09 | 000,000,377 | ---- | M] () -- C:\WINDOWS\ULEAD32.INI [2010-08-29 22:06:12 | 000,000,089 | ---- | M] () -- C:\WINDOWS\Unable to load string [2010-08-29 01:19:22 | 000,036,864 | ---- | M] () -- C:\Documents and Settings\Adam\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-08-29 01:19:22 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2010-08-26 07:51:19 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2010-08-25 22:53:21 | 000,000,025 | ---- | M] () -- C:\WINDOWS\popcinfot.dat [2010-08-24 22:46:01 | 000,000,986 | ---- | M] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Gamma Loader.lnk [2010-08-22 20:59:16 | 000,029,696 | -H-- | M] () -- C:\Documents and Settings\Adam\Moje dokumenty\photothumb.db [2010-08-22 20:56:52 | 000,027,648 | -H-- | M] () -- C:\Documents and Settings\Adam\Pulpit\photothumb.db [2010-08-17 19:09:46 | 000,004,433 | ---- | M] () -- C:\Documents and Settings\Adam\Moje dokumenty\2012.dxp [2010-08-16 16:28:21 | 000,000,011 | ---- | M] () -- C:\trace.ini [2010-08-12 22:32:13 | 000,148,493 | ---- | M] () -- C:\Documents and Settings\Adam\Moje dokumenty\wymiana filtra1004k.pdf [3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010-09-04 16:08:20 | 000,000,774 | ---- | C] () -- C:\Documents and Settings\Adam\Pulpit\ProcessScanner.lnk [2010-09-03 19:12:48 | 000,000,791 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Ashampoo Anti-Malware.lnk [2010-09-03 00:38:05 | 000,000,696 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Malwarebytes' Anti-Malware.lnk [2010-09-02 23:23:18 | 000,001,734 | ---- | C] () -- C:\Documents and Settings\Adam\Pulpit\HijackThis.lnk [2010-09-02 20:12:29 | 000,000,592 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Opera.lnk [2010-08-31 22:30:56 | 000,000,050 | ---- | C] () -- C:\WINDOWS\MegaManager.INI [2010-08-31 22:21:31 | 001,427,885 | ---- | C] () -- C:\Documents and Settings\Adam\Moje dokumenty\Kris.sh3d [2010-08-29 21:39:38 | 000,000,089 | ---- | C] () -- C:\WINDOWS\Unable to load string [2010-08-29 21:38:30 | 000,000,377 | ---- | C] () -- C:\WINDOWS\ULEAD32.INI [2010-08-25 22:53:20 | 000,000,025 | ---- | C] () -- C:\WINDOWS\popcinfot.dat [2010-08-24 22:46:01 | 000,000,986 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Gamma Loader.lnk [2010-08-22 20:56:44 | 000,027,648 | -H-- | C] () -- C:\Documents and Settings\Adam\Pulpit\photothumb.db [2010-08-22 20:42:48 | 000,029,696 | -H-- | C] () -- C:\Documents and Settings\Adam\Moje dokumenty\photothumb.db [2010-08-17 19:09:43 | 000,004,433 | ---- | C] () -- C:\Documents and Settings\Adam\Moje dokumenty\2012.dxp [2010-08-12 22:32:13 | 000,148,493 | ---- | C] () -- C:\Documents and Settings\Adam\Moje dokumenty\wymiana filtra1004k.pdf [2010-08-05 11:42:33 | 000,007,168 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys [2010-04-18 08:30:05 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2010-04-11 11:23:12 | 000,000,028 | ---- | C] () -- C:\WINDOWS\Robota.INI [2010-04-11 11:21:55 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\mgxasio2.dll [2010-04-11 11:20:33 | 000,006,211 | ---- | C] () -- C:\WINDOWS\mgxoschk.ini [2010-04-10 18:08:57 | 000,120,200 | ---- | C] () -- C:\WINDOWS\System32\DLLDEV32i.dll [2010-04-09 15:17:40 | 000,081,408 | RHS- | C] () -- C:\WINDOWS\System32\kbdmon3.dll [2010-03-28 20:58:35 | 000,000,073 | ---- | C] () -- C:\WINDOWS\EurekaLog.ini [2010-03-23 19:59:17 | 000,036,864 | ---- | C] () -- C:\Documents and Settings\Adam\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-03-22 20:01:50 | 000,164,352 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2010-03-22 20:01:45 | 000,755,027 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2010-03-22 20:01:45 | 000,159,839 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2010-03-22 20:01:44 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2010-03-22 20:01:42 | 000,007,680 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2010-03-22 20:01:42 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2010-03-22 19:21:20 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4935.dll [2010-03-22 19:16:50 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Adam\Ustawienia lokalne\Dane aplikacji\QSwitch.txt [2010-03-22 19:16:50 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Adam\Ustawienia lokalne\Dane aplikacji\DSwitch.txt [2010-03-22 19:16:50 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Adam\Ustawienia lokalne\Dane aplikacji\AtStart.txt [2010-03-22 19:09:06 | 000,015,498 | ---- | C] () -- C:\WINDOWS\snp325.ini [2008-05-03 09:24:01 | 000,000,082 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini [2002-01-14 14:37:00 | 000,459,776 | ---- | C] () -- C:\WINDOWS\System32\converter.dll [color=#E56717]========== LOP Check ==========[/color] [2010-08-22 20:08:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adam\Dane aplikacji\Ashampoo [2010-07-11 23:53:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adam\Dane aplikacji\BESTplayer [2010-08-05 11:42:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adam\Dane aplikacji\Canneverbe Limited [2010-03-22 21:01:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adam\Dane aplikacji\Gadu-Gadu [2010-08-28 01:46:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adam\Dane aplikacji\Intermedia Software [2010-08-26 23:13:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adam\Dane aplikacji\IObit [2010-03-22 20:18:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adam\Dane aplikacji\Locktime [2010-04-11 11:22:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adam\Dane aplikacji\MAGIX [2010-08-28 10:50:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adam\Dane aplikacji\Mp3tag [2010-04-15 18:57:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adam\Dane aplikacji\Nokia [2010-04-15 18:57:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adam\Dane aplikacji\Nokia Ovi Suite [2010-03-22 20:20:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adam\Dane aplikacji\Opera [2010-04-15 18:09:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adam\Dane aplikacji\PC Suite [2010-08-22 21:09:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adam\Dane aplikacji\PhotoScape [2010-03-23 18:35:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adam\Dane aplikacji\Sony [2010-08-14 09:01:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adam\Dane aplikacji\Tlen.pl [2010-08-29 21:39:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adam\Dane aplikacji\Ulead Systems [2010-09-04 15:49:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adam\Dane aplikacji\Uniblue [2010-09-04 16:45:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adam\Dane aplikacji\uTorrent [2010-03-29 14:16:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Adam\Dane aplikacji\WeatherPulse [2010-08-22 19:46:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ashampoo [2010-08-05 11:42:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Canneverbe Limited [2010-08-28 01:45:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Intermedia Software [2010-07-15 22:20:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\IObit [2010-04-15 19:07:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Last.fm [2010-03-22 20:16:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Locktime [2010-04-11 13:05:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\MAGIX [2010-04-15 18:09:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Nokia [2010-07-22 17:37:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\NokiaInstallerCache [2010-04-15 17:28:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\NokiaMusic [2010-04-15 17:09:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OviInstallerCache [2010-04-15 17:16:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Suite [2010-08-23 20:31:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PopCap Games [2010-09-02 20:08:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\RFA_Backups [2010-08-14 08:58:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Tlen.pl [2010-08-29 21:41:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Ulead Systems [2010-03-28 20:58:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Weather Pulse 2.2.4.4 [2010-09-04 13:32:38 | 000,000,374 | ---- | M] () -- C:\WINDOWS\Tasks\AWC AutoSweep.job [2010-09-03 18:47:24 | 000,000,386 | ---- | M] () -- C:\WINDOWS\Tasks\AWC Update.job [2010-09-04 13:32:23 | 000,000,310 | -HS- | M] () -- C:\WINDOWS\Tasks\jpeljmsor.job [color=#E56717]========== Purity Check ==========[/color] < End of report >