OTL logfile created on: 2012-04-03 20:08:54 - Run 1 OTL by OldTimer - Version 3.2.39.2 Folder = C:\Documents and Settings\Surmówna\Pulpit Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,98 Gb Total Physical Memory | 1,88 Gb Available Physical Memory | 63,05% Memory free 4,82 Gb Paging File | 3,84 Gb Available in Paging File | 79,62% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 50,00 Gb Total Space | 14,58 Gb Free Space | 29,15% Space Free | Partition Type: NTFS Drive D: | 411,56 Gb Total Space | 2,79 Gb Free Space | 0,68% Space Free | Partition Type: NTFS Drive E: | 2,64 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS Computer Name: SURMA | User Name: Surmówna | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-04-03 20:04:13 | 000,593,920 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Surmówna\Pulpit\OTL.exe PRC - [2012-03-07 02:15:17 | 004,241,512 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe PRC - [2012-03-07 02:15:14 | 000,044,768 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe PRC - [2012-02-28 23:58:10 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre1.6.0_24\bin\jqs.exe PRC - [2011-11-11 12:44:42 | 000,107,232 | ---- | M] (Nalpeiron Ltd.) -- C:\WINDOWS\system32\nalserv.exe PRC - [2011-11-11 12:44:42 | 000,066,560 | ---- | M] (Nalpeiron Ltd.) -- C:\WINDOWS\system32\nlssrv32.exe PRC - [2011-11-08 12:20:46 | 000,696,320 | ---- | M] () -- C:\Program Files\Kilgray\memoQ50-upgrade\AUClient.exe PRC - [2011-10-20 12:21:32 | 000,195,648 | ---- | M] (Lenovo ) -- C:\Program Files\ThinkPad\ConnectUtilities\SvcGuiHlpr.exe PRC - [2011-10-20 12:21:26 | 000,191,552 | ---- | M] (Lenovo ) -- C:\Program Files\ThinkPad\ConnectUtilities\ACWLIcon.exe PRC - [2011-10-20 12:21:24 | 000,433,216 | ---- | M] (Lenovo ) -- C:\Program Files\ThinkPad\ConnectUtilities\ACTray.exe PRC - [2011-10-20 12:21:22 | 000,244,800 | ---- | M] (Lenovo ) -- C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe PRC - [2011-10-20 12:21:20 | 000,105,536 | ---- | M] (Lenovo ) -- C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe PRC - [2011-09-30 19:16:20 | 000,132,392 | ---- | M] (Synaptics Incorporated) -- C:\Program Files\Synaptics\SynTP\SynTPLpr.exe PRC - [2011-08-17 12:03:18 | 000,099,688 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe PRC - [2011-08-11 20:04:14 | 000,328,552 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe PRC - [2011-07-26 00:14:00 | 000,028,672 | ---- | M] (Lenovo Group Limited) -- c:\Program Files\Lenovo\System Update\SUService.exe PRC - [2011-07-12 19:03:32 | 000,069,568 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe PRC - [2011-07-12 18:17:04 | 000,138,680 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\ZOOM\TpScrex.exe PRC - [2011-07-12 17:53:48 | 000,131,432 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\HOTKEY\tphkload.exe PRC - [2011-07-12 17:53:18 | 000,142,696 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe PRC - [2011-06-22 20:32:36 | 000,882,960 | ---- | M] (Intel(R) Corporation) -- C:\Program Files\Intel\WiFi\bin\S24EvMon.exe PRC - [2011-06-22 19:49:24 | 000,866,576 | ---- | M] (Intel(R) Corporation) -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe PRC - [2011-06-22 19:30:38 | 000,481,552 | ---- | M] (Intel(R) Corporation) -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe PRC - [2011-04-19 02:39:00 | 000,292,200 | ---- | M] (Lenovo.) -- C:\Program Files\ThinkPad\Utilities\DOZESVC.EXE PRC - [2011-04-19 02:39:00 | 000,143,360 | ---- | M] () -- C:\Program Files\ThinkPad\Utilities\PWMEWSVC.exe PRC - [2010-11-09 09:14:08 | 000,696,320 | ---- | M] () -- C:\Program Files\Kilgray\memoQ40\AUClient.exe PRC - [2010-09-22 15:18:46 | 000,349,528 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe PRC - [2010-05-20 16:27:24 | 000,139,632 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft LifeCam\MSCamS32.exe PRC - [2010-03-26 05:08:00 | 000,062,312 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\NPDIRECT\tpfnf7sp.exe PRC - [2009-04-30 12:23:26 | 000,090,112 | ---- | M] () -- C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe PRC - [2008-04-14 19:21:16 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2007-09-26 18:34:46 | 000,644,408 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe PRC - [2007-07-12 02:38:44 | 000,569,344 | ---- | M] () -- C:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe PRC - [2007-05-10 16:36:56 | 002,111,176 | ---- | M] (Gadu-Gadu S.A.) -- C:\Program Files\Gadu-Gadu\gg.exe PRC - [2007-02-08 12:40:16 | 000,045,056 | ---- | M] () -- C:\Program Files\Lenovo\Rescue and Recovery\ADM\IUService.exe PRC - [2007-01-30 13:05:02 | 000,108,080 | ---- | M] (Lenovo Group Limited) -- C:\WINDOWS\system32\IPSSVC.EXE PRC - [2007-01-04 20:48:52 | 000,112,152 | R--- | M] (InterVideo) -- C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe PRC - [2006-06-29 22:57:50 | 000,032,768 | ---- | M] () -- C:\WINDOWS\system32\TpKmpSvc.exe PRC - [2006-04-17 18:00:10 | 000,028,672 | ---- | M] (Wistron Corp.) -- C:\Program Files\PM Agent\WisFnCtrlSvc.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012-04-03 13:02:00 | 001,753,088 | ---- | M] () -- C:\Program Files\Alwil Software\Avast5\defs\12040301\algo.dll MOD - [2012-02-17 14:18:00 | 000,998,400 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Management\a2a14380e8c9149d5b212d0100ef588a\System.Management.ni.dll MOD - [2012-02-17 13:18:25 | 000,212,992 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\11dcb806c92f55111f5fa9f1a90e3bdd\System.ServiceProcess.ni.dll MOD - [2012-02-17 11:41:07 | 005,450,752 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\77e1279cbf4eecfb0284b63316fe43fe\System.Xml.ni.dll MOD - [2012-02-17 11:40:41 | 001,587,200 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\9351cf29bb1ba951e45a9b3b0edab937\System.Drawing.ni.dll MOD - [2012-02-17 11:39:55 | 000,539,648 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\1552f18ca434c1dca6d082df476d089a\PresentationFramework.Luna.ni.dll MOD - [2012-02-17 11:39:21 | 012,215,808 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PresentationCore\0665bba8c9962deadc418881eb3a2a2a\PresentationCore.ni.dll MOD - [2012-02-17 11:39:02 | 003,325,440 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\WindowsBase\174c2f776741812aed02c337bbcd1dae\WindowsBase.ni.dll MOD - [2012-02-17 11:38:47 | 007,953,408 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\9e3803cd2a11f056291862e306a8e2b2\System.ni.dll MOD - [2012-01-08 15:41:12 | 000,093,696 | ---- | M] () -- C:\Program Files\FileZilla FTP Client\fzshellext.dll MOD - [2011-11-08 12:20:46 | 000,696,320 | ---- | M] () -- C:\Program Files\Kilgray\memoQ50-upgrade\AUClient.exe MOD - [2011-10-13 10:04:59 | 000,060,928 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\888b745ca99d39692c2e9af222e5eae8\UIAutomationProvider.ni.dll MOD - [2011-10-13 10:02:25 | 011,490,816 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\ca87ba84221991839abbe7d4bc9c6721\mscorlib.ni.dll MOD - [2011-10-06 15:14:10 | 000,044,544 | ---- | M] () -- C:\Program Files\ThinkPad\ConnectUtilities\Res\US\GUIHlprRes.dll MOD - [2011-10-06 15:14:06 | 000,258,048 | ---- | M] () -- C:\Program Files\ThinkPad\ConnectUtilities\Res\US\IconRes.dll MOD - [2011-10-06 15:13:58 | 000,077,824 | ---- | M] () -- C:\Program Files\ThinkPad\ConnectUtilities\Res\US\SvcHlprRes.dll MOD - [2011-10-06 14:45:24 | 000,086,016 | ---- | M] () -- C:\Program Files\ThinkPad\ConnectUtilities\AcWrpc.dll MOD - [2011-04-19 02:39:00 | 000,143,360 | ---- | M] () -- C:\Program Files\ThinkPad\Utilities\PWMEWSVC.exe MOD - [2011-04-19 02:39:00 | 000,054,272 | ---- | M] () -- C:\Program Files\ThinkPad\Utilities\US\PWRMGRRO.DLL MOD - [2011-04-19 02:39:00 | 000,041,984 | ---- | M] () -- C:\Program Files\ThinkPad\Utilities\US\PWRMGRRT.DLL MOD - [2011-01-13 02:41:04 | 005,279,744 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll MOD - [2011-01-11 01:07:28 | 000,040,960 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess.resources\2.0.0.0_pl_b03f5f7f11d50a3a\System.ServiceProcess.resources.dll MOD - [2010-11-09 09:14:08 | 000,696,320 | ---- | M] () -- C:\Program Files\Kilgray\memoQ40\AUClient.exe MOD - [2009-04-30 12:23:26 | 000,090,112 | ---- | M] () -- C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe MOD - [2009-02-27 20:04:20 | 000,311,296 | ---- | M] () -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\pdfshell.POL MOD - [2009-01-14 18:37:00 | 001,486,848 | ---- | M] () -- C:\WINDOWS\system32\nview.dll MOD - [2009-01-14 18:37:00 | 000,466,944 | ---- | M] () -- C:\WINDOWS\system32\nvshell.dll MOD - [2008-04-14 19:20:37 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll MOD - [2007-07-12 02:38:44 | 000,569,344 | ---- | M] () -- C:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe MOD - [2007-05-10 16:27:24 | 000,106,496 | ---- | M] () -- C:\Program Files\Gadu-Gadu\libiax2.dll MOD - [2007-05-10 16:27:20 | 000,061,440 | ---- | M] () -- C:\Program Files\Gadu-Gadu\libjb.dll MOD - [2007-04-14 15:30:56 | 000,139,264 | ---- | M] () -- C:\Program Files\Lenovo\Rescue and Recovery\CDRecord.dll MOD - [2007-04-14 15:30:56 | 000,139,264 | ---- | M] () -- C:\Program Files\Common Files\Lenovo\CDRecord.dll MOD - [2007-03-07 17:40:30 | 000,135,168 | ---- | M] () -- C:\Program Files\Gadu-Gadu\zlib1.dll MOD - [2007-02-08 12:40:16 | 000,045,056 | ---- | M] () -- C:\Program Files\Lenovo\Rescue and Recovery\ADM\IUService.exe MOD - [2006-12-21 14:31:32 | 000,786,432 | ---- | M] () -- C:\Program Files\Gadu-Gadu\libeay32.dll MOD - [2006-12-21 14:31:32 | 000,159,744 | ---- | M] () -- C:\Program Files\Gadu-Gadu\ssleay32.dll MOD - [2006-06-29 22:57:50 | 000,032,768 | ---- | M] () -- C:\WINDOWS\system32\TpKmpSvc.exe [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2012-03-07 02:15:14 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus) SRV - [2012-02-28 23:58:10 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) [Auto | Running] -- C:\Program Files\Java\jre1.6.0_24\bin\jqs.exe -- (JavaQuickStarterService) SRV - [2011-11-11 12:44:42 | 000,107,232 | ---- | M] (Nalpeiron Ltd.) [Auto | Running] -- C:\WINDOWS\system32\nalserv.exe -- (NalServ) SRV - [2011-11-11 12:44:42 | 000,066,560 | ---- | M] (Nalpeiron Ltd.) [Auto | Running] -- C:\WINDOWS\system32\nlssrv32.exe -- (nlsX86cc) SRV - [2011-11-08 12:20:46 | 000,696,320 | ---- | M] () [Auto | Running] -- C:\Program Files\Kilgray\memoQ50-upgrade\AUClient.exe -- (Kilgray: memoQ update permissions manager. 9819.) SRV - [2011-10-20 12:21:22 | 000,244,800 | ---- | M] (Lenovo ) [Auto | Running] -- C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe -- (AcSvc) SRV - [2011-10-20 12:21:20 | 000,105,536 | ---- | M] (Lenovo ) [Auto | Running] -- C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe -- (AcPrfMgrSvc) SRV - [2011-07-26 00:14:00 | 000,028,672 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- c:\Program Files\Lenovo\System Update\SUService.exe -- (SUService) SRV - [2011-07-12 17:53:48 | 000,131,432 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\HOTKEY\tphkload.exe -- (TPHKLOAD) SRV - [2011-07-12 17:53:24 | 000,101,736 | ---- | M] (Lenovo Group Limited) [Auto | Stopped] -- C:\Program Files\Lenovo\HOTKEY\micmute.exe -- (LENOVO.MICMUTE) SRV - [2011-07-12 17:53:18 | 000,142,696 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe -- (TPHKSVC) SRV - [2011-06-22 20:32:36 | 000,882,960 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\S24EvMon.exe -- (S24EventMonitor) Intel(R) SRV - [2011-06-22 19:49:24 | 000,866,576 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng) Intel(R) SRV - [2011-06-22 19:30:38 | 000,481,552 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc) Intel(R) SRV - [2011-04-19 02:39:00 | 000,292,200 | ---- | M] (Lenovo.) [Auto | Running] -- C:\Program Files\ThinkPad\Utilities\DOZESVC.EXE -- (DozeSvc) SRV - [2011-04-19 02:39:00 | 000,143,360 | ---- | M] () [Auto | Running] -- C:\Program Files\ThinkPad\Utilities\PWMEWSVC.exe -- (PwmEWSvc) SRV - [2011-04-19 02:39:00 | 000,069,632 | ---- | M] () [Auto | Stopped] -- C:\Program Files\ThinkPad\Utilities\PWMDBSVC.exe -- (Power Manager DBC Service) SRV - [2010-11-09 09:14:08 | 000,696,320 | ---- | M] () [Auto | Running] -- C:\Program Files\Kilgray\memoQ40\AUClient.exe -- (Kilgray Translation Technologies: memoQ update permissions manager. 979430.) SRV - [2010-09-22 15:18:46 | 000,349,528 | ---- | M] (Broadcom Corporation.) [Auto | Running] -- C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe -- (btwdins) SRV - [2010-05-20 16:27:24 | 000,139,632 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft LifeCam\MSCamS32.exe -- (MSCamSvc) SRV - [2009-04-30 12:23:26 | 000,090,112 | ---- | M] () [Auto | Running] -- C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe -- (OMSI download service) SRV - [2007-12-18 13:48:40 | 000,196,704 | ---- | M] (OptionNV) [Disabled | Stopped] -- C:\Program Files\ERA\GlobeTrotter Connect\GtDetectSc.exe -- (GtDetectSc) SRV - [2007-09-26 18:34:46 | 000,644,408 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe -- (ThinkVantage Registry Monitor Service) SRV - [2007-07-12 02:38:44 | 000,569,344 | ---- | M] () [Auto | Running] -- C:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe -- (TVT Backup Protection Service) SRV - [2007-02-08 12:40:16 | 000,045,056 | ---- | M] () [Auto | Running] -- C:\Program Files\Lenovo\Rescue and Recovery\ADM\IUService.exe -- (tvtnetwk) SRV - [2007-01-30 13:05:02 | 000,108,080 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\WINDOWS\system32\IPSSVC.EXE -- (IPSSVC) SRV - [2007-01-04 20:48:52 | 000,112,152 | R--- | M] (InterVideo) [Auto | Running] -- C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe -- (IviRegMgr) SRV - [2006-06-29 22:57:50 | 000,032,768 | ---- | M] () [Auto | Running] -- C:\WINDOWS\system32\TpKmpSvc.exe -- (TpKmpSVC) SRV - [2006-05-23 22:08:06 | 000,622,700 | ---- | M] (Diskeeper Corporation) [Disabled | Stopped] -- C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe -- (Diskeeper) SRV - [2006-04-17 18:00:10 | 000,028,672 | ---- | M] (Wistron Corp.) [Auto | Running] -- C:\Program Files\PM Agent\WisFnCtrlSvc.exe -- (WisFnCtrlSvc) SRV - [2005-10-06 19:46:38 | 000,856,064 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Media Connect 2\wmccds.exe -- (WMConnectCDS) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\UIUSYS.SYS -- (UIUSys) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys -- (MBAMSwissArmy) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - [2012-03-07 02:03:51 | 000,612,184 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx) DRV - [2012-03-07 02:03:38 | 000,337,880 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP) DRV - [2012-03-07 02:02:00 | 000,035,672 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr) DRV - [2012-03-07 02:01:53 | 000,053,848 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi) DRV - [2012-03-07 02:01:39 | 000,095,704 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2) DRV - [2012-03-07 02:01:30 | 000,020,696 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk) DRV - [2012-03-07 01:58:29 | 000,024,920 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4) DRV - [2011-08-30 20:52:30 | 000,004,224 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\IBMBLDID.sys -- (IBMTPCHK) DRV - [2011-08-30 20:52:28 | 000,011,520 | ---- | M] (IBM Corp.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ANC.sys -- (ANC) DRV - [2011-04-19 02:39:00 | 000,025,968 | ---- | M] (Lenovo.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\DOZEHDD.SYS -- (DozeHDD) DRV - [2011-04-19 02:39:00 | 000,012,144 | ---- | M] (Lenovo Group Limited) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\TPPWRIF.SYS -- (TPPWRIF) DRV - [2011-03-29 20:14:08 | 000,122,992 | ---- | M] (Lenovo.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\ApsX86.sys -- (Shockprf) DRV - [2011-03-29 20:12:16 | 000,020,592 | ---- | M] (Lenovo.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\ApsHM86.sys -- (TPDIGIMN) DRV - [2011-01-11 03:14:09 | 000,030,144 | ---- | M] (Lenovo (United States) Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\psadd.sys -- (psadd) DRV - [2010-10-07 06:11:38 | 006,609,920 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NETwLx32.sys -- (NETwLx32) Sterownik karty Intel(R) DRV - [2010-09-23 10:14:30 | 000,993,576 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL) DRV - [2010-09-16 20:00:00 | 000,051,752 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB) DRV - [2010-09-07 15:09:06 | 000,013,680 | ---- | M] (Lenovo Group Limited) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\smiif32.sys -- (lenovo.smi) DRV - [2010-06-02 15:49:20 | 000,993,464 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HSF_DPV.sys -- (HSF_DPV) DRV - [2010-06-02 15:49:20 | 000,738,360 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf) DRV - [2010-06-02 15:49:18 | 000,217,016 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HSFHWAZL.sys -- (HSFHWAZL) DRV - [2010-05-20 16:27:26 | 001,961,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\VX1000.sys -- (VX1000) DRV - [2010-05-19 23:15:04 | 000,013,952 | ---- | M] (Intel Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\s24trans.sys -- (s24trans) DRV - [2010-04-09 14:16:50 | 000,016,472 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\pwdrvio.sys -- (pwdrvio) DRV - [2010-04-09 14:16:46 | 000,011,104 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\pwdspio.sys -- (pwdspio) DRV - [2010-03-26 05:08:00 | 000,004,608 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\TSMAPIP.SYS -- (TSMAPIP) DRV - [2009-09-18 14:54:38 | 000,533,152 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btaudio.sys -- (btaudio) DRV - [2008-10-21 10:22:48 | 000,114,600 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0017mdm.sys -- (s0017mdm) DRV - [2008-10-21 10:22:48 | 000,109,736 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0017unic.sys -- (s0017unic) Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (WDM) DRV - [2008-10-21 10:22:48 | 000,108,328 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0017mgmt.sys -- (s0017mgmt) Sony Ericsson Device 0017 USB WMC Device Management Drivers (WDM) DRV - [2008-10-21 10:22:48 | 000,104,616 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0017obex.sys -- (s0017obex) DRV - [2008-10-21 10:22:48 | 000,086,824 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0017bus.sys -- (s0017bus) Sony Ericsson Device 0017 driver (WDM) DRV - [2008-10-21 10:22:48 | 000,026,024 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0017nd5.sys -- (s0017nd5) Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (NDIS) DRV - [2008-10-21 10:22:48 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0017mdfl.sys -- (s0017mdfl) DRV - [2008-07-24 18:37:10 | 000,156,816 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btwdndis.sys -- (BTWDNDIS) DRV - [2008-05-16 12:33:14 | 000,115,752 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016unic.sys -- (s0016unic) Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM) DRV - [2008-05-16 12:33:14 | 000,025,512 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016nd5.sys -- (s0016nd5) Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS) DRV - [2008-05-16 12:33:14 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016mdfl.sys -- (s0016mdfl) DRV - [2008-05-16 12:33:12 | 000,120,744 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016mdm.sys -- (s0016mdm) DRV - [2008-05-16 12:33:12 | 000,114,216 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016mgmt.sys -- (s0016mgmt) Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM) DRV - [2008-05-16 12:33:12 | 000,110,632 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016obex.sys -- (s0016obex) DRV - [2008-05-16 12:33:12 | 000,089,256 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016bus.sys -- (s0016bus) Sony Ericsson Device 0016 driver (WDM) DRV - [2008-02-18 17:14:38 | 000,106,624 | ---- | M] (Option N.V.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Gt51Ip.sys -- (GT72NDISIPXP) DRV - [2008-02-08 13:00:22 | 000,059,648 | ---- | M] (Option N.V.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\gt72ubus.sys -- (GT72UBUS) DRV - [2008-02-04 18:57:44 | 000,037,160 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btport.sys -- (BTDriver) DRV - [2007-05-22 21:59:38 | 000,030,336 | ---- | M] (Lenovo (United States) Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\tvti2c.sys -- (TVTI2C) DRV - [2007-04-30 07:37:20 | 002,206,976 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\NETw4x32.sys -- (NETw4x32) Sterownik karty Intel(R) DRV - [2007-03-30 13:38:14 | 000,008,064 | ---- | M] (Option N.V.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\gtptser.sys -- (GTPTSER) DRV - [2006-11-06 18:24:56 | 000,012,080 | ---- | M] (Lenovo Group Limited) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\PROCDD.SYS -- (PROCDD) DRV - [2001-10-26 18:00:44 | 000,322,432 | ---- | M] (Matrox Graphics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\G400m.sys -- (G400) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/welcome/3000notebook [binary data] IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://lenovo.live.com IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/welcome/3000notebook [binary data] IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://lenovo.live.com IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1431431645-1109081242-679006776-1005\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1 IE - HKU\S-1-5-21-1431431645-1109081242-679006776-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.lenovo.com/ IE - HKU\S-1-5-21-1431431645-1109081242-679006776-1005\..\SearchScopes,DefaultScope = {48561166-CF05-4B33-95EC-28FB71DD6102} IE - HKU\S-1-5-21-1431431645-1109081242-679006776-1005\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&entrypoint={referrer:source?}&FORM=LENIE IE - HKU\S-1-5-21-1431431645-1109081242-679006776-1005\..\SearchScopes\{48561166-CF05-4B33-95EC-28FB71DD6102}: "URL" = http://www.google.com/search?hl=pl&q={searchTerms} IE - HKU\S-1-5-21-1431431645-1109081242-679006776-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultengine: "Ask.com" FF - prefs.js..browser.search.defaultenginename: "Ask.com" FF - prefs.js..browser.search.order.1: "Ask.com" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.facebook.com/" FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:2.0.3 FF - prefs.js..extensions.enabledItems: {9125C9CB-BE2B-4389-A0C7-46A4BDD46AEA}:0.6.0.3 FF - prefs.js..extensions.enabledItems: {6e84150a-d526-41f1-a480-a67d3fed910d}:1.4.5.3 FF - prefs.js..extensions.enabledItems: {258735dc-6743-4805-95fc-f95941fffdad}:1.3.6 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}:5.9 FF - prefs.js..extensions.enabledItems: {6904342A-8307-11DF-A508-4AE2DFD72085}:2.1.1.94 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24 FF - prefs.js..network.proxy.backup.ftp: "w3cache.icm.edu.pl" FF - prefs.js..network.proxy.backup.ftp_port: 8080 FF - prefs.js..network.proxy.backup.gopher: "w3cache.icm.edu.pl" FF - prefs.js..network.proxy.backup.gopher_port: 8080 FF - prefs.js..network.proxy.backup.socks: "w3cache.icm.edu.pl" FF - prefs.js..network.proxy.backup.socks_port: 8080 FF - prefs.js..network.proxy.backup.ssl: "w3cache.icm.edu.pl" FF - prefs.js..network.proxy.backup.ssl_port: 8080 FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre1.6.0_24\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\Alwil Software\Avast5\WebRep\FF [2012-03-08 20:51:50 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\jqs@sun.com: C:\Program Files\Java\jre1.6.0_24\lib\deploy\jqs\ff [2012-02-28 23:58:12 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-03-20 20:08:28 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-02-28 00:42:09 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 10.0.2\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2011-08-18 19:00:03 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 10.0.2\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2012-02-28 00:41:30 | 000,000,000 | ---D | M] [2011-01-15 02:23:46 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Surmówna\Dane aplikacji\Mozilla\Extensions [2011-01-15 02:23:46 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Surmówna\Dane aplikacji\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6} [2012-03-31 12:26:29 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Surmówna\Dane aplikacji\Mozilla\Firefox\Profiles\4ho25047.default\extensions [2011-01-15 02:24:04 | 000,000,000 | ---D | M] (Flash Game Maximizer) -- C:\Documents and Settings\Surmówna\Dane aplikacji\Mozilla\Firefox\Profiles\4ho25047.default\extensions\{258735dc-6743-4805-95fc-f95941fffdad} [2011-01-15 02:24:04 | 000,000,000 | ---D | M] (Fetch Text URL) -- C:\Documents and Settings\Surmówna\Dane aplikacji\Mozilla\Firefox\Profiles\4ho25047.default\extensions\{5B700FEA-FF2A-4746-BB2D-9D26A8EB056D} [2011-06-20 14:06:06 | 000,000,000 | ---D | M] (deskCut) -- C:\Documents and Settings\Surmówna\Dane aplikacji\Mozilla\Firefox\Profiles\4ho25047.default\extensions\{9125C9CB-BE2B-4389-A0C7-46A4BDD46AEA} [2012-01-05 16:08:18 | 000,000,000 | ---D | M] (Easy YouTube Video Downloader) -- C:\Documents and Settings\Surmówna\Dane aplikacji\Mozilla\Firefox\Profiles\4ho25047.default\extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b} [2012-01-06 15:09:34 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\Surmówna\Dane aplikacji\Mozilla\Firefox\Profiles\4ho25047.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2011-01-15 02:24:05 | 000,000,000 | ---D | M] ("Plain Text Links") -- C:\Documents and Settings\Surmówna\Dane aplikacji\Mozilla\Firefox\Profiles\4ho25047.default\extensions\{ec268e28-22c6-4a6c-ac22-635cabee283c} [2012-03-31 12:26:29 | 000,000,000 | ---D | M] (Codec-C) -- C:\Documents and Settings\Surmówna\Dane aplikacji\Mozilla\Firefox\Profiles\4ho25047.default\extensions\info@allpremiumplay.info [2012-03-20 20:08:33 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\SURMĂŁWNA\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\4HO25047.DEFAULT\EXTENSIONS\{258735DC-6743-4805-95FC-F95941FFFDAD} File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\SURMĂŁWNA\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\4HO25047.DEFAULT\EXTENSIONS\{6E84150A-D526-41F1-A480-A67D3FED910D}.XPI File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\SURMĂŁWNA\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\4HO25047.DEFAULT\EXTENSIONS\{9125C9CB-BE2B-4389-A0C7-46A4BDD46AEA} File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\SURMĂŁWNA\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\4HO25047.DEFAULT\EXTENSIONS\{C0C9A2C7-2E5C-4447-BC53-97718BC91E1B} File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\SURMĂŁWNA\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\4HO25047.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D} File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\SURMĂŁWNA\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\4HO25047.DEFAULT\EXTENSIONS\INFO@ALLPREMIUMPLAY.INFO [2012-03-20 20:08:28 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2012-02-28 23:58:11 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2009-07-31 14:06:48 | 001,654,784 | ---- | M] (LizardTech) -- C:\Program Files\mozilla firefox\plugins\npdjvu.dll [2012-01-29 16:18:04 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2012-01-29 16:18:04 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2012-01-29 16:18:04 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2012-01-29 16:18:04 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2012-01-29 16:18:04 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2012-01-29 16:18:04 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2012-04-03 08:21:05 | 000,441,418 | R--- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: 127.0.0.1 www.007guard.com O1 - Hosts: 127.0.0.1 007guard.com O1 - Hosts: 127.0.0.1 008i.com O1 - Hosts: 127.0.0.1 www.008k.com O1 - Hosts: 127.0.0.1 008k.com O1 - Hosts: 127.0.0.1 www.00hq.com O1 - Hosts: 127.0.0.1 00hq.com O1 - Hosts: 127.0.0.1 010402.com O1 - Hosts: 127.0.0.1 www.032439.com O1 - Hosts: 127.0.0.1 032439.com O1 - Hosts: 127.0.0.1 www.0scan.com O1 - Hosts: 127.0.0.1 0scan.com O1 - Hosts: 127.0.0.1 1000gratisproben.com O1 - Hosts: 127.0.0.1 www.1000gratisproben.com O1 - Hosts: 127.0.0.1 1001namen.com O1 - Hosts: 127.0.0.1 www.1001namen.com O1 - Hosts: 127.0.0.1 100888290cs.com O1 - Hosts: 127.0.0.1 www.100888290cs.com O1 - Hosts: 127.0.0.1 www.100sexlinks.com O1 - Hosts: 127.0.0.1 100sexlinks.com O1 - Hosts: 127.0.0.1 10sek.com O1 - Hosts: 127.0.0.1 www.10sek.com O1 - Hosts: 127.0.0.1 www.1-2005-search.com O1 - Hosts: 127.0.0.1 1-2005-search.com O1 - Hosts: 15174 more lines... O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software) O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.6.0_24\bin\jp2ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre1.6.0_24\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.) O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [ACTray] C:\Program Files\ThinkPad\ConnectUtilities\ACTray.exe (Lenovo ) O4 - HKLM..\Run: [ACWLIcon] C:\Program Files\ThinkPad\ConnectUtilities\ACWLIcon.exe (Lenovo ) O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software) O4 - HKLM..\Run: [AwaySch] C:\Program Files\Lenovo\AwayTask\AwaySch.EXE (Lenovo Group Limited) O4 - HKLM..\Run: [LenovoAutoScrollUtility] C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe (Lenovo Group Limited) O4 - HKLM..\Run: [LPManager] C:\Program Files\Lenovo\LenovoCare\LPMGR.EXE (Lenovo Group Limited) O4 - HKLM..\Run: [Malwarebytes' Anti-Malware (reboot)] C:\Documents and Settings\Surmówna\Ustawienia lokalne\Temp\HBCD\Malwarebytes\mbam.exe (Malwarebytes Corporation) O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Nero AG) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe () O4 - HKLM..\Run: [PWRMGRTR] C:\Program Files\ThinkPad\Utilities\PWRMGRTR.DLL (Lenovo Group Limited) O4 - HKLM..\Run: [TPFNF7] C:\Program Files\Lenovo\NPDIRECT\tpfnf7sp.exe (Lenovo Group Limited) O4 - HKLM..\Run: [TPKMAPHELPER] C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe (Lenovo) O4 - HKLM..\Run: [VX1000] C:\WINDOWS\vVX1000.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-1431431645-1109081242-679006776-1005..\Run: [Adobe Reader Synchronizer] C:\Program Files\Adobe\Reader 9.0\Reader\AdobeCollabSync.exe (Adobe Systems Incorporated) O4 - HKU\S-1-5-21-1431431645-1109081242-679006776-1005..\Run: [Gadu-Gadu] C:\Program Files\Gadu-Gadu\gg.exe (Gadu-Gadu S.A.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 91 00 00 00 [binary data] O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 91 00 00 00 [binary data] O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1431431645-1109081242-679006776-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: Wyślij do interfejsu Bluetooth - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm () O8 - Extra context menu item: Wyślij do urządzenia &Bluetooth... - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm () O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm () O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm () O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {8FEFF364-6A5F-4966-A917-A3AC28411659} http://download.sopcast.com/download/SOPCORE.CAB (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 213.5.208.35 213.5.208.3 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{66E68C58-5E6B-4FEB-830F-DEEEADE15945}: DhcpNameServer = 213.5.208.35 213.5.208.3 O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O20 - Winlogon\Notify\ACNotify: DllName - (ACNotify.dll) - C:\Program Files\ThinkPad\ConnectUtilities\ACNotify.dll (Lenovo ) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\Surmówna\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Surmówna\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006-03-02 06:00:48 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2011-02-22 18:32:54 | 000,000,168 | R--- | M] () - E:\autorun -- [ CDFS ] O32 - AutoRun File - [2011-12-07 11:42:16 | 000,000,128 | R--- | M] () - E:\autorun.inf -- [ CDFS ] O33 - MountPoints2\{3e6c8b81-1d13-11e0-8dd2-806d6172696f}\Shell\Option1\Command - "" = E:\HBCD\HBCDMenu.exe -- [2011-12-07 11:42:16 | 000,018,432 | R--- | M] (http://www.hiren.info) O33 - MountPoints2\{a3a33e95-2dec-11e0-8deb-001b77a46e42}\Shell - "" = AutoRun O33 - MountPoints2\{a3a33e95-2dec-11e0-8deb-001b77a46e42}\Shell\AutoRun\command - "" = F:\setup.exe AUTORUN=1 O33 - MountPoints2\E\Shell\Option1\Command - "" = E:\HBCD\HBCDMenu.exe -- [2011-12-07 11:42:16 | 000,018,432 | R--- | M] (http://www.hiren.info) O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-04-03 20:04:11 | 000,593,920 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Surmówna\Pulpit\OTL.exe [2012-04-03 19:30:09 | 004,455,431 | ---- | C] (Swearware) -- C:\Documents and Settings\Surmówna\Pulpit\ComboFix.exe [2012-04-03 08:15:09 | 000,000,000 | ---D | C] -- C:\TEMP [2012-04-03 08:13:35 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch [2012-04-03 00:52:53 | 000,000,000 | -HSD | C] -- C:\RECYCLER [2012-04-03 00:50:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT [2012-04-03 00:45:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Autostart [2012-04-03 00:10:18 | 000,000,000 | ---D | C] -- C:\Quarantine [2012-04-03 00:07:24 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Narzędzia administracyjne [2012-04-02 23:42:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Surmówna\Dane aplikacji\Malwarebytes [2012-04-02 23:42:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data [2012-04-02 23:42:51 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2012-04-02 23:42:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes [2012-04-02 22:17:26 | 000,000,000 | ---D | C] -- C:\WINDOWS\CSC [2012-03-27 15:51:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Surmówna\Dane aplikacji\pdfforge [2012-03-27 15:51:03 | 000,662,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSCOMCT2.OCX [2012-03-27 15:51:03 | 000,137,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSMAPI32.OCX [2012-03-27 15:51:03 | 000,054,784 | ---- | C] (pdfforge GbR) -- C:\WINDOWS\System32\pdfcmon.dll [2012-03-27 15:51:00 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSMPIDE.DLL [2012-03-27 15:50:59 | 000,000,000 | ---D | C] -- C:\Program Files\PDFCreator [2012-03-25 14:04:21 | 000,000,000 | ---D | C] -- C:\Program Files\Total Assistant [2012-03-23 17:59:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Premium [2011-01-15 04:41:42 | 000,148,736 | ---- | C] (Avanquest Software) -- C:\Documents and Settings\All Users\Dane aplikacji\hpe4E.dll [3 D:\Moje dokumenty\*.tmp files -> D:\Moje dokumenty\*.tmp -> ] [2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-04-03 20:11:08 | 012,845,056 | -H-- | M] () -- C:\Documents and Settings\Surmówna\NTUSER.DAT [2012-04-03 20:04:13 | 000,593,920 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Surmówna\Pulpit\OTL.exe [2012-04-03 19:42:41 | 000,001,733 | ---- | M] () -- C:\Documents and Settings\Surmówna\Pulpit\Instrukcja uzycia programu ComboFix.url [2012-04-03 19:30:24 | 004,455,431 | ---- | M] (Swearware) -- C:\Documents and Settings\Surmówna\Pulpit\ComboFix.exe [2012-04-03 19:02:52 | 000,000,382 | ---- | M] () -- C:\WINDOWS\tasks\SystemToolsDailyTest.job [2012-04-03 18:48:55 | 000,104,724 | ---- | M] () -- C:\WINDOWS\System32\nvModes.001 [2012-04-03 08:21:05 | 000,441,418 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts [2012-04-03 08:19:24 | 001,285,682 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2012-04-03 08:19:24 | 000,566,344 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2012-04-03 08:19:24 | 000,503,126 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2012-04-03 08:19:24 | 000,110,620 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2012-04-03 08:19:24 | 000,088,650 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2012-04-03 08:16:29 | 000,104,724 | ---- | M] () -- C:\WINDOWS\System32\nvModes.dat [2012-04-03 08:15:16 | 000,025,269 | ---- | M] () -- C:\WINDOWS\System32\PROCDB.INI [2012-04-03 08:14:16 | 000,000,306 | ---- | M] () -- C:\WINDOWS\tasks\PMTask.job [2012-04-03 08:13:58 | 000,190,797 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml [2012-04-03 08:13:45 | 000,000,380 | ---- | M] () -- C:\WINDOWS\System32\IPSCtrl.INI [2012-04-03 08:13:35 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2012-04-03 08:13:34 | 000,002,278 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2012-04-03 08:13:20 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2012-04-03 08:13:12 | 3202,658,304 | -HS- | M] () -- C:\hiberfil.sys [2012-04-03 08:12:12 | 000,000,188 | -HS- | M] () -- C:\Documents and Settings\Surmówna\ntuser.ini [2012-04-02 23:28:26 | 154,027,484 | ---- | M] () -- C:\Documents and Settings\Surmówna\Pulpit\20120402_all.reg [2012-04-02 22:08:11 | 000,001,324 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat [2012-04-02 12:53:13 | 001,148,542 | -H-- | M] () -- C:\Documents and Settings\Surmówna\Ustawienia lokalne\Dane aplikacji\IconCache.db [2012-03-28 23:05:51 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2012-03-26 12:46:54 | 000,070,656 | ---- | M] () -- C:\Documents and Settings\Surmówna\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-03-25 14:04:21 | 000,000,701 | ---- | M] () -- C:\Documents and Settings\Surmówna\Pulpit\Total Assistant.lnk [2012-03-22 17:49:00 | 002,208,830 | ---- | M] () -- C:\Documents and Settings\Surmówna\Pulpit\Photo0001.jpg [2012-03-22 12:35:31 | 000,000,493 | ---- | M] () -- C:\Documents and Settings\Surmówna\Pulpit\Surma Tłumaczenia.lnk [2012-03-15 11:58:07 | 000,179,448 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2012-03-15 10:05:11 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2012-03-14 18:23:42 | 000,054,784 | ---- | M] (pdfforge GbR) -- C:\WINDOWS\System32\pdfcmon.dll [2012-03-09 20:42:18 | 000,097,417 | ---- | M] () -- C:\Documents and Settings\Surmówna\Pulpit\_MG_1570_cr1.jpg [2012-03-08 20:51:51 | 000,002,645 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT [2012-03-07 23:47:38 | 002,549,278 | ---- | M] () -- D:\Moje dokumenty\The_Girl_with_the_Dragon_Tattoo.pdf [2012-03-07 02:15:19 | 000,041,184 | ---- | M] (AVAST Software) -- C:\WINDOWS\avastSS.scr [2012-03-07 02:15:14 | 000,201,352 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe [2012-03-07 02:03:51 | 000,612,184 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSnx.sys [2012-03-07 02:03:38 | 000,337,880 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSP.sys [2012-03-07 02:02:00 | 000,035,672 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys [2012-03-07 02:01:53 | 000,053,848 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys [2012-03-07 02:01:39 | 000,095,704 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys [2012-03-07 02:01:35 | 000,089,048 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswmon.sys [2012-03-07 02:01:30 | 000,020,696 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys [2012-03-07 01:58:29 | 000,024,920 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys [3 D:\Moje dokumenty\*.tmp files -> D:\Moje dokumenty\*.tmp -> ] [2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-04-03 19:42:41 | 000,001,733 | ---- | C] () -- C:\Documents and Settings\Surmówna\Pulpit\Instrukcja uzycia programu ComboFix.url [2012-04-03 08:13:12 | 3202,658,304 | -HS- | C] () -- C:\hiberfil.sys [2012-04-02 23:28:05 | 154,027,484 | ---- | C] () -- C:\Documents and Settings\Surmówna\Pulpit\20120402_all.reg [2012-03-25 14:04:21 | 000,000,701 | ---- | C] () -- C:\Documents and Settings\Surmówna\Pulpit\Total Assistant.lnk [2012-03-22 23:49:17 | 002,208,830 | ---- | C] () -- C:\Documents and Settings\Surmówna\Pulpit\Photo0001.jpg [2012-03-20 16:00:19 | 000,097,417 | ---- | C] () -- C:\Documents and Settings\Surmówna\Pulpit\_MG_1570_cr1.jpg [2012-03-14 14:13:41 | 001,148,542 | -H-- | C] () -- C:\Documents and Settings\Surmówna\Ustawienia lokalne\Dane aplikacji\IconCache.db [2012-03-07 23:47:38 | 002,549,278 | ---- | C] () -- D:\Moje dokumenty\The_Girl_with_the_Dragon_Tattoo.pdf [2012-02-16 21:16:29 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll [2012-01-21 00:58:08 | 000,645,632 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2012-01-21 00:58:08 | 000,240,640 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2011-11-30 04:54:31 | 001,048,576 | ---- | C] () -- C:\WINDOWS\System32\syndata.bin [2011-03-23 12:07:19 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2011-01-31 17:36:13 | 000,007,680 | ---- | C] () -- C:\WINDOWS\System32\CNMVS6f.DLL [2011-01-28 18:06:27 | 000,894,976 | ---- | C] () -- C:\WINDOWS\System32\leguninst.exe [2011-01-23 17:17:57 | 000,000,231 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\Microsoft.SqlServer.Compact.351.32.bc [2011-01-23 17:00:37 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat [2011-01-16 22:19:12 | 000,070,656 | ---- | C] () -- C:\Documents and Settings\Surmówna\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-01-16 17:35:46 | 000,080,896 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2011-01-16 17:35:46 | 000,000,590 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2011-01-15 03:16:24 | 000,015,498 | ---- | C] () -- C:\WINDOWS\VX1000.ini [2011-01-15 02:18:42 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat [2011-01-13 02:43:46 | 008,200,088 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat [2011-01-13 00:56:06 | 000,535,624 | ---- | C] () -- C:\WINDOWS\System32\pwNative.exe [2011-01-13 00:56:05 | 000,016,472 | ---- | C] () -- C:\WINDOWS\System32\pwdrvio.sys [2011-01-13 00:56:05 | 000,011,104 | ---- | C] () -- C:\WINDOWS\System32\pwdspio.sys [2011-01-11 05:16:14 | 000,104,724 | ---- | C] () -- C:\WINDOWS\System32\nvModes.dat [2011-01-11 05:08:14 | 000,001,324 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat [2011-01-11 04:54:38 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\TpKmpSvc.exe [2011-01-11 04:53:14 | 000,196,608 | ---- | C] () -- C:\WINDOWS\PWMBTHLP.EXE [2011-01-11 03:10:12 | 000,034,408 | ---- | C] () -- C:\Documents and Settings\Surmówna\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT [2011-01-11 01:48:11 | 000,000,133 | ---- | C] () -- C:\Documents and Settings\Surmówna\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [2011-01-11 01:43:00 | 000,035,648 | ---- | C] () -- C:\WINDOWS\System32\ntio411.sys [2011-01-11 01:43:00 | 000,035,424 | ---- | C] () -- C:\WINDOWS\System32\ntio412.sys [2011-01-11 01:43:00 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\ntio804.sys [2011-01-11 01:43:00 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\ntio404.sys [2011-01-11 01:43:00 | 000,033,936 | ---- | C] () -- C:\WINDOWS\System32\ntio.sys [2011-01-11 01:43:00 | 000,029,370 | ---- | C] () -- C:\WINDOWS\System32\ntdos411.sys [2011-01-11 01:43:00 | 000,029,274 | ---- | C] () -- C:\WINDOWS\System32\ntdos412.sys [2011-01-11 01:43:00 | 000,029,146 | ---- | C] () -- C:\WINDOWS\System32\ntdos804.sys [2011-01-11 01:43:00 | 000,029,146 | ---- | C] () -- C:\WINDOWS\System32\ntdos404.sys [2011-01-11 01:43:00 | 000,027,898 | ---- | C] () -- C:\WINDOWS\System32\ntdos.sys [2011-01-11 01:42:59 | 000,042,809 | ---- | C] () -- C:\WINDOWS\System32\key01.sys [2011-01-11 01:42:59 | 000,042,537 | ---- | C] () -- C:\WINDOWS\System32\keyboard.sys [2011-01-11 01:42:59 | 000,004,976 | ---- | C] () -- C:\WINDOWS\System32\himem.sys [2011-01-11 01:42:58 | 000,027,097 | ---- | C] () -- C:\WINDOWS\System32\country.sys [2011-01-11 01:42:58 | 000,009,043 | ---- | C] () -- C:\WINDOWS\System32\ansi.sys [2011-01-11 01:42:58 | 000,001,148 | ---- | C] () -- C:\WINDOWS\System32\vwipxspx.exe [2011-01-11 01:42:55 | 000,011,859 | ---- | C] () -- C:\WINDOWS\System32\setver.exe [2011-01-11 01:42:55 | 000,000,882 | ---- | C] () -- C:\WINDOWS\System32\share.exe [2011-01-11 01:42:54 | 000,003,346 | ---- | C] () -- C:\WINDOWS\System32\redir.exe [2011-01-11 01:42:54 | 000,003,260 | ---- | C] () -- C:\WINDOWS\System32\nw16.exe [2011-01-11 01:42:52 | 000,007,116 | ---- | C] () -- C:\WINDOWS\System32\nlsfunc.exe [2011-01-11 01:42:50 | 000,039,434 | ---- | C] () -- C:\WINDOWS\System32\mem.exe [2011-01-11 01:42:50 | 000,000,817 | ---- | C] () -- C:\WINDOWS\System32\mscdexnt.exe [2011-01-11 01:42:48 | 000,057,856 | ---- | C] () -- C:\WINDOWS\System32\dvdplay.exe [2011-01-11 01:42:48 | 000,053,920 | ---- | C] () -- C:\WINDOWS\System32\dosx.exe [2011-01-11 01:42:48 | 000,020,986 | ---- | C] () -- C:\WINDOWS\System32\debug.exe [2011-01-11 01:42:48 | 000,012,866 | ---- | C] () -- C:\WINDOWS\System32\edlin.exe [2011-01-11 01:42:48 | 000,012,594 | ---- | C] () -- C:\WINDOWS\System32\append.exe [2011-01-11 01:42:48 | 000,008,520 | ---- | C] () -- C:\WINDOWS\System32\exe2bin.exe [2011-01-11 01:42:48 | 000,000,882 | ---- | C] () -- C:\WINDOWS\System32\fastopen.exe [2011-01-11 01:42:44 | 000,013,312 | ---- | C] () -- C:\WINDOWS\System32\win87em.dll [2011-01-11 01:42:42 | 000,015,360 | ---- | C] () -- C:\WINDOWS\System32\tsd32.dll [2011-01-11 01:42:36 | 000,270,848 | ---- | C] () -- C:\WINDOWS\System32\sbe.dll [2011-01-11 01:42:36 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\scriptpw.dll [2011-01-11 01:42:35 | 000,733,696 | ---- | C] () -- C:\WINDOWS\System32\qedwipes.dll [2011-01-11 01:42:34 | 000,157,696 | ---- | C] () -- C:\WINDOWS\System32\paqsp.dll [2011-01-11 01:42:30 | 000,355,112 | ---- | C] () -- C:\WINDOWS\System32\msjetoledb40.dll [2011-01-11 01:42:28 | 000,094,282 | ---- | C] () -- C:\WINDOWS\System32\msencode.dll [2011-01-11 01:42:28 | 000,014,336 | ---- | C] () -- C:\WINDOWS\System32\msdmo.dll [2011-01-11 01:42:23 | 000,199,168 | ---- | C] () -- C:\WINDOWS\System32\ir32_32.dll [2011-01-11 01:42:20 | 000,186,880 | ---- | C] () -- C:\WINDOWS\System32\encdec.dll [2011-01-11 01:42:17 | 000,253,440 | ---- | C] () -- C:\WINDOWS\System32\compatui.dll [2011-01-11 01:42:14 | 000,070,656 | ---- | C] () -- C:\WINDOWS\System32\amstream.dll [2011-01-11 01:41:59 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\cdplayer.exe.manifest [2011-01-11 01:41:59 | 000,000,488 | RH-- | C] () -- C:\WINDOWS\System32\logonui.exe.manifest [2011-01-11 01:41:57 | 000,053,478 | ---- | C] () -- C:\WINDOWS\System32\tcpmon.ini [2011-01-11 01:41:57 | 000,026,717 | ---- | C] () -- C:\WINDOWS\System32\tslabels.ini [2011-01-11 01:41:57 | 000,016,024 | ---- | C] () -- C:\WINDOWS\System32\rsvp.ini [2011-01-11 01:41:57 | 000,013,819 | ---- | C] () -- C:\WINDOWS\System32\pschdprf.ini [2011-01-11 01:41:57 | 000,006,074 | ---- | C] () -- C:\WINDOWS\System32\rasctrs.ini [2011-01-11 01:41:57 | 000,002,890 | ---- | C] () -- C:\WINDOWS\System32\perfwci.ini [2011-01-11 01:41:57 | 000,000,477 | ---- | C] () -- C:\WINDOWS\win.ini [2011-01-11 01:41:57 | 000,000,359 | ---- | C] () -- C:\WINDOWS\System32\prodspec.ini [2011-01-11 01:41:57 | 000,000,227 | ---- | C] () -- C:\WINDOWS\system.ini [2011-01-11 01:41:57 | 000,000,037 | ---- | C] () -- C:\WINDOWS\vbaddin.ini [2011-01-11 01:41:57 | 000,000,036 | ---- | C] () -- C:\WINDOWS\vb.ini [2011-01-11 01:41:56 | 001,285,682 | ---- | C] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2011-01-11 01:41:56 | 001,015,477 | ---- | C] () -- C:\WINDOWS\System32\esentprf.ini [2011-01-11 01:41:56 | 000,020,629 | ---- | C] () -- C:\WINDOWS\System32\mqperf.ini [2011-01-11 01:41:56 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2011-01-11 01:41:56 | 000,003,813 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.ini [2011-01-11 01:41:56 | 000,002,992 | ---- | C] () -- C:\WINDOWS\System32\perfci.ini [2011-01-11 01:41:56 | 000,002,035 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI [2011-01-11 01:41:56 | 000,001,405 | ---- | C] () -- C:\WINDOWS\msdfmap.ini [2011-01-11 01:41:56 | 000,001,295 | ---- | C] () -- C:\WINDOWS\System32\perffilt.ini [2011-01-11 01:41:49 | 000,002,656 | ---- | C] () -- C:\WINDOWS\System32\netware.drv [2011-01-11 01:41:47 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat [2011-01-11 01:41:47 | 000,566,344 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat [2011-01-11 01:41:47 | 000,503,126 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat [2011-01-11 01:41:47 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat [2011-01-11 01:41:47 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat [2011-01-11 01:41:47 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat [2011-01-11 01:41:47 | 000,179,448 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2011-01-11 01:41:47 | 000,110,620 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat [2011-01-11 01:41:47 | 000,088,650 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat [2011-01-11 01:41:47 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat [2011-01-11 01:41:47 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat [2011-01-11 01:41:47 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2011-01-11 01:41:47 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat [2011-01-11 01:41:47 | 000,004,547 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat [2011-01-11 01:41:47 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2011-01-11 01:41:47 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat [2011-01-11 01:41:46 | 000,070,622 | ---- | C] () -- C:\WINDOWS\System32\edit.com [2011-01-11 01:41:46 | 000,051,823 | ---- | C] () -- C:\WINDOWS\System32\command.com [2011-01-11 01:41:46 | 000,019,806 | ---- | C] () -- C:\WINDOWS\System32\graphics.com [2011-01-11 01:41:46 | 000,014,913 | ---- | C] () -- C:\WINDOWS\System32\kb16.com [2011-01-11 01:41:46 | 000,001,168 | ---- | C] () -- C:\WINDOWS\System32\loadfix.com [2011-01-11 01:41:26 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin [2011-01-11 01:41:25 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin [2011-01-11 01:41:25 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin [2011-01-11 01:41:22 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini [2011-01-11 01:41:21 | 000,000,000 | ---- | C] () -- C:\WINDOWS\control.ini [2011-01-11 01:31:54 | 000,004,224 | ---- | C] () -- C:\WINDOWS\System32\drivers\IBMBLDID.sys [2011-01-11 01:31:08 | 000,114,688 | ---- | C] () -- C:\WINDOWS\desktopset.exe [2011-01-11 01:24:21 | 000,204,800 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeW7.dll [2011-01-11 01:24:21 | 000,200,704 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeA6.dll [2011-01-11 01:24:21 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeP6.dll [2011-01-11 01:24:21 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeM6.dll [2011-01-11 01:24:21 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\IVIresizePX.dll [2011-01-11 01:24:21 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\IVIresize.dll [2011-01-11 01:18:33 | 000,356,352 | ---- | C] () -- C:\WINDOWS\System32\AegisI5Installer.exe [2011-01-11 01:16:40 | 000,004,608 | ---- | C] () -- C:\WINDOWS\System32\drivers\TSMAPIP.SYS [2011-01-11 01:07:32 | 000,000,138 | ---- | C] () -- C:\WINDOWS\System32\Softkbd.exe.config [2010-09-22 15:18:56 | 002,860,384 | ---- | C] () -- C:\WINDOWS\System32\btwicons.dll [color=#E56717]========== LOP Check ==========[/color] [2011-01-11 01:37:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Lenovo [2011-01-13 02:13:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Alwil Software [2011-01-11 04:42:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Lenovo [2012-04-01 20:18:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\MemoQ [2011-01-11 01:27:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC-Doctor [2011-01-13 02:24:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PCDr [2012-03-23 17:59:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Premium [2011-11-30 04:20:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\RegCure [2012-02-29 00:01:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SDL [2012-02-28 23:59:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SDL International [2011-01-11 01:37:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Default User\Dane aplikacji\Lenovo [2011-01-13 01:55:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Surmówna\Dane aplikacji\Avaya [2012-03-08 01:56:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Surmówna\Dane aplikacji\Canon [2011-01-11 03:14:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Surmówna\Dane aplikacji\Downloaded Installations [2011-04-03 17:44:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Surmówna\Dane aplikacji\e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1 [2011-01-15 03:44:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Surmówna\Dane aplikacji\EAC [2012-03-17 22:16:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Surmówna\Dane aplikacji\FileZilla [2011-01-15 02:23:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Surmówna\Dane aplikacji\Gadu-Gadu [2011-02-17 00:36:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Surmówna\Dane aplikacji\ImgBurn [2011-01-23 23:18:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Surmówna\Dane aplikacji\InterVideo [2011-07-24 21:48:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Surmówna\Dane aplikacji\klavaro [2011-01-15 09:07:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Surmówna\Dane aplikacji\Leadertech [2011-01-28 20:27:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Surmówna\Dane aplikacji\Legalis [2011-01-11 01:37:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Surmówna\Dane aplikacji\Lenovo [2012-04-01 21:20:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Surmówna\Dane aplikacji\MemoQ [2011-09-01 10:31:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Surmówna\Dane aplikacji\MyPhoneExplorer [2011-01-15 02:24:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Surmówna\Dane aplikacji\Nowe Gadu-Gadu [2011-01-15 18:33:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Surmówna\Dane aplikacji\OpenOffice.org [2012-03-27 15:51:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Surmówna\Dane aplikacji\pdfforge [2011-12-04 14:26:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Surmówna\Dane aplikacji\PwrMgr [2012-02-29 00:26:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Surmówna\Dane aplikacji\SDL [2011-01-15 02:31:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Surmówna\Dane aplikacji\Thunderbird [2011-02-25 20:42:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Surmówna\Dane aplikacji\translateclient [2011-05-09 11:02:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Surmówna\Dane aplikacji\Update [2012-03-15 15:28:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Surmówna\Dane aplikacji\uTorrent [2011-01-13 02:25:13 | 000,000,528 | ---- | M] () -- C:\WINDOWS\Tasks\PCDoctorBackgroundMonitorTask.job [2012-04-03 08:14:16 | 000,000,306 | ---- | M] () -- C:\WINDOWS\Tasks\PMTask.job [2012-04-03 19:02:52 | 000,000,382 | ---- | M] () -- C:\WINDOWS\Tasks\SystemToolsDailyTest.job [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Files - Unicode (All) ==========[/color] [2011-10-29 01:22:08 | 005,991,360 | ---- | M] ()(C:\Documents and Settings\Surmówna\Pulpit\13. ????????? ??? ???????? - ?????????? ????, ???????.mp3) -- C:\Documents and Settings\Surmówna\Pulpit\13. Церковний хор Видубичі - Богородіце дєво, радуйся.mp3 [2011-10-29 01:21:44 | 005,991,360 | ---- | C] ()(C:\Documents and Settings\Surmówna\Pulpit\13. ????????? ??? ???????? - ?????????? ????, ???????.mp3) -- C:\Documents and Settings\Surmówna\Pulpit\13. Церковний хор Видубичі - Богородіце дєво, радуйся.mp3 < End of report >