OTL logfile created on: 2010-10-06 19:50:59 - Run 3 OTL by OldTimer - Version 3.2.14.1 Folder = D:\rootkit Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 502,00 Mb Total Physical Memory | 131,00 Mb Available Physical Memory | 26,00% Memory free 1,00 Gb Paging File | 1,00 Gb Available in Paging File | 72,00% Paging File free Paging file location(s): C:\pagefile.sys 756 1512 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 43,88 Gb Total Space | 32,97 Gb Free Space | 75,14% Space Free | Partition Type: FAT32 Drive D: | 44,37 Gb Total Space | 44,25 Gb Free Space | 99,73% Space Free | Partition Type: FAT32 E: Drive not present or media not loaded Drive F: | 3,77 Gb Total Space | 1,48 Gb Free Space | 39,33% Space Free | Partition Type: FAT32 Drive G: | 1,86 Gb Total Space | 1,57 Gb Free Space | 84,45% Space Free | Partition Type: FAT H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: ACER Current User Name: Pawel Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2010-10-06 18:16:22 | 000,576,512 | ---- | M] (OldTimer Tools) -- D:\rootkit\OTL.exe PRC - [2010-09-01 08:39:18 | 001,164,584 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe PRC - [2010-07-23 04:15:36 | 000,910,296 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2008-04-14 19:21:16 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2006-08-26 08:35:20 | 000,507,904 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Documents and Settings\Pawel\Ustawienia lokalne\Temp\RtkBtMnt.exe PRC - [2006-08-10 19:29:14 | 000,352,256 | ---- | M] (Acer Incorporated) -- C:\Acer\Empowering Technology\ePower\ePower_DMC.exe PRC - [2006-08-09 22:29:38 | 000,114,784 | ---- | M] () -- C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe PRC - [2006-08-09 22:29:36 | 000,254,050 | ---- | M] () -- C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe PRC - [2006-08-09 22:29:08 | 000,151,552 | ---- | M] (CyberLink Corp.) -- C:\Program Files\Acer\Acer Arcade\PCMService.exe PRC - [2006-08-09 22:28:36 | 001,077,376 | ---- | M] (Cyberlink) -- C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLService.exe PRC - [2006-08-09 22:28:36 | 000,061,440 | ---- | M] (Cyberlink) -- C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe PRC - [2006-07-20 22:15:32 | 000,593,920 | ---- | M] (Dritek System Inc.) -- C:\Program Files\Launch Manager\LManager.exe PRC - [2006-03-23 12:17:42 | 000,094,208 | ---- | M] (Intel Corporation) -- C:\WINDOWS\system32\igfxext.exe PRC - [2006-01-24 18:00:08 | 000,397,312 | ---- | M] (acer Inc.) -- C:\Acer\Empowering Technology\eRecovery\Monitor.exe PRC - [2005-12-27 15:50:28 | 000,069,632 | ---- | M] (HiTRUST) -- C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe PRC - [2005-10-24 16:45:32 | 002,462,208 | ---- | M] (Avocent Inc.) -- C:\Acer\Empowering Technology\admtray.exe PRC - [2005-10-24 16:40:52 | 001,314,816 | ---- | M] (Avocent Inc.) -- C:\Acer\Empowering Technology\admServ.exe PRC - [2004-12-14 04:44:06 | 000,029,696 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2010-10-06 18:16:22 | 000,576,512 | ---- | M] (OldTimer Tools) -- D:\rootkit\OTL.exe MOD - [2008-04-14 19:20:36 | 001,028,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\mfc42.dll MOD - [2008-04-14 19:16:32 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx MOD - [2006-01-20 15:56:00 | 000,028,672 | ---- | M] () -- C:\Acer\Empowering Technology\ePower\SysHook.dll MOD - [2005-12-27 16:57:30 | 000,053,248 | ---- | M] (HiTRUST) -- C:\WINDOWS\system32\sysenv.dll MOD - [2005-12-27 15:50:26 | 000,010,752 | ---- | M] () -- C:\WINDOWS\system32\MSNChatHook.dll MOD - [2004-08-04 20:00:00 | 000,053,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\mfc42loc.dll MOD - [2003-03-18 22:12:12 | 001,047,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\MFC71u.dll MOD - [2003-02-21 05:42:20 | 000,348,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msvcr71.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Disabled | Stopped] -- C:\WINDOWS\System32\hidserv.dll -- (HidServ) SRV - File not found [On_Demand | Stopped] -- C:\WINDOWS\System32\appmgmts.dll -- (AppMgmt) SRV - [2006-08-09 22:29:38 | 000,114,784 | ---- | M] () [Auto | Running] -- C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe -- (CLSched) CyberLink Task Scheduler (CTS) SRV - [2006-08-09 22:29:36 | 000,254,050 | ---- | M] () [Auto | Running] -- C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe -- (CLCapSvc) CyberLink Background Capture Service (CBCS) SRV - [2006-08-09 22:28:36 | 000,061,440 | ---- | M] (Cyberlink) [Auto | Running] -- C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe -- (CyberLink Media Library Service) SRV - [2005-10-24 16:40:52 | 001,314,816 | ---- | M] (Avocent Inc.) [Auto | Running] -- C:\Acer\Empowering Technology\admServ.exe -- (AWService) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2008-04-13 20:36:40 | 000,043,008 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\amdagp.sys -- (amdagp) DRV - [2008-04-13 20:36:40 | 000,040,960 | ---- | M] (Silicon Integrated Systems Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\sisagp.sys -- (sisagp) DRV - [2008-04-13 18:36:06 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Hdaudbus.sys -- (HDAudBus) DRV - [2008-03-17 11:03:46 | 000,101,376 | R--- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ewusbmdm.sys -- (hwdatacard) DRV - [2006-08-26 08:35:26 | 000,006,144 | ---- | M] (NewTech Infosystems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NTIDrvr.sys -- (NTIDrvr) DRV - [2006-06-30 10:40:40 | 000,775,936 | ---- | M] (Bison Electronics. Inc. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\BisonCam.sys -- (Cam5603D) DRV - [2006-06-28 16:25:24 | 004,304,384 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.Sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2006-06-16 19:17:38 | 000,074,752 | ---- | M] (ENE Technology Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ESM7SK.sys -- (ESMCR) DRV - [2006-06-16 19:17:38 | 000,040,064 | ---- | M] (ENE Technology Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ESD7SK.sys -- (ESDCR) DRV - [2006-06-16 19:17:36 | 000,061,056 | ---- | M] (ENE Technology Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\EMS7SK.sys -- (EMSCR) DRV - [2006-03-03 12:52:30 | 000,192,672 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SynTP.sys -- (SynTP) DRV - [2005-11-27 07:36:08 | 001,427,968 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\w39n51.sys -- (w39n51) Intel(R) DRV - [2005-11-02 13:24:24 | 000,424,320 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\BCMWL5.SYS -- (BCM43XX) DRV - [2005-10-31 14:17:00 | 000,045,312 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\bcm4sbxp.sys -- (bcm4sbxp) DRV - [2005-10-31 14:16:00 | 000,046,080 | ---- | M] (SMSC) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\smcirda.sys -- (SMCIRDA) DRV - [2005-10-24 10:20:52 | 000,218,496 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSFHWAZL.sys -- (HSFHWAZL) DRV - [2005-10-18 16:53:24 | 000,998,656 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_DPV.sys -- (HSF_DPV) DRV - [2005-10-18 16:52:30 | 000,721,280 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf) DRV - [2005-10-15 18:20:44 | 000,012,106 | ---- | M] (OSA Technologies) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\OsaFsLoc.sys -- (OsaFsLoc) DRV - [2005-09-13 15:34:40 | 000,004,392 | ---- | M] (OSA Technologies) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NdisFilt.sys -- (NdisFilt) DRV - [2005-06-30 16:58:24 | 000,007,296 | ---- | M] (OSA Technologies, An Avocent Company) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\osaio.sys -- (osaio) DRV - [2005-05-02 12:13:42 | 000,009,600 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\NETMNT.sys -- (NETMNT) DRV - [2005-01-14 15:57:16 | 000,004,010 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\osanbm.sys -- (osanbm) DRV - [2005-01-13 14:46:16 | 000,069,632 | ---- | M] () [Kernel | Auto | Running] -- C:\Acer\Empowering Technology\eRecovery\int15.sys -- (int15.sys) DRV - [2004-12-17 17:14:44 | 000,013,952 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\UBHelper.sys -- (UBHelper) DRV - [2004-12-08 14:10:00 | 000,016,896 | ---- | M] (Dritek System Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\DKbFltr.SYS -- (DKbFltr) DRV - [2004-08-04 20:00:00 | 000,179,584 | ---- | M] (Mylex Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\dac2w2k.sys -- (dac2w2k) DRV - [2004-08-04 20:00:00 | 000,049,024 | ---- | M] (QLogic Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\ql1280.sys -- (ql1280) DRV - [2004-08-04 20:00:00 | 000,045,312 | ---- | M] (QLogic Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\ql12160.sys -- (ql12160) DRV - [2004-08-04 20:00:00 | 000,040,320 | ---- | M] (QLogic Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\ql1080.sys -- (ql1080) DRV - [2004-08-04 20:00:00 | 000,036,736 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\ultra.sys -- (ultra) DRV - [2004-08-04 20:00:00 | 000,032,640 | ---- | M] (LSI Logic) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\symc8xx.sys -- (symc8xx) DRV - [2004-08-04 20:00:00 | 000,030,688 | ---- | M] (LSI Logic) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\sym_u3.sys -- (sym_u3) DRV - [2004-08-04 20:00:00 | 000,028,384 | ---- | M] (LSI Logic) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\sym_hi.sys -- (sym_hi) DRV - [2004-08-04 20:00:00 | 000,026,496 | ---- | M] (Advanced System Products, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\asc.sys -- (asc) DRV - [2004-08-04 20:00:00 | 000,019,072 | ---- | M] (Adaptec, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\sparrow.sys -- (Sparrow) DRV - [2004-08-04 20:00:00 | 000,017,280 | ---- | M] (American Megatrends Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\mraid35x.sys -- (mraid35x) DRV - [2004-08-04 20:00:00 | 000,016,256 | ---- | M] (Symbios Logic Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\symc810.sys -- (symc810) DRV - [2004-08-04 20:00:00 | 000,014,848 | ---- | M] (Advanced System Products, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\asc3550.sys -- (asc3550) DRV - [2004-08-04 20:00:00 | 000,006,656 | ---- | M] (CMD Technology, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\cmdide.sys -- (CmdIde) DRV - [2004-08-04 20:00:00 | 000,005,248 | ---- | M] (Acer Laboratories Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\aliide.sys -- (AliIde) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3999476649-355732702-4277736755-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ IE - HKU\S-1-5-21-3999476649-355732702-4277736755-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..network.proxy.type: 0 FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-09-27 13:06:10 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010-09-27 13:06:10 | 000,000,000 | ---D | M] [2010-09-27 13:06:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pawel\Dane aplikacji\Mozilla\Extensions [2010-09-27 13:06:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pawel\Dane aplikacji\Mozilla\Firefox\Profiles\v750k102.default\extensions [2010-09-27 13:06:10 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions [2010-09-27 14:53:32 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} [2010-09-27 14:53:12 | 000,423,656 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll [2010-07-23 02:41:44 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml [2010-07-23 02:41:44 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml [2010-07-23 02:41:44 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml [2010-07-23 02:41:44 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml [2010-07-23 02:41:44 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2010-07-23 02:41:44 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2004-08-04 20:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O3 - HKLM\..\Toolbar: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll (HiTRUST) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [Acer ePower Management] C:\Acer\Empowering Technology\ePower\Acer ePower Management.exe (Acer Value Labs, Taiwan) O4 - HKLM..\Run: [ADMTray.exe] C:\Acer\Empowering Technology\admtray.exe (Avocent Inc.) O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [BluetoothAuthenticationAgent] C:\WINDOWS\System32\bthprops.cpl (Microsoft Corporation) O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe () O4 - HKLM..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe (HiTRUST) O4 - HKLM..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe (Acer Incorporated) O4 - HKLM..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\Monitor.exe (acer Inc.) O4 - HKLM..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE (Microsoft Corporation) O4 - HKLM..\Run: [LaunchApp] C:\WINDOWS\Alaunch.exe (Acer Inc.) O4 - HKLM..\Run: [LManager] C:\Program Files\Launch Manager\LManager.exe (Dritek System Inc.) O4 - HKLM..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe () O4 - HKLM..\Run: [ntiMUI] C:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe () O4 - HKLM..\Run: [PCMService] C:\Program Files\Acer\Acer Arcade\PCMService.exe (CyberLink Corp.) O4 - HKLM..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation) O4 - HKLM..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation) O4 - HKLM..\Run: [SkyTel] C:\WINDOWS\SkyTel.exe (Realtek Semiconductor Corp.) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe (Adobe Systems Incorporated) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 [2010-10-06 19:24:50 | 000,000,000 | ---D | M] O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 [2010-10-06 19:24:50 | 000,000,000 | ---D | M] O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 [2010-10-06 19:24:50 | 000,000,000 | ---D | M] O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-3999476649-355732702-4277736755-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab (Java Plug-in 1.6.0_01) O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.1 O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Acer.bmp O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Acer.bmp O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006-08-26 08:36:22 | 000,000,050 | ---- | M] () - C:\AUTOEXEC.BAT -- [ FAT32 ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* NetSvcs: 6to4 - File not found NetSvcs: AppMgmt - C:\WINDOWS\System32\appmgmts.dll File not found NetSvcs: HidServ - C:\WINDOWS\System32\hidserv.dll File not found NetSvcs: Ias - File not found NetSvcs: Iprip - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: Wmi - C:\WINDOWS\System32\wmi.dll (Microsoft Corporation) NetSvcs: WmdmPmSp - File not found NetSvcs: feqzlhp - File not found [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2010-10-06 19:19:06 | 000,000,000 | ---D | C] -- C:\Avenger [2010-10-04 15:09:02 | 000,872,192 | ---- | C] (DiBcom SA) -- C:\WINDOWS\System32\drivers\mod7700.sys [2010-10-04 15:09:02 | 000,103,168 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\System32\drivers\ewusbfake.sys [2010-10-04 15:09:02 | 000,101,376 | R--- | C] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\System32\drivers\ewusbmdm.sys [2010-10-04 15:09:02 | 000,100,992 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\System32\drivers\ewusbnet.sys [2010-10-04 15:09:02 | 000,024,448 | R--- | C] (Huawei Tech. Co., Ltd.) -- C:\WINDOWS\System32\drivers\ewdcsc.sys [2010-10-04 15:08:48 | 000,000,000 | ---D | C] -- C:\Program Files\PLAY ONLINE [2010-09-29 11:55:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pawel\Pulpit\ALLEGRO [2010-09-27 18:16:52 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Pawel\IECompatCache [2010-09-27 18:16:10 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Pawel\PrivacIE [2010-09-27 18:14:02 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Pawel\IETldCache [2010-09-27 18:09:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\ie8updates [2010-09-27 18:08:35 | 000,000,000 | ---D | C] -- C:\WINDOWS\WBEM [2010-09-27 18:07:01 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ie8 [2010-09-27 17:58:35 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeedsbs.dll [2010-09-27 17:58:34 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeeds.dll [2010-09-27 17:58:32 | 000,743,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iedvtool.dll [2010-09-27 17:58:31 | 001,986,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iertutil.dll [2010-09-27 17:58:30 | 011,077,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieframe.dll [2010-09-27 17:25:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pawel\Moje dokumenty\Pobieranie [2010-09-27 17:01:18 | 000,031,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbccgp.sys [2010-09-27 16:59:48 | 000,026,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbstor.sys [2010-09-27 15:19:05 | 000,032,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msonpmon.dll [2010-09-27 15:16:51 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Works [2010-09-27 15:16:41 | 000,000,000 | ---D | C] -- C:\Program Files\MSBuild [2010-09-27 15:16:20 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Visual Studio [2010-09-27 15:16:20 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER [2010-09-27 15:15:42 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET [2010-09-27 15:13:14 | 000,000,000 | ---D | C] -- C:\WINDOWS\SHELLNEW [2010-09-27 15:12:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pawel\Ustawienia lokalne\Dane aplikacji\Microsoft Help [2010-09-27 15:10:27 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office [2010-09-27 15:10:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Microsoft Help [2010-09-27 15:09:20 | 000,000,000 | RH-D | C] -- C:\MSOCache [2010-09-27 15:07:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pawel\Dane aplikacji\AdobeUM [2010-09-27 15:07:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pawel\Ustawienia lokalne\Dane aplikacji\Adobe [2010-09-27 15:07:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pawel\Dane aplikacji\Adobe [2010-09-27 15:02:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch [2010-09-27 14:53:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Sun [2010-09-27 14:53:26 | 000,423,656 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll [2010-09-27 14:53:26 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe [2010-09-27 14:53:26 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe [2010-09-27 14:53:26 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe [2010-09-27 14:53:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\pl-pl [2010-09-27 14:53:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\l2schemas [2010-09-27 14:53:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\pl [2010-09-27 14:53:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\bits [2010-09-27 14:49:00 | 000,000,000 | ---D | C] -- C:\WINDOWS\network diagnostic [2010-09-27 14:45:22 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$NtServicePackUninstall$ [2010-09-27 14:45:20 | 000,000,000 | ---D | C] -- C:\WINDOWS\EHome [2010-09-27 14:42:00 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Pawel\UserData [2010-09-27 13:28:37 | 000,000,000 | ---D | C] -- C:\WINDOWS\ServicePackFiles [2010-09-27 13:27:31 | 000,000,000 | ---D | C] -- C:\Program Files\MSXML 4.0 [2010-09-27 13:24:20 | 000,104,960 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinrvxx.sys [2010-09-27 13:24:20 | 000,036,463 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1tuxx.sys [2010-09-27 13:24:20 | 000,013,240 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slwdmsup.sys [2010-09-27 13:24:19 | 001,897,408 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\drivers\nv4_mini.sys [2010-09-27 13:24:19 | 001,309,184 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\mtlstrm.sys [2010-09-27 13:24:19 | 000,701,440 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati2mtag.sys [2010-09-27 13:24:19 | 000,126,686 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\mtlmnt5.sys [2010-09-27 13:24:19 | 000,073,216 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atintuxx.sys [2010-09-27 13:24:19 | 000,056,623 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1btxx.sys [2010-09-27 13:24:19 | 000,034,735 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1xsxx.sys [2010-09-27 13:24:19 | 000,031,744 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinxbxx.sys [2010-09-27 13:24:19 | 000,028,672 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinsnxx.sys [2010-09-27 13:24:19 | 000,022,271 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\watv06nt.sys [2010-09-27 13:24:19 | 000,013,776 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\recagent.sys [2010-09-27 13:24:19 | 000,011,935 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv11nt.sys [2010-09-27 13:23:35 | 000,404,990 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slntamr.sys [2010-09-27 13:23:35 | 000,180,360 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\ntmtlfax.sys [2010-09-27 13:23:35 | 000,057,856 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinbtxx.sys [2010-09-27 13:23:34 | 000,452,736 | ---- | C] (Matrox Graphics Inc.) -- C:\WINDOWS\System32\drivers\mtxparhm.sys [2010-09-27 13:23:34 | 000,327,040 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati2mtaa.sys [2010-09-27 13:23:34 | 000,166,912 | ---- | C] (S3 Graphics, Inc.) -- C:\WINDOWS\System32\drivers\s3gnbm.sys [2010-09-27 13:23:34 | 000,095,424 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slnthal.sys [2010-09-27 13:23:34 | 000,063,663 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1rvxx.sys [2010-09-27 13:23:34 | 000,063,488 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinxsxx.sys [2010-09-27 13:23:34 | 000,052,224 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinraxx.sys [2010-09-27 13:23:34 | 000,030,671 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1raxx.sys [2010-09-27 13:23:34 | 000,025,471 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\watv10nt.sys [2010-09-27 13:23:34 | 000,021,343 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1ttxx.sys [2010-09-27 13:23:34 | 000,013,824 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinmdxx.sys [2010-09-27 13:23:34 | 000,012,047 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1pdxx.sys [2010-09-27 13:23:34 | 000,011,807 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv07nt.sys [2010-09-27 13:23:34 | 000,011,615 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1mdxx.sys [2010-09-27 13:23:34 | 000,011,295 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv08nt.sys [2010-09-27 13:23:33 | 000,129,535 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slnt7554.sys [2010-09-27 13:23:33 | 000,029,455 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1xbxx.sys [2010-09-27 13:23:33 | 000,026,367 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1snxx.sys [2010-09-27 13:23:33 | 000,014,336 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinpdxx.sys [2010-09-27 13:23:33 | 000,013,824 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinttxx.sys [2010-09-27 13:23:33 | 000,011,871 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv09nt.sys [2010-09-27 13:14:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pawel\Dane aplikacji\DivX [2010-09-27 13:13:37 | 002,120,176 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxsfs.dll [2010-09-27 13:13:37 | 000,698,864 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\px.dll [2010-09-27 13:13:37 | 000,567,792 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxdrv.dll [2010-09-27 13:13:37 | 000,440,816 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxwave.dll [2010-09-27 13:13:37 | 000,219,632 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxmas.dll [2010-09-27 13:13:37 | 000,133,616 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxafs.dll [2010-09-27 13:13:37 | 000,126,448 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxinsi64.exe [2010-09-27 13:13:37 | 000,123,888 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxcpyi64.exe [2010-09-27 13:13:37 | 000,100,848 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\vxblock.dll [2010-09-27 13:13:37 | 000,072,176 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxhpinst.exe [2010-09-27 13:13:37 | 000,068,592 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxinsa64.exe [2010-09-27 13:13:37 | 000,068,080 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxcpya64.exe [2010-09-27 13:13:37 | 000,009,200 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\cdralw2k.sys [2010-09-27 13:13:37 | 000,009,072 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\cdr4_xp.sys [2010-09-27 13:13:21 | 000,273,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bthport.sys [2010-09-27 13:13:14 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DivX Shared [2010-09-27 13:10:32 | 000,000,000 | ---D | C] -- C:\Program Files\DivX [2010-09-27 13:10:29 | 000,353,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srv.sys [2010-09-27 13:08:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\DivX [2010-09-27 13:07:59 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\t2embed.dll [2010-09-27 13:07:59 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fontsub.dll [2010-09-27 13:07:40 | 000,455,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mrxsmb.sys [2010-09-27 13:07:27 | 000,744,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\helpsvc.exe [2010-09-27 13:06:25 | 002,191,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntoskrnl.exe [2010-09-27 13:06:23 | 002,147,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrnlmp.exe [2010-09-27 13:06:21 | 002,025,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrpamp.exe [2010-09-27 13:06:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pawel\Ustawienia lokalne\Dane aplikacji\Mozilla [2010-09-27 13:06:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pawel\Dane aplikacji\Mozilla [2010-09-27 13:06:08 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox [2010-09-27 13:05:42 | 000,073,728 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl [2010-09-27 13:05:18 | 000,000,000 | ---D | C] -- C:\Program Files\Java [2010-09-27 13:05:17 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java [2010-09-27 13:04:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pawel\Dane aplikacji\Sun [2010-09-27 13:04:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pawel\Dane aplikacji\Skype [2010-09-27 13:04:04 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype [2010-09-27 13:04:03 | 000,000,000 | R--D | C] -- C:\Program Files\Skype [2010-09-27 13:03:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Skype [2010-09-27 13:02:08 | 000,000,000 | ---D | C] -- C:\Program Files\ffdshow [2010-09-27 13:02:06 | 000,471,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aclayers.dll [2010-09-27 13:01:43 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Pawel\Moje dokumenty\Moje wideo [2010-09-27 13:01:43 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Dokumenty\Moje wideo [2010-09-27 13:01:15 | 000,018,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsg.dll [2010-09-27 13:00:57 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Media Connect 2 [2010-09-27 13:00:15 | 000,203,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rmcast.sys [2010-09-27 12:59:50 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\browserchoice.exe [2010-09-27 12:58:55 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\UMDF [2010-09-27 12:58:55 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\LogFiles [2010-09-27 12:57:51 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\netapi32.dll [2010-09-27 12:57:37 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR [2010-09-27 12:56:21 | 000,286,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\gdi32.dll [2010-09-27 12:54:31 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\PreInstall [2010-09-25 12:07:13 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\SoftwareDistribution [2010-09-25 11:59:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pawel\Dane aplikacji\Macromedia [2010-09-25 11:59:03 | 000,000,000 | ---D | C] -- C:\WINDOWS\Acer [2010-09-25 11:58:26 | 000,000,000 | ---D | C] -- C:\WINDOWS\Options [2010-09-25 11:57:37 | 000,258,048 | ---- | C] (Acer Inc.) -- C:\WINDOWS\System32\Uninstall_eRecovery.exe [2010-09-25 11:55:56 | 000,000,000 | ---D | C] -- C:\Program Files\Launch Manager [2010-09-25 11:55:53 | 000,016,896 | ---- | C] (Dritek System Inc.) -- C:\WINDOWS\System32\drivers\DKbFltr.SYS [2010-09-25 11:55:53 | 000,005,120 | ---- | C] (Dritek System Inc.) -- C:\WINDOWS\System32\FILTRCOI.DLL [2010-09-25 11:54:59 | 000,225,350 | ---- | C] (Acer Labs USA) -- C:\WINDOWS\System32\Epm-Po.dll [2010-09-25 11:54:59 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\acpimof.dll [2010-09-25 11:53:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pawel\Ustawienia lokalne\Dane aplikacji\Acer Arcade [2010-09-25 11:53:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\CyberLink [2010-09-25 11:52:51 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msxml4r.dll [2010-09-25 11:52:51 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msxml4a.dll [2010-09-25 11:52:06 | 000,000,000 | ---D | C] -- C:\Program Files\Acer [2010-09-25 11:51:16 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Pawel\Dane aplikacji\Microsoft [2010-09-25 11:51:16 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Pawel\SendTo [2010-09-25 11:51:16 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Pawel\Recent [2010-09-25 11:51:16 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Pawel\Dane aplikacji [2010-09-25 11:51:16 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Pawel\Ulubione [2010-09-25 11:51:16 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Pawel\Moje dokumenty\Moje obrazy [2010-09-25 11:51:16 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Pawel\Moje dokumenty [2010-09-25 11:51:16 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Pawel\Moje dokumenty\Moja muzyka [2010-09-25 11:51:16 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Pawel\Menu Start [2010-09-25 11:51:16 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Pawel\Cookies [2010-09-25 11:51:16 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Pawel\Szablony [2010-09-25 11:51:16 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Pawel\PrintHood [2010-09-25 11:51:16 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Pawel\NetHood [2010-09-25 11:51:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pawel\Pulpit [2010-09-25 11:51:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pawel\Ustawienia lokalne\Dane aplikacji\Microsoft [2010-09-25 11:51:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pawel\Dane aplikacji\Identities [2010-09-25 11:51:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pawel\Ustawienia lokalne\Dane aplikacji\ApplicationHistory [2010-09-25 11:51:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Pawel\Dane aplikacji\Acer [2010-09-25 11:51:15 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Pawel\Ustawienia lokalne [2010-09-25 11:50:41 | 000,000,000 | -HSD | C] -- C:\System Volume Information [2010-09-25 11:47:12 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ipsink.ax [2010-09-25 11:47:00 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kswdmcap.ax [2010-09-25 11:47:00 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kstvtune.ax [2010-09-25 11:47:00 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vidcap.ax [2010-09-25 11:47:00 | 000,000,000 | ---D | C] -- C:\WINDOWS\BisonCam [2010-09-25 11:46:59 | 000,054,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vfwwdm32.dll [2010-09-25 11:46:59 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksxbar.ax [2010-09-25 11:40:57 | 000,180,224 | ---- | C] (Acer Inc.) -- C:\WINDOWS\ADDITEM.EXE [4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2010-10-06 19:49:18 | 000,000,565 | ---- | M] () -- C:\WINDOWS\System32\eRLog.ini [2010-10-06 19:49:02 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2010-10-06 19:48:58 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2010-10-06 19:48:56 | 526,503,936 | -HS- | M] () -- C:\hiberfil.sys [2010-10-06 19:48:30 | 002,097,152 | -H-- | M] () -- C:\Documents and Settings\Pawel\NTUSER.DAT [2010-10-06 19:48:26 | 000,000,012 | ---- | M] () -- C:\WINDOWS\bthservsdp.dat [2010-10-06 19:48:24 | 000,000,188 | -HS- | M] () -- C:\Documents and Settings\Pawel\ntuser.ini [2010-10-06 19:48:14 | 000,950,828 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2010-10-06 19:48:14 | 000,438,056 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2010-10-06 19:48:14 | 000,382,026 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2010-10-06 19:48:14 | 000,068,242 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2010-10-06 19:48:14 | 000,053,770 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2010-10-06 19:18:08 | 004,822,790 | -H-- | M] () -- C:\Documents and Settings\Pawel\Ustawienia lokalne\Dane aplikacji\IconCache.db [2010-10-06 18:09:20 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2010-10-04 15:09:12 | 000,000,626 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\PLAY ONLINE.lnk [2010-10-03 11:00:58 | 000,002,267 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk [2010-09-27 18:09:50 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2010-09-27 16:57:12 | 000,090,352 | ---- | M] () -- C:\Documents and Settings\Pawel\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT [2010-09-27 16:56:26 | 000,344,216 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010-09-27 15:13:32 | 000,000,582 | ---- | M] () -- C:\WINDOWS\win.ini [2010-09-27 14:53:12 | 000,423,656 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll [2010-09-27 14:53:12 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe [2010-09-27 14:53:12 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe [2010-09-27 14:53:12 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe [2010-09-27 14:53:12 | 000,073,728 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl [2010-09-27 14:48:44 | 000,251,152 | RHS- | M] () -- C:\ntldr [2010-09-27 13:14:22 | 000,001,388 | ---- | M] () -- C:\Documents and Settings\Pawel\Pulpit\DivX Movies.lnk [2010-09-27 13:13:52 | 000,000,685 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\DivX Plus Player.lnk [2010-09-27 13:13:34 | 000,000,725 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\DivX Plus Converter.lnk [2010-09-27 13:06:20 | 000,000,000 | ---- | M] () -- C:\WINDOWS\nsreg.dat [2010-09-27 13:06:12 | 000,001,510 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk [2010-09-27 13:01:38 | 000,000,690 | ---- | M] () -- C:\Documents and Settings\Pawel\Pulpit\Windows Media Player.lnk [2010-09-27 13:01:08 | 000,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb [2010-09-27 13:01:08 | 000,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb [2010-09-27 12:59:48 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx [2010-09-27 12:58:58 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\UMDF\MsftWdf_user_01_00_00.Wdf [2010-09-25 11:59:18 | 000,000,081 | ---- | M] () -- C:\WINDOWS\ALaunch.ini [2010-09-25 11:59:08 | 000,000,092 | ---- | M] () -- C:\WINDOWS\GridV.UNI [2010-09-25 11:58:28 | 000,000,427 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Acer OrbiCam.lnk [2010-09-25 11:55:58 | 000,000,083 | ---- | M] () -- C:\WINDOWS\LManager.UNI [2010-09-25 11:55:10 | 000,000,130 | ---- | M] () -- C:\Documents and Settings\Pawel\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [2010-09-25 11:53:18 | 000,001,631 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Acer Arcade.lnk [2010-09-25 11:50:42 | 000,037,619 | ---- | M] () -- C:\WINDOWS\System32\$winnt$.inf [2010-09-25 11:50:40 | 000,262,144 | ---- | M] () -- C:\Documents and Settings\All Users\NTUSER.DAT [2010-09-25 11:50:38 | 000,000,211 | RHS- | M] () -- C:\boot.ini [2010-09-25 11:47:24 | 000,008,192 | ---- | M] () -- C:\WINDOWS\REGLOCS.OLD [2010-09-25 11:40:58 | 000,000,123 | ---- | M] () -- C:\WINDOWS\HotFix.bat [4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010-10-04 15:09:10 | 000,000,626 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\PLAY ONLINE.lnk [2010-09-27 13:24:19 | 000,129,045 | ---- | C] () -- C:\WINDOWS\System32\drivers\cxthsfs2.cty [2010-09-27 13:24:19 | 000,067,866 | ---- | C] () -- C:\WINDOWS\System32\drivers\netwlan5.img [2010-09-27 13:23:34 | 000,064,352 | ---- | C] () -- C:\WINDOWS\System32\drivers\ativmc20.cod [2010-09-27 13:14:22 | 000,001,388 | ---- | C] () -- C:\Documents and Settings\Pawel\Pulpit\DivX Movies.lnk [2010-09-27 13:13:51 | 000,000,685 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\DivX Plus Player.lnk [2010-09-27 13:13:33 | 000,000,725 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\DivX Plus Converter.lnk [2010-09-27 13:06:18 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat [2010-09-27 13:06:11 | 000,001,510 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk [2010-09-27 13:04:05 | 000,002,267 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk [2010-09-27 13:02:10 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2010-09-27 13:02:09 | 000,108,032 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2010-09-27 12:58:56 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\UMDF\MsftWdf_user_01_00_00.Wdf [2010-09-25 12:01:14 | 000,000,565 | ---- | C] () -- C:\WINDOWS\System32\eRLog.ini [2010-09-25 11:59:07 | 000,000,092 | ---- | C] () -- C:\WINDOWS\GridV.UNI [2010-09-25 11:58:26 | 000,000,427 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Acer OrbiCam.lnk [2010-09-25 11:55:57 | 000,000,083 | ---- | C] () -- C:\WINDOWS\LManager.UNI [2010-09-25 11:53:17 | 000,001,631 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Acer Arcade.lnk [2010-09-25 11:51:36 | 000,000,690 | ---- | C] () -- C:\Documents and Settings\Pawel\Pulpit\Windows Media Player.lnk [2010-09-25 11:51:16 | 000,000,130 | ---- | C] () -- C:\Documents and Settings\Pawel\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [2010-09-25 11:51:15 | 002,097,152 | -H-- | C] () -- C:\Documents and Settings\Pawel\NTUSER.DAT [2010-09-25 11:51:15 | 000,001,024 | -H-- | C] () -- C:\Documents and Settings\Pawel\ntuser.dat.LOG [2010-09-25 11:51:15 | 000,000,188 | -HS- | C] () -- C:\Documents and Settings\Pawel\ntuser.ini [2010-09-25 11:50:38 | 000,262,144 | ---- | C] () -- C:\Documents and Settings\All Users\NTUSER.DAT [2010-09-25 11:50:38 | 000,001,024 | -H-- | C] () -- C:\Documents and Settings\All Users\NTUSER.DAT.LOG [2010-09-25 11:47:22 | 000,008,192 | ---- | C] () -- C:\WINDOWS\REGLOCS.OLD [2010-09-25 11:46:16 | 526,503,936 | -HS- | C] () -- C:\hiberfil.sys [2010-09-25 11:40:57 | 000,159,821 | ---- | C] () -- C:\WINDOWS\EMEAPAGE.EXE [2010-09-25 11:40:57 | 000,000,084 | ---- | C] () -- C:\WINDOWS\EMEAPAGE.INI [2006-08-29 03:13:42 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini [2006-08-26 08:36:48 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTIBUN4.dll [2006-08-26 08:35:30 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTIMPEG2.dll [2006-08-26 08:35:30 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTIMP3.dll [2006-08-26 08:35:30 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTIFCD3.dll [2006-08-26 08:35:30 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTICDMK7.dll [2006-06-16 19:17:32 | 000,356,352 | ---- | C] () -- C:\WINDOWS\EMCRI.dll [2006-03-10 14:15:44 | 000,037,706 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini [2005-12-27 15:50:26 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\APISlice.dll [2005-12-27 15:50:26 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\SC_res.dll [2005-12-27 15:50:26 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\EN_res.dll [2005-12-27 15:50:26 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\TC_res.dll [2005-12-27 15:50:26 | 000,010,752 | ---- | C] () -- C:\WINDOWS\System32\MSNChatHook.dll [2005-12-14 20:59:52 | 000,000,038 | ---- | C] () -- C:\WINDOWS\Acer.ini [2005-10-31 18:17:38 | 000,135,168 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll [2005-05-02 12:13:42 | 000,009,600 | ---- | C] () -- C:\WINDOWS\System32\drivers\NETMNT.sys [2005-03-28 15:45:26 | 000,000,081 | ---- | C] () -- C:\WINDOWS\ALaunch.ini [2004-12-17 17:14:44 | 000,013,952 | ---- | C] () -- C:\WINDOWS\System32\drivers\UBHelper.sys [2004-08-04 20:00:00 | 000,003,619 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini [2003-12-29 20:45:08 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\ServiceControl.dll [2003-09-22 13:49:36 | 000,015,190 | ---- | C] () -- C:\WINDOWS\M2000Twn.ini [2001-12-26 16:12:30 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\multiplex_vcd.dll [2001-09-03 23:46:38 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\Hmpg12.dll [2001-07-30 16:33:56 | 000,118,784 | ---- | C] () -- C:\WINDOWS\System32\HMPV2_ENC.dll [2001-07-23 22:04:36 | 000,118,784 | ---- | C] () -- C:\WINDOWS\System32\HMPV2_ENC_MMX.dll [color=#E56717]========== LOP Check ==========[/color] [2006-08-26 08:44:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Default User\Dane aplikacji\Acer [2006-08-26 08:41:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Acer [2006-08-26 08:44:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Pawel\Dane aplikacji\Acer [color=#E56717]========== Purity Check ==========[/color] < End of report >