OTL logfile created on: 2012-07-04 11:17:03 - Run 2 OTL by OldTimer - Version 3.2.53.1 Folder = C:\Documents and Settings\Admin\Pulpit Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.2180) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1023,20 Mb Total Physical Memory | 560,32 Mb Available Physical Memory | 54,76% Memory free 2,90 Gb Paging File | 2,62 Gb Available in Paging File | 90,20% Paging File free Paging file location(s): c:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 232,88 Gb Total Space | 65,08 Gb Free Space | 27,95% Space Free | Partition Type: NTFS Drive D: | 232,88 Gb Total Space | 144,67 Gb Free Space | 62,12% Space Free | Partition Type: NTFS Drive E: | 3,36 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF Computer Name: NOGAJKOMP | User Name: Admin | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-07-03 17:33:16 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Admin\Pulpit\OTL.exe PRC - [2011-11-21 06:42:37 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2004-08-04 00:44:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2011-11-21 06:42:37 | 001,989,592 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll MOD - [2008-03-29 16:42:20 | 000,159,744 | ---- | M] () -- C:\Program Files\SubEdit-Player\codec\MatroskaSplitter\mmfinfo.dll MOD - [2008-03-29 16:41:52 | 000,023,552 | ---- | M] () -- C:\Program Files\SubEdit-Player\codec\MatroskaSplitter\mkunicode.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ) SRV - [2012-04-05 20:18:12 | 000,008,704 | ---- | M] (Microsoft) [Auto | Stopped] -- C:\Program Files\Freemake\CaptureLib\CaptureLibService.exe -- (FreemakeVideoCapture) SRV - [2012-04-05 20:17:52 | 000,096,768 | ---- | M] (Freemake) [Auto | Stopped] -- C:\Documents and Settings\All Users\Dane aplikacji\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe -- (Freemake Improver) SRV - [2012-02-11 20:54:51 | 000,126,976 | ---- | M] () [Auto | Stopped] -- C:\WINDOWS\system32\UAService7.exe -- (UserAccess7) SecuROM User Access Service (V7) SRV - [2011-08-03 13:49:00 | 002,255,464 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService) SRV - [2011-01-13 10:47:33 | 000,040,384 | ---- | M] (AVAST Software) [Auto | Stopped] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - [2012-05-08 15:11:42 | 000,279,712 | ---- | M] () [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt) DRV - [2012-05-08 15:09:45 | 000,025,888 | ---- | M] () [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt) DRV - [2011-02-11 23:23:34 | 000,035,088 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\npf.sys -- (npf) DRV - [2011-01-13 10:41:16 | 000,294,608 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP) DRV - [2011-01-13 10:40:16 | 000,047,440 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi) DRV - [2011-01-13 10:40:04 | 000,100,176 | ---- | M] (AVAST Software) [File_System | Auto | Stopped] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2) DRV - [2011-01-13 10:37:30 | 000,023,632 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr) DRV - [2011-01-13 10:37:11 | 000,029,392 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4) DRV - [2011-01-13 10:37:09 | 000,017,744 | ---- | M] (AVAST Software) [File_System | Auto | Stopped] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk) DRV - [2010-04-09 16:24:18 | 000,069,504 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ew_jucdcacm.sys -- (huawei_cdcacm) DRV - [2010-04-09 16:24:12 | 000,063,616 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ew_jubusenum.sys -- (huawei_enumerator) DRV - [2010-03-20 12:56:04 | 000,101,504 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ew_hwusbdev.sys -- (ew_hwusbdev) DRV - [2009-02-27 16:39:18 | 000,007,552 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ewfiltertdidriver.sys -- (filtertdidriver) DRV - [2008-01-03 23:10:16 | 000,105,856 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp) DRV - [2007-09-19 18:16:32 | 004,617,728 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2004-12-09 17:25:49 | 000,047,104 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sfdrv01.sys -- (sfdrv01) StarForce Protection Environment Driver (version 1.x) DRV - [2004-12-03 12:20:41 | 000,020,544 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sfsync02.sys -- (sfsync02) StarForce Protection Synchronization Driver (version 2.x) DRV - [2004-10-28 12:47:59 | 000,006,656 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sfhlp02.sys -- (sfhlp02) StarForce Protection Helper Driver (version 2.x) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = www.v9.com/idg/idg_1323162612_253510 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?crg=3.1010000&barid={A69E0FF8-9148-11E1-A8D6-002522062A10} IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.funmoods.com/results.php?f=4&a=make&q={searchTerms} IE - HKLM\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&crg=3.1010000&q={searchTerms}&barid={A69E0FF8-9148-11E1-A8D6-002522062A10} IE - HKLM\..\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: "URL" = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&query={searchTerms}&invocationType=tb50winampie7 IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-725345543-813497703-2147187605-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = www.v9.com/idg/idg_1323162612_253510 IE - HKU\S-1-5-21-725345543-813497703-2147187605-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie IE - HKU\S-1-5-21-725345543-813497703-2147187605-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://dts.search-results.com/sidebar.html?src=ssb&appid=0&systemid=413&sr=0 IE - HKU\S-1-5-21-725345543-813497703-2147187605-1003\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1 IE - HKU\S-1-5-21-725345543-813497703-2147187605-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.funmoods.com/?f=1&a=make IE - HKU\S-1-5-21-725345543-813497703-2147187605-1003\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKU\S-1-5-21-725345543-813497703-2147187605-1003\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://dts.search-results.com/sr?src=ieb&appid=0&systemid=413&sr=0&q={searchTerms} IE - HKU\S-1-5-21-725345543-813497703-2147187605-1003\..\SearchScopes,DefaultScope = {0D7562AE-8EF6-416d-A838-AB665251703A} IE - HKU\S-1-5-21-725345543-813497703-2147187605-1003\..\SearchScopes\{062B18DC-A682-4185-9BA7-7AD6176562FC}: "URL" = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 IE - HKU\S-1-5-21-725345543-813497703-2147187605-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC IE - HKU\S-1-5-21-725345543-813497703-2147187605-1003\..\SearchScopes\{0D7562AE-8EF6-416d-A838-AB665251703A}: "URL" = http://start.funmoods.com/?a=make&s={searchTerms}&f=4 IE - HKU\S-1-5-21-725345543-813497703-2147187605-1003\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/web/{searchTerms}?babsrc=SP_ss&affID=19950&mntrId=c0c3bc2a000000000000002522062a102a10 IE - HKU\S-1-5-21-725345543-813497703-2147187605-1003\..\SearchScopes\{11A1AEFF-2D07-4D5A-86E8-FBE8AD262D7B}: "URL" = http://szukaj.onet.pl/prox_query.html?qfor=szukaj_onet&q={searchTerms} IE - HKU\S-1-5-21-725345543-813497703-2147187605-1003\..\SearchScopes\{20E0E55E-B817-48C8-9C49-302CF7AB40DF}: "URL" = http://szukaj.onet.pl/prox_query.html?qfor=szukaj&q={searchTerms} IE - HKU\S-1-5-21-725345543-813497703-2147187605-1003\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://www.google.pl/cse?q={searchTerms}&cx=partner-pub-2489206448026482%3A4041638047&tbm=&ie=UTF-8#gsc.tab=0&gsc.q={searchTerms} IE - HKU\S-1-5-21-725345543-813497703-2147187605-1003\..\SearchScopes\{3CB88C43-3F33-4497-9BB5-1686D99779F6}: "URL" = http://szukaj.onet.pl/prox_query.html?qfor=zakupy&q={searchTerms} IE - HKU\S-1-5-21-725345543-813497703-2147187605-1003\..\SearchScopes\{423AE289-9BE4-4A16-B785-20BB4EF8C88D}: "URL" = http://szukaj.onet.pl/prox_query.html?qfor=slownik&q={searchTerms} IE - HKU\S-1-5-21-725345543-813497703-2147187605-1003\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searc?qfor=zakupy&q={searchTerms} IE - HKU\S-1-5-21-725345543-813497703-2147187605-1003\..\SearchScopes\{75969556-9A81-423D-AF20-7DB9E2596DDA}: "URL" = http://szukaj.onet.pl/addons/prox_query.html?qfor=ludzie&q={searchTerms} IE - HKU\S-1-5-21-725345543-813497703-2147187605-1003\..\SearchScopes\{7F4EFF06-7032-458e-AE16-1C1D8255C28A}: "URL" = http://home.speedbit.com/search.aspx?aff=106&q={searchTerms} IE - HKU\S-1-5-21-725345543-813497703-2147187605-1003\..\SearchScopes\{94FE3F85-9C2C-482A-BC99-552D69CF492D}: "URL" = http://szukaj.onet.pl/prox_query.html?qfor=encyklopedia&q={searchTerms} IE - HKU\S-1-5-21-725345543-813497703-2147187605-1003\..\SearchScopes\{96bd48dd-741b-41ae-ac4a-aff96ba00f7e}: "URL" = http://www.bigseekpro.com/search/browser/burn4free/{858CB2D3-03F5-4407-9A85-3E2E9D6D0F91}?q={searchTerms} IE - HKU\S-1-5-21-725345543-813497703-2147187605-1003\..\SearchScopes\{C1ADD395-C468-4452-8753-3C2F742D9F4F}: "URL" = http://szukaj.onet.pl/prox_query.html?qfor=zumi&q={searchTerms} IE - HKU\S-1-5-21-725345543-813497703-2147187605-1003\..\SearchScopes\{E248FC8A-B472-4E34-A887-6EF9D431A2A1}: "URL" = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=867034&p={searchTerms} IE - HKU\S-1-5-21-725345543-813497703-2147187605-1003\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&crg=3.1010000&q={searchTerms}&barid={A69E0FF8-9148-11E1-A8D6-002522062A10} IE - HKU\S-1-5-21-725345543-813497703-2147187605-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-725345543-813497703-2147187605-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaulturl: "" FF - prefs.js..browser.search.order.1: "Search Results" FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=867034" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.google.pl/webhp?client=firefox-a&rls=org.mozilla:pl:official&channel=s&hl=pl&source=hp&biw=1429&bih=621&btnG=Szukaj+w+Google&oq=&aq=&aqi=&gs_upl=" FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.1 FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:14.0.1 FF - prefs.js..extensions.enabledItems: {0b38152b-1b20-484d-a11f-5e04a9b0661f}:5.6.12.1 FF - prefs.js..keyword.URL: "http://dts.search-results.com/sr?src=ffb&appid=0&systemid=413&sr=0&q=" FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.3.37: c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.3.37: c:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.3.37: C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.3.37: C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=15.0.3.37: c:\program files\real\realplayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\vitzo.com/VDownloader: C:\Program Files\VDownloader\Addons\npVDownloader.dll File not found FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\support@vdownloader.com: C:\Program Files\VDownloader\Addons\FireFox FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\searchpredict@speedbit.com: C:\Program Files\SearchPredict\PRFireFox FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{0329E7D6-6F54-462D-93F6-F5C3118BADF2}: C:\Program Files\SpeedBit Video Downloader\SPFireFox FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012-04-28 18:30:39 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fmdownloader@gmail.com: C:\Program Files\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ [2012-05-01 19:16:18 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-04-28 20:07:49 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-04-28 20:07:49 | 000,000,000 | ---D | M] [2012-04-28 18:15:21 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Extensions [2012-04-29 00:21:05 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\lbpcaw7d.default\extensions [2014-10-16 13:36:45 | 000,000,000 | ---D | M] (Burn4Free DB Toolbar) -- C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\lbpcaw7d.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC} [2011-08-18 12:34:34 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\lbpcaw7d.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2012-04-28 19:02:52 | 000,001,798 | ---- | M] () -- C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\lbpcaw7d.default\searchplugins\funmoods.xml [2012-04-28 18:15:09 | 000,002,515 | ---- | M] () -- C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\lbpcaw7d.default\searchplugins\Search_Results.xml [2012-04-28 17:42:06 | 000,003,992 | ---- | M] () -- C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\lbpcaw7d.default\searchplugins\sweetim.xml [2012-04-28 18:15:21 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2011-09-26 19:48:48 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA} [2012-05-01 19:16:18 | 000,000,000 | ---D | M] (Freemake Video Downloader Plugin) -- C:\PROGRAM FILES\FREEMAKE\FREEMAKE VIDEO DOWNLOADER\BROWSERPLUGIN\FIREFOX [2011-11-21 06:42:37 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2011-09-26 19:48:36 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2007-02-04 23:02:56 | 001,642,496 | ---- | M] (LizardTech) -- C:\Program Files\mozilla firefox\plugins\npdjvu.dll [2011-11-21 03:31:40 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2011-07-15 22:22:26 | 000,002,291 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml [2011-11-21 03:31:40 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2011-11-21 03:31:40 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2011-11-21 03:31:40 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2012-04-28 18:15:09 | 000,002,515 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\Search_Results.xml [2011-12-06 11:10:13 | 000,002,415 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\v9.xml [2011-11-21 03:31:40 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2011-11-21 03:31:40 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: () CHR - default_search_provider: search_url = CHR - default_search_provider: suggest_url = CHR - Extension: No name found = C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.3\ O1 HOSTS File: ([2012-01-02 14:15:32 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.31.2\bh\BabylonToolbar.dll (Babylon BHO) O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer) O2 - BHO: (Funmoods Helper Object) - {75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} - C:\Program Files\Funmoods\funmoods\1.5.11.16\bh\funmoods.dll (Funmoods BHO) O2 - BHO: (Searchqu Toolbar) - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\Program Files\Searchqu Toolbar\Datamngr\ToolBar\searchqudtx.dll () O2 - BHO: (DataMngr) - {9D717F81-9148-4f12-8568-69135F087DB0} - C:\Program Files\Searchqu Toolbar\Datamngr\BrowserConnection.dll (Bandoo Media, inc) O2 - BHO: (AcroIEToolbarHelper Class) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated) O2 - BHO: (SweetPacks Browser Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O2 - BHO: (SMTTB2009 Class) - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files\Burn4Free DB Toolbar\tbcore3.dll () O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated) O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.31.2\BabylonToolbarTlbr.dll (Babylon Ltd.) O3 - HKLM\..\Toolbar: (Searchqu Toolbar) - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\Program Files\Searchqu Toolbar\Datamngr\ToolBar\searchqudtx.dll () O3 - HKLM\..\Toolbar: (Funmoods Toolbar) - {A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} - C:\Program Files\Funmoods\funmoods\1.5.11.16\funmoodsTlbr.dll (Funmoods) O3 - HKLM\..\Toolbar: (SweetPacks Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found. O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {338B4DFE-2E2C-4338-9E41-E176D497299E} - No CLSID value found. O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated) O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {338B4DFE-2E2C-4338-9E41-E176D497299E} - No CLSID value found. O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated) O4 - HKLM..\Run: [Acrobat Assistant 7.0] C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe (Adobe Systems Inc.) O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) O4 - HKLM..\Run: [DataCardMonitor] C:\Program Files\blueconnect\DataCardMonitor.exe (Huawei Technologies Co., Ltd.) O4 - HKLM..\Run: [DATAMNGR] C:\Program Files\Searchqu Toolbar\Datamngr\datamngrUI.exe (Bandoo Media, inc) O4 - HKLM..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k File not found O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] nwiz.exe /install File not found O4 - HKLM..\Run: [SearchSettings] C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.) O4 - HKLM..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.) O4 - HKLM..\Run: [TabbtnEx] C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\3565\TabbtnEx.exe () O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Real\RealPlayer\update\realsched.exe (RealNetworks, Inc.) O4 - HKU\S-1-5-21-725345543-813497703-2147187605-1003..\Run: [Gadu-Gadu 10] C:\Program Files\Gadu-Gadu 10\gg.exe (GG Network S.A.) O4 - HKU\S-1-5-21-725345543-813497703-2147187605-1003..\Run: [HW_OPENEYE_OUC_blueconnect] C:\Program Files\blueconnect\UpdateDog\ouc.exe (Huawei Technologies Co., Ltd.) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Acrobat Speed Launcher.lnk = C:\WINDOWS\Installer\{AC76BA86-1033-F400-8796-100000000002}\SC_Acrobat.exe () O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-725345543-813497703-2147187605-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-725345543-813497703-2147187605-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255 O7 - HKU\S-1-5-21-725345543-813497703-2147187605-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-21-725345543-813497703-2147187605-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\S-1-5-21-725345543-813497703-2147187605-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: _NoDriveTypeAutoRun = 323 O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.) O8 - Extra context menu item: Convert link target to Adobe PDF - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Convert link target to existing PDF - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Convert selected links to Adobe PDF - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Convert selected links to existing PDF - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Convert selection to Adobe PDF - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Convert selection to existing PDF - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Convert to Adobe PDF - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Convert to existing PDF - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27) O16 - DPF: {CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 194.204.159.1 194.204.152.34 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{245D09A8-59EF-4E76-B67F-BBAF7E018FB1}: DhcpNameServer = 194.204.159.1 194.204.152.34 O20 - AppInit_DLLs: (C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll) - C:\Program Files\Searchqu Toolbar\Datamngr\datamngr.dll (Bandoo Media, inc) O20 - AppInit_DLLs: (C:\PROGRA~1\SEARCH~1\Datamngr\IEBHO.dll) - C:\Program Files\Searchqu Toolbar\Datamngr\IEBHO.dll (Bandoo Media, inc) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2010-12-10 18:06:31 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2009-09-04 16:37:47 | 001,064,960 | R--- | M] (Codemasters Software Co.) - E:\Autorun.exe -- [ UDF ] O32 - AutoRun File - [2009-09-17 15:10:53 | 000,000,067 | R--- | M] () - E:\autorun.inf -- [ UDF ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2014-12-11 19:47:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Moje dokumenty\Moje VIDEO [2014-12-11 19:46:40 | 000,000,000 | ---D | C] -- C:\Program Files\FLV Player [2014-12-11 19:46:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\FLV Player [2014-12-11 19:38:24 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Real [2014-12-11 19:38:21 | 000,000,000 | ---D | C] -- C:\Program Files\Real [2014-10-16 13:36:44 | 000,000,000 | ---D | C] -- C:\Program Files\Burn4Free DB Toolbar [2014-10-16 13:35:36 | 000,000,000 | ---D | C] -- C:\Program Files\Burn4Free [2014-10-16 13:35:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Burn4Free [2014-10-16 13:03:44 | 005,079,040 | ---- | C] (Ahead Software AG Karlsbad Germany Phone: +49-7248-911-800 Fax: +49-7248-911-888 e-mail: info@nero.com) -- C:\Documents and Settings\Admin\Moje dokumenty\nero.exe [2014-10-16 12:54:11 | 001,286,144 | ---- | C] (Ahead Software AG) -- C:\WINDOWS\NuNinst.exe [2014-10-16 12:54:07 | 000,088,800 | ---- | C] (Ahead Software) -- C:\WINDOWS\System32\drivers\incdfs.sys [2014-10-16 12:54:07 | 000,028,528 | ---- | C] (Ahead Software) -- C:\WINDOWS\System32\drivers\incdpass.sys [2014-10-16 12:54:07 | 000,005,328 | ---- | C] (Ahead Software AG) -- C:\WINDOWS\System32\drivers\incdrec.sys [2014-10-16 12:54:02 | 000,000,000 | ---D | C] -- C:\WINDOWS\InCD [2014-10-16 12:54:02 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Ahead [2012-07-03 17:33:15 | 000,595,968 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Admin\Pulpit\OTL.exe [2012-07-03 16:07:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Codemasters [2012-07-03 16:01:03 | 000,000,000 | ---D | C] -- C:\Program Files\Codemasters [2012-07-03 10:55:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Apple [2012-07-02 19:29:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Dane aplikacji\hellomoto [2012-06-21 16:37:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Atari [2012-06-21 16:37:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Atari [2012-06-13 20:05:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Pulpit\ARADO 555 [2011-07-15 22:03:25 | 003,486,088 | ---- | C] (Ask) -- C:\Program Files\Common Files\ApnToolbarInstaller.exe [2011-07-15 22:03:25 | 000,143,240 | ---- | C] (Ask.com) -- C:\Program Files\Common Files\ApnStub.exe [5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] File not found -- C:\WINDOWS\System32\ [2012-07-06 18:19:36 | 001,008,062 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\GEEBEE R1.BMP [2012-07-06 11:48:20 | 000,027,993 | ---- | M] () -- C:\Documents and Settings\Admin\Dane aplikacji\OFMissionEditorConfig.xml [2012-07-05 15:45:27 | 000,034,824 | ---- | M] () -- C:\Documents and Settings\Admin\.recently-used.xbel [2012-07-04 11:01:08 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2012-07-03 19:13:04 | 000,168,639 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\plan_x29_full.pdf [2012-07-03 19:05:15 | 000,316,709 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\GeeBeeR1.pdf [2012-07-03 18:07:16 | 000,000,188 | -HS- | M] () -- C:\Documents and Settings\Admin\ntuser.ini [2012-07-03 18:07:15 | 013,893,632 | -H-- | M] () -- C:\Documents and Settings\Admin\NTUSER.DAT [2012-07-03 17:33:16 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Admin\Pulpit\OTL.exe [2012-07-03 17:30:02 | 000,002,335 | ---- | M] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Acrobat Speed Launcher.lnk [2012-07-03 17:29:50 | 000,000,278 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-725345543-813497703-2147187605-1003.job [2012-07-03 17:29:49 | 000,001,030 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2012-07-03 17:29:46 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2012-07-03 17:29:36 | 000,277,352 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2012-07-03 10:55:03 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job [2012-07-02 19:15:04 | 000,001,034 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2012-07-01 18:45:03 | 000,114,836 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\Daddy-O 2-View.jpg [2012-07-01 07:20:00 | 000,000,274 | ---- | M] () -- C:\WINDOWS\Brownie.ini [2012-07-01 07:07:55 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2012-06-30 23:10:38 | 004,775,332 | -H-- | M] () -- C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\IconCache.db [2012-06-30 17:14:59 | 000,013,030 | ---- | M] () -- C:\PDOXUSRS.NET [2012-06-23 22:18:58 | 000,028,672 | ---- | M] () -- C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-06-23 19:11:14 | 000,000,426 | ---- | M] () -- C:\WINDOWS\BRWMARK.INI [2012-06-23 18:33:12 | 000,221,101 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\Brother HL2030 HL2040 v2i.pdf [2012-06-21 23:11:06 | 000,000,286 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-725345543-813497703-2147187605-1003.job [2012-06-17 13:53:42 | 000,620,119 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\Bebee Albatros RC.pdf [2012-06-17 08:35:43 | 000,020,969 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\ARADO 555 1500.pdf [2012-06-16 15:52:19 | 000,280,276 | ---- | M] () -- C:\WINDOWS\System32\nvdrsdb0.bin [2012-06-16 15:52:19 | 000,000,001 | ---- | M] () -- C:\WINDOWS\System32\nvdrssel.bin [2012-06-16 12:31:57 | 000,280,276 | ---- | M] () -- C:\WINDOWS\System32\nvdrsdb1.bin [2012-06-15 22:17:52 | 000,000,311 | ---- | M] () -- C:\WINDOWS\profile.INI [2012-06-13 20:07:29 | 000,559,413 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\ARADO 555.rar [2012-06-09 18:28:56 | 000,281,162 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\F-18 RC 46.pdf [2012-06-09 18:16:36 | 000,473,763 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\F-18 RC.pdf [2012-06-09 14:58:32 | 000,000,014 | ---- | M] () -- C:\WINDOWS\System32\nvModes.dat [2012-06-07 19:55:59 | 001,846,654 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\P-51 Mustang Mk III.BMP [5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] File not found -- C:\WINDOWS\System32\ [2014-12-11 19:38:56 | 000,000,114 | ---- | C] () -- C:\WINDOWS\cdplayer.ini [2014-10-16 12:54:12 | 000,045,962 | ---- | C] () -- C:\WINDOWS\NuNinst.cfg [2012-07-06 18:14:23 | 001,008,062 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\GEEBEE R1.BMP [2012-07-05 15:45:27 | 000,034,824 | ---- | C] () -- C:\Documents and Settings\Admin\.recently-used.xbel [2012-07-03 19:13:04 | 000,168,639 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\plan_x29_full.pdf [2012-07-03 19:05:14 | 000,316,709 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\GeeBeeR1.pdf [2012-07-03 17:47:16 | 000,027,993 | ---- | C] () -- C:\Documents and Settings\Admin\Dane aplikacji\OFMissionEditorConfig.xml [2012-07-01 18:42:32 | 000,114,836 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\Daddy-O 2-View.jpg [2012-06-23 18:33:12 | 000,221,101 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\Brother HL2030 HL2040 v2i.pdf [2012-06-17 13:53:39 | 000,620,119 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\Bebee Albatros RC.pdf [2012-06-17 08:35:42 | 000,020,969 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\ARADO 555 1500.pdf [2012-06-14 20:25:34 | 025,344,054 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\Bebee Albatros RC.bmp [2012-06-13 20:07:29 | 000,559,413 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\ARADO 555.rar [2012-06-09 18:28:55 | 000,281,162 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\F-18 RC 46.pdf [2012-06-09 18:16:34 | 000,473,763 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\F-18 RC.pdf [2012-06-01 10:17:15 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Admin\kristen-stewart-robert-pattinson.jpg [2012-04-29 12:20:31 | 004,775,332 | -H-- | C] () -- C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\IconCache.db [2012-04-29 00:21:48 | 000,278,726 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-System.dat [2012-04-28 20:39:44 | 000,548,370 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-S-1-5-21-725345543-813497703-2147187605-1003-0.dat [2012-02-11 20:54:51 | 000,126,976 | ---- | C] () -- C:\WINDOWS\System32\UAService7.exe [2012-01-03 21:40:52 | 000,000,145 | ---- | C] () -- C:\WINDOWS\BRVIDEO.INI [2012-01-03 21:40:52 | 000,000,000 | ---- | C] () -- C:\WINDOWS\brmx2001.ini [2012-01-03 21:40:47 | 000,000,114 | ---- | C] () -- C:\WINDOWS\System32\brlmw03a.ini [2012-01-03 21:40:46 | 000,009,030 | ---- | C] () -- C:\WINDOWS\HL-2030.INI [2012-01-03 21:40:37 | 000,000,426 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI [2012-01-03 21:39:54 | 000,000,054 | ---- | C] () -- C:\WINDOWS\System32\bd2030.dat [2012-01-03 21:39:42 | 000,000,274 | ---- | C] () -- C:\WINDOWS\Brownie.ini [2012-01-02 12:57:31 | 000,000,488 | RH-- | C] () -- C:\WINDOWS\System32\logonui.exe.manifest [2011-12-29 21:23:36 | 000,491,520 | ---- | C] () -- C:\WINDOWS\System32\LMabcoms.exe [2011-12-25 14:49:18 | 000,002,048 | -HS- | C] () -- C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\219b74cd\@ [2011-12-25 11:53:32 | 000,000,000 | ---- | C] () -- C:\WINDOWS\iPlayer.INI [2011-12-22 11:26:38 | 000,039,240 | ---- | C] () -- C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\recently-used.xbel [2011-10-02 13:23:09 | 000,000,236 | ---- | C] () -- C:\Program Files\Common Files\dx.reg [2011-10-02 13:23:08 | 001,029,126 | ---- | C] () -- C:\WINDOWS\System32\d3d10.dll [2011-10-02 13:23:08 | 000,874,502 | ---- | C] () -- C:\WINDOWS\System32\kernel32new.dll [2011-10-02 13:23:08 | 000,716,153 | ---- | C] () -- C:\WINDOWS\System32\unins000.exe [2011-10-02 13:23:08 | 000,681,478 | ---- | C] () -- C:\WINDOWS\System32\msvcrtnew.dll [2011-10-02 13:23:08 | 000,187,398 | ---- | C] () -- C:\WINDOWS\System32\d3d10core.dll [2011-10-02 13:23:08 | 000,002,917 | ---- | C] () -- C:\WINDOWS\System32\unins000.dat [2011-08-28 14:33:40 | 002,128,778 | ---- | C] () -- C:\WINDOWS\System32\nvdata.data [2011-07-16 00:01:30 | 000,002,560 | ---- | C] () -- C:\WINDOWS\_MSRSTRT.EXE [2011-07-15 23:55:23 | 000,109,216 | ---- | C] () -- C:\WINDOWS\System32\EasyHook64.dll [2011-07-15 23:55:23 | 000,090,784 | ---- | C] () -- C:\WINDOWS\System32\EasyHook32.dll [2011-07-15 21:32:23 | 000,231,352 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat [2011-07-02 17:34:42 | 000,000,030 | ---- | C] () -- C:\WINDOWS\TextSpy.ini [2011-06-20 21:50:03 | 000,175,616 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2011-06-20 21:50:03 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini [2011-06-20 21:50:00 | 000,243,200 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2011-06-20 21:50:00 | 000,073,216 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2011-06-20 21:50:00 | 000,000,590 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2011-06-06 21:09:45 | 000,000,014 | ---- | C] () -- C:\WINDOWS\System32\nvModes.dat [2011-04-24 11:48:08 | 000,000,311 | ---- | C] () -- C:\WINDOWS\profile.INI [2011-03-16 21:54:30 | 000,000,220 | ---- | C] () -- C:\WINDOWS\Sierra.ini [2011-02-17 19:01:14 | 000,196,608 | ---- | C] () -- C:\WINDOWS\System32\PDFSpooler.exe [2011-02-17 19:01:14 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll [2011-02-11 23:23:34 | 000,053,299 | ---- | C] () -- C:\WINDOWS\System32\pthreadVC.dll [2011-02-08 19:17:38 | 000,207,360 | ---- | C] () -- C:\WINDOWS\System32\evrprop.dll [2011-02-08 19:16:22 | 000,080,384 | ---- | C] () -- C:\WINDOWS\System32\mkzlib.dll [2011-02-08 19:16:18 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\mkunicode.dll [2011-02-08 19:05:06 | 000,644,608 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2011-02-08 19:05:06 | 000,258,048 | ---- | C] () -- C:\WINDOWS\System32\libFLAC.dll [2010-12-27 13:45:15 | 000,279,712 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys [2010-12-27 13:45:15 | 000,025,888 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys [2010-12-16 17:10:01 | 000,104,448 | ---- | C] () -- C:\WINDOWS\setwall.exe [2010-12-16 16:01:59 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\vidx16.dll [2010-12-15 20:47:33 | 000,000,507 | ---- | C] () -- C:\WINDOWS\LMABB2DD.ini [2010-12-15 20:46:25 | 000,028,672 | ---- | C] () -- C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-12-15 20:45:16 | 000,335,872 | ---- | C] ( ) -- C:\WINDOWS\System32\lexlog.dll [2010-12-15 20:44:56 | 000,630,784 | ---- | C] () -- C:\WINDOWS\System32\LMabpmui.dll [2010-12-15 20:44:55 | 001,183,744 | ---- | C] () -- C:\WINDOWS\System32\LMabserv.dll [2010-12-15 20:44:55 | 001,134,592 | ---- | C] () -- C:\WINDOWS\System32\LMabusb1.dll [2010-12-15 20:44:54 | 000,323,584 | ---- | C] () -- C:\WINDOWS\System32\LMabppls.exe [2010-12-15 20:44:54 | 000,155,648 | ---- | C] () -- C:\WINDOWS\System32\LMabprox.dll [2010-12-15 20:44:53 | 000,733,184 | ---- | C] () -- C:\WINDOWS\System32\LMabip1.dll [2010-12-15 20:44:53 | 000,507,904 | ---- | C] () -- C:\WINDOWS\System32\LMabpar1.dll [2010-12-15 20:44:53 | 000,491,520 | ---- | C] () -- C:\WINDOWS\System32\LMablmpm.dll [2010-12-15 20:44:53 | 000,114,688 | ---- | C] () -- C:\WINDOWS\System32\LMabpplc.dll [2010-12-15 20:44:52 | 000,413,696 | ---- | C] () -- C:\WINDOWS\System32\LMabcomm.dll [2010-12-15 20:44:51 | 000,704,512 | ---- | C] () -- C:\WINDOWS\System32\LMabcomc.dll [2010-12-11 20:31:23 | 000,000,280 | ---- | C] () -- C:\WINDOWS\FPL.INI [2010-12-11 17:50:12 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat [2010-12-11 12:29:34 | 000,280,276 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin [2010-12-11 12:29:33 | 000,280,276 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin [2010-12-11 12:29:33 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin [2010-12-11 12:12:03 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe [2010-12-10 18:09:51 | 000,072,488 | ---- | C] () -- C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT [2010-12-10 18:09:33 | 000,000,188 | -HS- | C] () -- C:\Documents and Settings\Admin\ntuser.ini [2010-12-10 18:09:32 | 013,893,632 | -H-- | C] () -- C:\Documents and Settings\Admin\NTUSER.DAT [2010-12-10 18:08:06 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2010-12-10 18:06:31 | 000,000,000 | ---- | C] () -- C:\WINDOWS\control.ini [2010-12-10 18:05:44 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\cdplayer.exe.manifest [2010-12-10 18:03:36 | 000,023,016 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2010-12-10 18:03:28 | 000,000,037 | ---- | C] () -- C:\WINDOWS\vbaddin.ini [2010-12-10 18:03:28 | 000,000,036 | ---- | C] () -- C:\WINDOWS\vb.ini [2010-12-10 18:02:46 | 000,026,717 | ---- | C] () -- C:\WINDOWS\System32\tslabels.ini [2010-12-10 18:02:44 | 000,003,813 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.ini [2010-12-09 18:52:48 | 001,187,068 | ---- | C] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2010-12-09 18:52:48 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2010-12-09 18:51:33 | 000,277,352 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010-07-30 09:47:00 | 002,195,030 | ---- | C] () -- C:\WINDOWS\System32\nvdata.bin [color=#E56717]========== LOP Check ==========[/color] [2011-01-23 12:07:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\Atari [2011-02-11 20:12:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\blueconnect [2011-01-27 13:29:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\City Interactive [2011-05-07 16:51:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\DevProf [2012-04-28 18:14:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\FreeFLVConverter [2011-06-24 17:00:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\Gadu-Gadu 10 [2012-07-04 12:14:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\gtk-2.0 [2012-07-02 19:29:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\hellomoto [2011-03-06 21:39:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\IMSI [2012-04-28 17:34:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\Neoretix [2011-02-17 19:01:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\PDFCreator [2011-02-17 18:48:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\PhotoFiltre [2011-05-07 16:51:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\Profili [2010-12-26 14:47:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\Przyspiesz Komputer [2011-04-18 15:10:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\Quest3D [2010-12-26 14:47:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\RegistryKeys [2011-09-01 21:18:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\Search Settings [2012-04-28 18:15:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\searchqutoolbar [2011-06-22 13:38:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\SpieleEntwicklungsKombinat [2011-03-26 18:26:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\UDC Profiles [2011-03-24 00:29:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\wargaming.net [2011-08-21 22:37:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\Xilisoft [2011-02-08 19:05:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ALLConverter [2010-12-11 12:38:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Alwil Software [2011-07-15 22:20:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Babylon [2012-04-28 19:26:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\boost_interprocess [2011-12-25 14:54:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DatacardService [2010-12-29 12:58:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\EA Core [2010-12-29 12:58:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Electronic Arts [2012-04-28 19:36:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Freemake [2010-12-12 17:41:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10 [2011-03-06 21:40:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\IMSI [2011-08-28 10:49:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM [2010-12-29 12:41:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Solidshield [2011-07-16 00:03:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SpeedBit [2011-06-22 13:30:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SpieleEntwicklungsKombinat [2012-04-28 18:48:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SweetIM [2010-12-27 13:47:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Tages [2012-06-01 15:54:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP [2011-08-21 22:37:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Xilisoft [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:05D195EC < End of report >