OTL logfile created on: 7/20/2012 11:17:36 PM - Run OTLPE by OldTimer - Version 3.1.48.0 Folder = X:\Programs\OTLPE Microsoft Windows XP Dodatek Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 86.00% Memory free 2.00 Gb Paging File | 2.00 Gb Available in Paging File | 97.00% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 39.06 Gb Total Space | 0.70 Gb Free Space | 1.80% Space Free | Partition Type: NTFS Drive D: | 43.95 Gb Total Space | 9.17 Gb Free Space | 20.86% Space Free | Partition Type: NTFS Drive E: | 44.98 Gb Total Space | 25.06 Gb Free Space | 55.72% Space Free | Partition Type: NTFS Drive X: | 284.12 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS Computer Name: REATOGO | User Name: SYSTEM Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days Using ControlSet: ControlSet001 [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2011/09/06 03:21:36 | 003,686,400 | ---- | M] (Embarcadero Technologies, Inc.) [On_Demand] -- C:\Embarcadero\InterBase\bin\ibserver.exe -- (IBS_gds_db) SRV - [2011/09/06 03:21:36 | 000,634,880 | ---- | M] (Embarcadero Technologies, Inc.) [On_Demand] -- C:\Embarcadero\InterBase\bin\ibguard.exe -- (IBG_gds_db) SRV - [2011/04/16 20:45:11 | 000,130,008 | R--- | M] (Symantec Corporation) [Auto] -- C:\Program Files\Norton 360\Engine\5.2.2.3\ccSvcHst.exe -- (N360) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand] -- -- (WDICA) DRV - File not found [Kernel | On_Demand] -- -- (UIUSys) DRV - File not found [Kernel | Auto] -- -- (SSPORT) DRV - File not found [Kernel | On_Demand] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand] -- -- (PDCOMP) DRV - File not found [Kernel | System] -- -- (PCIDump) DRV - File not found [Kernel | System] -- -- (lbrtfdc) DRV - File not found [Kernel | System] -- -- (i2omgmt) DRV - File not found [Kernel | Auto] -- -- (DgiVecp) DRV - File not found [Kernel | System] -- -- (Changer) DRV - [2012/07/13 09:48:20 | 001,589,752 | ---- | M] (Symantec Corporation) [Kernel | On_Demand] -- C:\Documents and Settings\All Users\Dane aplikacji\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\VirusDefs\20120719.035\NAVEX15.SYS -- (NAVEX15) DRV - [2012/07/13 09:48:20 | 000,087,928 | ---- | M] (Symantec Corporation) [Kernel | On_Demand] -- C:\Documents and Settings\All Users\Dane aplikacji\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\VirusDefs\20120719.035\NAVENG.SYS -- (NAVENG) DRV - [2012/06/18 20:01:14 | 000,821,920 | ---- | M] (Symantec Corporation) [Kernel | System] -- C:\Documents and Settings\All Users\Dane aplikacji\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\BASHDefs\20120711.002\BHDrvx86.sys -- (BHDrvx86) DRV - [2012/06/14 14:39:26 | 000,369,632 | ---- | M] (Symantec Corporation) [Kernel | On_Demand] -- C:\Documents and Settings\All Users\Dane aplikacji\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\IPSDefs\20120719.002\IDSxpx86.sys -- (IDSxpx86) DRV - [2012/05/31 05:36:12 | 000,376,480 | ---- | M] (Symantec Corporation) [Kernel | System] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl) DRV - [2012/05/31 05:36:12 | 000,106,656 | ---- | M] (Symantec Corporation) [Kernel | On_Demand] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv) DRV - [2011/07/07 12:01:05 | 000,218,688 | ---- | M] (DT Soft Ltd) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\dtsoftbus01.sys -- (dtsoftbus01) DRV - [2011/06/24 20:42:46 | 000,126,584 | ---- | M] (Symantec Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\SYMEVENT.SYS -- (SymEvent) DRV - [2011/06/24 18:25:13 | 000,822,272 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\BCMWL5.SYS -- (BCM43XX) DRV - [2011/04/20 21:37:49 | 000,369,784 | ---- | M] (Symantec Corporation) [Kernel | System] -- C:\WINDOWS\System32\Drivers\N360\0502020.003\SYMTDI.SYS -- (SYMTDI) DRV - [2011/03/30 23:00:09 | 000,516,216 | R--- | M] (Symantec Corporation) [File_System | On_Demand] -- C:\WINDOWS\System32\Drivers\N360\0502020.003\SRTSP.SYS -- (SRTSP) DRV - [2011/03/30 23:00:09 | 000,050,168 | R--- | M] (Symantec Corporation) [Kernel | System] -- C:\WINDOWS\system32\drivers\N360\0502020.003\SRTSPX.SYS -- (SRTSPX) Symantec Real Time Storage Protection (PEL) DRV - [2011/03/14 22:31:23 | 000,744,568 | R--- | M] (Symantec Corporation) [File_System | Boot] -- C:\WINDOWS\system32\drivers\N360\0502020.003\symefa.sys -- (SymEFA) DRV - [2011/01/27 02:47:10 | 000,340,088 | R--- | M] (Symantec Corporation) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\N360\0502020.003\symds.sys -- (SymDS) DRV - [2011/01/27 01:07:05 | 000,136,312 | R--- | M] (Symantec Corporation) [Kernel | System] -- C:\WINDOWS\system32\drivers\N360\0502020.003\Ironx86.SYS -- (SymIRON) DRV - [2007/07/11 04:30:22 | 000,007,168 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\HpqRemHid.sys -- (HpqRemHid) DRV - [2007/06/18 11:12:04 | 000,016,768 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\HpqKbFiltr.sys -- (HpqKbFiltr) DRV - [2007/05/04 12:41:50 | 000,019,968 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus) DRV - [2007/05/04 12:41:48 | 000,046,720 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD) DRV - [2006/11/14 05:04:48 | 000,011,648 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\nvsmu.sys -- (nvsmu) DRV - [2006/08/29 08:12:28 | 000,990,592 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\HSF_DPV.sys -- (HSF_DPV) DRV - [2006/08/29 08:11:08 | 000,208,384 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\HSFHWAZL.sys -- (HSFHWAZL) DRV - [2006/08/29 08:10:56 | 000,728,576 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf) DRV - [2006/07/27 08:44:42 | 000,581,632 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\CHDAud.sys -- (HdAudAddService) DRV - [2006/05/12 07:19:04 | 001,342,602 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL) DRV - [2006/05/12 07:16:44 | 000,057,320 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = pl.v9.com/idg/idg_1332421470_897301 IE - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = pl.v9.com/idg/idg_1332421470_897301 IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\LocalService_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\NetworkService_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\szwejo_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = pl.v9.com/idg/idg_1332421470_897301 IE - HKU\szwejo_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = pl.v9.com/idg/idg_1332421470_897301 IE - HKU\szwejo_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\szwejo_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = 201.246.116.96:6588 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "http://www.google.pl/" FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24 FF - prefs.js..extensions.enabledItems: {8061ddcf-3632-4287-8d8a-133e219ae838}:0.9.7 FF - prefs.js..extensions.enabledItems: {e3f6c2cc-d8db-498c-af6c-499fb211db97}:1.11.2.1 FF - prefs.js..extensions.enabledItems: firebug@software.joehewitt.com:1.6.2 FF - prefs.js..extensions.enabledItems: en-GB@dictionaries.addons.mozilla.org:1.19.1 FF - prefs.js..extensions.enabledItems: toolbar@seomoz.org:0.55 FF - prefs.js..network.proxy.type: 0 FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\Program Files\Microsoft Office\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\Program Files\Microsoft Office\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\Documents and Settings\All Users\Dane aplikacji\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\IPSFFPlgn\ [2012/02/01 07:20:01 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\Documents and Settings\All Users\Dane aplikacji\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\coFFPlgn_2011_7_10_1 [2012/07/20 15:44:03 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/06/26 10:18:59 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/06/14 05:52:12 | 000,000,000 | ---D | M] [2011/06/26 10:35:29 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\szwejo\Dane aplikacji\mozilla\Extensions [2012/04/26 05:31:40 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\szwejo\Dane aplikacji\mozilla\Firefox\Profiles\adhb8h6r.default\extensions [2012/01/31 20:41:28 | 000,000,000 | ---D | M] (SeoQuake) -- C:\Documents and Settings\szwejo\Dane aplikacji\mozilla\Firefox\Profiles\adhb8h6r.default\extensions\{317B5128-0B0B-49b2-B2DB-1E7560E16C74} [2012/02/04 08:45:15 | 000,000,000 | ---D | M] (Page Speed) -- C:\Documents and Settings\szwejo\Dane aplikacji\mozilla\Firefox\Profiles\adhb8h6r.default\extensions\{e3f6c2cc-d8db-498c-af6c-499fb211db97} [2011/06/26 10:35:43 | 000,000,000 | ---D | M] (Page Speed) -- C:\Documents and Settings\szwejo\Dane aplikacji\mozilla\Firefox\Profiles\adhb8h6r.default\extensions\{e3f6c2cc-d8db-498c-af6c-499fb211db97}(22724) [2011/06/26 10:35:44 | 000,000,000 | ---D | M] (British English Dictionary) -- C:\Documents and Settings\szwejo\Dane aplikacji\mozilla\Firefox\Profiles\adhb8h6r.default\extensions\en-GB@dictionaries.addons.mozilla.org [2012/04/07 12:59:14 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2011/06/26 10:18:53 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} [2011/06/26 10:18:52 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} [2011/06/26 10:18:52 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} [2011/06/26 10:18:52 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} [2011/06/26 10:18:51 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} [2011/07/04 08:46:10 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} [2012/04/07 12:59:14 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} File not found (No name found) -- [2012/02/01 07:20:01 | 000,000,000 | ---D | M] (Symantec Intrusion Prevention) -- C:\DOCUMENTS AND SETTINGS\ALL USERS\DANE APLIKACJI\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\IPSFFPLGN () (No name found) -- C:\DOCUMENTS AND SETTINGS\SZWEJO\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\ADHB8H6R.DEFAULT\EXTENSIONS\FIREBUG@SOFTWARE.JOEHEWITT.COM.XPI () (No name found) -- C:\DOCUMENTS AND SETTINGS\SZWEJO\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\ADHB8H6R.DEFAULT\EXTENSIONS\YSLOW@YAHOO-INC.COM.XPI [2012/04/07 12:58:58 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [2011/07/11 17:04:37 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION [2011/06/16 00:51:12 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2012/04/07 12:58:58 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2011/04/04 11:36:45 | 000,238,776 | ---- | M] (Pando Networks) -- C:\Program Files\mozilla firefox\plugins\npPandoWebInst.dll [2010/01/01 04:00:00 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2010/01/01 04:00:00 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2010/01/01 04:00:00 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2010/01/01 04:00:00 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2012/03/22 09:04:31 | 000,002,415 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\v9.xml [2010/01/01 04:00:00 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2010/01/01 04:00:00 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2001/10/26 11:45:16 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\5.2.2.3\coieplg.dll (Symantec Corporation) O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360\Engine\5.2.2.3\ips\ipsbho.dll (Symantec Corporation) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\5.2.2.3\coieplg.dll (Symantec Corporation) O3 - HKU\szwejo_ON_C\..\Toolbar\WebBrowser: (no name) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - No CLSID value found. O3 - HKU\szwejo_ON_C\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\5.2.2.3\coieplg.dll (Symantec Corporation) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [High Definition Audio Property Page Shortcut] C:\WINDOWS\System32\CHDAudPropShortcut.exe (Windows (R) Server 2003 DDK provider) O4 - HKLM..\Run: [ISUSPM Startup] File not found O4 - HKLM..\Run: [jwngssronlooxmj] C:\Documents and Settings\All Users\Dane aplikacji\jwngssro.exe () O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [Samsung PanelMgr] C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe () O4 - HKLM..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe (Synaptics, Inc.) O4 - HKU\szwejo_ON_C..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O4 - HKU\szwejo_ON_C..\Run: [jwngssronlooxmj] C:\Documents and Settings\All Users\Dane aplikacji\jwngssro.exe () O4 - HKU\szwejo_ON_C..\Run: [Norton Download Manager{NBRT50-B90-Retail-4abb-B07C-C084B04B4F12}] C:\Documents and Settings\All Users\Dokumenty\Norton\{NBRT50-B90-Retail-4abb-B07C-C084B04B4F12}\NBRT-Retail-Downloader.exe (Symantec Corporation) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\BTTray.lnk = C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.) O4 - Startup: C:\Documents and Settings\szwejo\Menu Start\Programy\Autostart\OpenOffice.org 3.3.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\LocalService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\NetworkService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\szwejo_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation) O8 - Extra context menu item: Wyślij do interfejsu &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm () O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation) O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra 'Tools' menuitem : @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} http://www.nvidia.com/content/DriverDownload/nforce/NvidiaSmartScan.cab (NVIDIA Smart Scan) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.100 217.113.224.35 217.113.224.135 O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2011/06/24 08:35:17 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ] O33 - MountPoints2\{800e84b8-c6b0-11e0-b462-001e6898fe46}\Shell\AutoRun\command - "" = I:\sywyrl0q.exe O33 - MountPoints2\{800e84b8-c6b0-11e0-b462-001e6898fe46}\Shell\open\Command - "" = I:\sywyrl0q.exe O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012/07/20 21:42:34 | 000,000,000 | ---D | C] -- C:\NBRT [2012/07/20 21:41:38 | 000,000,000 | --SD | C] -- C:\WINDOWS\system32\config\systemprofile\Application Data [2012/07/20 10:51:02 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\NBRTWizard [2012/07/20 10:51:02 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\NBRTWizard\0500000.05A [2012/07/20 10:50:59 | 000,000,000 | ---D | C] -- C:\Program Files\Norton Bootable Recovery Tool Wizard [2012/07/20 10:50:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Norton Bootable Recovery Tool Wizard [2012/07/20 10:07:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\szwejo\Ustawienia lokalne\Dane aplikacji\NPE [2012/07/20 10:04:17 | 000,000,000 | -HSD | C] -- C:\WINDOWS\CSC [2012/07/20 09:14:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\ijhoajzwnghreie [2012/07/12 15:08:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\szwejo\Menu Start\Programy\FastReports [2012/07/12 15:08:19 | 000,000,000 | ---D | C] -- C:\Program Files\FastReports [2012/07/12 15:07:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\szwejo\Pulpit\28514_fastreport_vcl_4_rad_edition_for_delphi_and_c_builder_xe2 [2012/07/11 10:14:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\szwejo\Dane aplikacji\DevJET [2012/07/11 10:10:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\DevJET Documentation Insight Express [2012/07/11 10:10:46 | 000,000,000 | ---D | C] -- C:\Program Files\DevJET [2012/07/09 11:28:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\szwejo\Moje dokumenty\testocr [2012/07/09 11:28:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\szwejo\Moje dokumenty\Nowy folder [2012/07/09 11:27:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\szwejo\Moje dokumenty\IC3 [2012/07/09 11:27:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\szwejo\Dane aplikacji\Obsidium [2012/07/09 11:27:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Image Comparer [2012/07/09 11:27:29 | 000,000,000 | ---D | C] -- C:\Program Files\ImageComparer [2012/07/09 11:26:13 | 003,845,680 | ---- | C] (Bolide Software ) -- C:\Documents and Settings\szwejo\Pulpit\ic_setup.exe [2012/07/09 08:35:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\szwejo\Pulpit\damiles-basicOCR-e2deb08 [2012/07/09 05:51:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\szwejo\Pulpit\captcha [2012/07/06 05:15:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\szwejo\Moje dokumenty\Rad_Studio_XE2_Upd6_Help_Downloads [2012/07/06 05:15:25 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\{16DDC977-28D8-44E8-8358-8BBFBEE97FE7} [2012/07/05 11:56:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Microsoft Office [2012/07/05 11:53:50 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER [2012/07/05 11:52:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Microsoft [2012/07/05 11:45:49 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Analysis Services [2012/07/05 11:45:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\SHELLNEW [2012/07/05 11:43:23 | 000,000,000 | RH-D | C] -- C:\MSOCache [2012/07/05 10:41:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\szwejo\Ustawienia lokalne\Dane aplikacji\MicrosoftStore [2012/07/05 10:25:47 | 001,595,432 | ---- | C] (Digital River on behalf of Microsoft) -- C:\Documents and Settings\szwejo\Pulpit\add1c30357084d49890f77e07d93d3fd_Pod12_pl-PL.exe [2012/07/05 07:36:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\szwejo\Pulpit\demoapp [2012/07/05 04:44:01 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\szwejo\.embarcadero [2012/07/04 14:39:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\szwejo\Pulpit\28537_bde_installer_for_delphi_c_builder_and_rad_studio_xe2 [2012/07/04 11:53:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\szwejo\Moje dokumenty\Advanced Installer [2012/07/04 11:51:26 | 000,000,000 | -H-D | C] -- C:\Program Files\Zero G Registry [2012/07/04 11:50:43 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\szwejo\InstallAnywhere [2012/07/04 11:26:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\szwejo\Dane aplikacji\Caphyon [2012/07/04 11:25:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\regid.2003-04.com.caphyon [2012/07/04 11:25:12 | 000,000,000 | ---D | C] -- C:\Program Files\Caphyon [2012/07/04 11:25:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Advanced Installer 9.3 [2012/07/04 11:24:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Caphyon [2012/07/04 10:48:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\szwejo\Pulpit\24996_bde_merge_module_for_rad_studio_2007_xe2 [2012/07/02 15:13:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\szwejo\.kontoimporter [2012/07/02 07:15:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\szwejo\Pulpit\SickSEOPackageV6.3 [2012/07/02 06:53:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Hattrick Organizer [2012/06/30 07:24:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\szwejo\Pulpit\Asprise-OCR-C-Windows_XP_32bit-4.0 [2012/06/28 17:37:21 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\LocalService\.embarcadero [2012/06/28 07:51:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\szwejo\Moje dokumenty\RadPHP [2012/06/28 07:49:25 | 000,000,000 | ---D | C] -- C:\Program Files\apache-ant-1.8.2 [2012/06/28 07:45:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\szwejo\.android [2012/06/28 07:45:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Android SDK Tools [2012/06/28 07:44:55 | 000,000,000 | ---D | C] -- C:\Program Files\Android [2012/06/28 07:44:28 | 000,000,000 | ---D | C] -- C:\Program Files\Sun [2012/06/28 07:43:05 | 000,000,000 | ---D | C] -- C:\Program Files\Android Project [2012/06/28 07:42:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Embarcadero RadPHP XE2 [2012/06/28 07:42:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dokumenty\RadPHP [2012/06/28 07:37:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\szwejo\Pulpit\radphp_xe2_upd4_win [2012/06/28 07:13:55 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\{A814B932-9C3D-4211-95C6-0196823B81F7} [2012/06/28 07:13:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Embarcadero Prism [2012/06/28 07:13:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dokumenty\RemObjects Samples [2012/06/28 07:12:58 | 000,000,000 | ---D | C] -- C:\Program Files\RemObjects Software [2012/06/28 07:12:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Mono 2.10.6 for Windows [2012/06/28 07:10:30 | 000,000,000 | ---D | C] -- C:\Program Files\Mono-2.10.6 [2012/06/28 07:09:55 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Help Viewer [2012/06/28 07:09:19 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft SQL Server [2012/06/28 07:08:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\szwejo\Moje dokumenty\Visual Studio 2010 [2012/06/28 07:08:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Microsoft Visual Studio 2010 [2012/06/28 07:06:00 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft SDKs [2012/06/28 07:05:39 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Visual Studio 10.0 [2012/06/28 07:05:39 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Merge Modules [2012/06/28 06:59:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\szwejo\Pulpit\prism_xe2_5_win_en [2012/06/28 05:22:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\szwejo\Pulpit\radstudio_xe2_4429_win_esd [4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012/07/20 15:57:32 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2012/07/20 15:43:45 | 000,001,032 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2012/07/20 10:51:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Menu Start\Programy\Norton Bootable Recovery Tool Wizard [2012/07/20 10:40:52 | 000,001,035 | ---- | M] () -- C:\Documents and Settings\szwejo\Pulpit\Norton Download Manager.lnk [2012/07/20 10:40:52 | 000,000,840 | ---- | M] () -- C:\Documents and Settings\szwejo\Pulpit\Pliki instalacyjne Norton.lnk [2012/07/20 10:40:36 | 000,001,324 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat [2012/07/20 10:37:11 | 000,182,372 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\SMRResults300.dat [2012/07/20 10:23:41 | 000,000,211 | RHS- | M] () -- C:\boot.ini [2012/07/20 09:14:59 | 000,000,051 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\lbdftoxbjxmsdjm [2012/07/20 09:14:45 | 000,049,152 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\qtnhprqj.exe [2012/07/20 09:14:45 | 000,049,152 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\jwngssro.exe [2012/07/20 09:14:45 | 000,049,152 | ---- | M] () -- C:\Documents and Settings\szwejo\0.05142533748492262.exe [2012/07/20 09:13:00 | 000,001,036 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2012/07/17 05:37:24 | 000,002,262 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2012/07/15 05:03:59 | 000,019,721 | ---- | M] () -- C:\Documents and Settings\szwejo\Moje dokumenty\2012-07-15.hrf [2012/07/13 05:38:11 | 000,019,549 | ---- | M] () -- C:\Documents and Settings\szwejo\Moje dokumenty\2012-07-13.hrf [2012/07/12 08:58:25 | 020,883,218 | ---- | M] () -- C:\Documents and Settings\szwejo\Pulpit\28514_fastreport_vcl_4_rad_edition_for_delphi_and_c_builder_xe2.ZIP [2012/07/12 05:11:30 | 000,001,813 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk [2012/07/11 10:11:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Menu Start\Programy\Rave Reports 10.0 BE [2012/07/11 10:10:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Menu Start\Programy\DevJET Documentation Insight Express [2012/07/11 09:53:51 | 000,000,000 | R--D | M] -- C:\Documents and Settings\All Users\Menu Start\Programy\Embarcadero RAD Studio XE2 [2012/07/09 11:27:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Menu Start\Programy\Image Comparer [2012/07/09 11:27:31 | 000,000,686 | ---- | M] () -- C:\Documents and Settings\szwejo\Pulpit\Image Comparer.lnk [2012/07/09 11:27:07 | 003,845,680 | ---- | M] (Bolide Software ) -- C:\Documents and Settings\szwejo\Pulpit\ic_setup.exe [2012/07/09 11:16:57 | 000,195,040 | ---- | M] () -- C:\Documents and Settings\szwejo\Pulpit\MaBadaouiChamoun.pdf [2012/07/09 10:06:49 | 000,015,409 | ---- | M] () -- C:\Documents and Settings\szwejo\Pulpit\25631_pngdelph_method_shop_code_samples.ZIP [2012/07/09 08:35:01 | 000,493,145 | ---- | M] () -- C:\Documents and Settings\szwejo\Pulpit\damiles-basicOCR-e2deb08.zip [2012/07/09 06:39:40 | 001,216,478 | ---- | M] () -- C:\Documents and Settings\szwejo\Pulpit\6395-13944-1-PB.pdf [2012/07/09 05:55:07 | 000,100,337 | ---- | M] () -- C:\Documents and Settings\szwejo\Pulpit\Vector_Space_Search_Engine_Theory.pdf [2012/07/09 05:50:16 | 000,509,944 | ---- | M] () -- C:\Documents and Settings\szwejo\Pulpit\captcha.zip [2012/07/09 05:19:36 | 000,894,007 | ---- | M] () -- C:\Documents and Settings\szwejo\Pulpit\wcre08-captcha.pdf [2012/07/07 18:22:21 | 000,020,432 | ---- | M] () -- C:\Documents and Settings\szwejo\Moje dokumenty\2012-07-08.hrf [2012/07/07 17:58:01 | 000,020,060 | ---- | M] () -- C:\Documents and Settings\szwejo\Moje dokumenty\2012-07-07.hrf [2012/07/06 18:31:21 | 000,701,066 | ---- | M] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-S-1-5-21-1409082233-764733703-839522115-1003-0.dat [2012/07/06 18:31:20 | 000,331,986 | ---- | M] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-System.dat [2012/07/06 12:39:27 | 000,013,030 | ---- | M] () -- C:\PDOXUSRS.NET [2012/07/06 05:15:25 | 000,000,026 | ---- | M] () -- C:\Documents and Settings\szwejo\Moje dokumenty\Rad_Studio_XE2_Upd6_Help_Downloadsversion.ini [2012/07/06 03:30:48 | 000,299,640 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2012/07/05 11:56:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Menu Start\Programy\Microsoft Office [2012/07/05 11:18:34 | 000,001,376 | ---- | M] () -- C:\Documents and Settings\szwejo\Pulpit\Office Professional 2010 Trial_1341501513531.lnk [2012/07/05 10:25:50 | 001,595,432 | ---- | M] (Digital River on behalf of Microsoft) -- C:\Documents and Settings\szwejo\Pulpit\add1c30357084d49890f77e07d93d3fd_Pod12_pl-PL.exe [2012/07/05 10:11:52 | 000,013,030 | ---- | M] () -- C:\WINDOWS\System32\PDOXUSRS.NET [2012/07/05 07:36:10 | 000,571,258 | ---- | M] () -- C:\Documents and Settings\szwejo\Pulpit\demoapp.zip [2012/07/05 06:50:06 | 000,002,309 | ---- | M] () -- C:\Documents and Settings\szwejo\Moje dokumenty\Nowa Baza Danych.odb [2012/07/05 04:44:02 | 000,000,127 | -H-- | M] () -- C:\Documents and Settings\szwejo\.cgb_license [2012/07/05 04:42:59 | 000,000,134 | -H-- | M] () -- C:\Documents and Settings\LocalService\.cgb_license [2012/07/04 11:25:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Menu Start\Programy\Advanced Installer 9.3 [2012/07/04 11:25:54 | 000,000,899 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Advanced Installer 9.3.lnk [2012/07/04 11:24:29 | 044,828,160 | ---- | M] () -- C:\Documents and Settings\szwejo\Pulpit\advinst.msi [2012/07/04 10:48:34 | 016,452,941 | ---- | M] () -- C:\Documents and Settings\szwejo\Pulpit\24996_bde_merge_module_for_rad_studio_2007_xe2.ZIP [2012/07/04 10:43:16 | 023,620,410 | ---- | M] () -- C:\Documents and Settings\szwejo\Pulpit\28537_bde_installer_for_delphi_c_builder_and_rad_studio_xe2.ZIP [2012/07/02 06:54:55 | 000,020,250 | ---- | M] () -- C:\Documents and Settings\szwejo\Moje dokumenty\2012-07-02.hrf [2012/07/02 06:53:33 | 000,001,397 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Hattrick Organizer.lnk [2012/07/02 06:53:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Menu Start\Programy\Hattrick Organizer [2012/07/01 17:16:28 | 018,343,583 | ---- | M] () -- C:\Documents and Settings\szwejo\Pulpit\SickSEOPackageV6.3.zip [2012/06/30 16:54:39 | 000,018,029 | ---- | M] () -- C:\Documents and Settings\szwejo\Moje dokumenty\2012-06-30.hrf [2012/06/30 07:29:22 | 000,008,335 | ---- | M] () -- C:\sample1.jpg [2012/06/30 07:24:04 | 001,961,145 | ---- | M] () -- C:\Documents and Settings\szwejo\Pulpit\Asprise-OCR-C-Windows_XP_32bit-4.0.zip [2012/06/28 07:54:24 | 000,000,172 | ---- | M] () -- C:\WINDOWS\System32\drivers\NBRTWizard\0500000.05A\isolate.ini [2012/06/28 07:45:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Menu Start\Programy\Android SDK Tools [2012/06/28 07:42:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Menu Start\Programy\Embarcadero RadPHP XE2 [2012/06/28 07:37:28 | 371,653,416 | ---- | M] () -- C:\Documents and Settings\szwejo\Pulpit\radphp_xe2_upd4_win.zip [2012/06/28 07:13:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Menu Start\Programy\Embarcadero Prism [2012/06/28 07:12:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Menu Start\Programy\Mono 2.10.6 for Windows [2012/06/28 07:08:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Menu Start\Programy\Microsoft Visual Studio 2010 [2012/06/28 06:40:48 | 594,373,771 | ---- | M] () -- C:\Documents and Settings\szwejo\Pulpit\prism_xe2_5_win_en.zip [2012/06/28 05:19:03 | 010,041,410 | ---- | M] () -- C:\Documents and Settings\szwejo\Pulpit\radstudio_xe2_4429_win_esd.zip [2012/06/22 09:48:24 | 012,237,033 | ---- | M] () -- C:\Documents and Settings\szwejo\Pulpit\struktura_delphi_bd.pdf [4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012/07/20 10:51:02 | 000,000,172 | ---- | C] () -- C:\WINDOWS\System32\drivers\NBRTWizard\0500000.05A\isolate.ini [2012/07/20 10:40:52 | 000,001,035 | ---- | C] () -- C:\Documents and Settings\szwejo\Pulpit\Norton Download Manager.lnk [2012/07/20 10:40:52 | 000,000,840 | ---- | C] () -- C:\Documents and Settings\szwejo\Pulpit\Pliki instalacyjne Norton.lnk [2012/07/20 10:37:04 | 000,182,372 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\SMRResults300.dat [2012/07/20 09:14:59 | 000,049,152 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\qtnhprqj.exe [2012/07/20 09:14:59 | 000,049,152 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\jwngssro.exe [2012/07/20 09:14:50 | 000,000,051 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\lbdftoxbjxmsdjm [2012/07/20 09:14:45 | 000,049,152 | ---- | C] () -- C:\Documents and Settings\szwejo\0.05142533748492262.exe [2012/07/15 05:03:59 | 000,019,721 | ---- | C] () -- C:\Documents and Settings\szwejo\Moje dokumenty\2012-07-15.hrf [2012/07/13 05:38:11 | 000,019,549 | ---- | C] () -- C:\Documents and Settings\szwejo\Moje dokumenty\2012-07-13.hrf [2012/07/12 08:53:42 | 020,883,218 | ---- | C] () -- C:\Documents and Settings\szwejo\Pulpit\28514_fastreport_vcl_4_rad_edition_for_delphi_and_c_builder_xe2.ZIP [2012/07/09 11:27:31 | 000,000,686 | ---- | C] () -- C:\Documents and Settings\szwejo\Pulpit\Image Comparer.lnk [2012/07/09 11:16:56 | 000,195,040 | ---- | C] () -- C:\Documents and Settings\szwejo\Pulpit\MaBadaouiChamoun.pdf [2012/07/09 10:06:49 | 000,015,409 | ---- | C] () -- C:\Documents and Settings\szwejo\Pulpit\25631_pngdelph_method_shop_code_samples.ZIP [2012/07/09 08:35:01 | 000,493,145 | ---- | C] () -- C:\Documents and Settings\szwejo\Pulpit\damiles-basicOCR-e2deb08.zip [2012/07/09 06:39:33 | 001,216,478 | ---- | C] () -- C:\Documents and Settings\szwejo\Pulpit\6395-13944-1-PB.pdf [2012/07/09 05:55:07 | 000,100,337 | ---- | C] () -- C:\Documents and Settings\szwejo\Pulpit\Vector_Space_Search_Engine_Theory.pdf [2012/07/09 05:50:13 | 000,509,944 | ---- | C] () -- C:\Documents and Settings\szwejo\Pulpit\captcha.zip [2012/07/09 05:19:24 | 000,894,007 | ---- | C] () -- C:\Documents and Settings\szwejo\Pulpit\wcre08-captcha.pdf [2012/07/07 18:22:21 | 000,020,432 | ---- | C] () -- C:\Documents and Settings\szwejo\Moje dokumenty\2012-07-08.hrf [2012/07/07 17:58:01 | 000,020,060 | ---- | C] () -- C:\Documents and Settings\szwejo\Moje dokumenty\2012-07-07.hrf [2012/07/06 05:15:25 | 000,000,026 | ---- | C] () -- C:\Documents and Settings\szwejo\Moje dokumenty\Rad_Studio_XE2_Upd6_Help_Downloadsversion.ini [2012/07/05 11:18:34 | 000,001,376 | ---- | C] () -- C:\Documents and Settings\szwejo\Pulpit\Office Professional 2010 Trial_1341501513531.lnk [2012/07/05 10:11:52 | 000,013,030 | ---- | C] () -- C:\WINDOWS\System32\PDOXUSRS.NET [2012/07/05 07:36:05 | 000,571,258 | ---- | C] () -- C:\Documents and Settings\szwejo\Pulpit\demoapp.zip [2012/07/05 06:48:37 | 000,002,309 | ---- | C] () -- C:\Documents and Settings\szwejo\Moje dokumenty\Nowa Baza Danych.odb [2012/07/05 04:44:02 | 000,000,127 | -H-- | C] () -- C:\Documents and Settings\szwejo\.cgb_license [2012/07/04 11:25:54 | 000,000,899 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Advanced Installer 9.3.lnk [2012/07/04 11:15:22 | 044,828,160 | ---- | C] () -- C:\Documents and Settings\szwejo\Pulpit\advinst.msi [2012/07/04 10:44:16 | 016,452,941 | ---- | C] () -- C:\Documents and Settings\szwejo\Pulpit\24996_bde_merge_module_for_rad_studio_2007_xe2.ZIP [2012/07/04 10:36:24 | 023,620,410 | ---- | C] () -- C:\Documents and Settings\szwejo\Pulpit\28537_bde_installer_for_delphi_c_builder_and_rad_studio_xe2.ZIP [2012/07/02 06:54:55 | 000,020,250 | ---- | C] () -- C:\Documents and Settings\szwejo\Moje dokumenty\2012-07-02.hrf [2012/07/01 17:16:24 | 018,343,583 | ---- | C] () -- C:\Documents and Settings\szwejo\Pulpit\SickSEOPackageV6.3.zip [2012/06/30 16:54:39 | 000,018,029 | ---- | C] () -- C:\Documents and Settings\szwejo\Moje dokumenty\2012-06-30.hrf [2012/06/30 07:30:29 | 000,008,335 | ---- | C] () -- C:\sample1.jpg [2012/06/30 07:23:46 | 001,961,145 | ---- | C] () -- C:\Documents and Settings\szwejo\Pulpit\Asprise-OCR-C-Windows_XP_32bit-4.0.zip [2012/06/28 17:37:22 | 000,000,134 | -H-- | C] () -- C:\Documents and Settings\LocalService\.cgb_license [2012/06/28 07:36:10 | 371,653,416 | ---- | C] () -- C:\Documents and Settings\szwejo\Pulpit\radphp_xe2_upd4_win.zip [2012/06/28 05:19:12 | 594,373,771 | ---- | C] () -- C:\Documents and Settings\szwejo\Pulpit\prism_xe2_5_win_en.zip [2012/06/28 05:17:50 | 010,041,410 | ---- | C] () -- C:\Documents and Settings\szwejo\Pulpit\radstudio_xe2_4429_win_esd.zip [2012/06/22 09:46:50 | 012,237,033 | ---- | C] () -- C:\Documents and Settings\szwejo\Pulpit\struktura_delphi_bd.pdf [2012/06/04 08:27:27 | 000,000,218 | ---- | C] () -- C:\Documents and Settings\szwejo\Ustawienia lokalne\Dane aplikacji\recently-used.xbel [2012/02/23 18:55:00 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\BDSSR160.dll [2012/02/23 18:55:00 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\BDSSR.dll [2011/07/28 19:57:21 | 000,701,066 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-S-1-5-21-1409082233-764733703-839522115-1003-0.dat [2011/07/28 19:57:20 | 000,331,986 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-System.dat [2011/07/25 15:18:57 | 000,184,525 | ---- | C] () -- C:\WINDOWS\Submitter Uninstaller.exe [2011/07/17 13:13:33 | 000,482,408 | ---- | C] () -- C:\WINDOWS\ssndii.exe [2011/07/17 13:12:50 | 000,026,624 | ---- | C] () -- C:\WINDOWS\System32\ssp7ml3.dll [2011/07/07 11:58:04 | 000,010,752 | ---- | C] () -- C:\Documents and Settings\szwejo\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011/06/26 05:56:40 | 000,001,732 | ---- | C] () -- C:\WINDOWS\System32\drivers\nvphy.bin [2011/06/25 06:06:42 | 000,143,360 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll [2011/06/25 06:06:42 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe [2011/06/24 20:55:11 | 000,252,080 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin [2011/06/24 20:55:09 | 000,252,080 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin [2011/06/24 20:55:09 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin [2011/06/24 20:54:54 | 002,292,678 | ---- | C] () -- C:\WINDOWS\System32\nvdata.bin [2011/06/24 20:43:48 | 000,001,324 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat [2011/06/24 20:06:02 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat [2011/06/24 09:31:18 | 000,004,482 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2011/06/24 09:30:19 | 000,299,640 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2011/06/24 08:36:55 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2011/06/24 08:32:35 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2006/05/12 07:23:22 | 000,090,112 | ---- | C] () -- C:\WINDOWS\System32\btprn2k.dll [2004/08/02 08:20:40 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat [2001/11/14 07:56:00 | 001,802,240 | ---- | C] () -- C:\WINDOWS\System32\lcppn21.dll [2001/10/26 13:30:20 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin [2001/10/26 12:15:16 | 000,555,452 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat [2001/10/26 12:15:16 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat [2001/10/26 12:15:16 | 000,104,390 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat [2001/10/26 12:15:16 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat [2001/08/23 09:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin [2001/08/23 09:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat [2001/08/17 17:30:24 | 000,493,362 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat [2001/08/17 17:30:24 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat [2001/08/17 17:30:24 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat [2001/08/17 17:30:22 | 000,083,714 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat [2001/08/17 17:15:38 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin [2001/07/21 18:36:48 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat [2001/07/21 18:36:04 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat [2001/07/21 18:24:16 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat [1996/02/01 13:25:42 | 000,943,616 | ---- | C] () -- C:\WINDOWS\System32\dfolder.dll [color=#E56717]========== LOP Check ==========[/color] [2012/06/04 05:05:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\szwejo\Dane aplikacji\BitLord [2012/06/14 14:26:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\szwejo\Dane aplikacji\Borland [2012/07/04 11:27:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\szwejo\Dane aplikacji\Caphyon [2012/05/31 14:57:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\szwejo\Dane aplikacji\CodeGear [2012/05/31 13:14:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\szwejo\Dane aplikacji\DAEMON Tools Lite [2012/07/11 10:14:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\szwejo\Dane aplikacji\DevJET [2011/09/28 05:24:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\szwejo\Dane aplikacji\digiXMAS Article Submitter [2012/01/12 16:02:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\szwejo\Dane aplikacji\digiXMAS Directory Submitter .Net [2011/11/09 09:59:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\szwejo\Dane aplikacji\digiXMAS Submitter [2012/07/11 09:41:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\szwejo\Dane aplikacji\Embarcadero [2012/06/18 14:17:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\szwejo\Dane aplikacji\EurekaLog [2012/05/29 07:31:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\szwejo\Dane aplikacji\FileZilla [2011/06/28 08:20:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\szwejo\Dane aplikacji\Notepad++ [2012/07/09 11:27:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\szwejo\Dane aplikacji\Obsidium [2011/06/27 06:03:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\szwejo\Dane aplikacji\OpenOffice.org [2012/05/31 07:51:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\szwejo\Dane aplikacji\Python-Eggs [2012/06/14 13:07:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\szwejo\Dane aplikacji\SmartBear [2012/06/14 13:09:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\szwejo\Dane aplikacji\Subversion [2012/07/04 11:24:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Caphyon [2012/06/17 17:29:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite [2012/07/06 04:25:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Embarcadero [2012/07/20 09:14:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ijhoajzwnghreie [2011/06/26 07:20:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Drivers HeadQuarters [2012/06/14 12:35:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Raize [2012/07/04 11:25:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\regid.2003-04.com.caphyon [2012/06/14 13:07:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SmartBear [2012/07/11 09:34:09 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{05500BA0-5731-46FD-9326-FA79A36E6D46} [2012/07/06 05:29:02 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{16DDC977-28D8-44E8-8358-8BBFBEE97FE7} [2012/06/28 07:14:14 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{A814B932-9C3D-4211-95C6-0196823B81F7} [2012/06/14 12:11:18 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{B0A6C550-7640-4BB9-A44C-C9A7B5257584} [color=#E56717]========== Purity Check ==========[/color] < End of report >