OTL logfile created on: 2012-07-29 11:53:16 - Run 2 OTL by OldTimer - Version 3.2.55.0 Folder = C:\Users\Martyna\Desktop\Nowy folder Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,11 Gb Total Physical Memory | 1,92 Gb Available Physical Memory | 61,73% Memory free 6,23 Gb Paging File | 4,93 Gb Available in Paging File | 79,11% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 97,56 Gb Total Space | 74,99 Gb Free Space | 76,87% Space Free | Partition Type: NTFS Drive D: | 368,10 Gb Total Space | 340,78 Gb Free Space | 92,58% Space Free | Partition Type: NTFS Computer Name: LAPTOP | User Name: Martyna | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-07-29 11:07:52 | 000,597,504 | ---- | M] (OldTimer Tools) -- C:\Users\Martyna\Desktop\Nowy folder\EPSON File Manager.lnk.exe PRC - [2012-07-26 23:45:51 | 001,536,712 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_3_300_268.exe PRC - [2012-07-19 10:36:35 | 000,913,888 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2012-07-03 13:46:44 | 000,655,944 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe PRC - [2012-07-03 13:46:44 | 000,462,920 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe PRC - [2011-06-24 06:22:20 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe PRC - [2011-02-25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2010-11-20 14:17:47 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe PRC - [2010-04-14 18:47:08 | 002,790,472 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe PRC - [2010-04-14 18:47:05 | 000,040,384 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe PRC - [2010-04-14 18:46:53 | 000,119,200 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast5\afwServ.exe PRC - [2010-03-29 15:39:52 | 001,822,600 | ---- | M] (ELAN Microelectronics Corp.) -- C:\Program Files\Elantech\ETDCtrl.exe PRC - [2010-03-15 20:32:52 | 001,599,368 | ---- | M] (ELAN Microelectronics Corp.) -- C:\Program Files\Elantech\ETDCtrlHelper.exe PRC - [2009-12-15 12:44:50 | 002,361,184 | ---- | M] (OrdinarySoft) -- C:\Program Files\Classic Start Menu\ClassicStartMenu.exe PRC - [2009-09-30 14:02:38 | 002,320,920 | R--- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe PRC - [2009-09-30 14:02:36 | 000,268,824 | R--- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe PRC - [2009-09-30 14:02:30 | 001,098,264 | R--- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe PRC - [2006-04-18 06:00:00 | 000,102,400 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\ProgramData\EPSON\EPW!3 SSRP\E_S30RP1.EXE [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012-07-26 23:45:50 | 009,465,032 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32_11_3_300_268.dll MOD - [2012-07-19 10:36:35 | 002,003,424 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll MOD - [2012-06-15 09:34:10 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\7b7fbe651c6e72f12099a298654c9594\System.Windows.Forms.ni.dll MOD - [2012-06-15 09:34:00 | 001,591,808 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6bb439b3f87736d3248ae27d43e2c0d6\System.Drawing.ni.dll MOD - [2012-05-10 03:24:15 | 005,452,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ba3d70b651454c7d49b407b93663bfed\System.Xml.ni.dll MOD - [2012-05-10 03:24:11 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\cfa9c506bfb9254c89dace7b83bc9f9d\System.Configuration.ni.dll MOD - [2012-05-10 03:24:10 | 007,967,232 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\ce9ff6baf9053ed2ed673d948179195c\System.ni.dll MOD - [2012-05-10 03:23:59 | 011,492,864 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\acfc1391e45fedd2a359778ea57d914c\mscorlib.ni.dll MOD - [2012-01-10 21:12:12 | 000,094,208 | ---- | M] () -- C:\Windows\System32\IccLibDll.dll MOD - [2010-11-13 04:39:55 | 000,425,984 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_pl_b77a5c561934e089\System.Windows.Forms.resources.dll MOD - [2010-11-13 04:39:47 | 000,311,296 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pl_b77a5c561934e089\mscorlib.resources.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2012-07-26 23:45:51 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2012-07-19 10:36:35 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2012-07-13 13:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2012-07-03 13:46:44 | 000,655,944 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService) SRV - [2012-03-31 23:42:42 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc) SRV - [2010-04-14 18:47:05 | 000,040,384 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Web Scanner) SRV - [2010-04-14 18:47:05 | 000,040,384 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Mail Scanner) SRV - [2010-04-14 18:47:05 | 000,040,384 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus) SRV - [2010-04-14 18:46:53 | 000,119,200 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\afwServ.exe -- (avast! Firewall) SRV - [2009-09-30 14:02:38 | 002,320,920 | R--- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) SRV - [2009-09-30 14:02:36 | 000,268,824 | R--- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) SRV - [2009-07-14 03:16:15 | 000,016,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\StorSvc.dll -- (StorSvc) SRV - [2009-07-14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc) SRV - [2009-07-14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc) SRV - [2006-04-18 06:00:00 | 000,102,400 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\ProgramData\EPSON\EPW!3 SSRP\E_S30RP1.EXE -- (EPSON_PM_RPCV4_01) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Martyna\AppData\Local\Temp\3221d2e30.tmp -- (SirefefRemover) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ewusbmdm.sys -- (hwdatacard) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\TEMP\cpuz135\cpuz135_x32.sys -- (cpuz135) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Martyna\Desktop\aida3942(dobreprogramy.pl)\aida32.sys -- (AIDA32Driver) DRV - [2012-07-03 13:46:44 | 000,022,344 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector) DRV - [2012-04-01 10:42:14 | 000,054,800 | ---- | M] () [Kernel | System | Running] -- C:\Windows\System32\drivers\funfrm.sys -- (funfrm) DRV - [2011-06-02 11:08:34 | 000,011,336 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files\SystemRequirementsLab\cpudrv.sys -- (cpudrv) DRV - [2010-11-20 14:30:15 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus) DRV - [2010-11-20 14:30:15 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt) DRV - [2010-11-20 14:30:15 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc) DRV - [2010-11-20 12:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV - [2010-11-20 11:14:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID) DRV - [2010-11-20 11:14:41 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap) DRV - [2010-04-14 18:37:30 | 000,102,736 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswFW.sys -- (aswFW) DRV - [2010-04-14 18:37:13 | 000,297,552 | ---- | M] (ALWIL Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswSnx.sys -- (aswSnx) DRV - [2010-04-14 18:36:53 | 000,196,048 | ---- | M] (ALWIL Software) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswNdis2.sys -- (aswNdis2) DRV - [2010-04-14 18:35:47 | 000,046,672 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi) DRV - [2010-04-14 18:35:25 | 000,162,768 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP) DRV - [2010-04-14 18:31:39 | 000,023,376 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr.sys -- (aswRdr) DRV - [2010-04-14 18:31:23 | 000,051,792 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt) DRV - [2010-04-14 18:31:01 | 000,019,024 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk) DRV - [2010-03-24 11:57:16 | 000,191,008 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\RtsUStor.sys -- (RSUSBSTOR) DRV - [2010-03-19 21:10:13 | 000,012,112 | ---- | M] (ALWIL Software) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswNdis.sys -- (aswNdis) DRV - [2010-01-20 06:14:42 | 000,023,136 | ---- | M] (Lenovo Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AcpiVpc.sys -- (ACPIVPC) DRV - [2009-09-17 19:54:14 | 000,041,088 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HECI.sys -- (HECI) DRV - [2009-07-14 01:52:10 | 000,014,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\vwifimp.sys -- (vwifimp) DRV - [2009-07-14 00:02:47 | 000,050,688 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\L1C62x86.sys -- (L1C) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-4141144795-4261475191-2889663106-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ IE - HKU\S-1-5-21-4141144795-4261475191-2889663106-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-4141144795-4261475191-2889663106-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-21-4141144795-4261475191-2889663106-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "https://www.google.pl/" FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}:6.0.25 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.10 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}:6.0.29 FF - prefs.js..keyword.URL: "http://search.skipity.com/?source=ab&q=" FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_268.dll () FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.4.1: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.4.1: C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.450: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-07-19 10:36:36 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-06-09 06:23:18 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 11.0.1\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2012-04-26 08:02:27 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 11.0.1\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2012-04-01 00:27:43 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Martyna\AppData\Roaming\mozilla\Extensions [2012-07-29 02:05:26 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Martyna\AppData\Roaming\mozilla\Firefox\Profiles\26qykdtn.default\extensions [2012-05-19 00:07:09 | 000,000,000 | ---D | M] (WOT) -- C:\Users\Martyna\AppData\Roaming\mozilla\Firefox\Profiles\26qykdtn.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2012-05-20 08:53:27 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Users\Martyna\AppData\Roaming\mozilla\Firefox\Profiles\26qykdtn.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781} [2012-03-07 14:08:04 | 000,002,432 | ---- | M] () -- C:\Users\Martyna\AppData\Roaming\Mozilla\Firefox\Profiles\26qykdtn.default\searchplugins\s-amazon-byskipity-int.xml [2012-03-08 22:50:16 | 000,002,710 | ---- | M] () -- C:\Users\Martyna\AppData\Roaming\Mozilla\Firefox\Profiles\26qykdtn.default\searchplugins\skipity-search.xml [2012-07-22 13:20:01 | 000,002,112 | ---- | M] () -- C:\Users\Martyna\AppData\Roaming\Mozilla\Firefox\Profiles\26qykdtn.default\searchplugins\wot-safe-search.xml [2012-04-01 00:27:33 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2012-04-02 18:54:07 | 000,242,709 | ---- | M] () (No name found) -- C:\USERS\MARTYNA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\26QYKDTN.DEFAULT\EXTENSIONS\{582195F5-92E7-40A0-A127-DB71295901D7}.XPI [2012-07-19 10:36:36 | 000,136,672 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2012-01-12 10:58:30 | 000,917,816 | ---- | M] (BitComet) -- C:\Program Files\mozilla firefox\plugins\npBitCometAgent.dll [2012-07-19 10:36:33 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2012-07-19 10:36:33 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2012-07-19 10:36:33 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2012-07-19 10:36:33 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2012-07-19 10:36:33 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2012-07-19 10:36:33 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2009-06-10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation) O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (ALWIL Software) O4 - HKLM..\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronics Corp.) O4 - HKLM..\Run: [IMSS] C:\Program Files\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe () O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) O4 - HKU\S-1-5-21-4141144795-4261475191-2889663106-1000..\Run: [ClassicStartMenu] C:\Program Files\Classic Start Menu\ClassicStartMenu.exe (OrdinarySoft) O4 - HKU\S-1-5-21-4141144795-4261475191-2889663106-1000..\Run: [EPSON Stylus D92 Series] C:\Windows\System32\spool\DRIVERS\W32X86\3\E_FATIBZE.EXE (SEIKO EPSON CORPORATION) O4 - HKU\S-1-5-21-4141144795-4261475191-2889663106-1000..\Run: [EPSON SX130 Series] C:\Windows\System32\spool\DRIVERS\W32X86\3\E_FATIHJE.EXE (SEIKO EPSON CORPORATION) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O7 - HKU\S-1-5-21-4141144795-4261475191-2889663106-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-4141144795-4261475191-2889663106-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2 O7 - HKU\S-1-5-21-4141144795-4261475191-2889663106-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1 O13 - gopher Prefix: missing O16 - DPF: {816BE035-1450-40D0-8A3B-BA7825A83A77} http://support.lenovo.com/Resources/Lenovo/AutoDetect/Lenovo_AutoDetect2.cab (IASRunner Class) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.11.11 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2A6DA699-8D61-45DE-9089-42BD7C4E8A28}: DhcpNameServer = 192.168.11.11 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-06-10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{8a03ff79-d7d0-11e1-b553-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{8a03ff79-d7d0-11e1-b553-806e6f6e6963}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{8a0401dc-d7d0-11e1-b553-f0def11c2f07}\Shell - "" = AutoRun O33 - MountPoints2\{8a0401dc-d7d0-11e1-b553-f0def11c2f07}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{8feef599-d7ba-11e1-b5aa-f0def11c2f07}\Shell - "" = AutoRun O33 - MountPoints2\{8feef599-d7ba-11e1-b5aa-f0def11c2f07}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{8feef5c6-d7ba-11e1-b5aa-f0def11c2f07}\Shell - "" = AutoRun O33 - MountPoints2\{8feef5c6-d7ba-11e1-b5aa-f0def11c2f07}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{e408243a-d879-11e1-8737-f0def11c2f07}\Shell - "" = AutoRun O33 - MountPoints2\{e408243a-d879-11e1-8737-f0def11c2f07}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{e4082460-d879-11e1-8737-f0def11c2f07}\Shell - "" = AutoRun O33 - MountPoints2\{e4082460-d879-11e1-8737-f0def11c2f07}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\F\Shell - "" = AutoRun O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\AutoRun.exe O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-07-29 11:40:34 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{AD38679C-AC20-40AB-ABE9-8ABFCAF14C96} [2012-07-29 11:40:30 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{29806585-D5CC-4DB5-B6E7-A056796CC044} [2012-07-29 11:07:47 | 000,000,000 | ---D | C] -- C:\Users\Martyna\Desktop\Nowy folder [2012-07-29 10:23:33 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{7AE3A9DC-4192-4A01-8FA7-2EFDAEBBF83F} [2012-07-29 10:23:29 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{B916CD59-817F-4B71-ADE6-2124EA766361} [2012-07-28 19:53:01 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{51676A1A-0C37-41EF-9C2E-5CB623FC4ACC} [2012-07-28 19:49:26 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{C7514494-4583-4F95-8092-927A14778A9E} [2012-07-28 10:27:08 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{C9D271CC-5B7C-461D-B858-02BFD39984FC} [2012-07-27 22:26:50 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{C097F97A-4820-4887-B1DB-9B330A0A4FF1} [2012-07-27 22:25:53 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{51AF1165-FDEB-4FA8-A11F-BCAF685BF14C} [2012-07-27 10:16:34 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{2D85A465-D518-4975-8F87-A88A8B9E81F2} [2012-07-27 10:16:27 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{5B9868E8-BA3B-4197-90FC-44D5477326C3} [2012-07-27 09:56:07 | 000,000,000 | ---D | C] -- C:\Program Files\PLAY ONLINE [2012-07-26 22:16:09 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{DB161AAF-7393-41A0-8760-3992B902CEAF} [2012-07-26 22:16:06 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{8EDEE539-E86F-47DD-9F4D-C29440736495} [2012-07-26 10:01:17 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{32288949-0450-469D-9E9F-3D243D6B9552} [2012-07-26 10:01:14 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{667D9995-2B68-4C82-8426-9E56DC71EBED} [2012-07-25 21:39:02 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{72F8A028-CBE3-460D-9826-B467752CA97C} [2012-07-25 21:38:59 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{97D39220-AC9F-4031-A941-910A9D267455} [2012-07-25 07:15:46 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{76DA8B43-1B83-4029-86CD-864EA6B63528} [2012-07-25 07:15:42 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{05D5212D-D8EC-42AE-86C1-755C36832191} [2012-07-24 18:17:41 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{695BCA08-3A85-4051-9938-2E094CC00D66} [2012-07-24 18:17:34 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{11A2B744-9367-4218-A581-E5F5F5C9197F} [2012-07-23 22:53:59 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{4FD49C76-F98D-42BB-8258-88FE69A580A2} [2012-07-23 22:53:55 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{AB7E6B1A-102A-4C30-9524-913708750B19} [2012-07-23 10:29:29 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{3EC38863-1DD3-4F40-AA63-3782615232F5} [2012-07-23 10:29:26 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{DFC245FD-58EF-4233-BF4F-E40F59EBEAB2} [2012-07-22 21:42:42 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{A258AAB5-2100-43C6-8E06-AA32347DEC20} [2012-07-22 21:42:39 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{7B573643-1393-4E43-A373-E7E936F4815C} [2012-07-22 13:54:16 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Roaming\Malwarebytes [2012-07-22 13:54:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware [2012-07-22 13:54:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2012-07-22 13:53:59 | 000,022,344 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2012-07-22 13:53:59 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2012-07-22 09:42:19 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{765DC0DF-2253-44DD-9C5D-2616E06CC0C1} [2012-07-22 09:42:15 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{F4951094-4B99-4E9A-9DF4-67169F1D6E56} [2012-07-21 21:41:56 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{3F8EB8F8-1CC1-465B-AC37-784023F3FF94} [2012-07-21 21:41:52 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{F1880A8C-0274-4585-A5C8-285DA6878CB9} [2012-07-21 09:31:27 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{D044E51E-25D0-40FF-AB1D-4F6858A9137C} [2012-07-20 21:31:20 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{B9D8FD49-9DD6-428C-8A8A-77651D7B5296} [2012-07-20 21:31:17 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{AD9130F8-6B48-4CE8-B789-880F60D22047} [2012-07-20 09:31:00 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{FD9E9B18-1D56-4490-A8F3-617E8A7DFC8A} [2012-07-20 09:30:57 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{B7375B81-0D17-42E5-9D33-F716D7EE0B5E} [2012-07-19 21:30:39 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{F517EA6B-E598-44CA-ACBA-C424D7ABB53C} [2012-07-19 21:30:36 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{7DE1420E-1758-4EC0-850C-C18C5259728B} [2012-07-19 10:36:38 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Maintenance Service [2012-07-19 10:36:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla [2012-07-19 09:30:18 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{2AD5318C-474A-4B02-94DB-9C0EF24A91AA} [2012-07-19 09:30:12 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{47836E00-406D-406C-BB55-2C04A99B2DBB} [2012-07-18 13:28:38 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{6DC884BD-A391-4055-9C9C-C51D0BE861FF} [2012-07-18 13:28:34 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{CF95304D-A2CA-4865-8E82-02328D025718} [2012-07-18 00:58:14 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{0F42F777-81E8-465F-AAFF-83776169CC78} [2012-07-18 00:58:10 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{3DB46A01-BDB4-4341-A57B-569452ABFF00} [2012-07-17 23:31:05 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Roaming\XBMC [2012-07-17 23:29:28 | 000,000,000 | ---D | C] -- C:\Program Files\XBMC [2012-07-17 12:57:50 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{6EE8AA6D-7656-4625-89B4-5733F013AA16} [2012-07-17 12:57:44 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{7C1060E6-165D-4A61-B279-2C46328809A2} [2012-07-17 00:12:36 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{23AA570E-C7EB-4574-A643-D1A4EC2BA9CD} [2012-07-17 00:12:30 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{CD10CB13-4093-4CED-8369-C8E2FDCD237E} [2012-07-16 10:48:04 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{77642AB0-6774-43BF-82BB-6D908F6A40BF} [2012-07-16 10:48:00 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{9ECBBEF9-0D83-4BC1-BF62-6F65C0AE8A1E} [2012-07-15 22:08:20 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{9CBEEB7C-FF03-4F1D-B37C-5C83E1FE6A08} [2012-07-15 22:08:18 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{1C7F982F-264D-454F-B5FE-CF66CFE22204} [2012-07-15 10:08:01 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{798280A5-41DC-4E35-AB3E-3E97337CD4D2} [2012-07-15 10:07:57 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{AFF8A742-3997-4B5B-B301-4249ED328814} [2012-07-14 15:03:15 | 000,341,504 | ---- | C] (Seiko Epson Corporation) -- C:\Windows\System32\esw2ud.dll [2012-07-14 15:03:15 | 000,132,560 | ---- | C] (Seiko Epson Corporation) -- C:\Windows\System32\esdevapp.exe [2012-07-14 15:03:15 | 000,012,800 | ---- | C] (Seiko Epson Corporation) -- C:\Windows\System32\escdev.dll [2012-07-14 11:42:03 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{A2DD7AB5-7000-437D-AC8A-866252E20D79} [2012-07-14 11:42:00 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{CE2A172B-40D5-440B-8EAC-2389567DD928} [2012-07-13 23:41:43 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{F69635DA-EBE4-4771-ADB3-0FC060D694F1} [2012-07-13 11:41:33 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{F1330C4E-2B0B-4DAA-A3D2-887CBB55EFAD} [2012-07-13 11:41:28 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{D4BD58B6-83BB-48A9-89BD-209B91E52E70} [2012-07-12 21:37:04 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{FE27D46C-1CA8-4BC9-B2C3-09C101B938BC} [2012-07-12 21:36:41 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{5A685385-5DC7-4239-8C99-C50BB0B1B800} [2012-07-12 09:20:18 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{98E324D7-6E29-4382-823B-DFB9E9C790A6} [2012-07-12 09:20:14 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{2885445B-C813-4AAB-9ED0-2E2137254DC8} [2012-07-11 22:52:26 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{0C509A55-6B65-45EB-BAFE-B564641B2CB2} [2012-07-11 14:16:15 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2012-07-11 14:16:14 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2012-07-11 14:16:14 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2012-07-11 14:16:14 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2012-07-11 14:16:13 | 001,800,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll [2012-07-11 14:16:12 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2012-07-11 14:16:12 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll [2012-07-11 14:14:43 | 002,345,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys [2012-07-11 11:31:24 | 000,219,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncrypt.dll [2012-07-11 11:31:19 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml3r.dll [2012-07-11 11:27:57 | 000,805,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdosys.dll [2012-07-10 22:20:56 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{08A81958-D4E7-41D5-8AA9-189D358B6DDE} [2012-07-10 10:20:44 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{CE463BDD-2E38-466C-B2D7-F273C09ADD1F} [2012-07-10 10:20:40 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{919885AF-A05A-42D9-8B38-BB86C46EDA1E} [2012-07-09 13:15:06 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{FC4809CC-9577-4B74-AFBF-E2CF6DB84F54} [2012-07-09 13:14:58 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{BDE13DD2-CF5F-4BCD-804B-EC211CBD90CA} [2012-07-08 20:44:47 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{F537344E-564D-43F5-A0D1-19D8FFC22FC0} [2012-07-08 20:44:44 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{503D9476-4AEA-4DBD-8B3A-AE521E32101C} [2012-07-08 09:41:29 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\EA Games [2012-07-08 09:41:04 | 002,106,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_43.dll [2012-07-08 09:41:04 | 001,868,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dcsx_43.dll [2012-07-08 09:41:04 | 000,527,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_7.dll [2012-07-08 09:41:04 | 000,248,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx11_43.dll [2012-07-08 09:41:04 | 000,239,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_7.dll [2012-07-08 09:41:04 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_5.dll [2012-07-08 09:41:03 | 001,998,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_43.dll [2012-07-08 09:41:03 | 000,528,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_6.dll [2012-07-08 09:41:03 | 000,470,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_43.dll [2012-07-08 09:41:03 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_6.dll [2012-07-08 09:41:03 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_4.dll [2012-07-08 09:41:03 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_7.dll [2012-07-08 09:41:02 | 001,974,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_42.dll [2012-07-08 09:41:02 | 000,515,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_5.dll [2012-07-08 09:41:02 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_5.dll [2012-07-08 09:40:59 | 005,501,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dcsx_42.dll [2012-07-08 09:40:59 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_42.dll [2012-07-08 09:40:59 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_42.dll [2012-07-08 09:40:59 | 000,235,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx11_42.dll [2012-07-08 09:40:58 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_40.dll [2012-07-08 09:40:58 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_41.dll [2012-07-08 09:40:58 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_40.dll [2012-07-08 09:40:58 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_4.dll [2012-07-08 09:40:58 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_4.dll [2012-07-08 09:40:58 | 000,069,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_3.dll [2012-07-08 09:40:58 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_6.dll [2012-07-08 09:40:57 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_39.dll [2012-07-08 09:40:57 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_3.dll [2012-07-08 09:40:57 | 000,509,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_2.dll [2012-07-08 09:40:57 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_39.dll [2012-07-08 09:40:57 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_2.dll [2012-07-08 09:40:57 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_3.dll [2012-07-08 09:40:57 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_2.dll [2012-07-08 09:40:57 | 000,068,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_1.dll [2012-07-08 09:40:57 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_5.dll [2012-07-08 09:40:56 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_39.dll [2012-07-08 09:40:56 | 003,850,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_38.dll [2012-07-08 09:40:56 | 001,491,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_38.dll [2012-07-08 09:40:56 | 000,507,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_1.dll [2012-07-08 09:40:56 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_38.dll [2012-07-08 09:40:56 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_1.dll [2012-07-08 09:40:56 | 000,065,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_0.dll [2012-07-08 09:40:56 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_4.dll [2012-07-08 09:40:55 | 003,786,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_37.dll [2012-07-08 09:40:55 | 001,420,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_37.dll [2012-07-08 09:40:55 | 000,479,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_0.dll [2012-07-08 09:40:55 | 000,462,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_37.dll [2012-07-08 09:40:55 | 000,267,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_10.dll [2012-07-08 09:40:55 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_0.dll [2012-07-08 09:40:55 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_3.dll [2012-07-08 09:40:54 | 003,734,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_36.dll [2012-07-08 09:40:54 | 003,727,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_35.dll [2012-07-08 09:40:54 | 001,374,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_36.dll [2012-07-08 09:40:54 | 001,358,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_35.dll [2012-07-08 09:40:54 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_36.dll [2012-07-08 09:40:54 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_35.dll [2012-07-08 09:40:54 | 000,267,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_9.dll [2012-07-08 09:40:54 | 000,266,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_8.dll [2012-07-08 09:40:54 | 000,017,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_2.dll [2012-07-08 09:40:53 | 003,497,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_34.dll [2012-07-08 09:40:53 | 001,124,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_34.dll [2012-07-08 09:40:53 | 001,123,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_33.dll [2012-07-08 09:40:53 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_34.dll [2012-07-08 09:40:53 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_33.dll [2012-07-08 09:40:53 | 000,261,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_7.dll [2012-07-08 09:40:53 | 000,081,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xinput1_3.dll [2012-07-08 09:40:52 | 003,495,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_33.dll [2012-07-08 09:40:52 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_32.dll [2012-07-08 09:40:52 | 000,440,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10.dll [2012-07-08 09:40:52 | 000,255,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_6.dll [2012-07-08 09:40:52 | 000,251,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_5.dll [2012-07-08 09:40:52 | 000,237,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_4.dll [2012-07-08 09:40:52 | 000,015,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\x3daudio1_1.dll [2012-07-08 09:40:51 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_31.dll [2012-07-08 09:40:51 | 000,236,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_3.dll [2012-07-08 09:40:51 | 000,230,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_2.dll [2012-07-08 09:40:51 | 000,229,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_1.dll [2012-07-08 09:40:51 | 000,062,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xinput1_2.dll [2012-07-08 09:40:51 | 000,062,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xinput1_1.dll [2012-07-08 09:40:47 | 002,388,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_30.dll [2012-07-08 09:40:47 | 002,332,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_29.dll [2012-07-08 09:40:47 | 002,319,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_27.dll [2012-07-08 09:40:47 | 000,230,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_0.dll [2012-07-08 09:40:47 | 000,014,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\x3daudio1_0.dll [2012-07-08 09:40:46 | 002,337,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_25.dll [2012-07-08 09:40:46 | 002,297,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_26.dll [2012-07-08 09:40:46 | 002,222,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_24.dll [2012-07-08 09:39:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Sims 2 [2012-07-08 09:04:05 | 000,514,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qdvd.dll [2012-07-08 08:44:23 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{12DDAECA-87CE-4403-A990-70589CAA3ADC} [2012-07-08 08:44:18 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{69DA6E50-B910-47DC-8505-8E0120001AAB} [2012-07-07 19:21:12 | 002,323,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_28.dll [2012-07-07 19:00:37 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{54258323-FFBC-473D-82AD-871181BA5D2B} [2012-07-07 19:00:32 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{BA981F98-E2A3-4B53-974C-2FCD8C14E6A7} [2012-07-07 10:13:42 | 000,000,000 | ---D | C] -- C:\Program Files\SystemRequirementsLab [2012-07-07 10:13:39 | 000,000,000 | ---D | C] -- C:\Users\Martyna\SystemRequirementsLab [2012-07-07 10:00:39 | 000,000,000 | ---D | C] -- C:\Users\Martyna\Documents\AIDA64 Reports [2012-07-07 09:55:49 | 000,000,000 | ---D | C] -- C:\Windows\pss [2012-07-07 09:14:11 | 000,000,000 | ---D | C] -- C:\Program Files\Futuremark [2012-07-07 03:35:00 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{C15280D9-B5C5-4E51-83B4-2826E0681CE7} [2012-07-07 03:34:56 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{C18782C1-1163-443B-A13B-92C0907C396E} [2012-07-06 15:34:36 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{323CA008-C9DF-4230-B224-4ACCBDDDD3AD} [2012-07-06 15:34:32 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{28D83B3E-4FDE-4D91-B6AD-9B0C5FEA1C53} [2012-07-05 23:29:42 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{6224B5CA-60AD-4D4A-B042-24E00ECF827F} [2012-07-05 23:29:39 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{46C04264-8CE4-49D9-989A-40977AC255D8} [2012-07-05 11:29:22 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{1C9934FF-376C-448B-A078-FE7C1393D84A} [2012-07-05 11:29:20 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{EB302A43-7E8C-4657-8EE2-74CB7BB75C24} [2012-07-04 23:29:01 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{3E5C8759-D7FE-479E-A22E-FBBFB3C64D89} [2012-07-04 23:28:58 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{B96D64FD-B564-4D0A-A3CA-AF9E70B0FD9A} [2012-07-03 23:43:22 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{7DDE2C3E-2850-4FF5-8EEE-E8AF83348236} [2012-07-03 23:43:18 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{8C6091E2-1D64-45BF-951F-B1306B4F2C3B} [2012-07-03 11:42:59 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{769A25A2-595E-45A6-B102-240DA09A4582} [2012-07-03 11:42:51 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{E81A4297-09DD-4D98-BF57-A0FD37ABBE14} [2012-07-02 23:04:01 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{B8FAAD83-B269-4894-8E7E-3AACB6D93D8E} [2012-07-02 23:03:58 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{A1C46884-D772-4EAA-9E1E-651A7C3D169E} [2012-07-02 08:42:42 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{85670FFF-3F4A-4A60-8300-B211F292A80D} [2012-07-02 08:42:39 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{E8B0E104-F762-4A4C-BB54-9081F9611C80} [2012-07-01 20:42:21 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{B26BEE9C-CB32-46A8-A98E-28FC0CDFFE81} [2012-07-01 20:42:16 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{0E8A2FE6-236A-4268-9D4F-A7C580F4F938} [2012-06-30 21:46:30 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{6FB52BCB-27D2-44F7-8E55-272D3062690B} [2012-06-30 21:46:28 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{0F9D9B97-6479-49DC-A1BE-1D86CB9EE698} [2012-06-30 08:19:05 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{C791BF8E-5AA4-4698-A375-0DDA67E0E09C} [2012-06-30 08:19:02 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{2D8F579E-BFC2-4FD3-BA86-6D7277D66D5B} [2012-06-29 20:12:23 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{0D1309A1-4F19-4F6A-9D2C-9A1A5F570BE0} [2012-06-29 20:12:20 | 000,000,000 | ---D | C] -- C:\Users\Martyna\AppData\Local\{33050C1C-80CC-4098-9B93-45CFC3AD9E63} [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-07-29 11:56:02 | 001,835,008 | -HS- | M] () -- C:\Users\Martyna\NTUSER.DAT [2012-07-29 11:47:15 | 000,032,112 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012-07-29 11:47:15 | 000,032,112 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012-07-29 11:45:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2012-07-29 11:40:10 | 000,000,640 | RHS- | M] () -- C:\Users\Martyna\ntuser.pol [2012-07-29 11:40:05 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2012-07-29 11:39:40 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012-07-29 11:39:34 | 2507,546,624 | -HS- | M] () -- C:\hiberfil.sys [2012-07-28 11:23:12 | 001,549,696 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI [2012-07-28 11:23:12 | 000,698,226 | ---- | M] () -- C:\Windows\System32\perfh015.dat [2012-07-28 11:23:12 | 000,616,304 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2012-07-28 11:23:12 | 000,135,490 | ---- | M] () -- C:\Windows\System32\perfc015.dat [2012-07-28 11:23:12 | 000,106,684 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2012-07-26 23:45:50 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe [2012-07-26 23:45:50 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl [2012-07-22 13:54:00 | 000,001,071 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk [2012-07-19 14:55:34 | 000,000,069 | ---- | M] () -- C:\Windows\NeroDigital.ini [2012-07-14 21:34:28 | 000,000,113 | ---- | M] () -- C:\Users\Martyna\Desktop\moje pasje Sałatka z brokułem, jajkiem i pomidorem w czosnkowym dresingu.URL [2012-07-14 18:03:37 | 000,000,073 | ---- | M] () -- C:\Users\Martyna\Desktop\Silent Hill Origins Fire Alchemilla Hospital Solucja.URL [2012-07-14 15:03:15 | 000,000,934 | ---- | M] () -- C:\Users\Public\Desktop\EPSON Scan.lnk [2012-07-11 21:23:49 | 000,275,184 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2012-07-05 11:30:57 | 000,000,100 | ---- | M] () -- C:\Users\Martyna\Desktop\Liście tytoniu burley ogłoszenia Rośliny Dom i ogród ogłoszenie.URL [2012-07-05 11:05:44 | 000,000,126 | ---- | M] () -- C:\Users\Martyna\Desktop\Lublin Liscie tytoniu burley,ZAMÓW JUŻ DZIŚ;) ogłoszenia Rośliny Dom i ogród ogłoszenie.URL [2012-07-03 13:46:44 | 000,022,344 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-07-29 11:49:23 | 000,019,968 | ---- | C] () -- C:\Windows\Installer\{f532089e-b08d-2dff-5458-6b572af78863}\U\800000cb.@ [2012-07-27 15:11:06 | 000,001,712 | ---- | C] () -- C:\Windows\Installer\{f532089e-b08d-2dff-5458-6b572af78863}\U\00000001.@ [2012-07-22 13:54:00 | 000,001,071 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk [2012-07-14 21:34:28 | 000,000,113 | ---- | C] () -- C:\Users\Martyna\Desktop\moje pasje Sałatka z brokułem, jajkiem i pomidorem w czosnkowym dresingu.URL [2012-07-14 18:03:37 | 000,000,073 | ---- | C] () -- C:\Users\Martyna\Desktop\Silent Hill Origins Fire Alchemilla Hospital Solucja.URL [2012-07-14 15:03:15 | 000,000,934 | ---- | C] () -- C:\Users\Public\Desktop\EPSON Scan.lnk [2012-07-05 11:30:57 | 000,000,100 | ---- | C] () -- C:\Users\Martyna\Desktop\Liście tytoniu burley ogłoszenia Rośliny Dom i ogród ogłoszenie.URL [2012-07-05 11:05:44 | 000,000,126 | ---- | C] () -- C:\Users\Martyna\Desktop\Lublin Liscie tytoniu burley,ZAMÓW JUŻ DZIŚ;) ogłoszenia Rośliny Dom i ogród ogłoszenie.URL [2012-06-11 22:40:43 | 000,000,640 | RHS- | C] () -- C:\Users\Martyna\ntuser.pol [2012-05-04 08:10:27 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini [2012-04-19 21:44:15 | 000,111,932 | ---- | C] () -- C:\Windows\System32\EPPICPrinterDB.dat [2012-04-19 21:44:15 | 000,031,053 | ---- | C] () -- C:\Windows\System32\EPPICPattern131.dat [2012-04-19 21:44:15 | 000,027,417 | ---- | C] () -- C:\Windows\System32\EPPICPattern121.dat [2012-04-19 21:44:15 | 000,026,154 | ---- | C] () -- C:\Windows\System32\EPPICPattern1.dat [2012-04-19 21:44:15 | 000,024,903 | ---- | C] () -- C:\Windows\System32\EPPICPattern3.dat [2012-04-19 21:44:15 | 000,021,390 | ---- | C] () -- C:\Windows\System32\EPPICPattern5.dat [2012-04-19 21:44:15 | 000,020,148 | ---- | C] () -- C:\Windows\System32\EPPICPattern2.dat [2012-04-19 21:44:15 | 000,011,811 | ---- | C] () -- C:\Windows\System32\EPPICPattern4.dat [2012-04-19 21:44:15 | 000,004,943 | ---- | C] () -- C:\Windows\System32\EPPICPattern6.dat [2012-04-19 21:44:15 | 000,001,146 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_DU.dat [2012-04-19 21:44:15 | 000,001,139 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_PT.dat [2012-04-19 21:44:15 | 000,001,139 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_BP.dat [2012-04-19 21:44:15 | 000,001,136 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_ES.dat [2012-04-19 21:44:15 | 000,001,129 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_FR.dat [2012-04-19 21:44:15 | 000,001,129 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_CF.dat [2012-04-19 21:44:15 | 000,001,120 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_IT.dat [2012-04-19 21:44:15 | 000,001,107 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_GE.dat [2012-04-19 21:44:15 | 000,001,104 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_EN.dat [2012-04-19 21:44:15 | 000,000,097 | ---- | C] () -- C:\Windows\System32\PICSDK.ini [2012-04-19 21:42:21 | 000,000,026 | ---- | C] () -- C:\Windows\CDED92Exp.ini [2012-04-01 14:10:45 | 000,000,418 | ---- | C] () -- C:\Windows\ODBC.INI [2012-04-01 12:22:14 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe [2012-04-01 12:22:13 | 000,053,600 | ---- | C] () -- C:\Windows\System32\dosx.exe [2012-04-01 10:42:14 | 000,057,344 | ---- | C] () -- C:\Windows\AsfHelper.dll [2012-04-01 10:42:14 | 000,054,800 | ---- | C] () -- C:\Windows\System32\drivers\funfrm.sys [2012-04-01 09:54:08 | 000,059,600 | ---- | C] () -- C:\Users\Martyna\AppData\Local\GDIPFONTCACHEV1.DAT [2012-03-31 23:35:23 | 000,002,048 | -HS- | C] () -- C:\Windows\Installer\{f532089e-b08d-2dff-5458-6b572af78863}\@ [2012-03-31 23:35:23 | 000,002,048 | -HS- | C] () -- C:\Users\Martyna\AppData\Local\{f532089e-b08d-2dff-5458-6b572af78863}\@ [2012-03-31 23:03:06 | 001,549,696 | ---- | C] () -- C:\Windows\System32\PerfStringBackup.INI [2012-03-31 22:59:50 | 000,524,288 | -HS- | C] () -- C:\Users\Martyna\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms [2012-03-31 22:59:50 | 000,524,288 | -HS- | C] () -- C:\Users\Martyna\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms [2012-03-31 22:59:50 | 000,065,536 | -HS- | C] () -- C:\Users\Martyna\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf [2012-03-31 22:59:50 | 000,000,020 | -HS- | C] () -- C:\Users\Martyna\ntuser.ini [2012-03-31 22:59:49 | 001,835,008 | -HS- | C] () -- C:\Users\Martyna\NTUSER.DAT [2012-01-10 22:17:08 | 000,128,204 | ---- | C] () -- C:\Windows\System32\igcompkrng575.bin [2012-01-10 22:17:04 | 000,105,608 | ---- | C] () -- C:\Windows\System32\igfcg575m.bin [2012-01-10 22:17:02 | 000,867,020 | ---- | C] () -- C:\Windows\System32\igkrng575.bin [2012-01-10 21:29:54 | 013,904,384 | ---- | C] () -- C:\Windows\System32\ig4icd32.dll [2012-01-10 21:14:34 | 000,004,096 | ---- | C] ( ) -- C:\Windows\System32\IGFXDEVLib.dll [2012-01-10 21:12:34 | 000,000,151 | ---- | C] () -- C:\Windows\System32\GfxUI.exe.config [2012-01-10 21:12:12 | 000,094,208 | ---- | C] () -- C:\Windows\System32\IccLibDll.dll [color=#E56717]========== LOP Check ==========[/color] [2012-07-29 01:16:49 | 000,000,000 | ---D | M] -- C:\Users\Martyna\AppData\Roaming\BitComet [2012-05-13 22:19:11 | 000,000,000 | ---D | M] -- C:\Users\Martyna\AppData\Roaming\Charles [2012-07-28 20:46:08 | 000,000,000 | ---D | M] -- C:\Users\Martyna\AppData\Roaming\Classic Start Menu [2012-04-01 11:27:15 | 000,000,000 | ---D | M] -- C:\Users\Martyna\AppData\Roaming\EasyCapture [2012-05-22 20:36:07 | 000,000,000 | ---D | M] -- C:\Users\Martyna\AppData\Roaming\EPSON [2012-06-13 19:10:37 | 000,000,000 | ---D | M] -- C:\Users\Martyna\AppData\Roaming\Foxit Software [2012-05-03 17:38:57 | 000,000,000 | ---D | M] -- C:\Users\Martyna\AppData\Roaming\Lenovo [2012-04-26 12:47:32 | 000,000,000 | ---D | M] -- C:\Users\Martyna\AppData\Roaming\Thunderbird [2012-07-21 00:07:35 | 000,000,000 | ---D | M] -- C:\Users\Martyna\AppData\Roaming\XBMC [2012-07-01 20:41:37 | 000,032,608 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] < End of report >