OTL logfile created on: 2012-08-06 19:29:16 - Run 2 OTL by OldTimer - Version 3.2.56.0 Folder = I:\ Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.5512) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1,96 Gb Total Physical Memory | 1,49 Gb Available Physical Memory | 75,99% Memory free 3,81 Gb Paging File | 3,48 Gb Available in Paging File | 91,31% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 29,30 Gb Total Space | 4,64 Gb Free Space | 15,85% Space Free | Partition Type: NTFS Drive D: | 130,21 Gb Total Space | 12,05 Gb Free Space | 9,25% Space Free | Partition Type: NTFS Drive E: | 4,11 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF Drive F: | 137,49 Gb Total Space | 3,06 Gb Free Space | 2,22% Space Free | Partition Type: NTFS Drive I: | 7,47 Gb Total Space | 3,26 Gb Free Space | 43,62% Space Free | Partition Type: NTFS Computer Name: ANDRZEJ-52E58C6 | User Name: Andrze | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-08-05 12:59:09 | 000,596,480 | ---- | M] (OldTimer Tools) -- I:\OTL.exe PRC - [2012-07-03 17:11:50 | 002,667,008 | ---- | M] (Turtle Entertainment GmbH) -- C:\Program Files\EslWire\wire.exe PRC - [2012-07-03 16:40:32 | 000,265,120 | ---- | M] () -- C:\Program Files\Common Files\WireHelpSvc.exe PRC - [2012-07-03 16:40:28 | 000,388,096 | ---- | M] () -- C:\Program Files\EslWire\dbus-daemon.exe PRC - [2012-07-03 16:40:28 | 000,024,480 | ---- | M] () -- C:\Program Files\EslWire\inGame32.exe PRC - [2012-05-26 06:32:24 | 004,327,744 | ---- | M] (Akamai Technologies, Inc) -- C:\Documents and Settings\Andrze\Ustawienia lokalne\Dane aplikacji\Akamai\netsession_win.exe PRC - [2011-09-20 22:48:52 | 003,077,528 | ---- | M] () -- C:\Program Files\Pando Networks\Media Booster\PMB.exe PRC - [2011-02-24 22:15:28 | 002,988,400 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\BitTorrent\BitTorrent.exe PRC - [2011-01-20 11:20:12 | 001,305,408 | ---- | M] (DT Soft Ltd) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe PRC - [2010-11-02 21:03:54 | 001,432,064 | ---- | M] () -- C:\Program Files\ALLPlayer\ALLUpdate.exe PRC - [2010-10-07 10:04:26 | 012,661,344 | ---- | M] (GG Network S.A.) -- C:\Program Files\Gadu-Gadu 10\gg.exe PRC - [2010-08-12 14:16:26 | 000,810,144 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe PRC - [2010-08-12 14:16:12 | 002,215,064 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe PRC - [2009-07-20 02:32:16 | 002,713,144 | ---- | M] (Conexant Systems, Inc.) -- C:\Program Files\CONEXANT\SmartAudio\SmAudio.exe PRC - [2009-06-12 12:59:14 | 004,464,640 | ---- | M] (Lenovo(Beijing)Limited) -- C:\Program Files\Lenovo\Energy Management\utility.exe PRC - [2009-06-10 15:32:56 | 001,282,048 | ---- | M] (Lenovo (Beijing) Limited) -- C:\Program Files\Lenovo\Energy Management\Energy Management.exe PRC - [2008-04-14 19:21:16 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2003-03-26 09:19:12 | 000,172,032 | ---- | M] (HP) -- C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe PRC - [2002-12-17 11:40:22 | 000,049,152 | R--- | M] () -- C:\Program Files\Hewlett-Packard\HP Software Update\hpwuSchd.exe PRC - [2002-12-02 20:56:10 | 000,040,960 | ---- | M] (Hewlett-Packard) -- C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012-07-03 17:10:28 | 005,923,328 | ---- | M] () -- C:\Program Files\EslWire\wireCore.dll MOD - [2012-07-03 16:54:04 | 000,455,680 | ---- | M] () -- C:\Program Files\EslWire\Linesman.dll MOD - [2012-07-03 16:53:26 | 000,208,384 | ---- | M] () -- C:\Program Files\EslWire\laginspect\laginspect.dll MOD - [2012-07-03 16:53:00 | 000,165,888 | ---- | M] () -- C:\Program Files\EslWire\NocIPC32.dll MOD - [2012-07-03 16:40:34 | 000,556,544 | ---- | M] () -- C:\Program Files\EslWire\dbus-1.dll MOD - [2012-07-03 16:40:34 | 000,339,968 | ---- | M] () -- C:\Program Files\EslWire\QtXml4.dll MOD - [2012-07-03 16:40:32 | 002,238,464 | ---- | M] () -- C:\Program Files\EslWire\QtCore4.dll MOD - [2012-07-03 16:40:32 | 001,816,064 | ---- | M] () -- C:\Program Files\EslWire\QtNetwork4.dll MOD - [2012-07-03 16:40:32 | 000,375,296 | ---- | M] () -- C:\Program Files\EslWire\QtDBus4.dll MOD - [2012-07-03 16:40:32 | 000,274,944 | ---- | M] () -- C:\Program Files\EslWire\phonon4.dll MOD - [2012-07-03 16:40:32 | 000,265,120 | ---- | M] () -- C:\Program Files\Common Files\WireHelpSvc.exe MOD - [2012-07-03 16:40:30 | 010,836,992 | ---- | M] () -- C:\Program Files\EslWire\QtWebKit4.dll MOD - [2012-07-03 16:40:28 | 007,994,368 | ---- | M] () -- C:\Program Files\EslWire\QtGui4.dll MOD - [2012-07-03 16:40:28 | 000,447,904 | ---- | M] () -- C:\Program Files\EslWire\inGame32.dll MOD - [2012-07-03 16:40:28 | 000,388,096 | ---- | M] () -- C:\Program Files\EslWire\dbus-daemon.exe MOD - [2012-07-03 16:40:28 | 000,220,672 | ---- | M] () -- C:\Program Files\EslWire\imageformats\qmng4.dll MOD - [2012-07-03 16:40:28 | 000,196,096 | ---- | M] () -- C:\Program Files\EslWire\imageformats\qjpeg4.dll MOD - [2012-07-03 16:40:28 | 000,026,624 | ---- | M] () -- C:\Program Files\EslWire\imageformats\qgif4.dll MOD - [2012-07-03 16:40:28 | 000,024,480 | ---- | M] () -- C:\Program Files\EslWire\inGame32.exe MOD - [2012-07-03 16:40:26 | 000,583,168 | ---- | M] () -- C:\Program Files\EslWire\QtSql4.dll MOD - [2011-09-20 22:48:52 | 003,077,528 | ---- | M] () -- C:\Program Files\Pando Networks\Media Booster\PMB.exe MOD - [2011-01-31 20:59:37 | 000,027,958 | ---- | M] () -- C:\Program Files\Common Files\logonInit.dll MOD - [2010-11-02 21:03:54 | 001,432,064 | ---- | M] () -- C:\Program Files\ALLPlayer\ALLUpdate.exe MOD - [2010-10-07 10:05:14 | 000,217,696 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\gglog.dll MOD - [2010-10-07 10:05:14 | 000,123,488 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\ggipcradioproxy.dll MOD - [2010-10-07 10:05:10 | 000,017,504 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\ggipc.dll MOD - [2010-10-07 10:05:08 | 000,027,744 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\ggcrypto.dll MOD - [2010-10-07 10:05:06 | 000,356,960 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\ggcommon.dll MOD - [2010-08-06 21:01:42 | 002,404,352 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtCore4.dll MOD - [2010-08-06 21:01:42 | 001,515,520 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtScript4.dll MOD - [2010-08-06 21:01:42 | 001,040,384 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtNetwork4.dll MOD - [2010-08-06 21:01:42 | 000,389,120 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtXml4.dll MOD - [2010-08-06 21:01:42 | 000,323,584 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtSvg4.dll MOD - [2010-08-06 21:01:40 | 013,553,664 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtWebKit4.dll MOD - [2010-08-06 21:01:38 | 008,818,688 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtGui4.dll MOD - [2010-08-06 21:01:22 | 003,334,144 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtXmlPatterns4.dll MOD - [2010-08-06 21:00:32 | 000,311,296 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\imageformats\qtiff4.dll MOD - [2010-08-06 21:00:32 | 000,274,432 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\imageformats\qmng4.dll MOD - [2010-08-06 21:00:32 | 000,143,360 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\imageformats\qjpeg4.dll MOD - [2010-08-06 21:00:32 | 000,027,648 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\imageformats\qgif4.dll MOD - [2010-08-06 21:00:32 | 000,018,944 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\imageformats\qsvg4.dll MOD - [2010-03-19 09:33:38 | 000,059,904 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\zlib1.dll MOD - [2008-05-21 17:33:22 | 000,045,056 | ---- | M] () -- C:\Program Files\Lenovo\Energy Management\KbdHook.dll MOD - [2008-04-14 19:20:37 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll MOD - [2005-10-07 15:05:32 | 000,125,440 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll MOD - [2005-06-24 03:05:02 | 000,045,056 | ---- | M] () -- C:\Program Files\Lenovo\Energy Management\HookLib.dll MOD - [2002-12-17 11:40:22 | 000,049,152 | R--- | M] () -- C:\Program Files\Hewlett-Packard\HP Software Update\hpwuSchd.exe [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2012-07-10 22:37:31 | 004,419,392 | ---- | M] () [Auto | Running] -- c:\program files\common files\akamai/netsession_win_4f7fccd.dll -- (Akamai) SRV - [2012-07-03 16:40:32 | 000,265,120 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\WireHelpSvc.exe -- (WireHelpSvc) SRV - [2012-04-21 03:16:42 | 000,129,976 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2011-06-26 08:45:56 | 000,256,000 | R--- | M] () [Auto | Stopped] -- C:\ComboFix\pev.3XE -- (PEVSystemStart) SRV - [2010-08-12 14:18:40 | 000,033,584 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe -- (EhttpSrv) SRV - [2010-08-12 14:16:26 | 000,810,144 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -- (ekrn) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | System | Stopped] -- -- (ntiomin) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - [2012-07-03 16:40:26 | 000,836,496 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\ESLWireACD.sys -- (ESLWireAC) DRV - [2011-02-27 23:24:54 | 000,218,688 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\dtsoftbus01.sys -- (dtsoftbus01) DRV - [2011-01-22 21:48:02 | 000,639,224 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sptd.sys -- (sptd) DRV - [2010-12-06 11:16:50 | 000,024,504 | ---- | M] (Turtle Entertainment GmbH) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ESLvnic.sys -- (ESLvnic1) DRV - [2010-09-22 19:50:18 | 000,082,380 | ---- | M] (Oak Technology Inc.) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\AFS2K.SYS -- (AFS2K) DRV - [2010-08-04 11:50:36 | 000,140,752 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\eamon.sys -- (eamon) DRV - [2010-08-03 13:28:36 | 000,095,896 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\epfwtdir.sys -- (epfwtdir) DRV - [2010-07-29 13:31:26 | 000,115,008 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ehdrv.sys -- (ehdrv) DRV - [2010-03-26 18:20:26 | 001,774,648 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\CHDAU32.sys -- (CnxtHdAudService) DRV - [2010-02-11 14:02:15 | 000,226,880 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\tcpip6.sys -- (Tcpip6) DRV - [2009-09-22 18:40:48 | 000,174,592 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RtsUStor.sys -- (RSUSBSTOR) DRV - [2009-02-01 19:39:02 | 000,163,840 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\bpenum.sys -- (bpenum) DRV - [2008-10-23 14:49:18 | 000,187,392 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\b57xp32.sys -- (b57w2k) DRV - [2008-09-10 20:14:48 | 001,386,624 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\BCMWL5.SYS -- (BCM43XX) DRV - [2008-01-11 14:58:42 | 000,009,472 | ---- | M] (Lenovo Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AcpiVpc.sys -- (ACPIVPC) DRV - [2005-09-05 03:59:24 | 000,019,034 | ---- | M] (Kingsun Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ks-959.sys -- (KS-959) DRV - [2005-03-03 19:53:57 | 000,048,640 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sfdrv01.sys -- (sfdrv01) DRV - [2005-02-23 17:59:54 | 000,006,656 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sfhlp02.sys -- (sfhlp02) DRV - [2004-12-03 12:20:41 | 000,020,544 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sfsync02.sys -- (sfsync02) DRV - [2002-10-03 10:32:48 | 000,017,932 | R--- | M] ( ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Gt680x.sys -- (GT680xNT) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://downloads.phpnuke.org/en/index.php?rvs=google IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com IE - HKCU\..\SearchScopes,DefaultScope = {AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8} IE - HKCU\..\SearchScopes\{9568684B-152A-4925-B624-F07D30D989E3}: "URL" = http://www.daemon-search.com/search/web?q={searchTerms} IE - HKCU\..\SearchScopes\{9F568CDE-A6EA-44B1-9E8B-214879295754}: "URL" = http://downloads.phpnuke.org/en/index.php?rvs=google IE - HKCU\..\SearchScopes\{EEDA851D-272E-40DF-931B-4FE0286DEA54}: "URL" = http://downloads.phpnuke.org/en/index.php?rvs=google IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = 127.0.0.1:9421; [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "http://search.imesh.com/" FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_2_202_235.dll () FF - HKLM\Software\MozillaPlugins\@ganymede/GanymedeNetPlugin,version=1.0: D:\Gry\Ganymede bilard\Plugins\npganymedenet.dll File not found FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.450: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@powerchallenge.com/PowerLoader: C:\DOCUME~1\Andrze\DANEAP~1\POWERC~1\nppowerloader.dll (Power Challenge Sweden AB) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\Andrze\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\Andrze\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-05-26 02:29:10 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-04-01 22:44:17 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2012-04-14 10:04:26 | 000,000,000 | ---D | M] [2010-09-27 17:32:30 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Andrze\Dane aplikacji\Mozilla\Extensions [2012-08-06 19:23:03 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Andrze\Dane aplikacji\Mozilla\Firefox\Profiles\z3br0ga9.default\extensions [2012-07-23 09:45:36 | 000,000,000 | ---D | M] (BitTorrentBar Community Toolbar) -- C:\Documents and Settings\Andrze\Dane aplikacji\Mozilla\Firefox\Profiles\z3br0ga9.default\extensions\{88c7f2aa-f93f-432c-8f0e-b7d85967a527} [2011-01-22 22:59:47 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Documents and Settings\Andrze\Dane aplikacji\Mozilla\Firefox\Profiles\z3br0ga9.default\extensions\engine@conduit.com [2011-12-19 00:27:57 | 000,000,000 | ---D | M] (Babylon) -- C:\Documents and Settings\Andrze\Dane aplikacji\Mozilla\Firefox\Profiles\z3br0ga9.default\extensions\ffxtlbr@babylon.com [2012-05-26 02:29:10 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2012-04-01 17:11:36 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [2012-04-21 03:18:00 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2010-09-04 13:28:45 | 000,423,656 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2011-03-24 11:03:30 | 000,120,296 | ---- | M] ( ) -- C:\Program Files\mozilla firefox\plugins\npganymedenet.dll [2010-05-25 18:09:48 | 000,063,488 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll [2012-04-21 04:18:44 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2012-04-21 04:18:44 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2012-04-21 04:18:44 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2012-04-21 04:18:44 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2012-04-21 04:18:44 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2012-04-21 04:18:44 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - homepage: http://www.wazzub.com/ CHR - default_search_provider: Web Search (Enabled) CHR - default_search_provider: search_url = http://startsear.ch/?aff=2&src=sp&cf=b63fe8b6-6310-11e1-a10f-00ff01000001&q={searchTerms} CHR - default_search_provider: suggest_url = CHR - homepage: http://www.wazzub.com/ CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Documents and Settings\Andrze\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\21.0.1180.60\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\Andrze\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\21.0.1180.60\pdf.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\Andrze\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\21.0.1180.60\gcswf32.dll CHR - plugin: Shockwave Flash (Disabled) = C:\Documents and Settings\Andrze\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll CHR - plugin: LiveVDO plug-in (Enabled) = C:\Documents and Settings\Andrze\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pbiamblgmkgbcgbcgejjgebalncpmhnp\1.3_0\chvsharetvplg.dll CHR - plugin: GanymedeNet.Detector (Enabled) = C:\Documents and Settings\Andrze\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\plugins\npganymedenet.dll CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Documents and Settings\Andrze\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\plugins\nppl3260.dll CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Documents and Settings\Andrze\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\plugins\nprpjplug.dll CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll CHR - plugin: Power Challenge Loader (Enabled) = C:\DOCUME~1\Andrze\DANEAP~1\POWERC~1\nppowerloader.dll CHR - plugin: Google Update (Enabled) = C:\Documents and Settings\Andrze\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.111\npGoogleUpdate3.dll CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll CHR - plugin: Java(TM) Platform SE 6 U31 (Enabled) = C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll CHR - plugin: Pando Web Plugin (Enabled) = C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll CHR - plugin: Windows Presentation Foundation (Enabled) = C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll CHR - Extension: YouTube = C:\Documents and Settings\Andrze\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: Szukaj w Google = C:\Documents and Settings\Andrze\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\ CHR - Extension: LiveVDO plugin = C:\Documents and Settings\Andrze\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pbiamblgmkgbcgbcgejjgebalncpmhnp\1.3_0\ CHR - Extension: Gmail = C:\Documents and Settings\Andrze\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2001-10-26 19:45:16 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O4 - HKLM..\Run: [DeviceDiscovery] C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe (Hewlett-Packard) O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET) O4 - HKLM..\Run: [Energy Management] C:\Program Files\Lenovo\Energy Management\Energy Management.exe (Lenovo (Beijing) Limited) O4 - HKLM..\Run: [EnergyUtility] C:\Program Files\Lenovo\Energy Management\utility.exe (Lenovo(Beijing)Limited) O4 - HKLM..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\hpwuSchd.exe () O4 - HKLM..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe (HP) O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh) O4 - HKLM..\Run: [SmartAudio] C:\Program Files\CONEXANT\SMARTAUDIO\SMAUDIO.EXE (Conexant Systems, Inc.) O4 - HKLM..\Run: [wifi] "C:/Program Files/wifi.com/wifi.exe" -i File not found O4 - HKCU..\Run: [AdobeBridge] File not found O4 - HKCU..\Run: [Akamai NetSession Interface] C:\Documents and Settings\Andrze\Ustawienia lokalne\Dane aplikacji\Akamai\netsession_win.exe (Akamai Technologies, Inc) O4 - HKCU..\Run: [ALLUpdate] C:\Program Files\ALLPlayer\ALLUpdate.exe () O4 - HKCU..\Run: [BitTorrent] C:\Program Files\BitTorrent\BitTorrent.exe (BitTorrent, Inc.) O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O4 - HKCU..\Run: [ESL Wire] C:\Program Files\EslWire\wire.exe (Turtle Entertainment GmbH) O4 - HKCU..\Run: [Gadu-Gadu 10] C:\Program Files\Gadu-Gadu 10\gg.exe (GG Network S.A.) O4 - HKCU..\Run: [Pando Media Booster] C:\Program Files\Pando Networks\Media Booster\PMB.exe () O4 - HKCU..\Run: [Steam] D:\Gry\STEAM\steam.exe (Valve Corporation) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Action Manager 32.lnk = C:\Program Files\ScannerU\AM32.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Nofolderoptions = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O16 - DPF: {0000000A-0000-0010-8000-00AA00389B71} http://download.microsoft.com/download/E/1/F/E1F6B9B3-49AA-42BB-9115-D9FB57768CC2/wmavax.CAB (Reg Error: Key error.) O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB (Reg Error: Key error.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{563F3292-8543-4149-9D67-3227AA3D3D05}: NameServer = 10.5.0.1,10.1.0.1 O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O20 - Winlogon\Notify\LogonInit: DllName - (logonInit.dll) - C:\Program Files\Common Files\logonInit.dll () O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\Andrze\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Andrze\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2010-09-01 10:08:32 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{42fc5752-6aa7-11e0-9e28-00ff01000001}\Shell - "" = AutoRun O33 - MountPoints2\{42fc5752-6aa7-11e0-9e28-00ff01000001}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a O33 - MountPoints2\{649f0d48-1ffe-11e1-a035-00ff01000001}\Shell\AutoPlay\Command - "" = G:\autoply.exe OPEN O33 - MountPoints2\{649f0d48-1ffe-11e1-a035-00ff01000001}\Shell\AutoRun\command - "" = G:\autoply.exe OPEN O33 - MountPoints2\{649f0d48-1ffe-11e1-a035-00ff01000001}\Shell\explore\Command - "" = G:\autoply.exe EXPLORE O33 - MountPoints2\{649f0d48-1ffe-11e1-a035-00ff01000001}\Shell\open\Command - "" = G:\autoply.exe OPEN O33 - MountPoints2\{cf4e7d16-e417-11df-9c74-88ae1d33fd34}\Shell - "" = AutoRun O33 - MountPoints2\{cf4e7d16-e417-11df-9c74-88ae1d33fd34}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a O33 - MountPoints2\{dbb1b356-e951-11e0-9f88-00ff01000001}\Shell\AutoRun\command - "" = G:\urDrive.exe O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-08-05 16:55:20 | 000,000,000 | ---D | C] -- C:\WINDOWS\CSC [2012-08-05 13:33:34 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe [2012-08-05 13:33:34 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe [2012-08-05 13:33:34 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe [2012-08-05 13:33:34 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe [2012-08-05 13:33:24 | 000,000,000 | --SD | C] -- C:\ComboFix [2012-08-05 13:33:13 | 000,000,000 | ---D | C] -- C:\Qoobox [2012-08-05 13:32:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\erdnt [2012-08-03 21:30:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Andrze\Dane aplikacji\hellomoto [2012-07-10 23:22:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Andrze\Pulpit\Fotki [2011-01-15 17:42:25 | 000,047,360 | ---- | C] (VSO Software) -- C:\Documents and Settings\Andrze\Dane aplikacji\pcouffin.sys [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-08-06 19:27:48 | 000,001,032 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2012-08-06 19:27:46 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2012-08-06 19:16:24 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2012-08-05 16:02:10 | 000,001,136 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1606980848-329068152-682003330-1003UA.job [2012-08-04 18:01:01 | 000,001,036 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2012-08-03 00:06:13 | 000,002,311 | ---- | M] () -- C:\Documents and Settings\Andrze\Pulpit\Google Chrome.lnk [2012-07-29 13:02:00 | 000,001,084 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1606980848-329068152-682003330-1003Core.job [2012-07-17 13:46:42 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-08-05 13:33:34 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe [2012-08-05 13:33:34 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe [2012-08-05 13:33:34 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe [2012-08-05 13:33:34 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe [2012-08-05 13:33:34 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe [2012-03-18 18:21:16 | 000,000,746 | ---- | C] () -- C:\WINDOWS\CoD.INI [2012-01-14 15:03:30 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Andrze\Ustawienia lokalne\Dane aplikacji\{C74E91C1-C521-43A3-93D1-F5568F029A3C} [2011-11-16 20:13:24 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Andrze\zwiazek radziecki.odt [2011-11-16 19:50:35 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Andrze\II Rzesza.odt [2011-11-11 09:36:38 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Andrze\Ustawienia lokalne\Dane aplikacji\{C855BBFC-6E3D-4CFE-BB96-2339CA64935D} [2011-11-11 09:36:38 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Andrze\Ustawienia lokalne\Dane aplikacji\{2B8F6F6F-2F5F-4778-8DE4-5E0A45808045} [2011-11-08 21:37:33 | 000,020,216 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat [2011-07-05 16:29:47 | 000,265,120 | ---- | C] () -- C:\Program Files\Common Files\WireHelpSvc.exe [2011-06-07 19:07:12 | 000,112,208 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat [2011-06-07 19:06:34 | 000,000,414 | RHS- | C] () -- C:\Documents and Settings\All Users\ntuser.pol [2011-02-25 00:03:34 | 000,122,884 | ---- | C] () -- C:\WINDOWS\UnGins.exe [2011-02-17 22:31:17 | 000,014,706 | ---- | C] () -- C:\WINDOWS\War3Unin.dat [2011-02-06 00:39:29 | 000,258,048 | ---- | C] () -- C:\WINDOWS\System32\libFLAC.dll [2011-02-01 13:16:23 | 000,000,367 | ---- | C] () -- C:\Program Files\Common Files\userInit.dll [2011-01-31 20:59:37 | 000,027,958 | ---- | C] () -- C:\Program Files\Common Files\logonInit.dll [2011-01-26 19:41:32 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat [2011-01-21 09:23:43 | 000,022,328 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys [2011-01-21 09:23:42 | 000,022,328 | ---- | C] () -- C:\Documents and Settings\Andrze\Dane aplikacji\PnkBstrK.sys [2011-01-21 09:23:04 | 000,103,736 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe [2011-01-21 09:23:01 | 000,066,872 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe [2011-01-21 09:22:59 | 000,000,266 | ---- | C] () -- C:\WINDOWS\game.ini [2011-01-15 17:42:25 | 000,087,608 | ---- | C] () -- C:\Documents and Settings\Andrze\Dane aplikacji\inst.exe [2011-01-15 17:42:25 | 000,007,887 | ---- | C] () -- C:\Documents and Settings\Andrze\Dane aplikacji\pcouffin.cat [2011-01-15 17:42:25 | 000,001,144 | ---- | C] () -- C:\Documents and Settings\Andrze\Dane aplikacji\pcouffin.inf [2011-01-15 17:38:37 | 000,001,057 | ---- | C] () -- C:\Documents and Settings\Andrze\Dane aplikacji\vso_ts_preview.xml [2010-12-14 20:46:51 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2010-12-09 18:49:48 | 000,569,362 | ---- | C] () -- C:\WINDOWS\System32\x264vfw.dll [2010-12-09 18:49:46 | 000,217,088 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2010-12-09 18:49:44 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2010-12-09 18:49:39 | 000,005,120 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2010-11-07 17:11:05 | 000,001,256 | ---- | C] () -- C:\WINDOWS\If42le.ini [2010-11-07 17:11:01 | 000,011,776 | ---- | C] () -- C:\WINDOWS\System32\pmsbfn32.dll [2010-10-24 17:37:04 | 000,004,096 | ---- | C] () -- C:\WINDOWS\d3dx.dat [2010-10-03 18:30:38 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\spdg.dll [2010-09-29 19:11:49 | 000,000,205 | ---- | C] () -- C:\WINDOWS\pexplore.ini [2010-09-29 19:11:49 | 000,000,064 | ---- | C] () -- C:\WINDOWS\UMXADDIN.INI [2010-09-29 15:33:38 | 000,017,932 | R--- | C] ( ) -- C:\WINDOWS\System32\drivers\Gt680x.sys [2010-09-29 15:33:37 | 000,049,152 | R--- | C] () -- C:\WINDOWS\AutoSet.dll [2010-09-29 15:33:36 | 000,000,613 | ---- | C] () -- C:\WINDOWS\if40le.ini [2010-09-29 15:33:35 | 000,000,114 | ---- | C] () -- C:\WINDOWS\SCNDRVU.INI [2010-09-22 19:46:39 | 000,010,955 | ---- | C] () -- C:\WINDOWS\hpdj5100.ini [2010-09-12 02:13:09 | 000,000,032 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\ezsid.dat [2010-09-02 11:07:13 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat [2010-09-01 19:08:30 | 002,026,604 | ---- | C] () -- C:\WINDOWS\System32\igkrng500.bin [2010-09-01 19:08:30 | 000,442,964 | ---- | C] () -- C:\WINDOWS\System32\igcompkrng500.bin [2010-09-01 19:08:30 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v5002.dll [2010-09-01 19:06:11 | 000,052,224 | ---- | C] () -- C:\Documents and Settings\Andrze\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-09-01 11:56:34 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2010-09-01 11:55:24 | 003,457,768 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010-09-01 10:10:25 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2010-09-01 10:05:26 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat < End of report >