OTL logfile created on: 2010-11-21 15:02:55 - Run 2
OTL by OldTimer - Version 3.2.17.3     Folder = C:\Documents and Settings\Piotrek\Moje dokumenty\Pobieranie
Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 75,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 90,00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 97,65 Gb Total Space | 77,44 Gb Free Space | 79,30% Space Free | Partition Type: NTFS
Drive D: | 135,22 Gb Total Space | 37,91 Gb Free Space | 28,04% Space Free | Partition Type: NTFS
Drive E: | 575,11 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
 
Computer Name: DOM-A21611CA4B9 | User Name: Piotrek | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2010-11-21 13:26:29 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Piotrek\Moje dokumenty\Pobieranie\OTL(3).exe
PRC - [2010-11-11 09:42:06 | 000,281,768 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
PRC - [2010-11-11 09:42:06 | 000,267,944 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe
PRC - [2010-11-11 09:42:06 | 000,135,336 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe
PRC - [2010-10-28 17:38:14 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2010-09-14 11:47:24 | 000,716,024 | ---- | M] (Tunngle.net GmbH) -- C:\Program Files\Tunngle\TnglCtrl.exe
PRC - [2010-01-15 13:49:20 | 000,255,536 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe
PRC - [2010-01-14 21:11:00 | 000,076,968 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
PRC - [2008-04-28 05:14:00 | 000,073,728 | ---- | M] (Software 2000 Limited) -- C:\WINDOWS\system32\spool\drivers\w32x86\3\HP1006MC.EXE
PRC - [2008-04-14 21:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - [2010-11-21 13:26:29 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Piotrek\Moje dokumenty\Pobieranie\OTL(3).exe
MOD - [2010-08-23 17:12:53 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [On_Demand | Stopped] -- C:\WINDOWS\System32\appmgmts.dll -- (AppMgmt)
SRV - [2010-11-11 09:42:06 | 000,267,944 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2010-11-11 09:42:06 | 000,135,336 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2010-09-14 11:47:24 | 000,716,024 | ---- | M] (Tunngle.net GmbH) [Auto | Running] -- C:\Program Files\Tunngle\TnglCtrl.exe -- (TunngleService)
SRV - [2010-09-06 10:27:15 | 003,648,584 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\WINDOWS\System32\GameMon.des -- (npggsvc)
SRV - [2010-03-18 12:16:28 | 000,753,504 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe -- (WPFFontCache_v0400)
SRV - [2010-03-18 12:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010-01-15 13:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\EagleNT.sys -- (EagleNT)
DRV - File not found [Kernel | On_Demand | Stopped] -- D:\Blackshot\BlackShot\system\GameGuard\dump_wmimmc.sys -- (dump_wmimmc)
DRV - [2010-11-11 09:42:06 | 000,126,856 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2010-11-11 09:42:06 | 000,060,936 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2010-07-07 03:27:52 | 005,069,312 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2010-07-06 10:13:10 | 000,234,392 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2009-09-16 07:02:40 | 000,027,136 | ---- | M] (Tunngle.net) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\tap0901t.sys -- (tap0901t) TAP-Win32 Adapter V9 (Tunngle)
DRV - [2009-05-11 11:49:19 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2009-05-11 09:12:49 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2008-04-13 23:15:14 | 000,060,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbaudio.sys -- (usbaudio) Sterownik audio USB (WDM)
DRV - [2008-04-13 21:06:06 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2008-02-14 05:04:06 | 004,676,096 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2005-01-03 16:43:08 | 000,004,682 | ---- | M] (INCA Internet Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\npptNT2.sys -- (NPPTNT2)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-527237240-57989841-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {B042753D-F57E-4e8e-A01B-7379A6D4CEFB}:1.23
FF - prefs.js..extensions.enabledItems: fiddlerhook@fiddler2.com:2.2.8.2
FF - prefs.js..extensions.enabledItems: battlefieldheroespatcher@ea.com:5.0.31.0
FF - prefs.js..extensions.enabledItems: {0b38152b-1b20-484d-a11f-5e04a9b0661f}:5.6.12.1
 
 
FF - HKLM\software\mozilla\Firefox\Extensions\\fiddlerhook@fiddler2.com: C:\Program Files\Fiddler2\FiddlerHook [2010-10-06 15:02:44 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-11-11 15:16:10 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010-11-11 15:08:49 | 000,000,000 | ---D | M]
 
[2010-10-03 18:41:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Piotrek\Dane aplikacji\Mozilla\Extensions
[2010-11-20 16:36:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Piotrek\Dane aplikacji\Mozilla\Firefox\Profiles\h5tf05zk.default\extensions
[2010-11-11 15:08:49 | 000,000,000 | ---D | M] (Winamp Toolbar) -- C:\Documents and Settings\Piotrek\Dane aplikacji\Mozilla\Firefox\Profiles\h5tf05zk.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}
[2010-10-09 17:40:54 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Piotrek\Dane aplikacji\Mozilla\Firefox\Profiles\h5tf05zk.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010-11-15 20:48:05 | 000,000,000 | ---D | M] (BitComet Video Downloader) -- C:\Documents and Settings\Piotrek\Dane aplikacji\Mozilla\Firefox\Profiles\h5tf05zk.default\extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}
[2010-11-15 20:48:06 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Piotrek\Dane aplikacji\Mozilla\Firefox\Profiles\h5tf05zk.default\extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}-trash
[2010-10-14 17:21:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Piotrek\Dane aplikacji\Mozilla\Firefox\Profiles\h5tf05zk.default\extensions\battlefieldheroespatcher@ea.com
[2010-11-11 15:09:01 | 000,001,244 | ---- | M] () -- C:\Documents and Settings\Piotrek\Dane aplikacji\Mozilla\Firefox\Profiles\h5tf05zk.default\searchplugins\winamp-search.xml
[2010-11-20 23:20:09 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2010-10-04 15:09:08 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010-08-24 10:31:30 | 000,773,120 | ---- | M] (BitComet) -- C:\Program Files\Mozilla Firefox\plugins\npBitCometAgent.dll
[2010-10-04 15:09:01 | 000,423,656 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2009-04-08 03:06:28 | 000,122,880 | ---- | M] (AB) -- C:\Program Files\Mozilla Firefox\plugins\NPOP7PlugIn.dll
[2010-07-12 17:33:56 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npwachk.dll
[2010-09-14 22:29:36 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml
[2010-09-14 22:29:36 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml
[2010-09-14 22:29:36 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml
[2010-09-14 22:29:36 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml
[2010-09-14 22:29:36 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml
[2010-09-14 22:29:36 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2006-03-02 13:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Winamp Toolbar Loader) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.4.11.9.dll (BitComet)
O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O3 - HKU\S-1-5-21-527237240-57989841-839522115-1004\..\Toolbar\WebBrowser: (Winamp Toolbar) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [ATICustomerCare] C:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [driver.exe] C:\WINDOWS\driver.exe ()
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKU\S-1-5-21-527237240-57989841-839522115-1004..\Run: [ALLUpdate] C:\Program Files\ALLPlayer\ALLUpdate.exe ()
O4 - HKU\S-1-5-21-527237240-57989841-839522115-1004..\Run: [Gadu-Gadu 10] C:\Program Files\Gadu-Gadu 10\gg.exe (GG Network S.A.)
O4 - HKU\S-1-5-21-527237240-57989841-839522115-1004..\Run: [NexonEULauncher]  File not found
O4 - HKU\S-1-5-21-527237240-57989841-839522115-1004..\Run: [Pando Media Booster] C:\Program Files\Pando Networks\Media Booster\PMB.exe ()
O4 - HKU\S-1-5-21-527237240-57989841-839522115-1004..\Run: [PlayNC Launcher]  File not found
O4 - HKU\S-1-5-21-527237240-57989841-839522115-1004..\Run: [Raptr] C:\Program Files\Raptr\raptrstub.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe (McAfee, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE (WinZip Computing, S.L.)
O4 - Startup: C:\Documents and Settings\Piotrek\Menu Start\Programy\Autostart\OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
O4 - Startup: C:\Documents and Settings\Wojtek\Menu Start\Programy\Autostart\OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-527237240-57989841-839522115-1004\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-527237240-57989841-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-527237240-57989841-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-527237240-57989841-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Dane aplikacji\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html ()
O8 - Extra context menu item: Pobierz wszystko za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O8 - Extra context menu item: Pobierz za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O9 - Extra Button: Fiddler2 - {CF819DA3-9882-4944-ADF5-6EF17ECF3C6E} - C:\Program Files\Fiddler2\Fiddler.exe (Eric Lawrence)
O9 - Extra 'Tools' menuitem : Fiddler2 - {CF819DA3-9882-4944-ADF5-6EF17ECF3C6E} - C:\Program Files\Fiddler2\Fiddler.exe (Eric Lawrence)
O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - C:\Program Files\BitComet\tools\BitCometBHO_1.4.11.9.dll (BitComet)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {C212D449-8B3C-41F2-BD9A-047BD770550F} http://operation7.fiaa.eu/OPLauncher.cab (Perparer Class)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Piotrek\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Piotrek\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010-10-03 18:00:48 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2006-03-02 13:00:00 | 000,000,112 | R--- | M] () - E:\AUTORUN.INF -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2010-11-21 13:16:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\WinZip
[2010-11-21 13:15:53 | 000,000,000 | ---D | C] -- C:\Program Files\WinZip
[2010-11-21 12:22:22 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Piotrek\Recent
[2010-11-21 12:16:47 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2010-11-21 12:06:24 | 000,000,000 | -H-D | C] -- C:\WINDOWS\PIF
[2010-11-20 13:34:01 | 000,000,000 | ---D | C] -- C:\WINDOWS\Geko
[2010-11-18 23:00:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Piotrek\Ustawienia lokalne\Dane aplikacji\assembly
[2010-11-18 23:00:00 | 000,000,000 | ---D | C] -- C:\Program Files\NCSoft
[2010-11-18 22:59:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Piotrek\Dane aplikacji\InstallShield
[2010-11-18 22:58:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Piotrek\Dane aplikacji\GetRightToGo
[2010-11-18 22:58:04 | 000,363,552 | ---- | C] (NCsoft) -- C:\Documents and Settings\Piotrek\Pulpit\Aion.exe
[2010-11-18 21:48:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Piotrek\Ustawienia lokalne\Dane aplikacji\PMB Files
[2010-11-18 21:48:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\PMB Files
[2010-11-18 21:47:10 | 000,000,000 | ---D | C] -- C:\Program Files\Pando Networks
[2010-11-16 22:17:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Piotrek\Ustawienia lokalne\Dane aplikacji\Funcom
[2010-11-16 20:46:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Funcom
[2010-11-16 16:38:13 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft XNA
[2010-11-15 21:28:45 | 000,000,000 | ---D | C] -- C:\Program Files\Raptr
[2010-11-15 21:28:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Piotrek\Dane aplikacji\Raptr
[2010-11-14 20:04:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Piotrek\Dane aplikacji\TS3Client
[2010-11-14 20:04:09 | 000,000,000 | ---D | C] -- C:\Program Files\TeamSpeak 3 Client
[2010-11-12 09:56:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Piotrek\Ustawienia lokalne\Dane aplikacji\Winamp Toolbar
[2010-11-11 15:20:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Piotrek\Moje dokumenty\StarCraft II
[2010-11-11 15:20:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Blizzard Entertainment
[2010-11-11 15:08:49 | 000,000,000 | ---D | C] -- C:\Program Files\Winamp Detect
[2010-11-11 15:08:46 | 000,000,000 | ---D | C] -- C:\Program Files\Winamp Toolbar
[2010-11-11 15:08:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Winamp Toolbar
[2010-11-11 15:08:25 | 000,000,000 | ---D | C] -- C:\WINDOWS\RegisteredPackages
[2010-11-11 15:04:56 | 001,858,032 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxsfs.dll
[2010-11-11 15:04:56 | 000,551,408 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxdrv.dll
[2010-11-11 15:04:56 | 000,129,520 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxafs.dll
[2010-11-11 15:04:56 | 000,096,752 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\vxblock.dll
[2010-11-11 15:04:56 | 000,072,176 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxhpinst.exe
[2010-11-11 15:04:56 | 000,066,544 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxcpya64.exe
[2010-11-11 15:04:56 | 000,066,032 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxinsa64.exe
[2010-11-11 15:04:56 | 000,009,200 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\cdralw2k.sys
[2010-11-11 15:04:56 | 000,009,072 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\cdr4_xp.sys
[2010-11-11 15:04:55 | 000,670,192 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\px.dll
[2010-11-11 15:04:55 | 000,436,720 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxwave.dll
[2010-11-11 15:04:55 | 000,219,632 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxmas.dll
[2010-11-11 15:04:55 | 000,000,000 | ---D | C] -- C:\Program Files\Winamp
[2010-11-11 15:04:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Piotrek\Dane aplikacji\Winamp
[2010-11-11 11:37:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Piotrek\Moje dokumenty\SEGA Mega Drive Classics
[2010-11-11 11:37:22 | 000,000,000 | ---D | C] -- C:\Program Files\SEGA
[2010-11-08 21:20:42 | 000,000,000 | ---D | C] -- C:\MojePrace
[2010-11-08 21:11:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Piotrek\Pulpit\www
[2010-11-07 22:45:34 | 000,604,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\COMCTL32.OCX
[2010-11-07 22:45:34 | 000,000,000 | ---D | C] -- C:\Program Files\WebSite X5 v8 - Evolution
[2010-11-07 12:28:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Piotrek\Ustawienia lokalne\Dane aplikacji\PunkBuster
[2010-11-07 12:28:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Piotrek\Moje dokumenty\BFBC2
[2010-11-07 12:28:02 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Piotrek\Dane aplikacji\SecuROM
[2010-11-06 22:20:48 | 000,207,872 | ---- | C] (Incomedia -  www.websitex5.com) -- C:\WINDOWS\System32\iwpsetup.exe
[2010-11-06 22:20:48 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\VB5STKIT.DLL
[2010-11-05 17:36:58 | 000,000,000 | -HSD | C] -- C:\WINDOWS\ftpcache
[2010-11-05 17:21:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Piotrek\Dane aplikacji\PSpad
[2010-11-05 17:21:35 | 000,000,000 | ---D | C] -- C:\Program Files\PSPad editor
[2010-11-02 16:19:44 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Blizzard Entertainment
[2010-11-01 21:27:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Piotrek\Ustawienia lokalne\Dane aplikacji\Adobe
[2010-11-01 18:58:56 | 000,413,696 | ---- | C] (Creative Labs) -- C:\WINDOWS\System32\wrap_oal.dll
[2010-11-01 18:58:56 | 000,110,592 | ---- | C] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\WINDOWS\System32\OpenAL32.dll
[2010-11-01 18:58:56 | 000,000,000 | ---D | C] -- C:\Program Files\OpenAL
[2010-11-01 17:04:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Adobe
[2010-11-01 17:04:06 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2010-10-30 12:02:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Piotrek\Moje dokumenty\ArmA 2 Other Profiles
[2010-10-27 11:03:43 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\LogFiles
[2010-10-26 21:13:14 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_6.dll
[2010-10-26 19:30:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\PlayLinc
[2010-10-26 19:30:39 | 000,000,000 | ---D | C] -- C:\Program Files\PlayLinc
[2010-10-26 19:26:59 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
[2010-10-26 09:01:19 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Te_mp_B_S!!
[2010-10-23 16:16:29 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DirectX
[2010-10-23 16:16:16 | 003,648,584 | ---- | C] (INCA Internet Co., Ltd.) -- C:\WINDOWS\System32\GameMon.des
[2010-10-23 16:15:26 | 000,004,682 | ---- | C] (INCA Internet Co., Ltd.) -- C:\WINDOWS\System32\npptNT2.sys
[2010-10-23 16:15:24 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\INCA Shared
[2010-10-23 11:30:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Piotrek\Pulpit\inne
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2010-11-21 13:22:26 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010-11-21 13:22:24 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010-11-21 13:21:11 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\Access.dat
[2010-11-21 13:21:10 | 003,670,016 | -H-- | M] () -- C:\Documents and Settings\Piotrek\NTUSER.DAT
[2010-11-21 13:21:10 | 000,000,188 | -HS- | M] () -- C:\Documents and Settings\Piotrek\ntuser.ini
[2010-11-21 13:17:18 | 000,001,732 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\WinZip.lnk
[2010-11-21 13:17:18 | 000,001,660 | ---- | M] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\WinZip Quick Pick.lnk
[2010-11-21 12:23:20 | 000,000,380 | ---- | M] () -- C:\Documents and Settings\Piotrek\Pulpit\cc_20101121_122316.reg
[2010-11-21 12:21:22 | 000,000,082 | ---- | M] () -- C:\Documents and Settings\Piotrek\Pulpit\cc_20101121_122121.reg
[2010-11-21 12:21:12 | 000,000,756 | ---- | M] () -- C:\Documents and Settings\Piotrek\Pulpit\cc_20101121_122105.reg
[2010-11-21 12:17:23 | 000,044,272 | ---- | M] () -- C:\Documents and Settings\Piotrek\Pulpit\cc_20101121_121710.reg
[2010-11-21 12:16:48 | 000,000,682 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\CCleaner.lnk
[2010-11-21 12:06:24 | 000,002,855 | ---- | M] () -- C:\WINDOWS\System32\command.PIF
[2010-11-20 22:44:08 | 004,840,204 | -H-- | M] () -- C:\Documents and Settings\Piotrek\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2010-11-20 13:34:06 | 000,000,003 | ---- | M] () -- C:\WINDOWS\driver.exe
[2010-11-20 13:34:06 | 000,000,003 | ---- | M] () -- C:\WINDOWS\av.exe
[2010-11-18 23:00:02 | 000,001,669 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\NCsoft Launcher.lnk
[2010-11-18 22:22:07 | 000,000,682 | ---- | M] () -- C:\Documents and Settings\Piotrek\Pulpit\Resume Download of The Lord of the Rings Online.url
[2010-11-18 16:37:36 | 000,000,723 | ---- | M] () -- C:\Documents and Settings\Piotrek\Pulpit\Warhammer Online - Age of Reckoning.lnk
[2010-11-15 20:42:05 | 000,000,682 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\BitComet.lnk
[2010-11-14 20:04:13 | 000,000,837 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\TeamSpeak 3 Client.lnk
[2010-11-14 19:58:55 | 000,234,280 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrB.xtr
[2010-11-14 19:43:54 | 000,137,976 | ---- | M] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2010-11-11 15:41:11 | 000,000,532 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\StarCraft II.lnk
[2010-11-11 15:21:53 | 000,000,001 | ---- | M] () -- C:\Documents and Settings\Piotrek\SI.bin
[2010-11-11 15:08:49 | 000,000,654 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Winamp.lnk
[2010-11-11 15:08:38 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx
[2010-11-11 11:37:52 | 000,000,766 | ---- | M] () -- C:\Documents and Settings\Piotrek\Pulpit\SEGA Mega Drive Classics.lnk
[2010-11-11 09:42:06 | 000,126,856 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys
[2010-11-11 09:42:06 | 000,060,936 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntflt.sys
[2010-11-11 09:32:50 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010-11-10 08:42:29 | 001,216,150 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010-11-10 08:42:29 | 000,541,454 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2010-11-10 08:42:29 | 000,480,696 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010-11-10 08:42:29 | 000,098,690 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2010-11-10 08:42:29 | 000,079,152 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010-11-09 22:39:19 | 000,043,884 | ---- | M] () -- C:\Documents and Settings\Piotrek\Pulpit\1285314790468.jpg
[2010-11-09 22:06:43 | 004,624,231 | ---- | M] () -- C:\Documents and Settings\Piotrek\Pulpit\WebSiteX5_Evolution8_EN.pdf
[2010-11-09 16:34:35 | 000,036,290 | ---- | M] () -- C:\Documents and Settings\Piotrek\Pulpit\sata-pci-express-pci-card.jpg
[2010-11-08 22:21:56 | 000,000,534 | ---- | M] () -- C:\WINDOWS\win.ini
[2010-11-08 22:05:17 | 000,007,334 | ---- | M] () -- C:\Documents and Settings\Piotrek\Pulpit\Nowy OpenDocument Dokument tekstowy.odt
[2010-11-08 16:27:20 | 000,009,026 | ---- | M] () -- C:\Documents and Settings\Piotrek\Pulpit\Nowy OpenDocument Prezentacja.odp
[2010-11-07 22:50:11 | 000,000,794 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\WebSite X5 v8 Evolution.lnk
[2010-11-05 17:29:16 | 000,000,245 | ---- | M] () -- C:\Documents and Settings\Piotrek\Pulpit\próba1
[2010-11-03 19:41:37 | 000,026,511 | ---- | M] () -- C:\Documents and Settings\Piotrek\Pulpit\dopalacze.odt
[2010-11-01 19:00:37 | 000,022,328 | ---- | M] () -- C:\Documents and Settings\Piotrek\Dane aplikacji\PnkBstrK.sys
[2010-11-01 19:00:19 | 002,506,752 | ---- | M] () -- C:\WINDOWS\System32\pbsvc_new_5-9-08.exe
[2010-11-01 18:58:56 | 000,413,696 | ---- | M] (Creative Labs) -- C:\WINDOWS\System32\wrap_oal.dll
[2010-11-01 18:58:56 | 000,110,592 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\WINDOWS\System32\OpenAL32.dll
[2010-11-01 17:04:17 | 000,001,729 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Adobe Reader 9.lnk
[2010-10-31 16:47:25 | 000,010,416 | ---- | M] () -- C:\Documents and Settings\Piotrek\Pulpit\wypominki.odt
[2010-10-29 16:14:08 | 024,826,264 | ---- | M] () -- C:\Documents and Settings\Piotrek\Moje dokumenty\inferno.dem
[2010-10-29 16:03:19 | 008,064,688 | ---- | M] () -- C:\Documents and Settings\Piotrek\Moje dokumenty\skill.dem
[2010-10-28 15:52:16 | 002,434,856 | ---- | M] () -- C:\WINDOWS\System32\pbsvc_bc2.exe
[2010-10-28 15:51:34 | 000,001,629 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Battlefield Bad Company 2.lnk
[2010-10-26 19:30:43 | 000,001,864 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\PlayLinc.lnk
[2010-10-23 14:42:13 | 002,132,874 | ---- | M] () -- C:\Documents and Settings\Piotrek\Pulpit\ssaki.odp
[2010-10-22 20:21:48 | 000,109,574 | ---- | M] () -- C:\Documents and Settings\Piotrek\Pulpit\Zdjęcie0043.jpg
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2010-11-21 13:17:18 | 000,001,732 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\WinZip.lnk
[2010-11-21 13:17:18 | 000,001,660 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\WinZip Quick Pick.lnk
[2010-11-21 12:38:02 | 000,001,300 | ---- | C] () -- C:\Documents and Settings\Piotrek\Pulpit\CONFIG.NT_
[2010-11-21 12:37:34 | 000,029,722 | ---- | C] () -- C:\Documents and Settings\Piotrek\Pulpit\COMMAND.CO_
[2010-11-21 12:36:59 | 000,000,902 | ---- | C] () -- C:\Documents and Settings\Piotrek\Pulpit\AUTOEXEC.NT_
[2010-11-21 12:23:19 | 000,000,380 | ---- | C] () -- C:\Documents and Settings\Piotrek\Pulpit\cc_20101121_122316.reg
[2010-11-21 12:21:22 | 000,000,082 | ---- | C] () -- C:\Documents and Settings\Piotrek\Pulpit\cc_20101121_122121.reg
[2010-11-21 12:21:10 | 000,000,756 | ---- | C] () -- C:\Documents and Settings\Piotrek\Pulpit\cc_20101121_122105.reg
[2010-11-21 12:17:13 | 000,044,272 | ---- | C] () -- C:\Documents and Settings\Piotrek\Pulpit\cc_20101121_121710.reg
[2010-11-21 12:16:48 | 000,000,682 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\CCleaner.lnk
[2010-11-21 12:06:24 | 000,002,855 | ---- | C] () -- C:\WINDOWS\System32\command.PIF
[2010-11-20 13:34:06 | 000,000,003 | ---- | C] () -- C:\WINDOWS\driver.exe
[2010-11-20 13:34:06 | 000,000,003 | ---- | C] () -- C:\WINDOWS\av.exe
[2010-11-18 23:00:02 | 000,001,669 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\NCsoft Launcher.lnk
[2010-11-18 22:22:07 | 000,000,682 | ---- | C] () -- C:\Documents and Settings\Piotrek\Pulpit\Resume Download of The Lord of the Rings Online.url
[2010-11-18 20:59:02 | 000,098,730 | ---- | C] () -- C:\Documents and Settings\Piotrek\Pulpit\war_bright.jpg
[2010-11-18 20:59:00 | 000,075,759 | ---- | C] () -- C:\Documents and Settings\Piotrek\Pulpit\war_dark.jpg
[2010-11-18 16:37:36 | 000,000,723 | ---- | C] () -- C:\Documents and Settings\Piotrek\Pulpit\Warhammer Online - Age of Reckoning.lnk
[2010-11-16 16:33:58 | 207,435,408 | ---- | C] () -- C:\Documents and Settings\Piotrek\Pulpit\Bloodline Champions Beta Installer.exe
[2010-11-14 20:04:13 | 000,000,837 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\TeamSpeak 3 Client.lnk
[2010-11-11 15:21:53 | 000,000,001 | ---- | C] () -- C:\Documents and Settings\Piotrek\SI.bin
[2010-11-11 15:20:35 | 000,000,532 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\StarCraft II.lnk
[2010-11-11 15:08:49 | 000,000,654 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Winamp.lnk
[2010-11-11 11:37:52 | 000,000,766 | ---- | C] () -- C:\Documents and Settings\Piotrek\Pulpit\SEGA Mega Drive Classics.lnk
[2010-11-09 22:39:19 | 000,043,884 | ---- | C] () -- C:\Documents and Settings\Piotrek\Pulpit\1285314790468.jpg
[2010-11-09 22:06:43 | 004,624,231 | ---- | C] () -- C:\Documents and Settings\Piotrek\Pulpit\WebSiteX5_Evolution8_EN.pdf
[2010-11-09 16:34:35 | 000,036,290 | ---- | C] () -- C:\Documents and Settings\Piotrek\Pulpit\sata-pci-express-pci-card.jpg
[2010-11-08 22:05:17 | 000,007,334 | ---- | C] () -- C:\Documents and Settings\Piotrek\Pulpit\Nowy OpenDocument Dokument tekstowy.odt
[2010-11-08 16:27:20 | 000,009,026 | ---- | C] () -- C:\Documents and Settings\Piotrek\Pulpit\Nowy OpenDocument Prezentacja.odp
[2010-11-07 22:50:11 | 000,000,794 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\WebSite X5 v8 Evolution.lnk
[2010-11-07 12:34:45 | 000,234,280 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.xtr
[2010-11-06 22:20:48 | 000,006,114 | ---- | C] () -- C:\WINDOWS\System32\SHELLLNK.TLB
[2010-11-05 17:29:16 | 000,000,245 | ---- | C] () -- C:\Documents and Settings\Piotrek\Pulpit\próba1
[2010-11-03 18:50:48 | 000,026,511 | ---- | C] () -- C:\Documents and Settings\Piotrek\Pulpit\dopalacze.odt
[2010-11-01 19:00:19 | 002,506,752 | ---- | C] () -- C:\WINDOWS\System32\pbsvc_new_5-9-08.exe
[2010-11-01 17:04:17 | 000,001,729 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Adobe Reader 9.lnk
[2010-10-31 16:45:40 | 000,010,416 | ---- | C] () -- C:\Documents and Settings\Piotrek\Pulpit\wypominki.odt
[2010-10-29 15:59:28 | 024,826,264 | ---- | C] () -- C:\Documents and Settings\Piotrek\Moje dokumenty\inferno.dem
[2010-10-29 15:55:36 | 008,064,688 | ---- | C] () -- C:\Documents and Settings\Piotrek\Moje dokumenty\skill.dem
[2010-10-28 15:51:34 | 000,001,629 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Battlefield Bad Company 2.lnk
[2010-10-27 11:04:27 | 000,137,976 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2010-10-27 11:04:27 | 000,022,328 | ---- | C] () -- C:\Documents and Settings\Piotrek\Dane aplikacji\PnkBstrK.sys
[2010-10-27 11:04:09 | 000,234,280 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe
[2010-10-27 11:04:08 | 002,434,856 | ---- | C] () -- C:\WINDOWS\System32\pbsvc_bc2.exe
[2010-10-27 11:04:08 | 000,075,064 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe
[2010-10-26 19:30:43 | 000,001,864 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\PlayLinc.lnk
[2010-10-23 16:15:25 | 000,005,174 | ---- | C] () -- C:\WINDOWS\System32\nppt9x.vxd
[2010-10-23 13:44:10 | 002,132,874 | ---- | C] () -- C:\Documents and Settings\Piotrek\Pulpit\ssaki.odp
[2010-10-22 21:21:39 | 000,109,574 | ---- | C] () -- C:\Documents and Settings\Piotrek\Pulpit\Zdjęcie0043.jpg
[2010-10-16 20:40:11 | 000,881,664 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2010-10-16 20:40:11 | 000,258,048 | ---- | C] () -- C:\WINDOWS\System32\libFLAC.dll
[2010-10-12 16:39:42 | 000,005,632 | ---- | C] () -- C:\Documents and Settings\Piotrek\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-10-07 16:44:29 | 000,000,132 | ---- | C] () -- C:\Documents and Settings\Piotrek\Ustawienia lokalne\Dane aplikacji\fusioncache.dat
[2010-10-07 16:28:23 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\HPPLVS.dll
[2010-10-05 16:02:39 | 000,359,206 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-S-1-5-21-527237240-57989841-839522115-1004-0.dat
[2010-10-05 16:02:39 | 000,129,822 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-System.dat
[2010-10-03 21:51:10 | 000,018,880 | ---- | C] () -- C:\Documents and Settings\Piotrek\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
[2010-10-03 19:52:39 | 001,216,150 | ---- | C] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010-10-03 19:52:38 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2010-10-03 19:52:15 | 000,000,062 | -HS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\desktop.ini
[2010-10-03 18:51:26 | 004,840,204 | -H-- | C] () -- C:\Documents and Settings\Piotrek\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2010-10-03 18:42:17 | 000,080,416 | ---- | C] () -- C:\WINDOWS\System32\RtNicProp32.dll
[2010-10-03 18:04:19 | 000,000,062 | -HS- | C] () -- C:\Documents and Settings\Piotrek\Dane aplikacji\desktop.ini
[2010-10-03 18:00:48 | 000,000,000 | ---- | C] () -- C:\WINDOWS\control.ini
[2010-10-03 17:58:34 | 000,000,037 | ---- | C] () -- C:\WINDOWS\vbaddin.ini
[2010-10-03 17:58:34 | 000,000,036 | ---- | C] () -- C:\WINDOWS\vb.ini
[2010-10-03 17:57:47 | 000,026,717 | ---- | C] () -- C:\WINDOWS\System32\tslabels.ini
[2010-10-03 17:57:46 | 000,003,813 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.ini
[2010-07-09 20:00:32 | 000,041,872 | ---- | C] () -- C:\WINDOWS\System32\xfcodec.dll
[2008-10-07 08:13:30 | 000,197,912 | ---- | C] () -- C:\WINDOWS\System32\physxcudart_20.dll
[2008-10-07 08:13:22 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll
[2008-10-07 08:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll
[2008-10-07 08:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll
[2008-10-07 08:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll
[2008-10-07 08:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll
[2008-10-07 08:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll
[2008-10-07 08:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll
[2008-10-07 08:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll
[2008-10-07 08:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll
[2008-02-07 09:05:18 | 000,163,840 | ---- | C] () -- C:\WINDOWS\System32\hppatusg01.dll
[2006-03-02 13:00:00 | 001,015,477 | ---- | C] () -- C:\WINDOWS\System32\esentprf.ini
[2006-03-02 13:00:00 | 000,733,696 | ---- | C] () -- C:\WINDOWS\System32\qedwipes.dll
[2006-03-02 13:00:00 | 000,355,112 | ---- | C] () -- C:\WINDOWS\System32\msjetoledb40.dll
[2006-03-02 13:00:00 | 000,270,848 | ---- | C] () -- C:\WINDOWS\System32\sbe.dll
[2006-03-02 13:00:00 | 000,253,440 | ---- | C] () -- C:\WINDOWS\System32\compatui.dll
[2006-03-02 13:00:00 | 000,199,168 | ---- | C] () -- C:\WINDOWS\System32\ir32_32.dll
[2006-03-02 13:00:00 | 000,186,880 | ---- | C] () -- C:\WINDOWS\System32\encdec.dll
[2006-03-02 13:00:00 | 000,094,282 | ---- | C] () -- C:\WINDOWS\System32\msencode.dll
[2006-03-02 13:00:00 | 000,070,656 | ---- | C] () -- C:\WINDOWS\System32\amstream.dll
[2006-03-02 13:00:00 | 000,053,478 | ---- | C] () -- C:\WINDOWS\System32\tcpmon.ini
[2006-03-02 13:00:00 | 000,042,809 | ---- | C] () -- C:\WINDOWS\System32\key01.sys
[2006-03-02 13:00:00 | 000,042,537 | ---- | C] () -- C:\WINDOWS\System32\keyboard.sys
[2006-03-02 13:00:00 | 000,035,648 | ---- | C] () -- C:\WINDOWS\System32\ntio411.sys
[2006-03-02 13:00:00 | 000,035,424 | ---- | C] () -- C:\WINDOWS\System32\ntio412.sys
[2006-03-02 13:00:00 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\ntio804.sys
[2006-03-02 13:00:00 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\ntio404.sys
[2006-03-02 13:00:00 | 000,033,936 | ---- | C] () -- C:\WINDOWS\System32\ntio.sys
[2006-03-02 13:00:00 | 000,029,370 | ---- | C] () -- C:\WINDOWS\System32\ntdos411.sys
[2006-03-02 13:00:00 | 000,029,274 | ---- | C] () -- C:\WINDOWS\System32\ntdos412.sys
[2006-03-02 13:00:00 | 000,029,146 | ---- | C] () -- C:\WINDOWS\System32\ntdos804.sys
[2006-03-02 13:00:00 | 000,029,146 | ---- | C] () -- C:\WINDOWS\System32\ntdos404.sys
[2006-03-02 13:00:00 | 000,027,898 | ---- | C] () -- C:\WINDOWS\System32\ntdos.sys
[2006-03-02 13:00:00 | 000,027,097 | ---- | C] () -- C:\WINDOWS\System32\country.sys
[2006-03-02 13:00:00 | 000,016,024 | ---- | C] () -- C:\WINDOWS\System32\rsvp.ini
[2006-03-02 13:00:00 | 000,015,360 | ---- | C] () -- C:\WINDOWS\System32\tsd32.dll
[2006-03-02 13:00:00 | 000,014,336 | ---- | C] () -- C:\WINDOWS\System32\msdmo.dll
[2006-03-02 13:00:00 | 000,013,819 | ---- | C] () -- C:\WINDOWS\System32\pschdprf.ini
[2006-03-02 13:00:00 | 000,013,312 | ---- | C] () -- C:\WINDOWS\System32\win87em.dll
[2006-03-02 13:00:00 | 000,009,043 | ---- | C] () -- C:\WINDOWS\System32\ansi.sys
[2006-03-02 13:00:00 | 000,006,074 | ---- | C] () -- C:\WINDOWS\System32\rasctrs.ini
[2006-03-02 13:00:00 | 000,004,976 | ---- | C] () -- C:\WINDOWS\System32\himem.sys
[2006-03-02 13:00:00 | 000,002,992 | ---- | C] () -- C:\WINDOWS\System32\perfci.ini
[2006-03-02 13:00:00 | 000,002,890 | ---- | C] () -- C:\WINDOWS\System32\perfwci.ini
[2006-03-02 13:00:00 | 000,001,405 | ---- | C] () -- C:\WINDOWS\msdfmap.ini
[2006-03-02 13:00:00 | 000,001,295 | ---- | C] () -- C:\WINDOWS\System32\perffilt.ini
[2006-03-02 13:00:00 | 000,000,534 | ---- | C] () -- C:\WINDOWS\win.ini
[2006-03-02 13:00:00 | 000,000,359 | ---- | C] () -- C:\WINDOWS\System32\prodspec.ini
[2006-03-02 13:00:00 | 000,000,227 | ---- | C] () -- C:\WINDOWS\system.ini
[2001-10-26 18:29:42 | 000,157,696 | ---- | C] () -- C:\WINDOWS\System32\paqsp.dll
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2010-11-16 20:46:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Funcom
[2010-10-21 13:59:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10
[2010-10-16 10:12:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Nexon
[2010-10-16 10:12:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\NexonEU
[2010-11-21 12:00:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PMB Files
[2010-10-09 16:57:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Tunngle
[2010-11-21 13:17:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\WinZip
[2010-10-30 15:16:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Piotrek\Dane aplikacji\.minecraft
[2010-10-13 18:58:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Piotrek\Dane aplikacji\.minecraft server
[2010-11-15 20:48:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Piotrek\Dane aplikacji\BitComet
[2010-10-26 18:04:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Piotrek\Dane aplikacji\Gadu-Gadu 10
[2010-10-17 11:26:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Piotrek\Dane aplikacji\Garena
[2010-11-18 22:59:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Piotrek\Dane aplikacji\GetRightToGo
[2010-10-18 20:19:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Piotrek\Dane aplikacji\GHISLER
[2010-10-10 11:57:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Piotrek\Dane aplikacji\OpenOffice.org
[2010-11-21 13:23:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Piotrek\Dane aplikacji\Raptr
[2010-10-07 18:00:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Piotrek\Dane aplikacji\The Creative Assembly
[2010-11-14 20:05:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Piotrek\Dane aplikacji\TS3Client
[2010-10-09 22:18:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Piotrek\Dane aplikacji\Tunngle
[2010-10-11 17:27:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Wojtek\Dane aplikacji\OpenOffice.org
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Files - Unicode (All) ==========[/color]
[2010-10-16 10:12:39 | 000,000,000 | ---D | M](C:\Documents and Settings\Piotrek\Moje dokumenty\?? ???) -- C:\Documents and Settings\Piotrek\Moje dokumenty\넥슨 플러그
[2010-10-16 10:12:39 | 000,000,000 | ---D | C](C:\Documents and Settings\Piotrek\Moje dokumenty\?? ???) -- C:\Documents and Settings\Piotrek\Moje dokumenty\넥슨 플러그

< End of report >