OTL logfile created on: 2012-09-09 09:39:52 - Run 2 OTL by OldTimer - Version 3.2.61.2 Folder = K:\Download Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,94 Gb Total Physical Memory | 2,05 Gb Available Physical Memory | 69,91% Memory free 4,78 Gb Paging File | 4,00 Gb Available in Paging File | 83,78% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 41,02 Gb Total Space | 12,23 Gb Free Space | 29,82% Space Free | Partition Type: NTFS Drive D: | 253,91 Gb Total Space | 159,31 Gb Free Space | 62,74% Space Free | Partition Type: NTFS Drive E: | 6,32 Gb Total Space | 0,56 Gb Free Space | 8,81% Space Free | Partition Type: NTFS Drive K: | 97,66 Gb Total Space | 17,22 Gb Free Space | 17,64% Space Free | Partition Type: NTFS Drive L: | 5,13 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS Computer Name: JAN-4AF9B8FD101 | User Name: admn | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-09-09 08:45:53 | 000,599,552 | ---- | M] (OldTimer Tools) -- K:\Download\OTL.exe PRC - [2012-09-08 11:53:01 | 000,917,984 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2012-08-13 13:33:30 | 003,064,000 | ---- | M] (Skype Technologies S.A.) -- C:\Documents and Settings\All Users\Dane aplikacji\Skype\Toolbars\Skype C2C Service\c2c_service.exe PRC - [2012-07-13 07:15:56 | 000,037,152 | ---- | M] (Panda Security, S.L.) -- C:\Program Files\Panda Security\Panda Cloud Antivirus\PSUAMain.exe PRC - [2012-07-13 07:15:56 | 000,036,640 | ---- | M] (Panda Security, S.L.) -- C:\Program Files\Panda Security\Panda Cloud Antivirus\PSUAService.exe PRC - [2012-07-13 06:57:41 | 000,140,064 | ---- | M] (Panda Security, S.L.) -- C:\Program Files\Panda Security\Panda Cloud Antivirus\PSANHost.exe PRC - [2012-07-12 07:09:17 | 000,186,832 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Update\1.3.21.115\GoogleCrashHandler.exe PRC - [2012-05-24 20:39:22 | 027,112,840 | ---- | M] (Dropbox, Inc.) -- C:\Documents and Settings\admn\Dane aplikacji\Dropbox\bin\Dropbox.exe PRC - [2010-09-03 14:52:48 | 000,606,208 | ---- | M] () -- C:\Program Files\ScreenShooter\screenshooter.exe PRC - [2009-07-24 20:38:50 | 000,189,728 | ---- | M] (Protexis Inc.) -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe PRC - [2008-04-14 22:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2008-01-30 18:47:48 | 000,393,216 | ---- | M] (Creative Technology Ltd) -- C:\Program Files\Creative\Shared Files\CTAudSvc.exe PRC - [2007-05-17 14:45:34 | 000,271,720 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft LifeCam\MSCamS32.exe PRC - [2007-05-11 03:09:48 | 001,050,120 | ---- | M] (O&O Software GmbH) -- C:\WINDOWS\system32\oodag.exe PRC - [2007-05-11 03:08:54 | 002,512,392 | ---- | M] (O&O Software GmbH) -- C:\WINDOWS\system32\oodtray.exe PRC - [2005-05-24 23:41:09 | 000,503,808 | ---- | M] (Stamina) -- C:\Program Files\Konnekt\konnekt.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012-09-08 11:53:00 | 002,298,336 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll MOD - [2012-08-25 10:05:34 | 009,813,704 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_4_402_265.dll MOD - [2010-09-03 14:52:48 | 000,606,208 | ---- | M] () -- C:\Program Files\ScreenShooter\screenshooter.exe MOD - [2010-09-03 14:50:48 | 002,537,472 | ---- | M] () -- C:\Program Files\ScreenShooter\QtCore4.dll MOD - [2010-08-31 15:36:06 | 000,287,232 | ---- | M] () -- C:\Program Files\ScreenShooter\imageformats\qjpeg4.dll MOD - [2010-08-31 11:49:22 | 009,812,992 | ---- | M] () -- C:\Program Files\ScreenShooter\QtGui4.dll MOD - [2010-08-31 11:15:32 | 001,140,224 | ---- | M] () -- C:\Program Files\ScreenShooter\QtNetwork4.dll MOD - [2009-06-22 20:42:42 | 000,043,008 | ---- | M] () -- C:\Program Files\ScreenShooter\libgcc_s_dw2-1.dll MOD - [2009-01-10 12:32:40 | 000,011,362 | ---- | M] () -- C:\Program Files\ScreenShooter\mingwm10.dll MOD - [2007-05-08 08:59:08 | 000,137,216 | ---- | M] () -- C:\WINDOWS\system32\OemSpi.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV - [2012-09-08 11:53:00 | 000,114,656 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2012-08-25 10:05:34 | 000,250,568 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2012-08-13 13:33:30 | 003,064,000 | ---- | M] (Skype Technologies S.A.) [Auto | Running] -- C:\Documents and Settings\All Users\Dane aplikacji\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service) SRV - [2012-07-13 13:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2012-07-13 07:15:56 | 000,036,640 | ---- | M] (Panda Security, S.L.) [Auto | Running] -- C:\Program Files\Panda Security\Panda Cloud Antivirus\PSUAService.exe -- (PSUAService) SRV - [2012-07-13 06:57:41 | 000,140,064 | ---- | M] (Panda Security, S.L.) [Auto | Running] -- C:\Program Files\Panda Security\Panda Cloud Antivirus\PSANHost.exe -- (NanoServiceMain) SRV - [2011-06-08 13:02:00 | 000,633,856 | ---- | M] (Nokia) [Disabled | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2010-02-19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard) SRV - [2009-07-24 20:38:50 | 000,189,728 | ---- | M] (Protexis Inc.) [Auto | Running] -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2) SRV - [2008-01-30 18:47:48 | 000,393,216 | ---- | M] (Creative Technology Ltd) [Auto | Running] -- C:\Program Files\Creative\Shared Files\CTAudSvc.exe -- (CTAudSvcService) SRV - [2007-05-17 14:45:34 | 000,271,720 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft LifeCam\MSCamS32.exe -- (MSCamSvc) SRV - [2007-05-11 03:09:48 | 001,050,120 | ---- | M] (O&O Software GmbH) [Auto | Running] -- C:\WINDOWS\system32\oodag.exe -- (O&O Defrag) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - [2012-09-09 08:24:34 | 000,069,905 | ---- | M] (GMER) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\gmer.sys -- (gmer) DRV - [2012-07-13 07:02:48 | 000,120,616 | ---- | M] (Panda Security, S.L.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\PSINProt.sys -- (PSINProt) DRV - [2012-07-13 07:02:47 | 000,179,112 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\PSINKNC.sys -- (PSINKNC) DRV - [2012-07-13 07:02:47 | 000,114,728 | ---- | M] (Panda Security, S.L.) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\PSINProc.sys -- (PSINProc) DRV - [2012-07-13 07:02:47 | 000,101,544 | ---- | M] (Panda Security, S.L.) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\PSINFile.sys -- (PSINFile) DRV - [2012-07-13 07:02:46 | 000,149,032 | ---- | M] (Panda Security, S.L.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\PSINAflt.sys -- (PSINAflt) DRV - [2012-07-12 11:18:32 | 000,206,632 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\NNSStrm.sys -- (NNSSTRM) DRV - [2012-06-27 15:51:07 | 000,092,840 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\NNStlsc.sys -- (NNSTLSC) DRV - [2012-06-27 15:51:06 | 000,286,376 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\NNSProt.sys -- (NNSPROT) DRV - [2012-06-27 15:51:06 | 000,153,000 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\NNSPrv.sys -- (NNSPRV) DRV - [2012-06-27 15:51:06 | 000,106,536 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\NNSSmtp.sys -- (NNSSMTP) DRV - [2012-06-27 15:51:05 | 000,104,104 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\NNSPop3.sys -- (NNSPOP3) DRV - [2012-06-27 15:51:05 | 000,051,496 | ---- | M] (Panda Security, S.L.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\drivers\NNSpihs.sys -- (NNSPIHS) DRV - [2012-06-27 15:51:04 | 000,122,664 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\NNSIds.sys -- (NNSIDS) DRV - [2012-06-27 15:51:04 | 000,093,992 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\NNSpicc.sys -- (NNSPICC) DRV - [2012-06-27 15:51:03 | 000,120,744 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\NNSHttp.sys -- (NNSHTTP) DRV - [2012-06-27 15:51:03 | 000,082,472 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\NNSAlpc.sys -- (NNSALPC) DRV - [2011-11-13 19:50:10 | 000,682,232 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sptd.sys -- (sptd) DRV - [2011-09-09 13:54:48 | 000,038,536 | ---- | M] (Panda Security, S.L.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\NNSNAHS.sys -- (NNSNAHS) DRV - [2011-07-29 00:20:10 | 007,084,544 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag) DRV - [2011-05-18 10:12:38 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt) DRV - [2011-05-18 10:12:36 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev) DRV - [2011-05-18 10:12:32 | 000,023,168 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc) DRV - [2011-05-18 10:12:28 | 000,018,176 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd) DRV - [2011-03-10 18:04:57 | 000,046,280 | ---- | M] (Panda Security) [Kernel | On_Demand | Unknown] -- C:\WINDOWS\system32\drivers\PSKMAD.sys -- (PSKMAD) DRV - [2009-03-18 17:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi) DRV - [2008-08-26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2008-04-14 00:05:40 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) DRV - [2007-08-20 13:35:12 | 001,656,960 | ---- | M] (Sensaura) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\p17xfilt.sys -- (p17xfilt) DRV - [2007-06-13 10:08:46 | 001,174,528 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\P17xfi.sys -- (P17xfi) DRV - [2007-04-13 18:42:16 | 000,068,096 | ---- | M] (EZB Systems, Inc.) [File_System | System | Running] -- C:\Program Files\UltraISO\drivers\ISODrive.sys -- (ISODrive) DRV - [2007-04-10 14:46:44 | 002,385,896 | ---- | M] (Microsoft Corporation ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\VX6000Xp.sys -- (VX6000) DRV - [2006-09-19 11:03:28 | 000,116,992 | ---- | M] (Analog Devices Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\e4usbaw.sys -- (e4usbaw) DRV - [2006-09-15 11:07:54 | 000,064,000 | ---- | M] (Analog Deivces) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\e4ldr.sys -- (IKANLOADER2) DRV - [2006-08-07 19:30:52 | 000,162,176 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctusfsyn.sys -- (CTUSFSYN) DRV - [2005-12-08 12:54:52 | 000,114,688 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctoss2k.sys -- (ossrv) DRV - [2005-12-08 12:54:44 | 000,142,336 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctsfm2k.sys -- (ctsfm2k) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.selectedEngine: "IconFinder.Com" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.google.pl/" FF - prefs.js..extensions.enabledAddons: istockzoom@kanjar.art.pl:0.3.10.0 FF - prefs.js..extensions.enabledAddons: quickdrag@mozilla.ktechcomputing.com:2.1.3.23 FF - prefs.js..extensions.enabledAddons: validator@totalvalidator.com:7.4.0 FF - prefs.js..extensions.enabledAddons: {dc572301-7619-498c-a57d-39143191b318}:0.4.0.3 FF - prefs.js..extensions.enabledAddons: ienetrenderer-nico@nc:0.9.7 FF - prefs.js..extensions.enabledAddons: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}:6.0.33 FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_4_402_265.dll () FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll File not found FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_35: C:\WINDOWS\system32\npdeployJava1.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@spoon.net/Spoon Plugin 3.32: C:\Documents and Settings\admn\Ustawienia lokalne\Dane aplikacji\Spoon\3.32.0.3\npMozillaSpoonPlugin.dll File not found FF - HKCU\Software\MozillaPlugins\@spoon.net/Spoon Plugin 3.33: C:\Documents and Settings\admn\Ustawienia lokalne\Dane aplikacji\Spoon\3.33.2.5\npMozillaSpoonPlugin.dll (Code Systems Corporation) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\admn\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\admn\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-09-08 11:53:03 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 13.0.1\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2012-06-28 15:34:41 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 13.0.1\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2011-09-11 10:04:29 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\admn\Dane aplikacji\Mozilla\Extensions [2012-09-08 10:34:46 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\admn\Dane aplikacji\Mozilla\Firefox\Profiles\qlca4on3.default\extensions [2011-10-09 12:05:35 | 000,000,000 | ---D | M] (stock zoom) -- C:\Documents and Settings\admn\Dane aplikacji\Mozilla\Firefox\Profiles\qlca4on3.default\extensions\istockzoom@kanjar.art.pl [2012-01-07 00:05:25 | 000,000,000 | ---D | M] (SpeedFox) -- C:\Documents and Settings\admn\Dane aplikacji\Mozilla\Firefox\Profiles\qlca4on3.default\extensions\jid1-uabu5A9hduqzCw@jetpack [2012-09-02 07:55:38 | 001,625,368 | ---- | M] () (No name found) -- C:\Documents and Settings\admn\Dane aplikacji\Mozilla\Firefox\Profiles\qlca4on3.default\extensions\firebug@software.joehewitt.com.xpi [2012-08-06 18:37:25 | 000,067,270 | ---- | M] () (No name found) -- C:\Documents and Settings\admn\Dane aplikacji\Mozilla\Firefox\Profiles\qlca4on3.default\extensions\ienetrenderer-nico@nc.xpi [2012-03-22 14:59:30 | 000,032,381 | ---- | M] () (No name found) -- C:\Documents and Settings\admn\Dane aplikacji\Mozilla\Firefox\Profiles\qlca4on3.default\extensions\quickdrag@mozilla.ktechcomputing.com.xpi [2012-05-10 19:30:47 | 000,083,408 | ---- | M] () (No name found) -- C:\Documents and Settings\admn\Dane aplikacji\Mozilla\Firefox\Profiles\qlca4on3.default\extensions\validator@totalvalidator.com.xpi [2012-09-08 10:34:46 | 000,195,879 | ---- | M] () (No name found) -- C:\Documents and Settings\admn\Dane aplikacji\Mozilla\Firefox\Profiles\qlca4on3.default\extensions\{37fa1426-b82d-11db-8314-0800200c9a66}.xpi [2012-09-07 08:03:32 | 000,828,884 | ---- | M] () (No name found) -- C:\Documents and Settings\admn\Dane aplikacji\Mozilla\Firefox\Profiles\qlca4on3.default\extensions\{bcd47b5a-43be-433f-9051-7ce2cdf94ac0}.xpi [2012-07-27 12:59:37 | 000,741,958 | ---- | M] () (No name found) -- C:\Documents and Settings\admn\Dane aplikacji\Mozilla\Firefox\Profiles\qlca4on3.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-07-21 11:33:52 | 000,702,524 | ---- | M] () (No name found) -- C:\Documents and Settings\admn\Dane aplikacji\Mozilla\Firefox\Profiles\qlca4on3.default\extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi [2012-01-06 23:57:26 | 000,002,085 | ---- | M] () -- C:\Documents and Settings\admn\Dane aplikacji\Mozilla\Firefox\Profiles\qlca4on3.default\searchplugins\iconfindercom.xml [2012-09-08 11:52:52 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2012-09-08 11:52:52 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2012-09-08 11:52:52 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2012-09-08 11:52:52 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2012-09-08 11:53:02 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\distribution\extensions [2012-09-08 11:53:03 | 000,260,576 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2012-07-30 12:50:18 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2012-07-30 12:50:18 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2012-07-30 12:50:18 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2012-07-30 12:50:18 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2012-07-30 12:50:18 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2012-07-30 12:50:18 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - homepage: http://www.google.com/ CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms} CHR - homepage: http://www.google.com/ CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Documents and Settings\admn\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\21.0.1180.89\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\admn\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\21.0.1180.89\pdf.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\admn\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\21.0.1180.89\gcswf32.dll CHR - plugin: Shockwave Flash (Disabled) = C:\Documents and Settings\admn\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_2_202_235.dll CHR - plugin: Skype Toolbars (Enabled) = C:\Documents and Settings\admn\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.9.0.9216_0\npSkypeChromePlugin.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll CHR - plugin: Google Update (Enabled) = C:\Documents and Settings\admn\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.111\npGoogleUpdate3.dll CHR - plugin: Spoon Plugin (Enabled) = C:\Documents and Settings\admn\Ustawienia lokalne\Dane aplikacji\Spoon\3.32.0.3\npMozillaSpoonPlugin.dll CHR - plugin: Java(TM) Platform SE 6 U31 (Enabled) = C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll CHR - plugin: Windows Presentation Foundation (Enabled) = C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll CHR - Extension: YouTube = C:\Documents and Settings\admn\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: Szukaj w Google = C:\Documents and Settings\admn\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\ CHR - Extension: Skype Click to Call = C:\Documents and Settings\admn\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.2.0.10687_0\ CHR - Extension: Gmail = C:\Documents and Settings\admn\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2011-09-12 09:16:46 | 000,000,772 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: 127.0.0.1 activate.adobe.com O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O4 - HKLM..\Run: [OODefragTray] C:\WINDOWS\system32\oodtray.exe (O&O Software GmbH) O4 - HKLM..\Run: [P17Helper] C:\WINDOWS\System32\SPIRun.dll (Creative Technology Ltd.) O4 - HKLM..\Run: [PSUAMain] C:\Program Files\Panda Security\Panda Cloud Antivirus\PSUAMain.exe (Panda Security, S.L.) O4 - HKLM..\Run: [Windows Media Protocal] C:\WINDOWS\system32\wmptb64.exe File not found O4 - HKCU..\Run: [Konnekt] C:\Program Files\Konnekt\konnekt.exe (Stamina) O4 - HKCU..\Run: [screenshooter] C:\Program Files\ScreenShooter\screenshooter.exe () O4 - Startup: C:\Documents and Settings\admn\Menu Start\Programy\Autostart\Dropbox.lnk = C:\Documents and Settings\admn\Dane aplikacji\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 1.6.0_35) O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 1.6.0_35) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 1.6.0_35) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3F927FE0-92D0-4116-A24B-E94E2FFF256A}: DhcpNameServer = 192.168.1.254 O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\admn\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\admn\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2012-04-19 11:10:02 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2012-05-01 23:35:42 | 000,000,069 | R--- | M] () - L:\autorun.inf -- [ CDFS ] O33 - MountPoints2\{4a5c3bca-dc58-11e0-9404-806d6172696f}\Shell - "" = AutoRun O33 - MountPoints2\{4a5c3bca-dc58-11e0-9404-806d6172696f}\Shell\AutoRun\command - "" = L:\Setup.exe -- [2012-05-01 23:35:42 | 001,188,799 | R--- | M] (Rebellion ) O34 - HKLM BootExecute: (autocheck autochk *) O34 - HKLM BootExecute: (OODBS) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-09-09 09:35:46 | 000,046,280 | ---- | C] (Panda Security) -- C:\WINDOWS\System32\drivers\PSKMAD.sys [2012-09-09 08:24:34 | 000,069,905 | ---- | C] (GMER) -- C:\WINDOWS\System32\drivers\gmer.sys [2012-09-08 11:52:51 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox [2012-09-05 13:18:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\admn\Pulpit\Mathea kuchnie [2012-09-05 08:44:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\admn\Pulpit\Sygma - podstrona rekrutacji [2012-09-04 08:55:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Google Drive [2012-09-03 14:28:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\admn\Pulpit\na fb [2012-08-30 09:44:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\admn\Pulpit\baranowscy-zakopane.pl [2012-08-26 20:08:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\Minidump [2012-08-20 21:21:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Rebellion [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-09-09 09:35:36 | 000,001,028 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2012-09-09 09:35:29 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2012-09-09 09:35:25 | 000,980,736 | ---- | M] () -- C:\WINDOWS\System32\oodbs.lor [2012-09-09 09:14:00 | 000,001,032 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2012-09-09 09:12:00 | 000,000,930 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job [2012-09-09 08:56:00 | 000,001,128 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-329068152-179605362-682003330-1003UA.job [2012-09-09 08:41:03 | 000,000,250 | ---- | M] () -- C:\WINDOWS\gmer.ini [2012-09-09 08:24:34 | 000,573,503 | ---- | M] () -- C:\WINDOWS\gmer.dll [2012-09-09 08:24:34 | 000,069,905 | ---- | M] (GMER) -- C:\WINDOWS\System32\drivers\gmer.sys [2012-09-09 08:24:34 | 000,000,080 | ---- | M] () -- C:\WINDOWS\gmer_uninstall.cmd [2012-09-08 17:30:21 | 000,000,211 | -HS- | M] () -- C:\boot.ini [2012-09-08 15:15:24 | 001,612,380 | ---- | M] () -- C:\Documents and Settings\admn\Pulpit\lay.png [2012-09-08 15:15:24 | 000,001,456 | ---- | M] () -- C:\Documents and Settings\admn\Ustawienia lokalne\Dane aplikacji\Adobe Save for Web 12.0 Prefs [2012-09-08 14:05:32 | 001,539,984 | ---- | M] () -- C:\Documents and Settings\admn\Pulpit\DSC05853.JPG [2012-09-08 14:05:26 | 001,526,688 | ---- | M] () -- C:\Documents and Settings\admn\Pulpit\DSC05852.JPG [2012-09-08 14:05:14 | 001,740,046 | ---- | M] () -- C:\Documents and Settings\admn\Pulpit\DSC05851.JPG [2012-09-08 14:05:04 | 001,717,293 | ---- | M] () -- C:\Documents and Settings\admn\Pulpit\DSC05850.JPG [2012-09-07 16:56:00 | 000,001,076 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-329068152-179605362-682003330-1003Core.job [2012-09-07 14:45:06 | 000,403,262 | ---- | M] () -- C:\Documents and Settings\admn\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-System.dat [2012-09-07 10:44:46 | 021,247,386 | ---- | M] () -- C:\Documents and Settings\admn\Pulpit\BrandBook - Sygma.pdf [2012-09-06 15:57:43 | 000,072,670 | ---- | M] () -- C:\Documents and Settings\admn\Pulpit\ceglewski_LOGO.jpg [2012-09-06 15:57:13 | 000,009,524 | ---- | M] () -- C:\Documents and Settings\admn\Pulpit\elbor-meble-logo-primary.jpg [2012-09-06 15:53:21 | 000,009,110 | ---- | M] () -- C:\Documents and Settings\admn\Pulpit\logo_kler.jpg [2012-09-05 11:02:51 | 000,173,608 | ---- | M] () -- C:\Documents and Settings\admn\Pulpit\1382395_82472552.jpg [2012-09-05 10:53:04 | 001,766,332 | ---- | M] () -- C:\Documents and Settings\admn\Pulpit\1354970_72705626.jpg [2012-09-04 14:03:45 | 000,061,952 | ---- | M] () -- C:\Documents and Settings\admn\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-09-04 11:07:58 | 000,005,550 | R--- | M] () -- C:\Documents and Settings\admn\Pulpit\plg_system_scjquery.zip [2012-09-04 10:05:42 | 000,052,995 | ---- | M] () -- C:\WINDOWS\FontData.fdb [2012-09-04 08:57:01 | 000,001,455 | ---- | M] () -- C:\Documents and Settings\admn\Pulpit\Dysk Google.lnk [2012-09-04 08:00:54 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2012-09-03 20:30:01 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job [2012-09-03 16:58:01 | 003,676,720 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2012-08-29 12:14:30 | 000,091,041 | -H-- | M] () -- C:\treeinfo.wc [2012-08-28 20:24:56 | 000,477,168 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\npdeployJava1.dll [2012-08-28 20:24:53 | 000,473,072 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll [2012-08-28 20:10:12 | 000,157,680 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe [2012-08-28 20:10:07 | 000,149,488 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe [2012-08-28 20:09:57 | 000,149,488 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe [2012-08-28 18:39:23 | 000,073,728 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl [2012-08-25 10:05:34 | 000,696,520 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe [2012-08-25 10:05:34 | 000,073,416 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl [2012-08-18 07:44:16 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-09-09 08:24:35 | 000,000,250 | ---- | C] () -- C:\WINDOWS\gmer.ini [2012-09-09 08:24:34 | 000,577,536 | ---- | C] () -- C:\WINDOWS\gmer.exe [2012-09-09 08:24:34 | 000,573,503 | ---- | C] () -- C:\WINDOWS\gmer.dll [2012-09-09 08:24:34 | 000,000,080 | ---- | C] () -- C:\WINDOWS\gmer_uninstall.cmd [2012-09-08 15:15:21 | 001,612,380 | ---- | C] () -- C:\Documents and Settings\admn\Pulpit\lay.png [2012-09-08 14:05:32 | 001,539,984 | ---- | C] () -- C:\Documents and Settings\admn\Pulpit\DSC05853.JPG [2012-09-08 14:05:26 | 001,526,688 | ---- | C] () -- C:\Documents and Settings\admn\Pulpit\DSC05852.JPG [2012-09-08 14:05:14 | 001,740,046 | ---- | C] () -- C:\Documents and Settings\admn\Pulpit\DSC05851.JPG [2012-09-08 14:05:04 | 001,717,293 | ---- | C] () -- C:\Documents and Settings\admn\Pulpit\DSC05850.JPG [2012-09-07 10:43:44 | 021,247,386 | ---- | C] () -- C:\Documents and Settings\admn\Pulpit\BrandBook - Sygma.pdf [2012-09-06 15:57:42 | 000,072,670 | ---- | C] () -- C:\Documents and Settings\admn\Pulpit\ceglewski_LOGO.jpg [2012-09-06 15:57:12 | 000,009,524 | ---- | C] () -- C:\Documents and Settings\admn\Pulpit\elbor-meble-logo-primary.jpg [2012-09-06 15:53:20 | 000,009,110 | ---- | C] () -- C:\Documents and Settings\admn\Pulpit\logo_kler.jpg [2012-09-05 11:02:50 | 000,173,608 | ---- | C] () -- C:\Documents and Settings\admn\Pulpit\1382395_82472552.jpg [2012-09-05 10:53:02 | 001,766,332 | ---- | C] () -- C:\Documents and Settings\admn\Pulpit\1354970_72705626.jpg [2012-09-04 11:08:00 | 000,005,550 | R--- | C] () -- C:\Documents and Settings\admn\Pulpit\plg_system_scjquery.zip [2012-09-04 08:57:01 | 000,001,455 | ---- | C] () -- C:\Documents and Settings\admn\Pulpit\Dysk Google.lnk [2012-09-03 00:37:07 | 000,403,262 | ---- | C] () -- C:\Documents and Settings\admn\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-System.dat [2012-08-29 12:14:30 | 000,091,041 | -H-- | C] () -- C:\treeinfo.wc [2012-05-14 15:41:20 | 000,804,840 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat [2012-03-21 16:29:16 | 000,021,608 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat [2012-03-01 18:00:32 | 000,859,833 | ---- | C] () -- C:\WINDOWS\Gadu+ 2.8 Universal Emoticons dla Konnekta Uninstaller.exe [2012-02-15 11:42:55 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll [2012-01-16 13:09:45 | 000,000,132 | ---- | C] () -- C:\Documents and Settings\admn\Dane aplikacji\Adobe PNG Format CS5 Prefs [2011-11-30 14:58:37 | 000,000,031 | ---- | C] () -- C:\Documents and Settings\admn\.mobione.locator [2011-11-21 13:21:12 | 000,686,946 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-S-1-5-21-329068152-179605362-682003330-1003-0.dat [2011-11-21 13:21:12 | 000,218,874 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-System.dat [2011-11-17 17:56:16 | 000,000,000 | ---- | C] () -- C:\WINDOWS\oodcnt.INI [2011-09-26 12:45:54 | 000,015,497 | ---- | C] () -- C:\WINDOWS\VX6KStd.ini [2011-09-13 13:33:41 | 000,157,696 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2011-09-13 13:32:11 | 000,061,952 | ---- | C] () -- C:\Documents and Settings\admn\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-09-12 15:19:06 | 000,001,456 | ---- | C] () -- C:\Documents and Settings\admn\Ustawienia lokalne\Dane aplikacji\Adobe Save for Web 12.0 Prefs [2011-09-11 11:42:20 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2011-09-11 11:41:20 | 003,676,720 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2011-09-11 10:18:46 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin [2011-09-11 10:18:39 | 000,887,724 | ---- | C] () -- C:\WINDOWS\System32\ativva6x.dat [2011-09-11 10:18:38 | 000,234,855 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat [2011-09-11 10:18:38 | 000,000,003 | ---- | C] () -- C:\WINDOWS\System32\ativva5x.dat [2011-09-11 10:08:07 | 000,022,764 | ---- | C] () -- C:\WINDOWS\System32\Ludap17.ini [2011-09-11 10:08:07 | 000,000,054 | ---- | C] () -- C:\WINDOWS\System32\ctzapxx.ini [2011-09-11 10:07:32 | 000,137,216 | ---- | C] () -- C:\WINDOWS\System32\OemSpi.dll [2011-09-11 10:07:32 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\P17CPI.dll [2011-09-11 10:07:32 | 000,008,219 | ---- | C] () -- C:\WINDOWS\sfsyn.ini [2011-09-11 09:57:33 | 000,000,168 | ---- | C] () -- C:\WINDOWS\adidsl.ini [2011-09-11 09:57:33 | 000,000,021 | ---- | C] () -- C:\WINDOWS\Fast800.ini [2011-09-11 09:57:31 | 000,143,360 | ---- | C] () -- C:\WINDOWS\adiras.exe [2011-09-11 09:57:31 | 000,127,456 | ---- | C] () -- C:\WINDOWS\System32\IPDETECT.EXE [2011-09-11 09:57:31 | 000,001,094 | ---- | C] () -- C:\WINDOWS\adiras.ini [2011-09-11 09:57:30 | 000,152,220 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E4I2.BIN [2011-09-11 09:57:30 | 000,152,220 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E4I1.BIN [2011-09-11 09:57:30 | 000,152,220 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E4I0.BIN [2011-09-11 09:57:30 | 000,152,132 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E4P2.BIN [2011-09-11 09:57:30 | 000,152,132 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E4P1.BIN [2011-09-11 09:57:30 | 000,152,132 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E4P0.BIN [2011-09-11 09:57:30 | 000,152,126 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E9P2.BIN [2011-09-11 09:57:30 | 000,152,126 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E9P1.BIN [2011-09-11 09:57:30 | 000,152,126 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E9P0.BIN [2011-09-11 09:57:30 | 000,152,126 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E9I2.BIN [2011-09-11 09:57:30 | 000,152,126 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E9I1.BIN [2011-09-11 09:57:30 | 000,152,126 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E9I0.BIN [2011-09-11 09:57:30 | 000,152,036 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E4D2.BIN [2011-09-11 09:57:30 | 000,152,034 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E4D1.BIN [2011-09-11 09:57:30 | 000,152,034 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E4D0.BIN [2011-09-11 09:57:30 | 000,126,976 | ---- | C] () -- C:\WINDOWS\System32\coclassfast.dll [2011-09-11 09:57:30 | 000,046,892 | ---- | C] () -- C:\WINDOWS\System32\ADADIX16.DLL [2011-09-11 09:57:30 | 000,024,576 | ---- | C] () -- C:\WINDOWS\enddisk32.exe [2011-09-11 09:57:30 | 000,022,395 | ---- | C] () -- C:\WINDOWS\System32\drivers\fpga.bin [2011-09-11 09:57:29 | 000,176,128 | ---- | C] () -- C:\WINDOWS\autoclk.exe [2011-09-11 09:51:51 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2011-09-11 09:47:56 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat < End of report >