OTL logfile created on: 2011-02-02 14:50:15 - Run 1
OTL by OldTimer - Version 3.2.20.6     Folder = D:\Antywirusowe\OTL
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
1,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 45,00% Memory free
2,00 Gb Paging File | 1,00 Gb Available in Paging File | 73,00% Paging File free
Paging file location(s): C:\pagefile.sys 512 2048 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 9,77 Gb Total Space | 4,03 Gb Free Space | 41,30% Space Free | Partition Type: NTFS
Drive D: | 27,48 Gb Total Space | 17,89 Gb Free Space | 65,09% Space Free | Partition Type: FAT32
Drive E: | 149,05 Gb Total Space | 33,90 Gb Free Space | 22,75% Space Free | Partition Type: NTFS
 
Computer Name: SMART | User Name: Admin | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2011-02-02 14:44:40 | 000,602,624 | ---- | M] (OldTimer Tools) -- D:\Antywirusowe\OTL\OTL.exe
PRC - [2010-12-13 08:40:08 | 000,135,336 | ---- | M] (Avira GmbH) -- D:\Program Files\Avira\AntiVir Desktop\sched.exe
PRC - [2010-12-13 08:39:56 | 000,281,768 | ---- | M] (Avira GmbH) -- D:\Program Files\Avira\AntiVir Desktop\avgnt.exe
PRC - [2010-12-13 08:39:56 | 000,267,944 | ---- | M] (Avira GmbH) -- D:\Program Files\Avira\AntiVir Desktop\avguard.exe
PRC - [2010-12-10 10:02:48 | 000,912,344 | ---- | M] (Mozilla Corporation) -- D:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2010-10-07 10:04:26 | 012,661,344 | ---- | M] (GG Network S.A.) -- D:\Program Files\Gadu-Gadu 10\gg.exe
PRC - [2010-07-18 13:18:46 | 000,177,152 | ---- | M] () -- E:\p2p\utorrent\utorrent.exe
PRC - [2010-01-14 21:11:02 | 000,076,968 | ---- | M] (Avira GmbH) -- D:\Program Files\Avira\AntiVir Desktop\avshadow.exe
PRC - [2008-04-14 21:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2006-07-22 13:30:20 | 002,364,416 | ---- | M] (Pogoda Inc.) -- D:\P R O G R A M Y\pogoda\pogoda.exe
PRC - [2003-06-10 12:12:28 | 000,055,296 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SOUNDMAN.EXE
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - [2011-02-02 14:44:40 | 000,602,624 | ---- | M] (OldTimer Tools) -- D:\Antywirusowe\OTL\OTL.exe
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [Disabled | Stopped] --  -- (NMIndexingService)
SRV - File not found [Disabled | Stopped] --  -- (HidServ)
SRV - File not found [Auto | Stopped] --  -- (gupdate1c995ffc380595c) Usługa Google Update (gupdate1c995ffc380595c)
SRV - File not found [On_Demand | Stopped] --  -- (getPlusHelper) getPlus(R)
SRV - File not found [Disabled | Stopped] --  -- (clr_optimization_v2.0.50727_32)
SRV - File not found [Disabled | Stopped] --  -- (aawservice)
SRV - [2010-12-13 08:40:08 | 000,135,336 | ---- | M] (Avira GmbH) [Auto | Running] -- D:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2010-12-13 08:39:56 | 000,267,944 | ---- | M] (Avira GmbH) [Auto | Running] -- D:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2010-03-18 12:16:28 | 000,753,504 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe -- (WPFFontCache_v0400)
SRV - [2010-03-18 12:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2010-12-13 08:40:21 | 000,135,096 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2010-12-13 08:40:21 | 000,061,960 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2010-06-17 14:27:22 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2010-06-17 14:27:14 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- D:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2008-04-13 23:26:50 | 000,012,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\usb8023.sys -- (USB_RNDIS)
DRV - [2008-04-13 21:05:40 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Sterownik NT karty Realtek RTL8139(A/B/C)
DRV - [2006-10-22 12:22:00 | 003,994,624 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2004-08-22 16:31:48 | 000,005,248 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\d347prt.sys -- (d347prt)
DRV - [2004-08-22 16:31:10 | 000,155,136 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\d347bus.sys -- (d347bus)
DRV - [2003-06-19 08:30:18 | 000,752,764 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM) Service for Realtek AC97 Audio (WDM)
DRV - [2002-07-24 03:30:00 | 000,032,128 | ---- | M] (VIA Technologies, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\viaagp1.sys -- (viaagp1)
DRV - [2002-01-12 16:30:34 | 000,003,567 | ---- | M] (Beyond Logic http://www.beyondlogic.org) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\PortTalk.sys -- (PortTalk)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
IE - HKU\S-1-5-21-839522115-1078081533-1644491937-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKU\S-1-5-21-839522115-1078081533-1644491937-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.startup.homepage: "http://www.google.pl/"
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3
FF - prefs.js..extensions.enabledItems: {3d7eb24f-2740-49df-8937-200b1cc08f8a}:1.5.14.2
FF - prefs.js..extensions.enabledItems: {d37dc5d0-431d-44e5-8c91-49419370caa1}:2.6.18
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
 
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: D:\Program Files\Mozilla Firefox\components [2008-06-20 14:44:02 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: D:\Program Files\Mozilla Firefox\plugins [2010-02-03 11:03:00 | 000,000,000 | ---D | M]
 
[2008-06-20 13:44:33 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Extensions
[2011-02-02 08:50:38 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\e6yhmqqb.default\extensions
[2010-10-15 11:19:54 | 000,000,000 | ---D | M] (Flashblock) -- C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\e6yhmqqb.default\extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a}
[2010-12-23 22:46:12 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\e6yhmqqb.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010-05-18 17:45:09 | 000,000,000 | ---D | M] (FoxClocks) -- C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\e6yhmqqb.default\extensions\{d37dc5d0-431d-44e5-8c91-49419370caa1}
[2008-10-16 19:18:33 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2011-01-05 08:41:04 | 000,000,000 | ---D | M] (Java Console) -- D:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
 
O1 HOSTS File: ([2001-10-26 16:45:16 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O3 - HKU\S-1-5-21-839522115-1078081533-1644491937-1003\..\Toolbar\WebBrowser: (no name) - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - No CLSID value found.
O4 - HKLM..\Run: [avgnt] D:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\nvmctray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.)
O4 - HKU\S-1-5-21-839522115-1078081533-1644491937-1003..\Run: [Gadu-Gadu 10] D:\Program Files\Gadu-Gadu 10\gg.exe (GG Network S.A.)
O4 - HKU\S-1-5-21-839522115-1078081533-1644491937-1003..\Run: [supelek bogiego] d:\p r o g r a m y\supelek bogiego\supb.exe (bogi)
O4 - HKU\S-1-5-21-839522115-1078081533-1644491937-1003..\Run: [tray] D:\P R O G R A M Y\pogoda\pogoda.exe (Pogoda Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 227
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonScripts = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffScripts = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunLogonScriptSync = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunStartupScriptSync = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideStartupScripts = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-839522115-1078081533-1644491937-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-839522115-1078081533-1644491937-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-839522115-1078081533-1644491937-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonScripts = 0
O7 - HKU\S-1-5-21-839522115-1078081533-1644491937-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffScripts = 0
O7 - HKU\S-1-5-21-839522115-1078081533-1644491937-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunLogonScriptSync = 1
O7 - HKU\S-1-5-21-839522115-1078081533-1644491937-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunStartupScriptSync = 0
O7 - HKU\S-1-5-21-839522115-1078081533-1644491937-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideStartupScripts = 0
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008-05-29 10:39:57 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2008-06-02 16:11:41 | 000,000,000 | RHSD | M] - C:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2008-06-02 16:11:42 | 000,000,000 | RHSD | M] - E:\autorun.inf -- [ NTFS ]
O33 - MountPoints2\{165d64b2-b1fb-11df-bc06-001bbf6aebcb}\Shell - "" = AutoRun
O33 - MountPoints2\{165d64b2-b1fb-11df-bc06-001bbf6aebcb}\Shell\AutoRun\command - "" = I:\SETUP.EXE
O33 - MountPoints2\{165d64b2-b1fb-11df-bc06-001bbf6aebcb}\Shell\configure\command - "" = I:\SETUP.EXE
O33 - MountPoints2\{165d64b2-b1fb-11df-bc06-001bbf6aebcb}\Shell\install\command - "" = I:\SETUP.EXE
O33 - MountPoints2\{165d64b3-b1fb-11df-bc06-001bbf6aebcb}\Shell - "" = AutoRun
O33 - MountPoints2\{165d64b3-b1fb-11df-bc06-001bbf6aebcb}\Shell\AutoRun\command - "" = J:\m.exe
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011-02-01 16:41:30 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Admin\Recent
[2011-01-31 17:04:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Dane aplikacji\Avira
[2011-01-31 15:13:09 | 000,135,096 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys
[2011-01-31 15:13:09 | 000,061,960 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntflt.sys
[2011-01-31 15:13:09 | 000,045,416 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntdd.sys
[2011-01-31 15:13:09 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\ssmdrv.sys
[2011-01-31 15:13:09 | 000,022,360 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntmgr.sys
[2011-01-31 15:13:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Avira
[2011-01-31 15:03:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Spybot - Search & Destroy
[2011-01-31 09:38:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\NtmsData
[2011-01-30 19:42:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Dane aplikacji\Malwarebytes
[2011-01-30 19:41:48 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2011-01-30 19:41:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes
[2011-01-30 19:41:43 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2011-01-30 19:35:53 | 000,012,872 | ---- | C] (SurfRight B.V.) -- C:\WINDOWS\System32\bootdelete.exe
[2011-01-30 19:29:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Hitman Pro
[2011-01-27 09:42:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Menu Start\Programy\Microsoft Office
[2011-01-25 12:09:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Dane aplikacji\vlc
[2011-01-21 18:20:15 | 000,000,000 | ---D | C] -- C:\Program Files\microsoft frontpage
[2011-01-20 11:31:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\PCHealth
[2011-01-07 22:51:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Dane aplikacji\AIMP3
[2011-01-05 08:41:00 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2011-01-05 08:41:00 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2011-01-05 08:41:00 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2011-01-03 15:35:02 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\Setup1.exe
[2010-02-03 14:42:55 | 000,155,136 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\d347bus.sys
[2010-02-03 14:42:55 | 000,005,248 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\d347prt.sys
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2011-02-02 14:57:18 | 000,027,621 | ---- | M] () -- C:\Documents and Settings\Admin\Moje dokumenty\222.JPG
[2011-02-02 14:03:03 | 000,088,566 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2011-02-02 14:02:29 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011-02-01 23:39:49 | 000,111,104 | ---- | M] () -- C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-02-01 19:29:08 | 000,016,968 | ---- | M] () -- C:\WINDOWS\System32\drivers\hitmanpro35.sys
[2011-02-01 15:14:55 | 000,208,104 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011-01-31 15:11:08 | 000,002,596 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2011-01-31 10:32:58 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2011-01-30 19:40:27 | 000,000,588 | ---- | M] () -- C:\WINDOWS\settings.ini
[2011-01-30 19:35:53 | 000,012,872 | ---- | M] (SurfRight B.V.) -- C:\WINDOWS\System32\bootdelete.exe
[2011-01-30 11:26:35 | 000,000,030 | ---- | M] () -- C:\WINDOWS\TextSpy.ini
[2011-01-28 21:48:54 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011-01-21 20:12:28 | 000,000,169 | ---- | M] () -- C:\WINDOWS\RtlRack.ini
[2011-01-21 09:18:38 | 000,016,698 | ---- | M] () -- C:\WINDOWS\Admin.acl
[2011-01-17 09:39:32 | 000,001,824 | ---- | M] () -- C:\WINDOWS\TSearch.INI
[2011-01-03 15:35:03 | 000,249,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Setup1.exe
[2011-01-03 15:34:59 | 000,073,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\ST6UNST.EXE
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011-01-30 19:30:20 | 000,016,968 | ---- | C] () -- C:\WINDOWS\System32\drivers\hitmanpro35.sys
[2011-01-21 09:18:38 | 000,016,698 | ---- | C] () -- C:\WINDOWS\Admin.acl
[2010-12-30 09:23:37 | 000,000,130 | ---- | C] () -- C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\fusioncache.dat
[2010-11-17 11:59:43 | 000,000,366 | ---- | C] () -- C:\WINDOWS\XIIIHooligans.ini
[2010-11-16 11:03:15 | 000,000,588 | ---- | C] () -- C:\WINDOWS\settings.ini
[2010-11-02 09:12:26 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2010-11-02 09:12:16 | 000,790,528 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2010-11-02 09:12:15 | 000,134,144 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2010-11-02 09:12:15 | 000,108,032 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2010-10-04 19:27:06 | 000,126,976 | ---- | C] () -- C:\WINDOWS\System32\coclassfast.dll
[2010-07-03 12:47:21 | 003,395,816 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat
[2010-03-07 14:04:23 | 000,000,169 | ---- | C] () -- C:\WINDOWS\RtlRack.ini
[2010-02-20 19:56:29 | 000,000,079 | ---- | C] () -- C:\WINDOWS\pit2009.ini
[2010-02-01 11:25:33 | 002,378,752 | ---- | C] () -- C:\WINDOWS\System32\x264vfw.dll
[2010-01-02 12:20:48 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\HookAPINT.dll
[2010-01-02 12:20:48 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\mydll.dll
[2009-12-27 16:57:47 | 000,043,520 | ---- | C] () -- C:\WINDOWS\System32\CmdLineExt03.dll
[2009-12-16 11:25:24 | 000,000,731 | ---- | C] () -- C:\WINDOWS\swosfff.ini
[2009-12-16 10:51:03 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\zmbv.dll
[2009-09-24 22:39:09 | 000,000,813 | ---- | C] () -- C:\WINDOWS\VPlayer.INI
[2009-02-19 20:22:30 | 000,000,079 | ---- | C] () -- C:\WINDOWS\pit2008.ini
[2009-02-19 20:22:30 | 000,000,021 | ---- | C] () -- C:\WINDOWS\pit2007.ini
[2008-12-28 21:06:01 | 000,000,024 | ---- | C] () -- C:\WINDOWS\WSAGE.INI
[2008-11-25 10:26:30 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2008-08-23 19:56:39 | 000,000,066 | ---- | C] () -- C:\WINDOWS\SpeedGear.INI
[2008-08-16 22:49:01 | 000,000,030 | ---- | C] () -- C:\WINDOWS\TextSpy.ini
[2008-08-15 16:55:49 | 000,000,000 | ---- | C] () -- C:\WINDOWS\PROTOCOL.INI
[2008-07-22 09:26:49 | 000,000,050 | ---- | C] () -- C:\WINDOWS\MegaManager.INI
[2008-06-27 18:55:30 | 000,000,254 | ---- | C] () -- C:\WINDOWS\GTA-SA_Trn_Settings.ini
[2008-06-24 16:24:19 | 000,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2008-06-10 22:23:15 | 000,001,824 | ---- | C] () -- C:\WINDOWS\TSearch.INI
[2008-06-10 12:15:27 | 000,000,741 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\hpzinstall.log
[2008-05-30 22:21:44 | 000,114,688 | ---- | C] () -- C:\WINDOWS\System32\WLANUTL.dll
[2008-05-30 20:43:33 | 000,001,602 | ---- | C] () -- C:\WINDOWS\bestplayer.ini
[2008-05-29 12:27:57 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2008-05-29 11:27:30 | 000,000,421 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2008-05-29 11:10:57 | 000,000,164 | ---- | C] () -- C:\WINDOWS\avrack.ini
[2006-10-22 12:22:00 | 001,662,976 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2006-10-22 12:22:00 | 001,470,464 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2006-10-22 12:22:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2006-10-22 12:22:00 | 000,581,632 | ---- | C] () -- C:\WINDOWS\System32\nvhwvid.dll
[2006-10-22 12:22:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2006-10-22 12:22:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2006-10-22 12:22:00 | 000,212,992 | ---- | C] () -- C:\WINDOWS\System32\nvapi.dll
[2004-08-22 16:04:56 | 000,069,120 | ---- | C] () -- C:\WINDOWS\daemon.dll
[2003-05-29 14:02:11 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2003-05-29 14:02:04 | 000,111,104 | ---- | C] () -- C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[1997-02-23 23:00:00 | 000,022,016 | ---- | C] () -- C:\WINDOWS\System32\DOCOBJ.DLL
[1997-02-23 23:00:00 | 000,012,288 | ---- | C] () -- C:\WINDOWS\System32\VADE232.DLL
[1997-02-23 23:00:00 | 000,012,288 | ---- | C] () -- C:\WINDOWS\System32\HLINKPRX.DLL
[1996-04-03 20:33:26 | 000,005,248 | ---- | C] () -- C:\WINDOWS\System32\giveio.sys
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2011-01-28 22:47:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\AIMP3
[2010-10-26 08:38:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\BESTplayer
[2010-06-20 09:24:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\Gadu-Gadu 10
[2010-02-03 12:47:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\InterTrust
[2010-07-14 11:01:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\ScummVM
[2010-10-22 19:45:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\Sports Interactive
[2011-02-02 14:58:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\uTorrent
[2010-01-03 10:11:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DFX
[2010-06-20 08:40:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10
[2011-01-30 19:35:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Hitman Pro
[2010-07-13 18:53:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Sports Interactive
[2008-07-12 13:01:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 85 bytes -> C:\Documents and Settings\All Users\Pulpit:$SS_DESCRIPTOR_MVPUV9PFSVXJKX69UK1CWPP0DTVNYKM1UVXPJCEPP4DMJ3K1XYE7LRJEM53EPPJCFLPXB564BPLBB5N14D0B8F0LFUTVLJVMVFVV14TE
@Alternate Data Stream - 85 bytes -> C:\Documents and Settings\All Users\Dane aplikacji:$SS_DESCRIPTOR_MVPUV9PFSVXJKX69UK1CWPP0DTVNYKM1UVXPJCEPP4DMJ3K1XYE7LRJEM53EPPJCFLPXB564BPLBB5N14D0B8F0LFUTVLJVMVFVV14TE
@Alternate Data Stream - 114 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:0F8F5844

< End of report >