OTL logfile created on: 2011-02-25 20:56:52 - Run 2 OTL by OldTimer - Version 3.2.20.6 Folder = F:\ Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.5512) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 75,00% Memory free 4,00 Gb Paging File | 3,00 Gb Available in Paging File | 91,00% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 40,00 Gb Total Space | 28,03 Gb Free Space | 70,08% Space Free | Partition Type: NTFS Drive D: | 58,59 Gb Total Space | 33,27 Gb Free Space | 56,77% Space Free | Partition Type: NTFS Drive E: | 99,61 Gb Total Space | 49,05 Gb Free Space | 49,24% Space Free | Partition Type: NTFS Drive F: | 99,88 Gb Total Space | 29,56 Gb Free Space | 29,60% Space Free | Partition Type: NTFS Computer Name: KING | User Name: kuba | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - File not found -- PRC - [2011-02-21 15:52:52 | 000,002,560 | ---- | M] () -- C:\WINDOWS\Runservice.exe PRC - [2011-02-18 14:15:17 | 000,602,624 | ---- | M] (OldTimer Tools) -- F:\OTL_3.2.20.6(dobreprogramy.pl).exe PRC - [2011-01-13 09:47:34 | 003,396,624 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe PRC - [2011-01-13 09:47:33 | 000,040,384 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe PRC - [2010-12-11 21:02:30 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Mozilla Firefox\firefox.exe PRC - [2010-05-20 14:27:24 | 000,762,736 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\vVX1000.exe PRC - [2008-04-14 21:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2007-05-28 17:57:54 | 000,275,968 | ---- | M] (Rocket Division Software) -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2011-02-18 14:15:17 | 000,602,624 | ---- | M] (OldTimer Tools) -- F:\OTL_3.2.20.6(dobreprogramy.pl).exe MOD - [2011-01-13 09:47:35 | 000,189,728 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\snxhk.dll MOD - [2010-08-23 17:12:53 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Disabled | Stopped] -- -- (HidServ) SRV - File not found [Unknown | Running] -- -- (cmdAgent) SRV - [2011-02-21 15:52:52 | 000,002,560 | ---- | M] () [Auto | Running] -- C:\WINDOWS\Runservice.exe -- (LicCtrlService) SRV - [2011-01-13 09:47:33 | 000,040,384 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus) SRV - [2010-05-17 12:11:40 | 000,229,376 | ---- | M] (Puran Software) [Disabled | Stopped] -- C:\WINDOWS\System32\PuranDefragS.exe -- (PuranDefrag) SRV - [2007-05-28 17:57:54 | 000,275,968 | ---- | M] (Rocket Division Software) [Auto | Running] -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | Unknown | Running] -- -- (Inspect) DRV - File not found [Kernel | Unknown | Running] -- -- (cmdHlp) DRV - File not found [File_System | Unknown | Running] -- -- (cmdGuard) DRV - [2011-01-20 16:09:24 | 000,685,816 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd) DRV - [2011-01-13 09:41:16 | 000,294,608 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP) DRV - [2011-01-13 09:40:16 | 000,047,440 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi) DRV - [2011-01-13 09:40:04 | 000,100,176 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2) DRV - [2011-01-13 09:37:30 | 000,023,632 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr) DRV - [2011-01-13 09:37:11 | 000,029,392 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4) DRV - [2011-01-13 09:37:09 | 000,017,744 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk) DRV - [2010-05-20 14:27:26 | 001,961,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\VX1000.sys -- (VX1000) DRV - [2010-02-03 14:56:56 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi) DRV - [2009-09-05 16:18:36 | 000,016,608 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\gdrv.sys -- (gdrv) DRV - [2008-10-14 11:07:50 | 000,103,936 | R--- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ZTEusbser6k.sys -- (ZTEusbser6k) DRV - [2008-10-14 11:07:50 | 000,103,936 | R--- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ZTEusbnmeaext.sys -- (ZTEusbnmeaext) DRV - [2008-10-14 11:07:50 | 000,103,936 | R--- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ZTEusbnmea.sys -- (ZTEusbnmea) DRV - [2008-10-14 11:07:50 | 000,103,936 | R--- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ZTEusbmdm6k.sys -- (ZTEusbmdm6k) DRV - [2008-10-14 08:10:30 | 000,034,688 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\pcampr5.sys -- (PCAMPR5) DRV - [2008-06-16 09:13:46 | 000,032,128 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\pcandis5.sys -- (PCANDIS5) DRV - [2008-04-13 23:15:14 | 000,060,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\USBAUDIO.sys -- (usbaudio) Sterownik audio USB (WDM) DRV - [2008-04-13 21:06:06 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus) DRV - [2008-02-14 10:04:06 | 004,676,096 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2008-01-03 15:10:16 | 000,105,856 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp) DRV - [2007-05-10 23:03:00 | 006,738,432 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv) DRV - [2004-11-25 17:36:06 | 000,077,248 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\prohlp02.sys -- (prohlp02) DRV - [2004-11-25 17:32:01 | 000,054,368 | ---- | M] (Protection Technology) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\prodrv06.sys -- (prodrv06) DRV - [2003-12-01 16:20:52 | 000,004,832 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfhlp01.sys -- (sfhlp01) DRV - [2003-09-06 13:22:08 | 000,006,944 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\prosync1.sys -- (prosync1) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-776561741-1482476501-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = IE - HKU\S-1-5-21-776561741-1482476501-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = IE - HKU\S-1-5-21-776561741-1482476501-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKU\S-1-5-21-776561741-1482476501-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Mozilla Firefox\components [2011-01-04 09:48:55 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Mozilla Firefox\plugins [2011-02-25 20:42:33 | 000,000,000 | ---D | M] [2011-02-04 18:25:18 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\kuba\Dane aplikacji\Mozilla\Extensions [2011-02-24 16:02:17 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\kuba\Dane aplikacji\Mozilla\Firefox\Profiles\ngt0jmbr.default\extensions [2010-11-20 09:29:58 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\kuba\Dane aplikacji\Mozilla\Firefox\Profiles\ngt0jmbr.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} O1 HOSTS File: ([2002-09-29 01:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll (Google Inc.) O4 - HKLM..\Run: [Adobe Reader Speed Launcher] D:\Program Files\Reader\Reader_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software) O4 - HKLM..\Run: [DivX Download Manager] File not found O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe () O4 - HKLM..\Run: [VX1000] C:\WINDOWS\vVX1000.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-776561741-1482476501-725345543-1003..\Run: [AlcoholAutomount] C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe (Alcohol Soft Development Team) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-776561741-1482476501-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-776561741-1482476501-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0 O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.76.34.49 212.76.34.50 O20 - AppInit_DLLs: (system32\aakah.dll) - File not found O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\kuba\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\kuba\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-08-29 15:24:50 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{21ff2820-2e0d-11e0-a0ff-001d7dcc7ebe}\Shell - "" = AutoRun O33 - MountPoints2\{21ff2820-2e0d-11e0-a0ff-001d7dcc7ebe}\Shell\AutoRun\command - "" = H:\setup.exe O33 - MountPoints2\H\Shell - "" = AutoRun O33 - MountPoints2\H\Shell\AutoRun\command - "" = H:\LaunchU3.exe -a O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011-02-25 14:51:26 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\kuba\Recent [2011-02-23 20:29:11 | 000,000,000 | ---D | C] -- C:\Program Files\REACTOR [2011-02-21 15:52:42 | 000,000,000 | ---D | C] -- C:\Program Files\Fast Break Basketball [2011-02-20 16:47:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\kuba\Dane aplikacji\Unity [2011-02-20 16:43:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\kuba\Ustawienia lokalne\Dane aplikacji\Unity [2011-02-20 15:57:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\kuba\Dane aplikacji\MysteryStudio [2011-02-20 15:18:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\kuba\Pulpit\Counter-strike [2011-02-20 12:44:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Nicolas Games [2011-02-20 12:40:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\kuba\Dane aplikacji\InstallShield [2011-02-19 18:21:12 | 000,000,000 | ---D | C] -- C:\Program Files\Gimnazjum - Chemia Nowej Ery [2011-02-19 18:21:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Gimnazjum - Chemia Nowej Ery [2011-02-19 15:59:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\kuba\Dane aplikacji\U3 [2011-02-19 13:06:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\kuba\Menu Start\Programy\San Andreas Multiplayer [2011-02-17 15:55:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\COMODO [2011-02-17 15:42:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Comodo Downloader [2011-02-17 07:02:08 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2011-02-13 16:37:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\kuba\Ustawienia lokalne\Dane aplikacji\Paint.NET [2011-02-11 16:08:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\kuba\Pulpit\CFG's_pngteam.freens.pl [2011-02-09 18:23:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\R.G. ReCoding Games [2011-02-09 17:07:48 | 002,194,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntoskrnl.exe [2011-02-09 17:07:48 | 002,150,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrnlmp.exe [2011-02-09 17:07:48 | 002,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrnlpa.exe [2011-02-09 17:07:48 | 002,028,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrpamp.exe [2011-02-09 16:01:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\kuba\Dane aplikacji\Microsoft Shared [2011-02-09 08:19:51 | 000,000,000 | ---D | C] -- C:\totalcmd [2011-02-09 08:04:05 | 000,086,016 | ---- | C] (MindVision Software) -- C:\WINDOWS\unvise32.exe [2011-02-09 08:04:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\CStrike 1.6 - By PirocaHP [2011-02-07 08:32:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\kuba\Moje dokumenty\Warmux [2011-02-05 18:25:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Lekarz domowy [2011-02-05 08:02:38 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\kuba\NetHood [2011-02-04 17:54:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\kuba\Dane aplikacji\Local [2011-02-04 17:54:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\kuba\Dane aplikacji\DivX [2011-02-04 17:50:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\kuba\Dane aplikacji\Media Player Classic [2011-02-04 17:45:23 | 000,000,000 | ---D | C] -- C:\Program Files\DivX [2011-02-04 17:39:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\DivX [2011-02-01 11:52:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\kuba\Dane aplikacji\smc [2011-01-30 17:47:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\kuba\Ustawienia lokalne\Dane aplikacji\SKmods [2011-01-30 09:07:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\kuba\Menu Start\Programy\Soldat Mods [2011-01-29 19:36:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dokumenty\ImageConverter Plus [2011-01-29 19:36:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\kuba\Moje dokumenty\Image Converter Plus [2011-01-28 10:48:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\kuba\Dane aplikacji\AIMP [2011-01-28 10:44:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\AIMP2 [2011-01-28 10:44:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\kuba\Moje dokumenty\Data [2011-01-28 10:39:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\kuba\Menu Start\Programy\Detektor Winampa [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011-02-25 20:44:21 | 000,000,972 | ---- | M] () -- C:\WINDOWS\tasks\Google Software Updater.job [2011-02-25 20:40:32 | 000,000,211 | RHS- | M] () -- C:\boot.ini [2011-02-25 20:40:10 | 000,000,260 | ---- | M] () -- C:\WINDOWS\tasks\WGASetup.job [2011-02-25 20:40:06 | 000,000,729 | -HS- | M] () -- C:\WINDOWS\System32\mmf.sys [2011-02-25 20:39:55 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2011-02-25 08:56:48 | 000,002,157 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk [2011-02-24 17:52:54 | 000,003,541 | ---- | M] () -- C:\Documents and Settings\kuba\Pulpit\bez tytułu.GIF [2011-02-24 17:49:30 | 000,007,168 | -H-- | M] () -- C:\Documents and Settings\kuba\Pulpit\photothumb.db [2011-02-24 16:52:01 | 000,005,120 | -H-- | M] () -- C:\Documents and Settings\kuba\Moje dokumenty\photothumb.db [2011-02-24 10:23:35 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2011-02-23 15:29:15 | 000,162,816 | ---- | M] () -- C:\Documents and Settings\kuba\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-02-21 15:52:54 | 000,120,832 | ---- | M] () -- C:\WINDOWS\lcmmfu.cpl [2011-02-21 15:52:52 | 000,049,152 | ---- | M] () -- C:\WINDOWS\mmfs.dll [2011-02-21 15:52:52 | 000,002,560 | ---- | M] () -- C:\WINDOWS\Runservice.exe [2011-02-20 12:12:47 | 000,000,833 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Alcohol 120%.lnk [2011-02-20 08:25:13 | 000,181,040 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2011-02-19 13:21:27 | 000,054,156 | -H-- | M] () -- C:\WINDOWS\QTFont.qfn [2011-02-19 13:21:27 | 000,001,409 | ---- | M] () -- C:\WINDOWS\QTFont.for [2011-02-18 15:03:25 | 000,001,404 | ---- | M] () -- C:\WINDOWS\unins000.dat [2011-02-17 07:02:14 | 000,000,784 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Malwarebytes' Anti-Malware.lnk [2011-02-09 18:27:17 | 000,000,007 | ---- | M] () -- C:\WINDOWS\ogg_out [2011-02-09 18:27:14 | 000,000,006 | ---- | M] () -- C:\WINDOWS\ogg_in [2011-02-09 18:23:52 | 000,000,843 | ---- | M] () -- C:\Documents and Settings\kuba\Pulpit\CS Source.lnk [2011-02-09 13:29:02 | 000,001,588 | ---- | M] () -- C:\Documents and Settings\kuba\Pulpit\cstrike.lnk [2011-02-09 08:22:12 | 000,000,171 | ---- | M] () -- C:\WINDOWS\d.ini [2011-02-07 08:08:26 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2011-02-06 22:18:30 | 000,000,386 | ---- | M] () -- C:\WINDOWS\tasks\SmartDefrag.job [2011-02-05 21:34:36 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\kuba\Bez tytułu.bmp [2011-02-05 18:25:43 | 000,000,599 | ---- | M] () -- C:\Documents and Settings\kuba\Pulpit\Lekarz domowy.lnk [2011-01-30 17:37:12 | 000,000,596 | ---- | M] () -- C:\Documents and Settings\kuba\Pulpit\Soldat Modlauncher.lnk [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-02-24 17:52:53 | 000,003,541 | ---- | C] () -- C:\Documents and Settings\kuba\Pulpit\bez tytułu.GIF [2011-02-24 16:53:23 | 000,007,168 | -H-- | C] () -- C:\Documents and Settings\kuba\Pulpit\photothumb.db [2011-02-21 15:52:59 | 000,000,729 | -HS- | C] () -- C:\WINDOWS\System32\mmf.sys [2011-02-21 15:52:54 | 000,120,832 | ---- | C] () -- C:\WINDOWS\lcmmfu.cpl [2011-02-21 15:52:52 | 000,049,152 | ---- | C] () -- C:\WINDOWS\mmfs.dll [2011-02-21 15:52:52 | 000,002,560 | ---- | C] () -- C:\WINDOWS\Runservice.exe [2011-02-20 12:12:47 | 000,000,833 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Alcohol 120%.lnk [2011-02-19 13:21:27 | 000,054,156 | -H-- | C] () -- C:\WINDOWS\QTFont.qfn [2011-02-19 13:21:27 | 000,001,409 | ---- | C] () -- C:\WINDOWS\QTFont.for [2011-02-11 20:52:23 | 000,001,804 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Adobe Reader 9.lnk [2011-02-09 18:24:09 | 000,000,007 | ---- | C] () -- C:\WINDOWS\ogg_out [2011-02-09 18:24:09 | 000,000,006 | ---- | C] () -- C:\WINDOWS\ogg_in [2011-02-09 18:23:52 | 000,000,843 | ---- | C] () -- C:\Documents and Settings\kuba\Pulpit\CS Source.lnk [2011-02-09 13:29:02 | 000,001,588 | ---- | C] () -- C:\Documents and Settings\kuba\Pulpit\cstrike.lnk [2011-02-09 09:32:41 | 000,000,171 | ---- | C] () -- C:\WINDOWS\d.ini [2011-02-09 08:19:51 | 000,000,545 | ---- | C] () -- C:\WINDOWS\UC.PIF [2011-02-09 08:19:51 | 000,000,545 | ---- | C] () -- C:\WINDOWS\RAR.PIF [2011-02-09 08:19:51 | 000,000,545 | ---- | C] () -- C:\WINDOWS\PKZIP.PIF [2011-02-09 08:19:51 | 000,000,545 | ---- | C] () -- C:\WINDOWS\PKUNZIP.PIF [2011-02-09 08:19:51 | 000,000,545 | ---- | C] () -- C:\WINDOWS\NOCLOSE.PIF [2011-02-09 08:19:51 | 000,000,545 | ---- | C] () -- C:\WINDOWS\LHA.PIF [2011-02-09 08:19:51 | 000,000,545 | ---- | C] () -- C:\WINDOWS\ARJ.PIF [2011-02-05 21:34:36 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\kuba\Bez tytułu.bmp [2011-02-05 18:25:43 | 000,000,599 | ---- | C] () -- C:\Documents and Settings\kuba\Pulpit\Lekarz domowy.lnk [2011-01-30 17:37:12 | 000,000,596 | ---- | C] () -- C:\Documents and Settings\kuba\Pulpit\Soldat Modlauncher.lnk [2011-01-20 16:09:24 | 000,685,816 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys [2010-12-30 08:42:26 | 000,000,002 | ---- | C] () -- C:\Documents and Settings\kuba\Dane aplikacji\ceville_console_history.txt [2010-09-24 17:52:41 | 000,189,096 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat [2010-09-24 17:47:53 | 000,015,498 | ---- | C] () -- C:\WINDOWS\VX1000.ini [2010-08-09 09:14:02 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\xmltok.dll [2010-08-09 09:14:02 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\xmlparse.dll [2010-08-03 13:18:24 | 000,144,384 | ---- | C] () -- C:\WINDOWS\System32\miccyhook.dll [2010-07-06 07:46:09 | 000,000,075 | ---- | C] () -- C:\WINDOWS\frikikmulti.ini [2010-07-06 07:44:32 | 000,000,660 | ---- | C] () -- C:\WINDOWS\cncscore.ini [2010-05-26 19:38:16 | 000,000,029 | ---- | C] () -- C:\WINDOWS\Battle.ini [2010-05-21 13:55:37 | 000,000,133 | ---- | C] () -- C:\WINDOWS\ChssBase.ini [2010-05-02 16:43:24 | 000,000,000 | ---- | C] () -- C:\WINDOWS\galaxy.ini [2010-02-12 17:41:24 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini [2010-02-12 17:41:23 | 000,881,664 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2010-02-12 17:41:23 | 000,205,824 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2010-02-12 17:39:59 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2009-11-18 15:16:19 | 000,000,129 | ---- | C] () -- C:\Documents and Settings\kuba\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [2009-10-06 10:21:02 | 000,000,151 | ---- | C] () -- C:\WINDOWS\PhotoSnapViewer.INI [2009-09-24 16:04:25 | 000,000,032 | ---- | C] () -- C:\WINDOWS\CD-Start.INI [2009-09-05 16:59:39 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2009-09-05 16:47:51 | 000,178,176 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2009-09-05 16:47:51 | 000,019,968 | ---- | C] () -- C:\WINDOWS\System32\cpuinf32.dll [2009-09-03 18:32:42 | 000,000,133 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2009-08-29 17:47:31 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll [2009-08-29 17:29:53 | 000,162,816 | ---- | C] () -- C:\Documents and Settings\kuba\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-08-29 16:17:58 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2009-04-22 00:19:06 | 000,172,173 | ---- | C] () -- C:\WINDOWS\System32\xlive.dll.cat [2007-05-10 23:03:00 | 001,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll [2007-05-10 23:03:00 | 001,474,560 | ---- | C] () -- C:\WINDOWS\System32\nview.dll [2007-05-10 23:03:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll [2007-05-10 23:03:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll [2007-05-10 23:03:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll [color=#E56717]========== LOP Check ==========[/color] [2010-10-19 08:40:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AA3DeployClient [2010-03-26 12:08:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AlawarWrapper [2010-03-26 12:08:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Aliasworlds [2010-11-10 06:27:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Alwil Software [2010-10-28 14:09:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Canneverbe Limited [2011-01-23 10:26:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ChessBase [2010-04-08 12:23:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\FireGlow [2010-08-17 15:53:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10 [2010-07-12 06:05:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\InterAction studios [2010-09-13 05:30:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla [2010-05-02 16:58:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\JonIon Games [2010-08-07 17:42:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\MumboJumbo [2010-10-23 17:24:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\NexonEU [2010-12-30 21:25:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM [2010-05-31 15:15:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Pinnacle [2010-11-22 10:38:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PMB Files [2010-08-07 07:52:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PopCap Games [2010-03-26 14:25:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Snake Munch [2010-12-10 22:02:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Sony [2011-02-20 19:22:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP [2011-01-15 12:54:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Beatka\Dane aplikacji\Soldat [2011-01-29 12:00:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\AIMP [2010-08-06 08:44:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\AnvSoft [2011-02-25 20:34:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\Any Video Converter [2010-11-17 18:09:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\Auslogics [2010-08-03 09:04:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\BlackBean [2010-10-28 14:09:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\Canneverbe Limited [2011-02-04 17:04:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\ChessBase [2010-03-17 13:23:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\City Interactive [2010-12-30 18:49:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\DVDVideoSoftIEHelpers [2011-02-17 16:38:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\Gadu-Gadu 10 [2010-09-15 18:02:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\Gearbox Software [2011-02-04 17:04:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\GlarySoft [2010-11-22 10:02:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\gtk-2.0 [2011-02-04 17:04:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\IObit [2011-02-04 17:04:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\ipla [2011-02-04 17:54:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\Local [2010-07-26 05:54:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\Mount&Blade [2010-07-27 12:28:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\Mount&Blade Warband [2011-02-20 19:21:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\MysteryStudio [2010-12-21 08:02:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\Notepad++ [2010-10-25 06:14:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\OpenCandy [2010-08-17 15:59:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\OpenFM [2010-02-12 16:10:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\OpenOffice.org [2009-08-30 14:26:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\Opera [2011-02-24 17:48:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\PhotoScape [2010-08-06 11:37:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\PlayFirst [2011-02-04 17:04:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\smc [2009-08-29 18:08:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\Soldat [2011-02-04 17:04:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\Sony [2009-11-16 13:35:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\Summer Athletics 2009 [2009-12-26 08:22:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\Tank Combat [2011-02-07 08:36:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\Teeworlds [2009-12-22 16:13:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\temp [2010-09-05 15:36:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\The Path [2010-12-21 10:34:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\Toolbar4 [2010-02-13 09:27:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\TreeCardGames [2010-12-10 22:12:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\TS3Client [2010-03-09 15:44:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\TuneUp Software [2010-12-30 08:05:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\Uniblue [2011-02-20 16:47:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\Unity [2010-09-19 16:07:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\URSE Games [2010-10-18 20:47:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\Warsow 0.5 [2011-02-04 17:04:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kuba\Dane aplikacji\WeGame [2010-03-09 19:23:20 | 000,000,378 | ---- | M] () -- C:\WINDOWS\Tasks\NSSstub.job [2011-02-25 09:00:42 | 000,032,460 | ---- | M] () -- C:\WINDOWS\Tasks\SCHEDLGU.TXT [2011-02-06 22:18:30 | 000,000,386 | ---- | M] () -- C:\WINDOWS\Tasks\SmartDefrag.job [2011-02-25 20:40:10 | 000,000,260 | ---- | M] () -- C:\WINDOWS\Tasks\WGASetup.job [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 122 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:9398DBB4 @Alternate Data Stream - 119 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:05EE1EEF @Alternate Data Stream - 106 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:0C988F7D < End of report >