OTL logfile created on: 2011-02-27 10:52:09 - Run 1
OTL by OldTimer - Version 3.2.22.1     Folder = C:\Documents and Settings\Mariusz\Pulpit
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 36,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 70,00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 98,13 Gb Total Space | 49,65 Gb Free Space | 50,59% Space Free | Partition Type: NTFS
Drive D: | 498,05 Gb Total Space | 164,11 Gb Free Space | 32,95% Space Free | Partition Type: NTFS
Drive E: | 298,08 Gb Total Space | 164,26 Gb Free Space | 55,10% Space Free | Partition Type: NTFS
Drive H: | 931,51 Gb Total Space | 298,46 Gb Free Space | 32,04% Space Free | Partition Type: NTFS
Drive I: | 931,51 Gb Total Space | 528,02 Gb Free Space | 56,68% Space Free | Partition Type: NTFS
Drive M: | 1,83 Gb Total Space | 1,82 Gb Free Space | 99,78% Space Free | Partition Type: FAT32
 
Computer Name: STOLIK | User Name: Mariusz | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2011-02-27 01:20:05 | 000,296,448 | ---- | M] () -- C:\Documents and Settings\Mariusz\Pulpit\plbjmsbd.exe
PRC - [2011-02-27 01:19:04 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Mariusz\Pulpit\OTL.exe
PRC - [2011-02-09 00:46:28 | 000,943,472 | ---- | M] (Opera Software) -- C:\Program Files\Opera\opera.exe
PRC - [2010-10-24 20:44:06 | 000,329,096 | ---- | M] (BillP Studios) -- C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe
PRC - [2010-08-30 06:25:40 | 000,414,224 | ---- | M] (Bitsum Technologies) -- C:\Program Files\Process Lasso\ProcessLasso.exe
PRC - [2010-08-30 06:25:40 | 000,241,680 | ---- | M] (Bitsum Technologies) -- C:\Program Files\Process Lasso\ProcessGovernor.exe
PRC - [2010-05-27 23:28:49 | 001,512,448 | ---- | M] (Michel Krämer) -- C:\Program Files\Spamihilator\spamihilator.exe
PRC - [2010-01-19 15:26:59 | 000,949,376 | ---- | M] (Eset ) -- C:\Program Files\Eset\nod32kui.exe
PRC - [2010-01-19 15:26:59 | 000,552,064 | ---- | M] (Eset ) -- C:\Program Files\Eset\nod32krn.exe
PRC - [2009-10-07 11:04:58 | 000,939,272 | ---- | M] (Raxco Software, Inc.) -- C:\Program Files\Raxco\PerfectDisk10\PDAgent.exe
PRC - [2008-05-19 12:13:20 | 000,057,344 | ---- | M] (Nalpeiron Ltd.) -- C:\WINDOWS\system32\ASTSRV.EXE
PRC - [2008-04-14 21:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007-01-31 14:55:42 | 000,096,370 | ---- | M] (Canon Inc.) -- C:\Program Files\Canon\CAL\CALMAIN.exe
PRC - [2007-01-18 12:20:26 | 000,190,008 | ---- | M] (Seagate LLC) -- C:\Program Files\Seagate\SystemTray\StxMenuMgr.exe
PRC - [2006-09-19 13:45:58 | 000,663,552 | ---- | M] (Ralink Technology, Corp.) -- C:\Program Files\RALINK\Common\RaUI.exe
PRC - [2005-04-27 14:59:24 | 000,241,725 | ---- | M] (Microsoft Corporation) -- C:\Program Files\UPHClean\uphclean.exe
PRC - [2001-12-01 19:39:40 | 000,087,720 | ---- | M] (Symantec Corporation) -- C:\Program Files\Norton Personal Firewall\NISUM.EXE
PRC - [2001-12-01 19:39:14 | 000,063,144 | ---- | M] (Symantec Corporation) -- C:\Program Files\Norton Personal Firewall\NISSERV.EXE
PRC - [2001-12-01 19:37:30 | 000,378,536 | ---- | M] (Symantec Corporation) -- C:\Program Files\Norton Personal Firewall\IAMAPP.EXE
PRC - [2001-12-01 19:37:04 | 000,263,848 | ---- | M] (Symantec Corporation) -- C:\Program Files\Norton Personal Firewall\ATrack.exe
PRC - [2001-12-01 19:35:46 | 000,054,952 | ---- | M] (Symantec Corporation) -- C:\Program Files\Norton Personal Firewall\SymProxySvc.exe
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - [2011-02-27 01:19:04 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Mariusz\Pulpit\OTL.exe
MOD - [2010-08-23 17:12:53 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
MOD - [2009-07-19 23:03:54 | 000,062,776 | ---- | M] (BillP Studios) -- C:\Program Files\BillP Studios\WinPatrol\patrolpro.dll
MOD - [2006-05-03 21:53:54 | 000,174,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\framedyn.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - [2010-06-14 14:07:14 | 000,615,936 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2010-02-19 12:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2010-01-19 20:23:45 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010-01-19 15:26:59 | 000,552,064 | ---- | M] (Eset ) [Auto | Running] -- C:\Program Files\Eset\nod32krn.exe -- (NOD32krn)
SRV - [2009-10-07 11:05:02 | 001,033,480 | ---- | M] (Raxco Software, Inc.) [On_Demand | Stopped] -- C:\Program Files\Raxco\PerfectDisk10\PDEngine.exe -- (PDEngine)
SRV - [2009-10-07 11:04:58 | 000,939,272 | ---- | M] (Raxco Software, Inc.) [Auto | Running] -- C:\Program Files\Raxco\PerfectDisk10\PDAgent.exe -- (PDAgent)
SRV - [2009-09-23 13:38:18 | 000,935,208 | ---- | M] (Nero AG) [Disabled | Stopped] -- C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0)
SRV - [2008-11-19 09:47:00 | 000,109,056 | ---- | M] (ArcSoft Inc.) [Disabled | Stopped] -- C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon)
SRV - [2008-05-19 12:13:20 | 000,057,344 | ---- | M] (Nalpeiron Ltd.) [Auto | Running] -- C:\WINDOWS\system32\ASTSRV.EXE -- (ASTSRV)
SRV - [2007-12-12 12:34:26 | 000,065,536 | ---- | M] () [Disabled | Stopped] -- C:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exe -- (DTSRVC)
SRV - [2007-01-31 14:55:42 | 000,096,370 | ---- | M] (Canon Inc.) [Auto | Running] -- C:\Program Files\Canon\CAL\CALMAIN.exe -- (CCALib8)
SRV - [2005-04-27 14:59:24 | 000,241,725 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\UPHClean\uphclean.exe -- (UPHClean)
SRV - [2005-01-21 22:32:12 | 000,206,552 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe -- (SNDSrvc)
SRV - [2001-12-01 19:39:40 | 000,087,720 | ---- | M] (Symantec Corporation) [On_Demand | Running] -- C:\Program Files\Norton Personal Firewall\NISUM.EXE -- (NISUM)
SRV - [2001-12-01 19:39:14 | 000,063,144 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Norton Personal Firewall\NISSERV.EXE -- (NISSERV)
SRV - [2001-12-01 19:35:46 | 000,054,952 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Norton Personal Firewall\SymProxySvc.exe -- (SymProxySvc)
SRV - [2001-09-10 19:08:50 | 000,032,256 | ---- | M] (C-Dilla Ltd) [Disabled | Stopped] -- C:\WINDOWS\system32\drivers\CDANTSRV.EXE -- (C-DillaSrv)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2010-03-04 16:12:33 | 000,033,848 | ---- | M] (NCH Swift Sound) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nchssvad.sys -- (NCHSSVAD) SoundTap Recorder (32 Bit)
DRV - [2010-02-26 13:32:58 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2010-02-26 13:32:46 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2010-02-26 13:32:44 | 000,022,528 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2010-02-26 13:32:44 | 000,018,176 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2010-01-19 15:26:59 | 000,512,096 | ---- | M] (Eset ) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\amon.sys -- (AMON)
DRV - [2010-01-19 15:26:59 | 000,015,424 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\nod32drv.sys -- (nod32drv)
DRV - [2009-12-02 12:21:00 | 000,020,616 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\eufs.sys -- (EUFS)
DRV - [2009-12-02 12:20:58 | 000,014,216 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\eudskacs.sys -- (EUDSKACS)
DRV - [2009-12-02 12:20:56 | 000,026,248 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\eubakup.sys -- (EUBAKUP)
DRV - [2009-12-02 12:20:54 | 000,122,504 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\EuDisk.sys -- (EuDisk)
DRV - [2009-10-22 16:11:14 | 000,057,800 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ftdibus.sys -- (FTDIBUS)
DRV - [2009-10-22 16:09:34 | 000,072,520 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ftser2k.sys -- (FTSER2K)
DRV - [2009-08-20 11:11:30 | 000,073,232 | ---- | M] (Raxco Software, Inc.) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\DefragFs.sys -- (DefragFS)
DRV - [2009-01-16 13:48:44 | 000,171,136 | ---- | M] ( ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\GenHC.sys -- (EST_Server)
DRV - [2009-01-06 13:45:50 | 000,027,136 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\GenBus.sys -- (EST_BusEnum)
DRV - [2008-08-26 09:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2007-12-17 16:14:04 | 000,012,400 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AsIO.sys -- (AsIO)
DRV - [2007-10-02 09:32:14 | 004,613,120 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2007-08-29 03:04:04 | 000,116,264 | ---- | M] (Silicon Image, Inc) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\SI3112r.sys -- (Si3112r)
DRV - [2007-08-29 03:04:04 | 000,019,240 | ---- | M] (Silicon Image, Inc) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\SiWinAcc.sys -- (SiFilter)
DRV - [2007-07-03 15:58:20 | 000,106,792 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdmdm.sys -- (sscdmdm)
DRV - [2007-07-03 15:57:24 | 000,011,944 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdmdfl.sys -- (sscdmdfl)
DRV - [2007-07-03 15:54:24 | 000,080,552 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdbus.sys -- (sscdbus) SAMSUNG USB Composite Device driver (WDM)
DRV - [2007-06-18 13:18:26 | 000,023,680 | ---- | M] (Motorola) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\motmodem.sys -- (motmodem)
DRV - [2007-05-14 20:03:24 | 000,445,696 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rt73.sys -- (RT73)
DRV - [2007-05-02 10:11:18 | 000,109,704 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_mdm.sys -- (ss_mdm)
DRV - [2007-05-02 10:11:18 | 000,015,112 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_mdfl.sys -- (ss_mdfl)
DRV - [2007-05-02 10:11:16 | 000,083,592 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bus.sys -- (ss_bus) SAMSUNG Mobile USB Device 1.0 driver (WDM)
DRV - [2007-02-09 12:17:18 | 000,017,465 | ---- | M] (Portrait Displays, Inc.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\pivot.sys -- (Pivot)
DRV - [2007-02-09 12:17:16 | 000,011,323 | ---- | M] (Portrait Displays, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pivotmou.sys -- (pivotmou)
DRV - [2007-01-17 13:30:00 | 000,012,288 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Spyder2.sys -- (Spyder2)
DRV - [2006-11-16 17:20:48 | 000,015,920 | ---- | M] (Portrait Displays, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\PdiPorts.sys -- (PdiPorts)
DRV - [2006-07-24 15:05:00 | 000,005,632 | ---- | M] () [File_System | System | Running] -- C:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen)
DRV - [2005-01-21 22:31:50 | 000,267,384 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\SYMTDI.SYS -- (SYMTDI)
DRV - [2005-01-21 22:31:48 | 000,026,424 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\Drivers\SYMREDRV.SYS -- (SYMREDRV)
DRV - [2005-01-21 22:31:46 | 000,035,000 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\Drivers\SYMIDS.SYS -- (SYMIDS)
DRV - [2005-01-21 22:31:44 | 000,172,216 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\Drivers\SYMFW.SYS -- (SYMFW)
DRV - [2005-01-21 22:31:44 | 000,046,808 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\Drivers\SYMNDIS.SYS -- (SYMNDIS)
DRV - [2005-01-21 22:31:40 | 000,011,544 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\Drivers\SYMDNS.SYS -- (SYMDNS)
DRV - [2004-10-26 11:22:50 | 000,002,410 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files\FreshDevices\FreshDiagnose\FreshIO.sys -- (FreshIO)
DRV - [2004-08-13 11:56:20 | 000,005,810 | R--- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ASACPI.sys -- (MTsensor)
DRV - [2002-09-16 17:14:32 | 000,004,228 | ---- | M] (PowerQuest Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\PQNTDRV.sys -- (PQNTDrv)
DRV - [2001-09-10 19:09:46 | 000,057,392 | ---- | M] (Macrovision) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CDANT.SYS -- (C-Dilla)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-606747145-1644491937-1801674531-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKU\S-1-5-21-606747145-1644491937-1801674531-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKU\S-1-5-21-606747145-1644491937-1801674531-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://picasaweb.google.com/hekselman
IE - HKU\S-1-5-21-606747145-1644491937-1801674531-1003\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKU\S-1-5-21-606747145-1644491937-1801674531-1003\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKU\S-1-5-21-606747145-1644491937-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
O1 HOSTS File: ([2011-02-27 00:00:03 | 000,000,736 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O4 - HKLM..\Run: [iamapp] C:\Program Files\Norton Personal Firewall\IAMAPP.EXE (Symantec Corporation)
O4 - HKLM..\Run: [nod32kui] C:\Program Files\Eset\nod32kui.exe (Eset )
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [ProcessGovernor] C:\Program Files\Process Lasso\ProcessGovernor.exe (Bitsum Technologies)
O4 - HKLM..\Run: [ProcessLassoManagementConsole] C:\Program Files\Process Lasso\ProcessLasso.exe (Bitsum Technologies)
O4 - HKLM..\Run: [StxTrayMenu] C:\Program Files\Seagate\SystemTray\StxMenuMgr.exe (Seagate LLC)
O4 - HKLM..\Run: [Symantec NetDriver Monitor] C:\Program Files\SymNetDrv\SNDMon.exe (Symantec Corporation)
O4 - HKLM..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe (BillP Studios)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\ColorVisionStartup.lnk = C:\Program Files\ColorVision\Utility\ColorVisionStartup.exe (ColorVision Inc.)
O4 - Startup: C:\Documents and Settings\Mariusz\Menu Start\Programy\Autostart\Ralink Wireless Utility.lnk = C:\Program Files\RALINK\Common\RaUI.exe (Ralink Technology, Corp.)
O4 - Startup: C:\Documents and Settings\Mariusz\Menu Start\Programy\Autostart\Spamihilator.lnk = C:\Program Files\Spamihilator\spamihilator.exe (Michel Krämer)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Low Rights present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-606747145-1644491937-1801674531-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-606747145-1644491937-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-606747145-1644491937-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFavoritesMenu = 1
O7 - HKU\S-1-5-21-606747145-1644491937-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-606747145-1644491937-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 0
O7 - HKU\S-1-5-21-606747145-1644491937-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Open with KUSO EXIF Viewer - C:\Program Files\KUSO EXIF Viewer\EXIF.htm ()
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation)
O16 - DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} http://support.asus.de/common/asusTek_sys_ctrl.cab (Reg Error: Key error.)
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB (Reg Error: Key error.)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1263906761343 (WUWebControl Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1263906830968 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 208.67.222.222 83.238.44.3
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Mariusz\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Mariusz\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010-01-19 13:28:23 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2010-01-26 16:45:08 | 000,000,000 | R--D | M] - C:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2010-01-26 16:45:08 | 000,000,000 | R--D | M] - D:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2010-01-26 16:45:08 | 000,000,000 | R--D | M] - E:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2010-03-10 15:25:53 | 000,000,000 | ---D | M] - H:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2007-08-17 12:48:16 | 000,000,040 | ---- | M] () - I:\Autorun(2).inf -- [ NTFS ]
O32 - AutoRun File - [2010-01-26 16:45:08 | 000,000,000 | R--D | M] - I:\autorun.inf -- [ NTFS ]
O34 - HKLM BootExecute: (pdboot.exe) - C:\WINDOWS\System32\PDBoot.exe (Raxco Software, Inc.)
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011-02-27 01:19:03 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Mariusz\Pulpit\OTL.exe
[2011-02-27 00:52:57 | 000,000,000 | -HSD | C] -- C:\WINDOWS\CSC
[2011-02-27 00:03:01 | 000,000,000 | --SD | C] -- C:\ComboFix
[2011-02-26 23:58:54 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2011-02-26 23:40:22 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2011-02-26 23:40:22 | 000,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2011-02-26 23:40:22 | 000,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2011-02-26 23:40:22 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2011-02-26 12:12:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Windows Support Tools
[2011-02-26 12:12:08 | 000,000,000 | ---D | C] -- C:\Program Files\Support Tools
[2011-02-26 11:38:08 | 001,413,120 | ---- | C] (Option^Explicit Software Solutions) -- C:\Documents and Settings\Mariusz\Pulpit\winsockfix.exe
[2011-02-26 10:18:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mariusz\Pulpit\rower
[2011-02-24 19:57:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mariusz\Pulpit\torebka
[2011-02-23 22:46:41 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Mariusz\Recent
[2011-02-22 13:05:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mariusz\Pulpit\cruiser
[2011-02-22 10:46:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mariusz\Pulpit\dowcip wykresy
[2011-02-21 10:55:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mariusz\.screenshooter
[2011-02-21 10:52:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mariusz\Ustawienia lokalne\Dane aplikacji\LearnPulse
[2011-02-20 13:27:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mariusz\Menu Start\Programy\BG OFFRoadMap
[2011-02-19 09:14:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mariusz\Menu Start\Programy\Revo Uninstaller
[2011-02-10 11:12:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mariusz\Pulpit\nówka 599
[2011-02-09 22:16:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mariusz\Pulpit\TCO2011
[2011-02-09 18:19:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\boost_interprocess
[2011-02-09 13:18:01 | 000,000,000 | ---D | C] -- C:\Program Files\SymNetDrv
[2011-02-09 13:13:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mariusz\Dane aplikacji\Symantec
[2011-02-09 13:13:20 | 000,000,000 | ---D | C] -- C:\Program Files\Norton Personal Firewall
[2011-02-09 13:13:19 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Symantec Shared
[2011-02-09 13:13:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Symantec
[2011-02-09 12:52:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mariusz\Ustawienia lokalne\Dane aplikacji\Temp
[2011-02-09 12:52:49 | 000,000,000 | ---D | C] -- C:\Program Files\Zoom Player
[2011-02-09 12:52:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mariusz\Menu Start\Programy\Zoom Player
[2011-02-09 10:41:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Norton Personal Firewall
[2011-02-09 10:41:15 | 000,000,000 | ---D | C] -- C:\Program Files\Symantec
[2011-02-09 00:29:06 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Mariusz\UserData
[2011-02-09 00:22:28 | 000,000,000 | ---D | C] -- C:\Program Files\Total Video Converter
[2011-02-09 00:21:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Total Video Converter
[2011-02-09 00:21:13 | 000,000,000 | ---D | C] -- C:\Program Files\FastStone MaxView
[2011-02-09 00:21:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\FastStone MaxView
[2011-02-09 00:20:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mariusz\Pulpit\wyjściowe
[2011-02-09 00:20:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mariusz\Menu Start\Programy\Unlocker
[2011-02-09 00:20:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\ZoomBrowser
[2011-02-09 00:19:53 | 000,000,000 | ---D | C] -- C:\Program Files\Vertus Fluid Mask 3
[2011-02-09 00:19:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Vertus Fluid Mask 3
[2011-02-09 00:19:37 | 000,000,000 | ---D | C] -- C:\Program Files\RAR Password Recovery Magic
[2011-02-09 00:19:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\RAR Password Recovery Magic
[2010-02-12 15:45:24 | 000,171,136 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\GenHC.sys
[2009-01-06 13:45:50 | 000,027,136 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\GenBus.sys
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[4 C:\Documents and Settings\All Users\Dane aplikacji\*.tmp files -> C:\Documents and Settings\All Users\Dane aplikacji\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2011-02-27 10:23:03 | 000,267,725 | ---- | M] () -- C:\WINDOWS\System32\NvApps.xml
[2011-02-27 10:22:54 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011-02-27 10:22:07 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011-02-27 01:20:05 | 000,296,448 | ---- | M] () -- C:\Documents and Settings\Mariusz\Pulpit\plbjmsbd.exe
[2011-02-27 01:19:04 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Mariusz\Pulpit\OTL.exe
[2011-02-27 00:00:03 | 000,000,736 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2011-02-26 23:37:08 | 000,000,262 | -HS- | M] () -- C:\boot.ini
[2011-02-26 11:38:08 | 001,413,120 | ---- | M] (Option^Explicit Software Solutions) -- C:\Documents and Settings\Mariusz\Pulpit\winsockfix.exe
[2011-02-24 11:43:17 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2011-02-23 20:40:23 | 000,064,939 | ---- | M] () -- C:\Documents and Settings\Mariusz\Pulpit\transfer_new_110223_204004.pdf
[2011-02-23 19:41:27 | 000,001,496 | ---- | M] () -- C:\Documents and Settings\Mariusz\Ustawienia lokalne\Dane aplikacji\Adobe Zapisz dla Internetu 12.0 Prefs
[2011-02-22 01:19:30 | 004,272,029 | R--- | M] () -- C:\Documents and Settings\Mariusz\Pulpit\ComboFix.exe
[2011-02-22 00:08:07 | 000,012,600 | ---- | M] () -- C:\Documents and Settings\Mariusz\Moje dokumenty\21.02.2011.ucx
[2011-02-21 22:42:03 | 000,065,189 | ---- | M] () -- C:\Documents and Settings\Mariusz\Pulpit\transfer_new_110221_224153.pdf
[2011-02-21 10:42:12 | 000,542,052 | ---- | M] () -- C:\Documents and Settings\Mariusz\Pulpit\anons.TIF
[2011-02-21 10:02:54 | 011,272,192 | ---- | M] () -- C:\Documents and Settings\Mariusz\ntuser.bak
[2011-02-20 17:10:27 | 007,471,616 | ---- | M] () -- C:\Documents and Settings\Mariusz\Pulpit\py-tour_du_monde09-Images_en_3D_JMDP.pps
[2011-02-20 17:05:08 | 001,928,192 | ---- | M] () -- C:\Documents and Settings\Mariusz\Pulpit\ciekawe_efekty_www_prezentacje_org.pps
[2011-02-20 13:15:27 | 000,001,223 | ---- | M] () -- C:\Documents and Settings\Mariusz\Pulpit\GARMINOWE.lnk
[2011-02-20 10:10:34 | 000,000,336 | ---- | M] () -- C:\Documents and Settings\Mariusz\Pulpit\MAGAZYN ZEWNĘTRZNY.lnk
[2011-02-19 09:14:38 | 000,000,942 | ---- | M] () -- C:\Documents and Settings\Mariusz\Pulpit\Revo Uninstaller.lnk
[2011-02-16 15:05:13 | 000,533,924 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2011-02-16 15:05:13 | 000,471,648 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011-02-16 15:05:13 | 000,106,284 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2011-02-16 15:05:13 | 000,083,710 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011-02-16 12:10:29 | 000,001,295 | ---- | M] () -- C:\Documents and Settings\Mariusz\Pulpit\Pizza.lnk
[2011-02-14 00:52:54 | 000,000,490 | ---- | M] () -- C:\WINDOWS\System32\mwvtcya.tgz
[2011-02-14 00:52:54 | 000,000,114 | ---- | M] () -- C:\WINDOWS\System32\prsgrc.tgz
[2011-02-14 00:52:54 | 000,000,086 | ---- | M] () -- C:\WINDOWS\System32\ssprs.tgz
[2011-02-10 11:30:41 | 000,239,624 | ---- | M] () -- C:\Documents and Settings\Mariusz\Pulpit\6zzwowv6.jpg
[2011-02-09 01:21:59 | 000,000,205 | ---- | M] () -- C:\WINDOWS\System32\imon1.dat
[2011-02-09 00:42:28 | 003,455,528 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011-02-09 00:38:01 | 000,001,355 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2011-02-08 23:47:37 | 000,000,000 | ---- | M] () -- C:\OverlayCache.dat
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[4 C:\Documents and Settings\All Users\Dane aplikacji\*.tmp files -> C:\Documents and Settings\All Users\Dane aplikacji\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011-02-27 01:20:05 | 000,296,448 | ---- | C] () -- C:\Documents and Settings\Mariusz\Pulpit\plbjmsbd.exe
[2011-02-26 23:40:22 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2011-02-26 23:40:22 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2011-02-26 23:40:22 | 000,089,088 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2011-02-26 23:40:22 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2011-02-26 23:40:22 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2011-02-23 20:40:12 | 000,064,939 | ---- | C] () -- C:\Documents and Settings\Mariusz\Pulpit\transfer_new_110223_204004.pdf
[2011-02-22 01:19:24 | 004,272,029 | R--- | C] () -- C:\Documents and Settings\Mariusz\Pulpit\ComboFix.exe
[2011-02-22 00:08:07 | 000,012,600 | ---- | C] () -- C:\Documents and Settings\Mariusz\Moje dokumenty\21.02.2011.ucx
[2011-02-21 22:42:03 | 000,065,189 | ---- | C] () -- C:\Documents and Settings\Mariusz\Pulpit\transfer_new_110221_224153.pdf
[2011-02-21 10:38:59 | 000,542,052 | ---- | C] () -- C:\Documents and Settings\Mariusz\Pulpit\anons.TIF
[2011-02-20 17:10:27 | 007,471,616 | ---- | C] () -- C:\Documents and Settings\Mariusz\Pulpit\py-tour_du_monde09-Images_en_3D_JMDP.pps
[2011-02-20 17:05:08 | 001,928,192 | ---- | C] () -- C:\Documents and Settings\Mariusz\Pulpit\ciekawe_efekty_www_prezentacje_org.pps
[2011-02-10 11:30:40 | 000,239,624 | ---- | C] () -- C:\Documents and Settings\Mariusz\Pulpit\6zzwowv6.jpg
[2010-09-07 13:24:13 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2010-09-04 16:44:50 | 000,005,591 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2010-08-11 09:43:23 | 000,075,776 | ---- | C] () -- C:\WINDOWS\cadkasdeinst01e.exe
[2010-07-27 22:26:53 | 000,001,496 | ---- | C] () -- C:\Documents and Settings\Mariusz\Ustawienia lokalne\Dane aplikacji\Adobe Zapisz dla Internetu 12.0 Prefs
[2010-07-13 22:44:03 | 000,000,120 | ---- | C] () -- C:\WINDOWS\PbkUser.INI
[2010-06-30 23:07:50 | 003,417,600 | ---- | C] () -- C:\WINDOWS\System32\dbxconv.dll
[2010-06-28 08:50:17 | 000,001,321 | ---- | C] () -- C:\Documents and Settings\Mariusz\Dane aplikacji\TYGRYS Doc&sett.lnk
[2010-06-27 23:33:13 | 000,000,033 | ---- | C] () -- C:\WINDOWS\Multimedia manager.INI
[2010-06-27 21:58:39 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\LauncherAccess.dt
[2010-06-27 21:57:37 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2010-05-25 21:10:36 | 000,000,071 | ---- | C] () -- C:\WINDOWS\iltwain.ini
[2010-05-25 09:42:56 | 000,001,769 | ---- | C] () -- C:\WINDOWS\Language_trs.ini
[2010-05-25 09:33:32 | 000,005,007 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\mtbjfghn.xbe
[2010-05-25 09:07:16 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\AsIO.dll
[2010-05-25 09:07:16 | 000,012,400 | ---- | C] () -- C:\WINDOWS\System32\drivers\AsIO.sys
[2010-03-29 12:31:27 | 000,000,073 | ---- | C] () -- C:\WINDOWS\System32\LTool.ini
[2010-03-29 12:19:59 | 000,000,011 | ---- | C] () -- C:\WINDOWS\System32\keyman.ini
[2010-03-10 22:49:39 | 000,000,205 | ---- | C] () -- C:\WINDOWS\System32\imon1.dat
[2010-03-04 16:41:37 | 000,001,028 | ---- | C] () -- C:\Documents and Settings\Mariusz\Dane aplikacji\WavCodec.wff
[2010-03-01 16:20:52 | 000,004,096 | ---- | C] () -- C:\WINDOWS\d3dx.dat
[2010-03-01 15:53:04 | 000,327,168 | ---- | C] () -- C:\WINDOWS\System32\cutil32.dll
[2010-02-09 23:49:36 | 000,178,176 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2010-02-09 23:49:35 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2010-02-09 23:49:28 | 000,815,104 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2010-02-09 23:49:28 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2010-02-09 23:49:21 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2010-02-07 17:28:11 | 000,000,612 | ---- | C] () -- C:\WINDOWS\unins000.dat
[2010-02-03 14:09:04 | 000,000,427 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2010-02-02 20:13:36 | 002,283,526 | ---- | C] () -- C:\WINDOWS\System32\nvdata.bin
[2010-02-01 20:14:13 | 000,000,191 | ---- | C] () -- C:\Documents and Settings\Mariusz\Dane aplikacji\default.rss
[2010-02-01 20:14:04 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2010-01-29 20:43:39 | 000,001,203 | ---- | C] () -- C:\WINDOWS\CDPLAYER.INI
[2010-01-25 15:27:13 | 000,008,512 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2010-01-22 09:22:22 | 000,075,264 | ---- | C] () -- C:\Documents and Settings\Mariusz\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-01-21 00:09:20 | 000,000,132 | ---- | C] () -- C:\Documents and Settings\Mariusz\Ustawienia lokalne\Dane aplikacji\fusioncache.dat
[2010-01-19 20:34:35 | 000,010,752 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll
[2010-01-19 19:23:57 | 000,002,304 | ---- | C] () -- C:\WINDOWS\System32\Machnm32.sys
[2010-01-19 17:13:18 | 000,319,488 | ---- | C] () -- C:\WINDOWS\System32\AegisI5.exe
[2010-01-19 17:13:18 | 000,295,018 | ---- | C] () -- C:\WINDOWS\System32\Install7x.dll
[2010-01-19 17:13:18 | 000,002,048 | ---- | C] () -- C:\WINDOWS\System32\drivers\rt73.bin
[2010-01-19 15:17:56 | 000,015,424 | ---- | C] () -- C:\WINDOWS\System32\drivers\nod32drv.sys
[2010-01-19 14:17:00 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2010-01-19 14:14:07 | 003,455,528 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010-01-19 13:42:40 | 000,049,152 | R--- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2010-01-19 13:39:02 | 000,009,303 | ---- | C] () -- C:\WINDOWS\Ascd_log.ini
[2010-01-19 13:38:43 | 000,005,810 | R--- | C] () -- C:\WINDOWS\System32\drivers\ASACPI.sys
[2010-01-19 13:38:40 | 000,009,131 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini
[2010-01-19 13:38:27 | 000,012,536 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2010-01-19 13:30:05 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2010-01-19 13:25:43 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2009-04-03 13:10:04 | 007,262,208 | ---- | C] () -- C:\WINDOWS\System32\tliadjust32.dll
[2009-03-11 15:34:20 | 000,012,288 | ---- | C] () -- C:\WINDOWS\System32\drivers\Spyder2.sys
[2008-04-14 22:16:20 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin
[2008-04-14 21:50:36 | 000,001,024 | ---- | C] () -- C:\WINDOWS\System32\jtiftou.dll
[2008-04-14 21:50:36 | 000,001,024 | ---- | C] () -- C:\WINDOWS\System32\grcauth2.dll
[2008-04-14 21:50:36 | 000,001,024 | ---- | C] () -- C:\WINDOWS\System32\grcauth1.dll
[2008-04-14 21:50:36 | 000,001,024 | ---- | C] () -- C:\WINDOWS\System32\clauth2.dll
[2008-04-14 21:50:36 | 000,001,024 | ---- | C] () -- C:\WINDOWS\System32\clauth1.dll
[2008-04-14 21:50:36 | 000,000,476 | ---- | C] () -- C:\WINDOWS\System32\mwvtcya.dll
[2008-04-14 21:50:36 | 000,000,072 | ---- | C] () -- C:\WINDOWS\System32\ssprs.dll
[2008-04-14 21:50:36 | 000,000,016 | -H-- | C] () -- C:\WINDOWS\System32\mtw8z0d.dll
[2008-04-14 21:50:36 | 000,000,016 | -H-- | C] () -- C:\WINDOWS\System32\liss2nx.dll
[2007-10-29 11:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2007-10-29 11:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2007-10-29 11:00:00 | 000,533,924 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat
[2007-10-29 11:00:00 | 000,471,648 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2007-10-29 11:00:00 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat
[2007-10-29 11:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2007-10-29 11:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2007-10-29 11:00:00 | 000,106,284 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat
[2007-10-29 11:00:00 | 000,083,710 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2007-10-29 11:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2007-10-29 11:00:00 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat
[2007-10-29 11:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2007-10-29 11:00:00 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2007-10-29 11:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2007-05-23 20:23:24 | 000,002,560 | ---- | C] () -- C:\WINDOWS\System32\RegInDll.dll
[2007-05-10 23:03:00 | 001,018,748 | ---- | C] () -- C:\WINDOWS\System32\nvucode.bin
[2007-05-10 23:03:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2006-12-31 06:57:08 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2006-11-11 20:52:50 | 000,454,656 | ---- | C] () -- C:\WINDOWS\System32\mmSQL.dll
[2004-03-07 08:30:24 | 000,000,016 | ---- | C] () -- C:\Documents and Settings\Mariusz\Dane aplikacji\QOFOCAL101S.dll
[2002-09-18 00:45:00 | 000,119,808 | ---- | C] () -- C:\WINDOWS\lsb_un20.exe
[2001-10-28 16:42:30 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\prnmnt.dll
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2011-02-24 18:11:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\boost_interprocess
[2010-01-20 21:19:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\BVRP Software
[2010-08-02 14:46:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\FreeDownloadManager.ORG
[2010-06-21 21:21:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\GARMIN
[2010-08-06 15:24:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Installations
[2010-10-25 20:39:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\InstallMate
[2010-02-01 18:54:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\LightScribe
[2010-03-04 16:39:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\NCH Swift Sound
[2010-08-06 15:12:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Nokia
[2010-08-03 23:26:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Suite
[2010-06-09 08:49:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Phase One
[2010-07-16 09:07:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\regid.1986-12.com.adobe
[2010-01-22 21:28:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Spamihilator
[2010-06-16 09:43:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Tanagra
[2010-12-04 17:11:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP
[2010-09-21 16:45:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Tlen.pl
[2010-09-08 22:54:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\VertusTech
[2010-11-03 13:36:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ZentimoService
[2010-01-19 20:45:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\Alien Skin
[2010-04-21 11:08:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\anpo.republika.pl
[2010-07-31 19:52:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\Audacity
[2010-05-11 19:28:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\Auslogics
[2010-01-28 13:05:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\Canon
[2010-05-25 09:33:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\Carambis
[2010-01-24 13:24:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\CloneSpy
[2010-01-19 19:26:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\DisplayTune
[2010-08-02 15:06:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\FileZilla
[2010-04-21 11:03:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\fltk.org
[2010-08-02 15:11:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\Free Download Manager
[2010-03-02 10:15:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\FreshDiagnose
[2010-06-21 21:56:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\GARMIN
[2011-01-24 00:43:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\Genie-Soft
[2010-02-02 21:16:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\Imagenomic
[2010-06-28 00:21:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\Jumping Bytes
[2011-02-09 12:52:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\Key Metric Software
[2011-01-19 20:50:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\Mask Pro 4.0
[2010-06-28 14:02:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\Mobile Master
[2010-02-13 19:37:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\MusicIP
[2010-03-04 16:39:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\NCH Swift Sound
[2010-08-08 18:23:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\Nokia
[2010-03-06 01:36:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\Novosoft
[2010-11-29 01:19:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\Opera
[2010-04-23 18:43:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\Pathcz
[2010-08-06 15:12:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\PC Suite
[2011-02-09 00:19:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\PhotoScape
[2010-10-13 09:42:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\PictoColor
[2010-09-03 15:52:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\ProcessLasso
[2010-03-17 10:32:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\PTGui
[2010-06-27 21:58:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\Samsung
[2010-06-11 08:48:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\SNS-HDR
[2010-06-07 13:13:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\SNS-HDR_Lite
[2010-08-02 14:46:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\Software Informer
[2011-02-27 10:46:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\Spamihilator
[2010-07-25 12:03:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2010-10-02 18:59:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\SuperUtils.com
[2011-02-25 21:10:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\Tlen.pl
[2010-01-19 16:22:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\WinPatrol
[2010-11-03 13:36:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mariusz\Dane aplikacji\Zentimo
[2010-03-02 21:24:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Merlin\Dane aplikacji\Opera
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 132 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:C8B8CEBD
@Alternate Data Stream - 107 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:1B7B8F31

< End of report >