OTL logfile created on: 2011-03-29 21:40:36 - Run 1 OTL by OldTimer - Version 3.2.22.3 Folder = C:\Documents and Settings\Paweł\Pulpit Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.5512) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 74,00% Memory free 4,00 Gb Paging File | 3,00 Gb Available in Paging File | 88,00% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 75,13 Gb Total Space | 66,90 Gb Free Space | 89,05% Space Free | Partition Type: NTFS Drive D: | 195,31 Gb Total Space | 187,93 Gb Free Space | 96,22% Space Free | Partition Type: NTFS Drive E: | 195,32 Gb Total Space | 123,89 Gb Free Space | 63,43% Space Free | Partition Type: NTFS Computer Name: DOM-816EF0AE209 | User Name: Paweł | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-03-29 21:37:29 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Paweł\Pulpit\OTL.exe PRC - [2011-02-04 18:26:01 | 000,943,472 | ---- | M] (Opera Software) -- C:\Program Files\Opera\opera.exe PRC - [2011-01-13 10:47:34 | 003,396,624 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe PRC - [2011-01-13 10:47:33 | 000,040,384 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe PRC - [2010-10-07 10:04:26 | 012,661,344 | ---- | M] (GG Network S.A.) -- C:\Program Files\Gadu-Gadu 10\gg.exe PRC - [2009-05-12 16:43:36 | 002,181,672 | ---- | M] (Gainward Co.) -- C:\Program Files\EXPERTool\TBPANEL.exe PRC - [2008-07-11 20:00:06 | 000,080,392 | ---- | M] () -- C:\Program Files\GIGABYTE\EnergySaver\GSvr.exe PRC - [2008-06-24 17:06:06 | 001,840,424 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe PRC - [2008-06-18 12:01:56 | 000,077,824 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SoundMan.exe PRC - [2008-04-14 22:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2006-06-29 02:01:00 | 000,032,768 | ---- | M] (Creative Technology Ltd.) -- C:\WINDOWS\V0220Mon.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2011-03-29 21:37:29 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Paweł\Pulpit\OTL.exe MOD - [2011-01-13 10:47:35 | 000,189,728 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\snxhk.dll MOD - [2008-04-14 22:29:10 | 001,054,208 | R--- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2011-01-13 10:47:33 | 000,040,384 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus) SRV - [2008-07-11 20:00:06 | 000,080,392 | ---- | M] () [Auto | Running] -- C:\Program Files\GIGABYTE\EnergySaver\GSvr.exe -- (GEST Service) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2011-03-29 21:32:07 | 000,016,608 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\gdrv.sys -- (gdrv) DRV - [2011-01-13 10:41:16 | 000,294,608 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP) DRV - [2011-01-13 10:40:16 | 000,047,440 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi) DRV - [2011-01-13 10:40:04 | 000,100,176 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2) DRV - [2011-01-13 10:37:30 | 000,023,632 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr) DRV - [2011-01-13 10:37:11 | 000,029,392 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4) DRV - [2011-01-13 10:37:09 | 000,017,744 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk) DRV - [2010-12-08 12:53:18 | 000,841,912 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\ESLWireACD.sys -- (ESLWireAC) DRV - [2010-12-08 12:53:18 | 000,024,504 | ---- | M] (Turtle Entertainment GmbH) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ESLvnic.sys -- (ESLvnic1) DRV - [2010-11-28 15:01:22 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd) DRV - [2008-06-27 05:24:56 | 004,742,656 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2008-06-16 09:08:42 | 000,109,184 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp) DRV - [2007-03-16 11:11:38 | 000,012,256 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\TBPanel.sys -- (TBPanel) DRV - [2007-03-16 11:11:38 | 000,012,256 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\TBPanel.sys -- (Cardex) DRV - [2006-06-29 14:58:28 | 000,146,112 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\V0220Dev.sys -- (V0220Dev) DRV - [2006-06-08 17:00:52 | 000,006,272 | ---- | M] (EyePower Games Pte. Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\V0220Vfx.sys -- (V0220Vfx) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1202660629-1757981266-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com IE - HKU\S-1-5-21-1202660629-1757981266-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.qooqlle.com/ IE - HKU\S-1-5-21-1202660629-1757981266-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKU\S-1-5-21-1202660629-1757981266-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 O1 HOSTS File: ([2001-10-26 19:45:16 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKU\S-1-5-21-1202660629-1757981266-682003330-1003\..\Toolbar\WebBrowser: (no name) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - No CLSID value found. O3 - HKU\S-1-5-21-1202660629-1757981266-682003330-1003\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll () O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [AlcWzrd] C:\WINDOWS\alcwzrd.exe (RealTek Semicoductor Corp.) O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software) O4 - HKLM..\Run: [C:\WINDOWS\system32\V0220Ext.ax] C:\WINDOWS\system32\V0220Ext.ax (Creative Technology Ltd.) O4 - HKLM..\Run: [GEST] File not found O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe (Nero AG) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe () O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SoundMan.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [System] C:\Documents and Settings\Paweł\Dane aplikacji\System.exe () O4 - HKLM..\Run: [V0220Mon.exe] C:\WINDOWS\V0220Mon.exe (Creative Technology Ltd.) O4 - HKU\S-1-5-21-1202660629-1757981266-682003330-1003..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O4 - HKU\S-1-5-21-1202660629-1757981266-682003330-1003..\Run: [ESL Wire] File not found O4 - HKU\S-1-5-21-1202660629-1757981266-682003330-1003..\Run: [Gadu-Gadu 10] C:\Program Files\Gadu-Gadu 10\gg.exe (GG Network S.A.) O4 - HKU\S-1-5-21-1202660629-1757981266-682003330-1003..\Run: [GAINWARD] C:\Program Files\EXPERTool\TBPanel.exe (Gainward Co.) O4 - HKU\S-1-5-21-1202660629-1757981266-682003330-1003..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe (Nero AG) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe (Adobe Systems Incorporated) O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1202660629-1757981266-682003330-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.10.254 194.204.152.34 O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2010-11-28 13:19:54 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011-03-29 21:37:28 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Paweł\Pulpit\OTL.exe [2011-03-27 13:42:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Paweł\Menu Start\Programy\Fraps [2011-03-24 12:10:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\ArcaniA - Gothic 4 [2011-03-24 10:44:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Paweł\Moje dokumenty\ArcaniA - Gothic 4 [2011-03-24 10:39:36 | 000,000,000 | ---D | C] -- C:\Program Files\NVIDIA Corporation [2011-03-24 10:35:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Paweł\Ustawienia lokalne\Dane aplikacji\MPlayer [2011-03-22 19:57:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Paweł\Moje dokumenty\podswietlani_partnerzy [2011-03-22 19:40:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Paweł\Moje dokumenty\Pobieranie [2011-03-20 10:38:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Paweł\Ustawienia lokalne\Dane aplikacji\Mozilla [2011-03-20 10:38:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Paweł\Dane aplikacji\Mozilla [2011-03-15 13:12:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\ESL Wire [2011-03-15 13:12:13 | 000,024,504 | ---- | C] (Turtle Entertainment GmbH) -- C:\WINDOWS\System32\drivers\ESLvnic.sys [2011-03-15 13:12:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\ESL Wire [2011-03-15 07:01:16 | 000,086,016 | ---- | C] (Beepa P/L) -- C:\WINDOWS\System32\frapsvid.dll [2011-03-13 17:44:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Paweł\Menu Start\Programy\Kozacy - Antologia [2011-03-10 18:51:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Paweł\Dane aplikacji\TS3Client [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011-03-29 21:37:29 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Paweł\Pulpit\OTL.exe [2011-03-29 21:32:14 | 000,001,030 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2011-03-29 21:32:10 | 000,229,579 | ---- | M] () -- C:\WINDOWS\System32\NvApps.xml [2011-03-29 21:32:07 | 000,016,608 | ---- | M] (Windows (R) 2000 DDK provider) -- C:\WINDOWS\gdrv.sys [2011-03-29 21:32:05 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2011-03-29 21:32:02 | 000,093,480 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2011-03-29 20:20:00 | 000,001,034 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2011-03-27 18:13:03 | 000,000,078 | ---- | M] () -- C:\Documents and Settings\Paweł\Dane aplikacji\default.pls [2011-03-27 18:13:00 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2011-03-27 18:12:34 | 000,009,216 | ---- | M] () -- C:\Documents and Settings\Paweł\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-03-27 17:10:47 | 000,448,348 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2011-03-27 17:10:47 | 000,392,432 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2011-03-27 17:10:47 | 000,074,450 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2011-03-27 17:10:47 | 000,058,732 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2011-03-26 14:20:49 | 000,001,813 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk [2011-03-24 12:10:13 | 000,000,977 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Uruchom grę ArcaniA - Gothic 4 English VO.lnk [2011-03-24 12:10:13 | 000,000,971 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Uruchom grę ArcaniA - Gothic 4.lnk [2011-03-24 11:00:34 | 000,190,976 | ---- | M] () -- C:\Documents and Settings\Paweł\Dane aplikacji\System.exe [2011-03-20 10:38:24 | 000,000,000 | ---- | M] () -- C:\WINDOWS\nsreg.dat [2011-03-15 07:01:16 | 000,086,016 | ---- | M] (Beepa P/L) -- C:\WINDOWS\System32\frapsvid.dll [2011-03-13 17:44:48 | 000,000,798 | ---- | M] () -- C:\Documents and Settings\Paweł\Pulpit\Kozacy - Europejskie boje.lnk [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-03-24 12:10:13 | 000,000,977 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Uruchom grę ArcaniA - Gothic 4 English VO.lnk [2011-03-24 12:10:13 | 000,000,971 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Uruchom grę ArcaniA - Gothic 4.lnk [2011-03-24 11:00:17 | 000,190,976 | ---- | C] () -- C:\Documents and Settings\Paweł\Dane aplikacji\System.exe [2011-03-20 10:38:24 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat [2011-03-13 17:44:48 | 000,000,798 | ---- | C] () -- C:\Documents and Settings\Paweł\Pulpit\Kozacy - Europejskie boje.lnk [2011-01-27 23:59:11 | 000,221,184 | ---- | C] () -- C:\WINDOWS\System32\Dualunis.exe [2010-12-25 16:22:27 | 000,004,096 | ---- | C] () -- C:\WINDOWS\d3dx.dat [2010-12-10 09:30:21 | 000,175,087 | ---- | C] () -- C:\WINDOWS\hpoins29.dat [2010-12-10 09:30:21 | 000,000,799 | ---- | C] () -- C:\WINDOWS\hpomdl29.dat [2010-12-02 17:10:58 | 000,000,078 | ---- | C] () -- C:\Documents and Settings\Paweł\Dane aplikacji\default.pls [2010-11-28 15:26:58 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2010-11-28 15:26:54 | 000,009,216 | ---- | C] () -- C:\Documents and Settings\Paweł\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-11-28 14:11:24 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2010-11-28 14:10:14 | 000,093,480 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010-11-28 13:57:26 | 000,049,152 | R--- | C] () -- C:\WINDOWS\System32\ChCfg.exe [2010-11-28 13:48:24 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat [2010-11-28 13:21:27 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2010-11-28 13:17:11 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2009-05-21 06:12:56 | 001,579,630 | ---- | C] () -- C:\WINDOWS\System32\nvdata.bin [2009-05-21 06:12:56 | 000,007,274 | ---- | C] () -- C:\WINDOWS\cadx2.ini [2009-05-01 01:31:10 | 001,657,376 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe [2009-05-01 01:31:08 | 000,449,056 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe [2009-05-01 01:31:08 | 000,436,768 | ---- | C] () -- C:\WINDOWS\System32\keystone.exe [2009-05-01 01:31:06 | 001,724,416 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll [2009-05-01 01:31:06 | 001,507,328 | ---- | C] () -- C:\WINDOWS\System32\nview.dll [2009-05-01 01:31:06 | 001,101,824 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll [2009-05-01 01:31:06 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll [2008-04-14 23:16:20 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin [2006-12-31 07:57:08 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat [2001-10-26 20:15:16 | 000,448,348 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat [2001-10-26 20:15:16 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat [2001-10-26 20:15:16 | 000,074,450 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat [2001-10-26 20:15:16 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat [2001-08-23 17:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin [2001-08-23 17:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat [2001-08-18 01:30:24 | 000,392,432 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat [2001-08-18 01:30:24 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat [2001-08-18 01:30:24 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat [2001-08-18 01:30:22 | 000,058,732 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat [2001-08-18 01:15:38 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin [2001-07-22 02:36:48 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat [2001-07-22 02:36:04 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat [2001-07-22 02:24:16 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat [color=#E56717]========== LOP Check ==========[/color] [2010-11-28 14:29:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Alwil Software [2011-02-07 18:46:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\boost_interprocess [2010-11-28 15:01:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite [2011-03-15 13:12:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ESL Wire [2010-11-28 14:27:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10 [2011-03-29 21:05:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\MotionDSP [2011-03-26 20:44:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM [2011-03-24 10:18:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP [2010-11-28 16:48:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paweł\Dane aplikacji\DAEMON Tools Lite [2011-03-26 23:43:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paweł\Dane aplikacji\Gadu-Gadu 10 [2011-01-14 14:38:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paweł\Dane aplikacji\GameRanger [2010-12-08 17:37:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paweł\Dane aplikacji\GHISLER [2010-11-28 15:31:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paweł\Dane aplikacji\Leadertech [2010-11-28 14:29:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paweł\Dane aplikacji\OpenFM [2010-11-28 14:23:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paweł\Dane aplikacji\Opera [2011-01-19 18:21:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paweł\Dane aplikacji\Thinstall [2011-03-10 19:06:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paweł\Dane aplikacji\TS3Client [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 974 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:24721E3C < End of report >