OTL logfile created on: 2011-04-13 20:06:10 - Run 1 OTL by OldTimer - Version 3.2.22.3 Folder = C:\Documents and Settings\ŻWIREK\Moje dokumenty\Downloads\Programs Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 50,00% Memory free 4,00 Gb Paging File | 3,00 Gb Available in Paging File | 77,00% Paging File free Paging file location(s): c:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 29,30 Gb Total Space | 4,06 Gb Free Space | 13,86% Space Free | Partition Type: NTFS Drive D: | 24,42 Gb Total Space | 9,69 Gb Free Space | 39,67% Space Free | Partition Type: NTFS Drive E: | 20,81 Gb Total Space | 5,18 Gb Free Space | 24,92% Space Free | Partition Type: NTFS Computer Name: LAPTOP | User Name: ŻWIREK | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-04-13 20:04:09 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\ŻWIREK\Moje dokumenty\Downloads\Programs\OTL.exe PRC - [2011-03-28 16:01:16 | 003,278,232 | ---- | M] (Tonec Inc.) -- E:\Internet.Download.Manager.6.03.FULL\Internet.Download.Manager.6.03.FULL\Crack\IDMan.exe PRC - [2011-03-22 00:10:24 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox 4.0 Beta 9\firefox.exe PRC - [2011-02-23 16:04:20 | 003,451,496 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe PRC - [2011-02-23 16:04:19 | 000,042,184 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe PRC - [2010-07-12 08:52:50 | 000,548,864 | ---- | M] () -- C:\Program Files\Greenshot\Greenshot.exe PRC - [2010-05-25 16:28:58 | 000,263,600 | ---- | M] (Tonec Inc.) -- E:\Internet.Download.Manager.6.03.FULL\Internet.Download.Manager.6.03.FULL\Crack\IEMonitor.exe PRC - [2009-11-03 16:48:54 | 000,874,768 | ---- | M] (Intel(R) Corporation) -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe PRC - [2009-11-03 16:45:52 | 000,348,160 | ---- | M] (Intel(R) Corporation) -- C:\Program Files\Intel\WiFi\bin\WLKEEPER.exe PRC - [2009-11-03 16:45:48 | 001,372,160 | ---- | M] (Intel(R) Corporation) -- C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe PRC - [2009-11-03 16:42:00 | 000,909,312 | ---- | M] (Intel(R) Corporation) -- C:\Program Files\Intel\WiFi\bin\S24EvMon.exe PRC - [2009-11-03 16:35:14 | 001,202,448 | ---- | M] (Intel(R) Corporation) -- C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe PRC - [2009-11-03 16:33:48 | 000,473,360 | ---- | M] (Intel(R) Corporation) -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe PRC - [2008-09-12 19:21:22 | 001,345,376 | ---- | M] (Nullsoft) -- C:\Program Files\Winamp\winamp.exe PRC - [2008-04-14 19:21:28 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Outlook Express\msimn.exe PRC - [2008-04-14 19:21:16 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2007-07-09 09:39:12 | 002,119,104 | ---- | M] (Gadu-Gadu S.A.) -- C:\Program Files\Gadu-Gadu\gg.exe PRC - [2005-09-21 11:24:02 | 000,086,016 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SoundMan.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2011-04-13 20:04:09 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\ŻWIREK\Moje dokumenty\Downloads\Programs\OTL.exe MOD - [2011-02-23 16:04:17 | 000,197,208 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\snxhk.dll MOD - [2011-02-11 15:11:36 | 000,034,208 | ---- | M] (Tonec Inc.) -- E:\Internet.Download.Manager.6.03.FULL\Internet.Download.Manager.6.03.FULL\Crack\idmmkb.dll MOD - [2010-08-23 18:12:53 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll MOD - [2008-04-14 19:20:35 | 000,586,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\mlang.dll MOD - [2006-12-21 14:30:44 | 000,102,400 | ---- | M] (Gadu-Gadu S.A.) -- C:\Program Files\Gadu-Gadu\ggwhook.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Disabled | Stopped] -- -- (HidServ) SRV - File not found [On_Demand | Stopped] -- -- (AppMgmt) SRV - [2011-02-23 16:04:19 | 000,042,184 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus) SRV - [2009-11-03 16:48:54 | 000,874,768 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng) Intel(R) SRV - [2009-11-03 16:45:52 | 000,348,160 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\WLKEEPER.exe -- (WLANKEEPER) Intel(R) SRV - [2009-11-03 16:42:00 | 000,909,312 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\S24EvMon.exe -- (S24EventMonitor) Intel(R) SRV - [2009-11-03 16:33:48 | 000,473,360 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc) Intel(R) SRV - [2006-05-11 18:40:06 | 000,358,008 | ---- | M] (Protection Technology (StarForce)) [Auto | Stopped] -- C:\WINDOWS\System32\sfrem02.exe -- (sfrem02) FrontLine Drivers Auto Removal (v2) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2011-03-28 19:46:40 | 000,098,160 | ---- | M] (Tonec Inc.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\idmtdi.sys -- (IDMTDI) DRV - [2011-02-23 15:56:55 | 000,371,544 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx) DRV - [2011-02-23 15:56:45 | 000,301,528 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP) DRV - [2011-02-23 15:55:49 | 000,049,240 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi) DRV - [2011-02-23 15:55:47 | 000,102,232 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2) DRV - [2011-02-23 15:55:10 | 000,025,432 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr) DRV - [2011-02-23 15:54:57 | 000,030,680 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4) DRV - [2011-02-23 15:54:55 | 000,019,544 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk) DRV - [2010-12-15 00:48:02 | 000,033,824 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\oreans32.sys -- (oreans32) DRV - [2010-11-30 18:07:06 | 000,025,088 | ---- | M] (TeamViewer GmbH) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\teamviewervpn.sys -- (teamviewervpn) DRV - [2010-11-09 15:35:30 | 000,021,992 | ---- | M] (CPUID) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\cpuz135_x32.sys -- (cpuz135) DRV - [2010-07-12 15:49:18 | 000,060,104 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ftdibus.sys -- (FTDIBUS) DRV - [2010-07-12 15:48:56 | 000,073,032 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ftser2k.sys -- (FTSER2K) DRV - [2010-07-09 14:18:54 | 000,020,328 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\cpuz134_x32.sys -- (cpuz134) DRV - [2010-05-02 23:48:51 | 000,691,696 | ---- | M] (Duplex Secure Ltd.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\drivers\sptd.sys -- (sptd) DRV - [2010-03-29 21:51:40 | 000,050,704 | ---- | M] (CACE Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\npf.sys -- (npf) DRV - [2009-12-18 12:58:52 | 000,011,336 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files\SystemRequirementsLab\cpudrv.sys -- (cpudrv) DRV - [2009-11-19 15:33:20 | 000,051,200 | ---- | M] (Prolific Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ser2pl.sys -- (Ser2pl) DRV - [2009-03-25 14:29:52 | 000,130,432 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Rtnicxp.sys -- (RTL8023xp) DRV - [2008-11-23 11:23:06 | 000,097,792 | ---- | M] (T0r0 2008) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\NSHE.SYS -- (NSHE) DRV - [2008-08-13 17:23:56 | 000,011,904 | ---- | M] (Intel Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\s24trans.sys -- (s24trans) DRV - [2008-05-02 10:58:28 | 000,008,064 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt) DRV - [2008-05-02 10:58:14 | 000,020,864 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc) DRV - [2008-05-02 10:58:14 | 000,008,064 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev) DRV - [2008-05-02 10:58:12 | 000,017,536 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd) DRV - [2008-01-07 14:36:16 | 002,216,064 | R--- | M] (Intel® Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\w29n51.sys -- (w29n51) Sterownik karty Intel(R) DRV - [2006-11-22 10:01:48 | 000,693,760 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\hardlock.sys -- (Hardlock) DRV - [2006-11-20 08:48:40 | 000,506,112 | ---- | M] (PixArt Imaging Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\PFC027.SYS -- (PAC207) DRV - [2006-09-11 13:57:56 | 000,067,960 | ---- | M] (Protection Technology (StarForce)) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sfdrv02.sys -- (sfdrv02) FrontLine Environment Driver (v2) DRV - [2006-08-11 18:09:28 | 000,059,776 | ---- | M] (Protection Technology (StarForce)) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sfsync05.sys -- (sfsync05) FrontLine Synchronization Driver (v5) DRV - [2005-09-23 19:56:28 | 003,966,976 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.Sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2005-08-12 12:16:30 | 000,845,356 | ---- | M] (Motorola Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\smserial.sys -- (smserial) DRV - [2004-10-27 16:21:30 | 000,145,920 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Hdaudio.sys -- (HdAudAddService) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1659004503-616249376-725345543-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://gazeta.pl/0,0.html?sc=1 IE - HKU\S-1-5-21-1659004503-616249376-725345543-1005\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1 IE - HKU\S-1-5-21-1659004503-616249376-725345543-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.speedbit.com IE - HKU\S-1-5-21-1659004503-616249376-725345543-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1659004503-616249376-725345543-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = ;192.168.*.* [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "http://www.onet.pl/" FF - prefs.js..extensions.enabledItems: fastdial@telega.phpnet.us:2.23b2 FF - prefs.js..extensions.enabledItems: guiconfig@slosd.net:1.1.2 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.1 FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.1 FF - prefs.js..extensions.enabledItems: mozilla_cc@internetdownloadmanager.com:7.1.3 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22 FF - prefs.js..network.proxy.type: 0 FF - HKLM\software\mozilla\Firefox\extensions\\wrc@avast.com: C:\Program Files\Alwil Software\Avast5\WebRep\FF [2011-04-02 21:56:11 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 4.0\extensions\\Components: C:\Program Files\Mozilla Firefox 4.0 Beta 9\components [2011-03-22 00:10:30 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 4.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox 4.0 Beta 9\plugins [2010-03-28 21:16:14 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\Mozilla\Extensions [2010-12-05 00:37:41 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\Mozilla\Firefox\Profiles\gr7f0qbt.default\extensions [2010-12-05 00:37:41 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\Mozilla\Firefox\Profiles\gr7f0qbt.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2010-12-05 00:37:41 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\Mozilla\Firefox\Profiles\gr7f0qbt.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2010-12-05 00:37:41 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\Mozilla\Firefox\Profiles\gr7f0qbt.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781} [2010-12-05 00:37:40 | 000,000,000 | ---D | M] (Fast Dial) -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\Mozilla\Firefox\Profiles\gr7f0qbt.default\extensions\fastdial@telega.phpnet.us [2010-12-05 00:37:40 | 000,000,000 | ---D | M] (gui:config) -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\Mozilla\Firefox\Profiles\gr7f0qbt.default\extensions\guiconfig@slosd.net [2011-04-12 21:13:22 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\Mozilla\Firefox\Profiles\laptop\extensions [2010-12-09 22:53:42 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\Mozilla\Firefox\Profiles\laptop\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010-12-11 10:25:02 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\Mozilla\Firefox\Profiles\Nowy folder\extensions [2010-12-05 00:40:40 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\Mozilla\Firefox\Profiles\Nowy folder\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2010-12-05 00:40:45 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\Mozilla\Firefox\Profiles\Nowy folder\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2010-12-05 00:40:51 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\Mozilla\Firefox\Profiles\Nowy folder\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781} [2010-12-05 00:40:21 | 000,000,000 | ---D | M] (Fast Dial) -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\Mozilla\Firefox\Profiles\Nowy folder\extensions\fastdial@telega.phpnet.us [2010-12-05 00:40:23 | 000,000,000 | ---D | M] (gui:config) -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\Mozilla\Firefox\Profiles\Nowy folder\extensions\guiconfig@slosd.net File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\ZWIREK\DANE APLIKACJI\IDM\IDMMZCC3 File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\ZWIREK\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\GR7F0QBT.DEFAULT\EXTENSIONS\{B9DB16A4-6EDC-47EC-A1F4-B86292ED211D} File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\ZWIREK\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\GR7F0QBT.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D} File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\ZWIREK\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\GR7F0QBT.DEFAULT\EXTENSIONS\{E4A8A97B-F2ED-450B-B12D-EE082BA24781} File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\ZWIREK\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\GR7F0QBT.DEFAULT\EXTENSIONS\FASTDIAL@TELEGA.PHPNET.US File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\ZWIREK\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\GR7F0QBT.DEFAULT\EXTENSIONS\GUICONFIG@SLOSD.NET [2010-04-07 22:52:48 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF File not found (No name found) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} File not found (No name found) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} O1 HOSTS File: ([2010-10-10 22:55:32 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (IDMIEHlprObj Class) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - E:\Internet.Download.Manager.6.03.FULL\Internet.Download.Manager.6.03.FULL\Crack\IDMIECC.dll (Internet Download Manager, Tonec Inc.) O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll () O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll () O3 - HKU\S-1-5-21-1659004503-616249376-725345543-1005\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found. O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [AlcWzrd] C:\WINDOWS\alcwzrd.exe (RealTek Semicoductor Corp.) O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software) O4 - HKLM..\Run: [IntelWireless] C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Intel(R) Corporation) O4 - HKLM..\Run: [IntelZeroConfig] C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe (Intel(R) Corporation) O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SoundMan.exe (Realtek Semiconductor Corp.) O4 - HKU\S-1-5-21-1659004503-616249376-725345543-1005..\Run: [Gadu-Gadu] C:\Program Files\Gadu-Gadu\gg.exe (Gadu-Gadu S.A.) O4 - HKU\S-1-5-21-1659004503-616249376-725345543-1005..\Run: [IDMan] E:\Internet.Download.Manager.6.03.FULL\Internet.Download.Manager.6.03.FULL\Crack\IDMan.exe (Tonec Inc.) O4 - HKU\.DEFAULT..\RunOnce: [tscuninstall] C:\WINDOWS\system32\tscupgrd.exe (Microsoft Corporation) O4 - HKU\S-1-5-18..\RunOnce: [tscuninstall] C:\WINDOWS\system32\tscupgrd.exe (Microsoft Corporation) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1659004503-616249376-725345543-1005\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-1659004503-616249376-725345543-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-21-1659004503-616249376-725345543-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-21-1659004503-616249376-725345543-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O8 - Extra context menu item: Ściągnij przez IDM - E:\Internet.Download.Manager.6.03.FULL\Internet.Download.Manager.6.03.FULL\Crack\IEExt.htm () O8 - Extra context menu item: Ściągnij wszystkie linki przez IDM - E:\Internet.Download.Manager.6.03.FULL\Internet.Download.Manager.6.03.FULL\Crack\IEGetAll.htm () O8 - Extra context menu item: 使用快车3下载 - C:\Documents and Settings\ŻWIREK\Dane aplikacji\FlashGetBHO\GetUrl.htm () O8 - Extra context menu item: 使用快车3下载全部链接 - C:\Documents and Settings\ŻWIREK\Dane aplikacji\FlashGetBHO\GetAllUrl.htm () O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1296822170802 (WUWebControl Class) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\ŻWIREK\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\ŻWIREK\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2010-03-28 00:13:15 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2011-03-05 12:50:55 | 000,083,016 | ---- | M] () - C:\AutoMapaSetupLog.txt -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011-04-12 22:05:42 | 000,000,000 | -HSD | C] -- C:\Config.Msi [2011-04-12 21:13:10 | 000,081,920 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\ALCFDRTM.EXE [2011-04-11 08:19:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\VideoLAN [2011-04-03 09:58:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ŻWIREK\Menu Start\Programy\Internet Download Manager [2011-04-03 09:58:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Internet Download Manager [2011-04-03 09:58:19 | 000,000,000 | ---D | C] -- C:\Program Files\Internet Download Manager [2011-04-02 21:56:18 | 000,371,544 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSnx.sys [2011-03-25 23:25:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ŻWIREK\Pulpit\VENTO [2011-03-25 23:06:10 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox [2011-03-15 09:32:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\dvdcss [2011-03-15 09:32:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\vlc [2011-03-15 09:30:55 | 000,000,000 | ---D | C] -- C:\Program Files\VideoLAN [2011-03-15 09:30:28 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java [2011-03-15 09:29:45 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe [2011-03-15 09:29:45 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe [2011-03-15 09:29:45 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe [2011-03-15 09:28:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\McAfee [2011-03-14 22:24:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ŻWIREK\Menu Start\Programy\Zoom Player [2011-03-14 22:18:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ŻWIREK\Moje dokumenty\BlazeVideo [2011-03-14 22:18:33 | 001,645,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\gdiplus.dll [19 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011-04-13 20:01:20 | 000,160,566 | ---- | M] () -- C:\Documents and Settings\ŻWIREK\Pulpit\Ksiażki z serii Sam naprawiam - marecki21 - Chomikuj.jpg [2011-04-13 19:29:00 | 000,001,036 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2011-04-13 19:24:10 | 000,078,658 | ---- | M] () -- C:\Documents and Settings\ŻWIREK\Pulpit\www.lisek.jpg [2011-04-13 19:13:27 | 000,000,780 | ---- | M] () -- C:\WINDOWS\win.ini [2011-04-13 17:24:48 | 000,162,223 | ---- | M] () -- C:\Documents and Settings\ŻWIREK\Pulpit\Kalkulator - ubezpieczenie samochodu - Mozilla Firefox_2011-04-13_17-24-17.jpg [2011-04-13 17:19:00 | 000,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 4).job [2011-04-13 16:21:03 | 000,001,032 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2011-04-13 16:20:26 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2011-04-13 16:20:11 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2011-04-13 08:25:24 | 008,912,896 | -H-- | M] () -- C:\Documents and Settings\ŻWIREK\NTUSER.DAT [2011-04-13 08:25:24 | 000,000,188 | -HS- | M] () -- C:\Documents and Settings\ŻWIREK\ntuser.ini [2011-04-12 23:19:00 | 000,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job [2011-04-12 23:19:00 | 000,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 1).job [2011-04-12 22:11:24 | 000,117,360 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2011-04-12 22:09:41 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2011-04-12 22:07:59 | 001,072,092 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2011-04-12 22:07:59 | 000,500,540 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2011-04-12 22:07:59 | 000,441,458 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2011-04-12 22:07:59 | 000,089,036 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2011-04-12 22:07:59 | 000,071,394 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2011-04-12 21:13:10 | 000,081,920 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\ALCFDRTM.VER [2011-04-12 21:13:10 | 000,081,920 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\ALCFDRTM.EXE [2011-04-12 21:09:11 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2011-04-11 08:19:16 | 000,000,719 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\VLC media player.lnk [2011-04-11 08:16:56 | 020,586,196 | ---- | M] () -- C:\Documents and Settings\ŻWIREK\Moje dokumenty\vlc-1.1.8-win32.exe [2011-04-04 18:12:07 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_ccdcmb_01005.Wdf [2011-04-04 11:19:00 | 000,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 3).job [2011-04-02 22:00:24 | 000,002,645 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT [2011-04-01 22:44:23 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2011-04-01 22:30:13 | 000,001,813 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk [2011-03-28 19:46:40 | 000,098,160 | ---- | M] (Tonec Inc.) -- C:\WINDOWS\System32\drivers\idmtdi.sys [2011-03-24 11:17:20 | 000,001,729 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Adobe Reader 9.lnk [2011-03-14 22:18:37 | 000,000,014 | ---- | M] () -- C:\WINDOWS\System32\SysInfo.dll [19 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-04-13 19:52:35 | 000,160,566 | ---- | C] () -- C:\Documents and Settings\ŻWIREK\Pulpit\Ksiażki z serii Sam naprawiam - marecki21 - Chomikuj.jpg [2011-04-13 19:24:10 | 000,078,658 | ---- | C] () -- C:\Documents and Settings\ŻWIREK\Pulpit\www.lisek.jpg [2011-04-13 17:24:48 | 000,162,223 | ---- | C] () -- C:\Documents and Settings\ŻWIREK\Pulpit\Kalkulator - ubezpieczenie samochodu - Mozilla Firefox_2011-04-13_17-24-17.jpg [2011-04-11 08:19:16 | 000,000,719 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\VLC media player.lnk [2011-04-11 08:14:52 | 020,586,196 | ---- | C] () -- C:\Documents and Settings\ŻWIREK\Moje dokumenty\vlc-1.1.8-win32.exe [2011-04-04 18:12:07 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_ccdcmb_01005.Wdf [2011-03-14 22:18:37 | 000,000,014 | ---- | C] () -- C:\WINDOWS\System32\SysInfo.dll [2011-03-14 22:18:33 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll [2011-03-14 22:18:33 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\dllcache\psisdecd.dll [2011-03-14 22:18:33 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\msdvbnp.ax [2011-03-14 22:18:33 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msdvbnp.ax [2011-03-14 22:18:33 | 000,033,280 | ---- | C] () -- C:\WINDOWS\System32\psisrndr.ax [2011-03-14 22:18:33 | 000,033,280 | ---- | C] () -- C:\WINDOWS\System32\dllcache\psisrndr.ax [2011-03-14 22:02:07 | 000,000,792 | ---- | C] () -- C:\Documents and Settings\ŻWIREK\Menu Start\Programy\Windows Media Player.lnk [2011-02-04 18:17:45 | 000,069,632 | ---- | C] () -- C:\WINDOWS\sm56spn.dll [2011-02-04 18:17:45 | 000,069,632 | ---- | C] () -- C:\WINDOWS\sm56itl.dll [2011-02-04 18:17:45 | 000,069,632 | ---- | C] () -- C:\WINDOWS\sm56ger.dll [2011-02-04 18:17:45 | 000,069,632 | ---- | C] () -- C:\WINDOWS\sm56fra.dll [2011-02-04 18:17:45 | 000,069,632 | ---- | C] () -- C:\WINDOWS\sm56eng.dll [2011-02-04 18:17:45 | 000,069,632 | ---- | C] () -- C:\WINDOWS\sm56brz.dll [2011-02-04 18:17:45 | 000,053,248 | ---- | C] () -- C:\WINDOWS\sm56jpn.dll [2011-02-04 18:17:45 | 000,049,152 | ---- | C] () -- C:\WINDOWS\sm56cht.dll [2011-02-04 18:17:45 | 000,049,152 | ---- | C] () -- C:\WINDOWS\sm56chs.dll [2011-02-04 16:49:32 | 000,157,184 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll [2011-02-04 13:57:59 | 000,000,488 | RH-- | C] () -- C:\WINDOWS\System32\logonui.exe.manifest [2011-01-09 13:13:11 | 000,000,140 | ---- | C] () -- C:\WINDOWS\parport.ini [2010-12-16 23:24:10 | 000,000,590 | ---- | C] () -- C:\WINDOWS\ECUEMU.ini [2010-12-15 00:48:02 | 000,033,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\oreans32.sys [2010-12-08 01:15:10 | 000,000,248 | ---- | C] () -- C:\WINDOWS\System32\secustat.dat [2010-12-08 00:27:19 | 000,000,598 | ---- | C] () -- C:\WINDOWS\System32\secushr.dat [2010-12-08 00:23:29 | 000,000,025 | ---- | C] () -- C:\WINDOWS\libem.INI [2010-12-06 10:10:44 | 000,089,088 | ---- | C] () -- C:\WINDOWS\mbr.exe [2010-11-13 18:31:11 | 000,000,052 | ---- | C] () -- C:\WINDOWS\ETKINST.INI [2010-11-11 14:28:01 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2010-10-23 22:50:28 | 000,000,009 | ---- | C] () -- C:\WINDOWS\wiatraczki.ini [2010-08-04 08:56:43 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\hlduinst.exe [2010-08-04 08:56:42 | 000,153,088 | ---- | C] () -- C:\WINDOWS\System32\UNWISE.EXE [2010-05-15 23:03:13 | 000,494,557 | ---- | C] () -- C:\WINDOWS\System32\dxgi.dll [2010-05-15 23:03:13 | 000,025,037 | ---- | C] () -- C:\WINDOWS\System32\Nucleus.dll [2010-05-15 23:03:12 | 000,519,912 | ---- | C] () -- C:\WINDOWS\System32\d3dx10d_33.dll [2010-05-15 23:03:12 | 000,519,912 | ---- | C] () -- C:\WINDOWS\System32\d3dx10d.dll [2010-05-15 23:03:11 | 000,566,624 | ---- | C] () -- C:\WINDOWS\System32\d3d10.dll [2010-05-08 19:21:38 | 000,000,048 | ---- | C] () -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\ItDb.enc [2010-04-18 10:17:57 | 000,029,574 | ---- | C] () -- C:\WINDOWS\SETUP1.EXE [2010-04-16 23:44:51 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\msds.dat [2010-04-16 19:16:57 | 000,188,416 | R--- | C] () -- C:\WINDOWS\System32\ftdiunin.exe [2010-04-12 00:32:44 | 000,016,992 | ---- | C] () -- C:\Documents and Settings\ŻWIREK\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT [2010-04-12 00:21:21 | 000,130,048 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2010-04-11 23:59:07 | 000,881,664 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2010-04-11 23:59:06 | 000,258,048 | ---- | C] () -- C:\WINDOWS\System32\libFLAC.dll [2010-04-11 00:04:11 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat [2010-04-02 20:14:30 | 000,207,360 | ---- | C] () -- C:\WINDOWS\System32\evrprop.dll [2010-04-02 20:13:30 | 000,079,360 | ---- | C] () -- C:\WINDOWS\System32\mkzlib.dll [2010-04-02 20:13:29 | 000,023,552 | ---- | C] () -- C:\WINDOWS\System32\mkunicode.dll [2010-03-29 21:51:40 | 000,053,299 | ---- | C] () -- C:\WINDOWS\System32\pthreadVC.dll [2010-03-28 22:57:02 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2010-03-28 22:24:42 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe [2010-03-28 21:51:30 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\RtNicProp32.dll [2010-03-28 21:48:48 | 000,204,800 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4764.dll [2010-03-28 21:16:00 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat [2010-03-28 20:39:30 | 000,000,131 | ---- | C] () -- C:\Documents and Settings\ŻWIREK\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [2010-03-28 18:49:13 | 000,029,184 | ---- | C] () -- C:\Documents and Settings\ŻWIREK\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-03-28 01:02:28 | 001,072,092 | ---- | C] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2010-03-28 01:02:27 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2010-03-28 01:01:10 | 000,117,360 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010-03-28 00:37:12 | 001,579,514 | -H-- | C] () -- C:\Documents and Settings\ŻWIREK\Ustawienia lokalne\Dane aplikacji\IconCache.db [2010-03-28 00:18:52 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2010-03-28 00:16:44 | 000,000,996 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI [2010-03-28 00:13:15 | 000,000,000 | ---- | C] () -- C:\WINDOWS\control.ini [2010-03-28 00:11:59 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\cdplayer.exe.manifest [2010-03-28 00:10:21 | 000,023,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2010-03-28 00:10:05 | 000,000,037 | ---- | C] () -- C:\WINDOWS\vbaddin.ini [2010-03-28 00:10:05 | 000,000,036 | ---- | C] () -- C:\WINDOWS\vb.ini [2010-03-28 00:08:59 | 000,026,717 | ---- | C] () -- C:\WINDOWS\System32\tslabels.ini [2010-03-28 00:08:58 | 000,003,813 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.ini [2006-11-02 09:27:46 | 000,000,518 | ---- | C] () -- C:\WINDOWS\System32\SP207.ini [2004-08-04 14:00:00 | 001,015,477 | ---- | C] () -- C:\WINDOWS\System32\esentprf.ini [2004-08-04 14:00:00 | 000,733,696 | ---- | C] () -- C:\WINDOWS\System32\qedwipes.dll [2004-08-04 14:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat [2004-08-04 14:00:00 | 000,500,540 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat [2004-08-04 14:00:00 | 000,441,458 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat [2004-08-04 14:00:00 | 000,355,112 | ---- | C] () -- C:\WINDOWS\System32\msjetoledb40.dll [2004-08-04 14:00:00 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat [2004-08-04 14:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat [2004-08-04 14:00:00 | 000,270,848 | ---- | C] () -- C:\WINDOWS\System32\sbe.dll [2004-08-04 14:00:00 | 000,253,440 | ---- | C] () -- C:\WINDOWS\System32\compatui.dll [2004-08-04 14:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat [2004-08-04 14:00:00 | 000,199,168 | ---- | C] () -- C:\WINDOWS\System32\ir32_32.dll [2004-08-04 14:00:00 | 000,186,880 | ---- | C] () -- C:\WINDOWS\System32\encdec.dll [2004-08-04 14:00:00 | 000,094,282 | ---- | C] () -- C:\WINDOWS\System32\msencode.dll [2004-08-04 14:00:00 | 000,089,036 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat [2004-08-04 14:00:00 | 000,071,394 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat [2004-08-04 14:00:00 | 000,070,656 | ---- | C] () -- C:\WINDOWS\System32\amstream.dll [2004-08-04 14:00:00 | 000,070,622 | ---- | C] () -- C:\WINDOWS\System32\edit.com [2004-08-04 14:00:00 | 000,053,920 | ---- | C] () -- C:\WINDOWS\System32\dosx.exe [2004-08-04 14:00:00 | 000,053,478 | ---- | C] () -- C:\WINDOWS\System32\tcpmon.ini [2004-08-04 14:00:00 | 000,051,823 | ---- | C] () -- C:\WINDOWS\System32\command.com [2004-08-04 14:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin [2004-08-04 14:00:00 | 000,042,809 | ---- | C] () -- C:\WINDOWS\System32\key01.sys [2004-08-04 14:00:00 | 000,042,537 | ---- | C] () -- C:\WINDOWS\System32\keyboard.sys [2004-08-04 14:00:00 | 000,039,434 | ---- | C] () -- C:\WINDOWS\System32\mem.exe [2004-08-04 14:00:00 | 000,035,648 | ---- | C] () -- C:\WINDOWS\System32\ntio411.sys [2004-08-04 14:00:00 | 000,035,424 | ---- | C] () -- C:\WINDOWS\System32\ntio412.sys [2004-08-04 14:00:00 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat [2004-08-04 14:00:00 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\ntio804.sys [2004-08-04 14:00:00 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\ntio404.sys [2004-08-04 14:00:00 | 000,033,936 | ---- | C] () -- C:\WINDOWS\System32\ntio.sys [2004-08-04 14:00:00 | 000,029,370 | ---- | C] () -- C:\WINDOWS\System32\ntdos411.sys [2004-08-04 14:00:00 | 000,029,274 | ---- | C] () -- C:\WINDOWS\System32\ntdos412.sys [2004-08-04 14:00:00 | 000,029,146 | ---- | C] () -- C:\WINDOWS\System32\ntdos804.sys [2004-08-04 14:00:00 | 000,029,146 | ---- | C] () -- C:\WINDOWS\System32\ntdos404.sys [2004-08-04 14:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat [2004-08-04 14:00:00 | 000,027,898 | ---- | C] () -- C:\WINDOWS\System32\ntdos.sys [2004-08-04 14:00:00 | 000,027,097 | ---- | C] () -- C:\WINDOWS\System32\country.sys [2004-08-04 14:00:00 | 000,020,986 | ---- | C] () -- C:\WINDOWS\System32\debug.exe [2004-08-04 14:00:00 | 000,019,806 | ---- | C] () -- C:\WINDOWS\System32\graphics.com [2004-08-04 14:00:00 | 000,016,024 | ---- | C] () -- C:\WINDOWS\System32\rsvp.ini [2004-08-04 14:00:00 | 000,015,360 | ---- | C] () -- C:\WINDOWS\System32\tsd32.dll [2004-08-04 14:00:00 | 000,014,913 | ---- | C] () -- C:\WINDOWS\System32\kb16.com [2004-08-04 14:00:00 | 000,014,336 | ---- | C] () -- C:\WINDOWS\System32\msdmo.dll [2004-08-04 14:00:00 | 000,013,819 | ---- | C] () -- C:\WINDOWS\System32\pschdprf.ini [2004-08-04 14:00:00 | 000,013,312 | ---- | C] () -- C:\WINDOWS\System32\win87em.dll [2004-08-04 14:00:00 | 000,012,866 | ---- | C] () -- C:\WINDOWS\System32\edlin.exe [2004-08-04 14:00:00 | 000,012,594 | ---- | C] () -- C:\WINDOWS\System32\append.exe [2004-08-04 14:00:00 | 000,011,859 | ---- | C] () -- C:\WINDOWS\System32\setver.exe [2004-08-04 14:00:00 | 000,009,043 | ---- | C] () -- C:\WINDOWS\System32\ansi.sys [2004-08-04 14:00:00 | 000,008,520 | ---- | C] () -- C:\WINDOWS\System32\exe2bin.exe [2004-08-04 14:00:00 | 000,007,116 | ---- | C] () -- C:\WINDOWS\System32\nlsfunc.exe [2004-08-04 14:00:00 | 000,006,074 | ---- | C] () -- C:\WINDOWS\System32\rasctrs.ini [2004-08-04 14:00:00 | 000,004,976 | ---- | C] () -- C:\WINDOWS\System32\himem.sys [2004-08-04 14:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat [2004-08-04 14:00:00 | 000,003,346 | ---- | C] () -- C:\WINDOWS\System32\redir.exe [2004-08-04 14:00:00 | 000,002,992 | ---- | C] () -- C:\WINDOWS\System32\perfci.ini [2004-08-04 14:00:00 | 000,002,890 | ---- | C] () -- C:\WINDOWS\System32\perfwci.ini [2004-08-04 14:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin [2004-08-04 14:00:00 | 000,001,405 | ---- | C] () -- C:\WINDOWS\msdfmap.ini [2004-08-04 14:00:00 | 000,001,295 | ---- | C] () -- C:\WINDOWS\System32\perffilt.ini [2004-08-04 14:00:00 | 000,001,168 | ---- | C] () -- C:\WINDOWS\System32\loadfix.com [2004-08-04 14:00:00 | 000,000,882 | ---- | C] () -- C:\WINDOWS\System32\share.exe [2004-08-04 14:00:00 | 000,000,882 | ---- | C] () -- C:\WINDOWS\System32\fastopen.exe [2004-08-04 14:00:00 | 000,000,817 | ---- | C] () -- C:\WINDOWS\System32\mscdexnt.exe [2004-08-04 14:00:00 | 000,000,780 | ---- | C] () -- C:\WINDOWS\win.ini [2004-08-04 14:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat [2004-08-04 14:00:00 | 000,000,359 | ---- | C] () -- C:\WINDOWS\System32\prodspec.ini [2004-08-04 14:00:00 | 000,000,227 | ---- | C] () -- C:\WINDOWS\system.ini [2003-07-30 11:48:28 | 000,004,711 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat [2003-07-30 10:49:22 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin [2001-10-26 19:29:54 | 000,057,856 | ---- | C] () -- C:\WINDOWS\System32\dvdplay.exe [2001-10-26 19:29:42 | 000,157,696 | ---- | C] () -- C:\WINDOWS\System32\paqsp.dll [1996-04-03 21:33:26 | 000,005,248 | ---- | C] () -- C:\WINDOWS\System32\giveio.sys [color=#E56717]========== LOP Check ==========[/color] [2010-03-28 01:25:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Alwil Software [2011-01-16 00:32:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\BVRP Software [2010-05-02 23:45:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite [2010-10-17 23:38:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PassMark [2010-11-24 13:36:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\regid.1986-12.com.adobe [2011-01-16 00:14:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SpeedBit [2011-02-09 17:31:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP [2010-12-06 09:34:19 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6} [2010-03-29 17:21:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ANIA\Dane aplikacji\Gadu-Gadu [2010-12-07 20:01:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ANIA\Dane aplikacji\Orbit [2010-12-07 16:57:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ANIA\Dane aplikacji\ProgSense [2010-12-20 23:26:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\Ace [2010-12-31 10:12:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\ArcaBit [2010-12-31 09:07:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\ArcaVirMicroScan [2010-04-10 23:41:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\AutoUpdate [2010-03-28 23:14:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\BESTplayer [2010-12-10 00:21:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\BITS [2010-12-11 14:20:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\Capcom [2010-09-02 11:29:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 [2010-05-03 00:08:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\DAEMON Tools Lite [2011-04-13 08:25:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\DMCache [2010-12-08 00:23:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\FlashGet [2010-12-08 00:23:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\FlashGetBHO [2010-03-29 17:26:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\Gadu-Gadu [2010-12-05 12:53:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\Greenshot [2010-11-22 23:25:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\HateML2 [2011-01-27 21:47:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\HEXelon [2011-04-04 18:31:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\IDM [2011-02-10 10:17:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\Kamerzysta [2010-12-19 23:17:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\Opera [2010-12-07 20:16:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\Orbit [2010-12-06 23:20:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\ProgSense [2010-11-24 16:21:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\SWiSH Max4 [2011-01-10 19:45:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\TeamViewer [2010-04-12 00:30:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ŻWIREK\Dane aplikacji\URSoft [2011-04-12 23:19:00 | 000,000,472 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Daily 1).job [2010-12-06 08:53:04 | 000,000,472 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Daily 2).job [2011-04-04 11:19:00 | 000,000,472 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Daily 3).job [2011-04-13 17:19:00 | 000,000,472 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Daily 4).job [2011-04-12 23:19:00 | 000,000,472 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job [2011-01-16 22:17:11 | 000,000,108 | ---- | M] () -- C:\WINDOWS\Tasks\Low Battery Alarm Program.job [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 164 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:1CE11B51 @Alternate Data Stream - 114 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:2B11E0DF @Alternate Data Stream - 100 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:0E08FC17 < End of report >