OTL logfile created on: 2011-06-30 17:48:20 - Run 2
OTL by OldTimer - Version 3.2.10.0     Folder = C:\Documents and Settings\xp\Moje dokumenty\Różne\vir
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
1 015,00 Mb Total Physical Memory | 392,00 Mb Available Physical Memory | 39,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 76,00% Paging File free
Paging file location(s): E:\pagefile.sys 1522 1522 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 37,11 Gb Total Space | 0,07 Gb Free Space | 0,19% Space Free | Partition Type: NTFS
Drive D: | 97,65 Gb Total Space | 1,71 Gb Free Space | 1,75% Space Free | Partition Type: NTFS
Drive E: | 98,11 Gb Total Space | 1,16 Gb Free Space | 1,18% Space Free | Partition Type: NTFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
 
Computer Name: 518EB048DCDF4AD
Current User Name: xp
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2011-06-01 12:54:42 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\xp\Moje dokumenty\Różne\vir\OTL.com
PRC - [2011-03-22 20:37:06 | 000,074,752 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\Winamp\winampa.exe
PRC - [2011-03-14 16:24:01 | 002,071,904 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgtray.exe
PRC - [2010-11-25 12:55:10 | 000,725,344 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgcsrvx.exe
PRC - [2010-09-23 16:01:20 | 000,621,920 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgnsx.exe
PRC - [2010-09-13 20:02:44 | 000,399,872 | ---- | M] (Windows (R) Codename Longhorn DDK provider) -- C:\Program Files\UPHClean\uphclean.exe
PRC - [2010-07-17 08:04:40 | 000,515,424 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgrsx.exe
PRC - [2010-07-17 08:04:33 | 000,308,136 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgwdsvc.exe
PRC - [2010-07-17 08:03:38 | 001,101,152 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgchsvx.exe
PRC - [2010-02-04 19:18:38 | 000,198,160 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe
PRC - [2009-07-08 16:01:37 | 002,173,440 | ---- | M] (Crawler.com) -- C:\Program Files\Spyware Terminator\SpywareTerminatorShield.Exe
PRC - [2009-06-19 16:51:11 | 003,055,616 | ---- | M] (Crawler.com) -- C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
PRC - [2009-06-19 16:51:11 | 000,487,424 | ---- | M] (Crawler.com) -- C:\Program Files\Spyware Terminator\sp_rsser.exe
PRC - [2008-09-24 14:32:48 | 000,935,208 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
PRC - [2008-04-14 22:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007-05-28 18:57:54 | 000,275,968 | ---- | M] (Rocket Division Software) -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
PRC - [2003-09-25 14:11:44 | 000,380,928 | ---- | M] (Ralink Technology, Corp.) -- C:\WINDOWS\system32\RaConfig.exe
PRC - [2002-03-28 11:20:49 | 000,188,416 | ---- | M] (HP) -- C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - [2011-06-01 12:54:42 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\xp\Moje dokumenty\Różne\vir\OTL.com
MOD - [2008-04-14 22:46:34 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [Disabled | Stopped] -- C:\WINDOWS\System32\hidserv.dll -- (HidServ)
SRV - [2011-03-18 08:11:02 | 000,947,528 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\AVG\AVG9\Toolbar\ToolbarBroker.exe -- (AVG Security Toolbar Service)
SRV - [2010-10-26 17:05:24 | 000,155,344 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe -- (Sony Ericsson PCCompanion)
SRV - [2010-09-13 20:02:44 | 000,399,872 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Auto | Running] -- C:\Program Files\UPHClean\uphclean.exe -- (UPHClean)
SRV - [2010-07-17 08:04:33 | 000,308,136 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG9\avgwdsvc.exe -- (avg9wd)
SRV - [2009-06-19 16:51:11 | 000,487,424 | ---- | M] (Crawler.com) [Auto | Running] -- C:\Program Files\Spyware Terminator\sp_rsser.exe -- (sp_rssrv)
SRV - [2008-09-24 14:32:48 | 000,935,208 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0)
SRV - [2007-05-28 18:57:54 | 000,275,968 | ---- | M] (Rocket Division Software) [Auto | Running] -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2011-05-25 01:40:10 | 000,032,768 | ---- | M] (AnchorFree Inc) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\taphss.sys -- (taphss)
DRV - [2011-05-05 16:58:52 | 000,243,152 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\avgtdix.sys -- (AvgTdiX)
DRV - [2011-03-06 17:37:13 | 000,027,632 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\seehcri.sys -- (seehcri)
DRV - [2011-03-04 22:07:38 | 000,025,512 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ggsemc.sys -- (ggsemc)
DRV - [2011-03-04 22:07:38 | 000,013,224 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ggflt.sys -- (ggflt)
DRV - [2010-07-17 08:03:41 | 000,216,400 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\avgldx86.sys -- (AvgLdx86)
DRV - [2010-06-02 20:05:06 | 000,029,584 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\WINDOWS\System32\Drivers\avgmfx86.sys -- (AvgMfx86)
DRV - [2009-08-17 15:20:54 | 000,717,296 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2009-06-19 16:51:11 | 000,142,592 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\sp_rsdrv2.sys -- (sp_rsdrv2)
DRV - [2009-02-26 00:58:57 | 003,565,568 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2007-10-17 20:22:17 | 000,265,856 | ---- | M] (Marvell) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\yk51x86.sys -- (yukonwxp)
DRV - [2007-10-17 20:20:59 | 004,617,728 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2007-10-16 01:19:55 | 000,138,752 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2007-09-25 16:59:46 | 000,015,152 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files\MediaCoder\SysInfo.sys -- (CrystalSysInfo)
DRV - [2006-08-01 11:51:14 | 000,072,160 | ---- | M] (PACE Anti-Piracy, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\TPkd.sys -- (TPkd)
DRV - [2003-10-08 13:14:38 | 000,051,712 | ---- | M] (Ralink Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RT2400.sys -- (RT2400)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
 
 
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
 
IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
 
IE - HKU\S-1-5-21-1409082233-1715567821-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = 
IE - HKU\S-1-5-21-1409082233-1715567821-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.hotspotshield.com/g/?c=h
IE - HKU\S-1-5-21-1409082233-1715567821-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1409082233-1715567821-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = local
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultenginename: "Hotspot Shield Private Search"
FF - prefs.js..browser.search.selectedEngine: "Hotspot Shield Private Search"
FF - prefs.js..browser.search.suggest.enabled: false
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "about:home"
FF - prefs.js..keyword.URL: "http://google.pl"
FF - prefs.js..network.proxy.type: 0
 
FF - HKLM\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files\AVG\AVG9\Firefox [2010-11-25 12:56:08 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\avg@igeared: C:\Program Files\AVG\AVG9\Toolbar\Firefox\avg@igeared [2011-06-14 15:37:28 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 5.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-06-22 23:56:24 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 5.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-06-11 11:36:22 | 000,000,000 | ---D | M]
 
[2011-04-29 11:24:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Extensions
[2010-08-27 15:58:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Extensions\MediaCoder
[2010-08-27 16:04:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Extensions\MediaCoder-Setup-Wizard
[2011-06-22 23:56:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\bcgy9kmy.default\extensions
[2011-04-30 08:51:08 | 000,000,000 | ---D | M] (Flashblock) -- C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\bcgy9kmy.default\extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a}
[2011-06-22 07:35:32 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\bcgy9kmy.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2011-03-20 19:41:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\wbo8a4s0.Domyślny użytkownik\extensions
[2011-03-20 19:41:46 | 000,000,000 | ---D | M] (DVDVideoSoftTB Toolbar) -- C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\wbo8a4s0.Domyślny użytkownik\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
[2011-03-04 16:27:23 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\wbo8a4s0.Domyślny użytkownik\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2010-01-15 07:28:22 | 000,000,000 | ---D | M] (BitComet Video Downloader) -- C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\wbo8a4s0.Domyślny użytkownik\extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}
[2011-03-20 19:41:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\z6x2d474.Domyślny użytkownik\extensions
[2011-03-20 19:41:47 | 000,000,000 | ---D | M] (DVDVideoSoftTB Toolbar) -- C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\z6x2d474.Domyślny użytkownik\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
[2011-03-04 16:27:23 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\xp\Dane aplikacji\Mozilla\Firefox\Profiles\z6x2d474.Domyślny użytkownik\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2011-06-30 17:41:06 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2011-05-30 20:25:32 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}
[2011-06-13 11:26:17 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
[2011-06-22 23:56:22 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\browsercomps.dll
[2011-05-04 04:52:23 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2011-05-02 18:05:32 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml
[2011-05-02 18:05:32 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml
[2011-05-02 18:05:32 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml
[2011-05-02 18:05:32 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml
[2011-05-02 18:05:32 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml
[2011-05-02 18:05:32 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2011-05-29 19:01:04 | 000,000,746 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll File not found
O2 - BHO: (IeCatch5 Class) - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\Jccatch.dll (FlashGet)
O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.7.16.dll (BitComet)
O2 - BHO: (VMLoadHBO Class) - {C17C7688-31D1-46D7-8C9B-5D253E4F5D5E} - C:\Documents and Settings\xp\Dane aplikacji\VMLoad\addin\VMLoad.dll (TODO: <Company name>)
O2 - BHO: (gFlash Class) - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll ()
O3 - HKLM\..\Toolbar: (FlashGet Bar) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\Program Files\FlashGet\fgiebar.dll (Amaze Soft)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\ALCMTR.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [ATICustomerCare] C:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [AVG9_TRAY] C:\Program Files\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe (HP)
O4 - HKLM..\Run: [SpywareTerminator] C:\Program Files\Spyware Terminator\SpywareTerminatorShield.Exe (Crawler.com)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe (Nullsoft, Inc.)
O4 - HKU\S-1-5-21-1409082233-1715567821-839522115-1003..\Run: [SpywareTerminatorUpdate] C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe (Crawler.com)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\RaConfig.lnk = C:\WINDOWS\system32\RaConfig.exe (Ralink Technology, Corp.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoInternetOpenWith = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableStatusMessages = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: VerboseStatus = 0
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = FF 00 00 00  [binary data]
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyPictures = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = FF 00 00 00  [binary data]
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyPictures = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyPictures = 1
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyPictures = 1
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1
O7 - HKU\S-1-5-21-1409082233-1715567821-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O7 - HKU\S-1-5-21-1409082233-1715567821-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyPictures = 1
O7 - HKU\S-1-5-21-1409082233-1715567821-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1
O7 - HKU\S-1-5-21-1409082233-1715567821-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKU\S-1-5-21-1409082233-1715567821-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 0
O7 - HKU\S-1-5-21-1409082233-1715567821-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
O7 - HKU\S-1-5-21-1409082233-1715567821-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewContextMenu = 0
O7 - HKU\S-1-5-21-1409082233-1715567821-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSaveSettings = 0
O7 - HKU\S-1-5-21-1409082233-1715567821-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispCPL = 0
O7 - HKU\S-1-5-21-1409082233-1715567821-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispBackgroundPage = 0
O7 - HKU\S-1-5-21-1409082233-1715567821-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispScrSavPage = 0
O7 - HKU\S-1-5-21-1409082233-1715567821-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispAppearancePage = 0
O7 - HKU\S-1-5-21-1409082233-1715567821-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispSettingsPage = 0
O8 - Extra context menu item: Pobierz wszystkie VIdeo za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O8 - Extra context menu item: Pobierz wszystko za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O8 - Extra context menu item: Pobierz za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O8 - Extra context menu item: Ściągnij przy pomocy FlashGet'a - C:\Program Files\FlashGet\jc_link.htm ()
O8 - Extra context menu item: Ściągnij wszystko przy pomocy FlashGet'a - C:\Program Files\FlashGet\jc_all.htm ()
O8 - Extra context menu item: 使用快车3下载 - C:\Documents and Settings\xp\Dane aplikacji\FlashGetBHO\GetUrl.htm ()
O8 - Extra context menu item: 使用快车3下载全部链接 - C:\Documents and Settings\xp\Dane aplikacji\FlashGetBHO\GetAllUrl.htm ()
O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.7.16.dll (BitComet)
O9 - Extra Button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\flashget.exe (FlashGet.com)
O9 - Extra 'Tools' menuitem : &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\flashget.exe (FlashGet.com)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O18 - Protocol\Handler\avgsecuritytoolbar {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - Reg Error: Key error. File not found
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
O24 - Desktop Components:0 (Bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-06-19 14:00:46 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2009-05-10 07:33:28 | 000,000,000 | ---D | M] - D:\Auto -- [ NTFS ]
O32 - AutoRun File - [2008-12-06 10:35:01 | 000,078,160 | ---- | M] (Microsoft Corporation) - D:\AutoFix.exe -- [ NTFS ]
O32 - AutoRun File - [2009-01-13 09:09:11 | 003,166,886 | ---- | M] () - D:\AUTOSTOP.WMA -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011-06-30 15:43:34 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\xp\Recent
[2011-06-30 15:38:36 | 000,000,000 | ---D | C] -- C:\Program Files\UPHClean
[2011-06-25 20:46:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\xp\Pulpit\avinaptic2-20110618
[2011-06-24 08:23:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\xp\Pulpit\Web.Stream.Recorder.2010.3.0.0
[2011-06-22 14:40:04 | 000,000,000 | ---D | C] -- C:\Program Files\AviSynth 2.5
[2011-06-13 11:26:47 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2011-06-13 11:26:16 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2011-06-13 11:26:16 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2011-06-13 11:26:15 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2011-06-11 11:35:33 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
[2011-06-07 15:00:40 | 000,000,000 | ---D | C] -- C:\Hotspot Shield
[2011-06-07 14:46:24 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\xp\PrivacIE
[2011-06-04 19:00:18 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\calc.exe
[2011-06-04 19:00:18 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\calc.exe
[2011-06-04 09:14:20 | 000,000,000 | ---D | C] -- C:\yre
[2011-06-01 13:19:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\ie8updates
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2011-06-30 17:41:15 | 000,000,698 | ---- | M] () -- C:\WINDOWS\System32\BIN_STRSBW.SPT
[2011-06-30 17:28:07 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2011-06-30 17:28:04 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011-06-30 15:43:47 | 009,175,040 | -H-- | M] () -- C:\Documents and Settings\xp\NTUSER.DAT
[2011-06-30 15:43:47 | 000,000,292 | -HS- | M] () -- C:\Documents and Settings\xp\ntuser.ini
[2011-06-30 13:50:18 | 000,011,293 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\ace_ventura_pet_detective.mid
[2011-06-30 09:08:28 | 000,045,056 | ---- | M] () -- C:\Documents and Settings\xp\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-06-29 11:03:15 | 078,826,041 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm
[2011-06-28 14:05:51 | 000,190,589 | ---- | M] () -- C:\Documents and Settings\xp\Moje dokumenty\człiriri.mp3
[2011-06-26 15:45:41 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\UMDF\Msft_User_WpdMtpDr_01_00_00.Wdf
[2011-06-25 21:05:27 | 002,013,840 | ---- | M] () -- C:\Documents and Settings\xp\Moje dokumenty\piczers.zip
[2011-06-25 20:48:18 | 000,000,866 | ---- | M] () -- C:\Documents and Settings\xp\.recently-used.xbel
[2011-06-24 08:23:20 | 000,000,985 | ---- | M] () -- C:\Documents and Settings\xp\Pulpit\Web Stream Recorder 2010.lnk
[2011-06-21 09:21:55 | 001,890,044 | ---- | M] () -- C:\Documents and Settings\xp\Moje dokumenty\tg.wav
[2011-06-18 12:32:36 | 000,003,493 | ---- | M] () -- C:\Documents and Settings\xp\jolka26.teryerejwetwertwt
[2011-06-15 10:41:14 | 000,000,815 | ---- | M] () -- C:\Documents and Settings\xp\rozwsciyeryereczona_mrowka
[2011-06-11 11:36:22 | 000,001,729 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Adobe Reader 8.lnk
[2011-06-07 14:51:13 | 000,000,600 | ---- | M] () -- C:\Documents and Settings\xp\PUTTY.RND
[2011-06-06 13:56:09 | 000,007,097 | ---- | M] () -- C:\Documents and Settings\xp\VIPy_eryeryNowySącz
[2011-06-06 13:42:59 | 000,009,620 | ---- | M] () -- C:\Documents and Settings\xp\Nowyweryeryr_Sącz
[2011-06-06 13:39:26 | 000,004,763 | ---- | M] () -- C:\Documents and Settings\xp\VIPy_NeueryrowySącz
[2011-06-06 12:58:05 | 000,002,059 | ---- | M] () -- C:\Documents and Settings\xp\Nowy_Sączfb
[2011-06-06 12:50:06 | 000,000,475 | ---- | M] () -- C:\Documents and Settings\xp\Nowy_ruytSącz
[2011-06-05 13:23:38 | 000,396,607 | ---- | M] () -- C:\Documents and Settings\xp\Moje dokumenty\miami-vice-don-johnson-as-sonny-crockett--3.jpg
[2011-06-05 13:21:36 | 000,073,362 | ---- | M] () -- C:\Documents and Settings\xp\Moje dokumenty\don-johnson-as-sonny-crockett-in-miami-vice--3.jpg
[2011-06-05 13:21:14 | 000,029,639 | ---- | M] () -- C:\Documents and Settings\xp\Moje dokumenty\Don-Johnson.jpg
[2011-06-05 13:16:57 | 000,008,298 | ---- | M] () -- C:\Documents and Settings\xp\Moje dokumenty\Moja ulubiona kompozycja.theme
[2011-06-05 13:12:57 | 000,012,283 | ---- | M] () -- C:\Documents and Settings\xp\Moje dokumenty\sonny-crockett_l.jpg
[2011-06-04 08:59:20 | 000,039,653 | ---- | M] () -- C:\Documents and Settings\xp\Moje dokumenty\croc.JPG
[2011-06-04 08:57:57 | 000,054,988 | ---- | M] () -- C:\Documents and Settings\xp\Moje dokumenty\113009MSMO057.jpg
[2011-06-03 20:33:13 | 000,008,021 | ---- | M] () -- C:\Documents and Settings\xp\Moje dokumenty\VIPy_NowySącztwwe
[2011-06-03 19:55:55 | 000,002,568 | ---- | M] () -- C:\Documents and Settings\xp\Moje dokumenty\VIPy_NowySwetywqeącz
[2011-06-03 15:57:56 | 000,026,091 | ---- | M] () -- C:\Documents and Settings\xp\Moje dokumenty\Królestwo_Nowy_Sącza
[2011-06-03 15:25:06 | 000,014,811 | ---- | M] () -- C:\Documents and Settings\xp\Moje dokumenty\Królestwo_Nowy_Sączandek
[2011-06-01 12:52:33 | 000,069,504 | ---- | M] () -- C:\Documents and Settings\xp\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011-06-30 17:46:23 | 000,000,210 | ---- | C] () -- C:\Documents and Settings\xp\ytiuyt.txt
[2011-06-30 13:50:52 | 000,027,215 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\ghostbusters.mid
[2011-06-30 13:50:16 | 000,011,293 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\ace_ventura_pet_detective.mid
[2011-06-29 22:39:54 | 000,015,235 | ---- | C] () -- C:\Documents and Settings\xp\Norturturwy_Sącz.txt
[2011-06-29 22:39:45 | 000,011,212 | ---- | C] () -- C:\Documents and Settings\xp\VIPyreyer_NowySącz.txt
[2011-06-29 22:35:22 | 000,010,882 | ---- | C] () -- C:\Documents and Settings\xp\VIPyeryer_NowySącz.txt
[2011-06-29 21:50:24 | 000,001,858 | ---- | C] () -- C:\Documents and Settings\xp\Nowy_Sąeryercz.txt
[2011-06-29 19:37:31 | 000,002,251 | ---- | C] () -- C:\Documents and Settings\xp\Veryrey23.txt
[2011-06-29 19:36:53 | 000,014,786 | ---- | C] () -- C:\Documents and Settings\xp\Kim_Keryeryolwiek__.txt
[2011-06-29 13:45:30 | 000,051,777 | ---- | C] () -- C:\Documents and Settings\xp\Towarzysrturtuki.txt
[2011-06-29 13:18:20 | 000,000,969 | ---- | C] () -- C:\Documents and Settings\xp\Nowy_ititySącz.txt
[2011-06-29 13:15:58 | 000,000,556 | ---- | C] () -- C:\Documents and Settings\xp\NowyreyerySącz.txt
[2011-06-29 12:59:57 | 000,016,268 | ---- | C] () -- C:\Documents and Settings\xp\Nowreyery_Sącz.txt
[2011-06-28 14:59:47 | 000,013,672 | ---- | C] () -- C:\Documents and Settings\xp\Nowreyereyy_Sącz.txt
[2011-06-28 14:33:12 | 000,001,883 | ---- | C] () -- C:\Documents and Settings\xp\Ona2eryeryNS.txt
[2011-06-28 14:05:09 | 000,190,589 | ---- | C] () -- C:\Documents and Settings\xp\Moje dokumenty\człiriri.mp3
[2011-06-28 11:29:58 | 000,007,252 | ---- | C] () -- C:\Documents and Settings\xp\Nowrturury_Sącz.txt
[2011-06-28 11:28:01 | 000,006,976 | ---- | C] () -- C:\Documents and Settings\xp\Nowttitity_Sącz.txt
[2011-06-28 11:10:01 | 000,003,316 | ---- | C] () -- C:\Documents and Settings\xp\Noyeryerwy_Sącz.txt
[2011-06-28 11:00:43 | 000,002,680 | ---- | C] () -- C:\Documents and Settings\xp\Nowwertw_Sącz.txt
[2011-06-27 12:14:49 | 000,025,456 | ---- | C] () -- C:\Documents and Settings\xp\VIPy_reyeryNowySącz.txt
[2011-06-27 12:02:09 | 000,019,511 | ---- | C] () -- C:\Documents and Settings\xp\VIPy_NeryeryowySącz.txt
[2011-06-26 21:18:42 | 000,005,521 | ---- | C] () -- C:\Documents and Settings\xp\VIPy_NoeryerwySącz.txt
[2011-06-26 18:40:49 | 000,002,120 | ---- | C] () -- C:\Documents and Settings\xp\Nowy_Sącreyerz.txt
[2011-06-26 15:40:18 | 000,019,757 | ---- | C] () -- C:\Documents and Settings\xp\Kim_tyiytiytKolwiek__.txt
[2011-06-25 21:19:49 | 000,048,090 | ---- | C] () -- C:\Documents and Settings\xp\Nowweryer_Sącz.txt
[2011-06-25 21:00:03 | 002,013,840 | ---- | C] () -- C:\Documents and Settings\xp\Moje dokumenty\piczers.zip
[2011-06-25 20:48:18 | 000,000,866 | ---- | C] () -- C:\Documents and Settings\xp\.recently-used.xbel
[2011-06-25 20:01:49 | 000,002,704 | ---- | C] () -- C:\Documents and Settings\xp\farcieryeryara_ns.txt
[2011-06-25 14:10:26 | 000,016,911 | ---- | C] () -- C:\Documents and Settings\xp\Królestwo_Noreyerywy_Sącz.txt
[2011-06-25 13:45:49 | 000,030,150 | ---- | C] () -- C:\Documents and Settings\xp\Nowyyerye_Sącz.txt
[2011-06-25 11:34:16 | 000,001,510 | ---- | C] () -- C:\Documents and Settings\xp\Królesrturtutwo_Nowy_Sącz.txt
[2011-06-24 08:23:20 | 000,000,985 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\Web Stream Recorder 2010.lnk
[2011-06-23 23:07:27 | 000,045,209 | ---- | C] () -- C:\Documents and Settings\xp\Towaytiyurzyski.txt
[2011-06-23 23:07:19 | 000,046,332 | ---- | C] () -- C:\Documents and Settings\xp\Nowyreyre_Sącz.txt
[2011-06-23 22:55:27 | 000,012,624 | ---- | C] () -- C:\Documents and Settings\xp\VIPy_yiyuNowySącz.txt
[2011-06-22 19:27:19 | 000,019,045 | ---- | C] () -- C:\Documents and Settings\xp\Noreyrewy_Sącz.txt
[2011-06-21 22:49:36 | 000,018,188 | ---- | C] () -- C:\Documents and Settings\xp\VIPy_NowreyerySącz.txt
[2011-06-21 21:35:45 | 000,017,326 | ---- | C] () -- C:\Documents and Settings\xp\VIPy_NoeryeryrwySącz.txt
[2011-06-21 12:14:59 | 000,013,273 | ---- | C] () -- C:\Documents and Settings\xp\VIPy_dyerNowySącz.txt
[2011-06-21 09:21:44 | 001,890,044 | ---- | C] () -- C:\Documents and Settings\xp\Moje dokumenty\tg.wav
[2011-06-20 12:16:43 | 000,007,032 | ---- | C] () -- C:\Documents and Settings\xp\Nowy_tutyuytSącz.txt
[2011-06-18 12:32:36 | 000,003,493 | ---- | C] () -- C:\Documents and Settings\xp\jolka26.teryerejwetwertwt
[2011-06-18 12:31:02 | 000,013,730 | ---- | C] () -- C:\Documents and Settings\xp\jolka5u5656jolka.txt
[2011-06-17 18:53:49 | 000,004,451 | ---- | C] () -- C:\Documents and Settings\xp\VIPy_reyerNowySącz.txt
[2011-06-17 18:53:45 | 000,006,254 | ---- | C] () -- C:\Documents and Settings\xp\Nowy_yreySącz.txt
[2011-06-15 10:41:14 | 000,000,815 | ---- | C] () -- C:\Documents and Settings\xp\rozwsciyeryereczona_mrowka
[2011-06-11 11:36:22 | 000,001,729 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Adobe Reader 8.lnk
[2011-06-09 15:23:27 | 000,008,132 | ---- | C] () -- C:\Documents and Settings\xp\VIPy_NowySącz.txt
[2011-06-07 14:46:08 | 000,000,600 | ---- | C] () -- C:\Documents and Settings\xp\PUTTY.RND
[2011-06-06 13:56:09 | 000,007,097 | ---- | C] () -- C:\Documents and Settings\xp\VIPy_eryeryNowySącz
[2011-06-06 13:42:59 | 000,009,620 | ---- | C] () -- C:\Documents and Settings\xp\Nowyweryeryr_Sącz
[2011-06-06 13:39:26 | 000,004,763 | ---- | C] () -- C:\Documents and Settings\xp\VIPy_NeueryrowySącz
[2011-06-06 12:58:04 | 000,002,059 | ---- | C] () -- C:\Documents and Settings\xp\Nowy_Sączfb
[2011-06-06 12:50:06 | 000,000,475 | ---- | C] () -- C:\Documents and Settings\xp\Nowy_ruytSącz
[2011-06-05 15:59:22 | 000,001,393 | ---- | C] () -- C:\Documents and Settings\xp\logoh].txt
[2011-06-05 13:23:38 | 000,396,607 | ---- | C] () -- C:\Documents and Settings\xp\Moje dokumenty\miami-vice-don-johnson-as-sonny-crockett--3.jpg
[2011-06-05 13:21:33 | 000,073,362 | ---- | C] () -- C:\Documents and Settings\xp\Moje dokumenty\don-johnson-as-sonny-crockett-in-miami-vice--3.jpg
[2011-06-05 13:21:11 | 000,029,639 | ---- | C] () -- C:\Documents and Settings\xp\Moje dokumenty\Don-Johnson.jpg
[2011-06-05 13:16:57 | 000,008,298 | ---- | C] () -- C:\Documents and Settings\xp\Moje dokumenty\Moja ulubiona kompozycja.theme
[2011-06-05 13:12:53 | 000,012,283 | ---- | C] () -- C:\Documents and Settings\xp\Moje dokumenty\sonny-crockett_l.jpg
[2011-06-04 08:59:20 | 000,039,653 | ---- | C] () -- C:\Documents and Settings\xp\Moje dokumenty\croc.JPG
[2011-06-04 08:57:56 | 000,054,988 | ---- | C] () -- C:\Documents and Settings\xp\Moje dokumenty\113009MSMO057.jpg
[2011-06-03 21:32:10 | 000,081,920 | ---- | C] () -- C:\Documents and Settings\xp\Pulpit\MPEG4Modifier.exe
[2011-06-03 20:33:13 | 000,008,021 | ---- | C] () -- C:\Documents and Settings\xp\Moje dokumenty\VIPy_NowySącztwwe
[2011-06-03 19:55:55 | 000,002,568 | ---- | C] () -- C:\Documents and Settings\xp\Moje dokumenty\VIPy_NowySwetywqeącz
[2011-06-03 15:57:56 | 000,026,091 | ---- | C] () -- C:\Documents and Settings\xp\Moje dokumenty\Królestwo_Nowy_Sącza
[2011-06-03 15:25:06 | 000,014,811 | ---- | C] () -- C:\Documents and Settings\xp\Moje dokumenty\Królestwo_Nowy_Sączandek
[2011-03-06 15:42:55 | 000,000,001 | ---- | C] () -- C:\Documents and Settings\xp\Dane aplikacji\.sunvox_files_preview
[2011-03-06 15:41:14 | 000,000,143 | ---- | C] () -- C:\Documents and Settings\xp\Dane aplikacji\.sunvox_opensample
[2011-03-06 11:50:33 | 000,000,131 | ---- | C] () -- C:\Documents and Settings\xp\Dane aplikacji\.sunvox_song_s
[2011-03-06 11:24:18 | 000,000,005 | ---- | C] () -- C:\Documents and Settings\xp\Dane aplikacji\.sunvox_pateditor
[2011-03-06 11:24:15 | 000,000,001 | ---- | C] () -- C:\Documents and Settings\xp\Dane aplikacji\.sunvox_colortheme
[2010-12-03 13:03:44 | 000,000,159 | ---- | C] () -- C:\Documents and Settings\xp\Ustawienia lokalne\Dane aplikacji\LaunchVE3DInstaller.log
[2010-10-10 15:40:14 | 000,000,194 | ---- | C] () -- C:\WINDOWS\WININIT.INI
[2010-09-22 20:20:05 | 000,000,066 | ---- | C] () -- C:\WINDOWS\#1 DVD Audio Ripper.INI
[2010-09-22 19:29:06 | 000,266,752 | ---- | C] () -- C:\Documents and Settings\xp\Dane aplikacji\msconfig_settings.exe
[2010-09-22 19:28:54 | 000,001,977 | ---- | C] () -- C:\Documents and Settings\xp\Dane aplikacji\dvdae.config
[2010-09-09 15:46:27 | 000,000,025 | ---- | C] () -- C:\WINDOWS\libem.INI
[2010-04-03 17:45:06 | 000,156,864 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat
[2010-03-02 16:41:56 | 000,241,664 | ---- | C] () -- C:\WINDOWS\System32\SerialPortLib.dll
[2010-03-02 16:41:55 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\DragnDropCopyHook.dll
[2010-02-05 21:04:04 | 000,076,407 | ---- | C] () -- C:\Documents and Settings\xp\Dane aplikacji\Smiley.ico
[2010-02-04 19:34:34 | 000,000,044 | ---- | C] () -- C:\WINDOWS\System32\winitn.dll
[2010-02-04 19:34:24 | 000,051,712 | ---- | C] () -- C:\WINDOWS\System32\coodest.dll
[2010-02-04 19:34:20 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll
[2010-01-24 22:34:21 | 000,000,050 | ---- | C] () -- C:\WINDOWS\MegaManager.INI
[2009-08-26 10:39:37 | 000,001,436 | ---- | C] () -- C:\WINDOWS\CDPLAYER.INI
[2009-08-18 07:13:34 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2009-08-17 15:20:53 | 000,717,296 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2009-08-07 18:25:06 | 000,000,550 | ---- | C] () -- C:\Documents and Settings\xp\Dane aplikacji\AutoGK.ini
[2009-07-19 16:09:43 | 000,000,421 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2009-07-06 10:59:53 | 000,047,104 | ---- | C] () -- C:\WINDOWS\System32\KMVIDC32.DLL
[2009-06-23 20:11:36 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI
[2009-06-20 08:01:03 | 000,004,767 | ---- | C] () -- C:\WINDOWS\Irremote.ini
[2009-06-19 19:28:44 | 000,045,056 | ---- | C] () -- C:\Documents and Settings\xp\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009-06-19 19:06:41 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2009-06-19 19:06:41 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest
[2009-06-19 19:00:39 | 000,819,200 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2009-06-19 19:00:39 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2009-06-19 18:39:28 | 000,086,016 | ---- | C] () -- C:\WINDOWS\System32\install.dll
[2009-06-19 18:39:28 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\SmartInstallCfg2.dll
[2009-06-19 16:51:11 | 000,142,592 | ---- | C] () -- C:\WINDOWS\System32\drivers\sp_rsdrv2.sys
[2009-01-28 20:50:44 | 000,153,088 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2003-04-08 11:40:22 | 000,005,679 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 213 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:66633281
< End of report >