OTL logfile created on: 2012-04-24 08:59:44 - Run 1 OTL by OldTimer - Version 3.2.42.0 Folder = C:\Users\Właściciel\Desktop Windows Vista Home Premium Edition (Version = 6.0.6000) - Type = NTWorkstation Internet Explorer (Version = 7.0.6000.16982) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1,99 Gb Total Physical Memory | 0,83 Gb Available Physical Memory | 41,70% Memory free 4,19 Gb Paging File | 2,91 Gb Available in Paging File | 69,61% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 224,88 Gb Total Space | 29,31 Gb Free Space | 13,03% Space Free | Partition Type: NTFS Computer Name: KAMIL | User Name: Właściciel | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-04-24 08:25:04 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Users\Właściciel\Desktop\OTL.exe PRC - [2012-03-27 16:03:27 | 000,180,648 | ---- | M] (Google Inc.) -- C:\Users\Właściciel\AppData\Local\Google\Update\1.3.21.111\GoogleCrashHandler.exe PRC - [2012-03-07 01:15:17 | 004,241,512 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe PRC - [2012-03-07 01:15:14 | 000,044,768 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe PRC - [2012-01-03 15:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2011-05-21 08:01:00 | 000,839,272 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe PRC - [2011-05-20 22:35:16 | 000,378,472 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe PRC - [2011-03-01 16:47:56 | 002,296,696 | ---- | M] (TeamViewer GmbH) -- C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe PRC - [2010-05-28 20:27:12 | 000,189,760 | ---- | M] (Solid Documents, LLC) -- C:\Windows\Installer\MSI662A.tmp PRC - [2010-04-08 19:02:44 | 000,249,856 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Program Files\blueconnect\DataCardMonitor.exe PRC - [2010-03-04 23:38:00 | 000,071,096 | ---- | M] () -- C:\Program Files\CDBurnerXP\NMSAccessU.exe PRC - [2009-04-30 13:23:26 | 000,090,112 | ---- | M] () -- C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe PRC - [2008-06-18 07:11:29 | 002,923,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2008-01-29 18:38:32 | 000,583,048 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe PRC - [2008-01-23 01:56:23 | 001,006,264 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\MSASCui.exe PRC - [2008-01-23 01:56:23 | 000,318,648 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Windows Defender\MpCmdRun.exe PRC - [2007-07-24 12:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe PRC - [2007-07-19 15:32:34 | 001,120,568 | ---- | M] (Packard Bell BV) -- C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe PRC - [2007-05-28 18:57:54 | 000,275,968 | ---- | M] (Rocket Division Software) -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012-04-12 09:37:34 | 000,444,400 | ---- | M] () -- C:\Users\Właściciel\AppData\Local\Google\Chrome\Application\18.0.1025.162\ppGoogleNaClPluginChrome.dll MOD - [2012-04-12 09:37:33 | 003,915,248 | ---- | M] () -- C:\Users\Właściciel\AppData\Local\Google\Chrome\Application\18.0.1025.162\pdf.dll MOD - [2012-04-12 09:36:08 | 000,122,880 | ---- | M] () -- C:\Users\Właściciel\AppData\Local\Google\Chrome\Application\18.0.1025.162\avutil-51.dll MOD - [2012-04-12 09:36:06 | 000,220,672 | ---- | M] () -- C:\Users\Właściciel\AppData\Local\Google\Chrome\Application\18.0.1025.162\avformat-53.dll MOD - [2012-04-12 09:36:05 | 001,747,456 | ---- | M] () -- C:\Users\Właściciel\AppData\Local\Google\Chrome\Application\18.0.1025.162\avcodec-53.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [On_Demand | Stopped] -- C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe -- (NMIndexingService) SRV - File not found [Auto | Stopped] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe /h ccCommon -- (LiveUpdate Notice Ex) SRV - File not found [Auto | Stopped] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe /h ccCommon -- (CLTNetCnService) SRV - [2012-03-07 01:15:14 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus) SRV - [2012-01-03 15:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2011-09-02 15:29:30 | 002,152,152 | ---- | M] (Lavasoft Limited) [Disabled | Stopped] -- C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe -- (Lavasoft Ad-Aware Service) SRV - [2011-05-20 22:35:16 | 000,378,472 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service) SRV - [2011-03-01 16:47:56 | 002,296,696 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe -- (TeamViewer6) SRV - [2010-05-28 20:27:12 | 000,189,760 | ---- | M] (Solid Documents, LLC) [Auto | Running] -- C:\Windows\Installer\MSI662A.tmp -- (SCPDFReadSpool) SRV - [2010-03-04 23:38:00 | 000,071,096 | ---- | M] () [Auto | Running] -- C:\Program Files\CDBurnerXP\NMSAccessU.exe -- (NMSAccess) SRV - [2010-01-11 17:52:12 | 000,139,264 | ---- | M] (SOURCENEXT) [Disabled | Stopped] -- C:\Windows\System32\bgsvcgen.exe -- (bgsvcgen) SRV - [2009-08-26 11:57:17 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [Disabled | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2009-04-30 13:23:26 | 000,090,112 | ---- | M] () [Auto | Running] -- C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe -- (OMSI download service) SRV - [2008-09-30 08:46:19 | 000,292,309 | RH-- | M] () [Disabled | Stopped] -- C:\Program Files\Norton2009Reset.exe -- (.norton2009Reset) SRV - [2008-09-11 15:33:13 | 000,092,656 | ---- | M] (Valve Corporation) [Disabled | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2008-09-08 08:59:00 | 000,575,488 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2008-01-29 18:38:32 | 000,583,048 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe -- (LiveUpdate Notice Service) SRV - [2008-01-23 01:56:23 | 000,265,912 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2007-12-06 22:03:41 | 000,660,768 | ---- | M] (ABBYY (BIT Software)) [Disabled | Stopped] -- C:\Program Files\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe -- (ABBYY.Licensing.FineReader.Professional.9.0) SRV - [2007-11-06 22:22:26 | 000,092,792 | ---- | M] (CACE Technologies) [On_Demand | Stopped] -- C:\Program Files\WinPcap\rpcapd.exe -- (rpcapd) Remote Packet Capture Protocol v.0 (experimental) SRV - [2007-09-26 16:23:26 | 002,999,664 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE -- (LiveUpdate) SRV - [2007-07-24 12:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) [Auto | Running] -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2) SRV - [2007-05-28 18:57:54 | 000,275,968 | ---- | M] (Rocket Division Software) [Auto | Running] -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE) SRV - [2007-04-26 09:22:14 | 000,052,080 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\IVT Corporation\BlueSoleil\StartSkysolSvc.exe -- (Start BT in service) SRV - [2007-03-21 13:00:04 | 000,355,096 | ---- | M] (Intel Corporation) [Disabled | Stopped] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON) Intel(R) SRV - [2007-01-24 13:21:24 | 000,375,176 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm) SRV - [2007-01-24 13:21:14 | 000,177,032 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\VBoxNetFlt.sys -- (VBoxNetFlt) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt) DRV - File not found [Kernel | System | Stopped] -- c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{16E1BA69-F903-4A47-A06D-200CAA655E90}\MpKsle2ef8288.sys -- (MpKsle2ef8288) DRV - File not found [Kernel | On_Demand | Stopped] -- System32\Drivers\IvtBtBus.sys -- (IvtBtBUs) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\EagleNT.sys -- (EagleNT) DRV - File not found [Kernel | Boot | Stopped] -- System32\Drivers\BtHidBus.sys -- (BtHidBus) DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\blbdrive.sys -- (blbdrive) DRV - File not found [Kernel | On_Demand | Unknown] -- -- (a6f2ratz) DRV - File not found [Kernel | On_Demand | Unknown] -- -- (a5rrps93) DRV - [2012-03-07 01:03:51 | 000,612,184 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswSnx.sys -- (aswSnx) DRV - [2012-03-07 01:03:38 | 000,337,880 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP) DRV - [2012-03-07 01:02:00 | 000,035,672 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr.sys -- (aswRdr) DRV - [2012-03-07 01:01:53 | 000,053,848 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi) DRV - [2012-03-07 01:01:48 | 000,057,688 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt) DRV - [2012-03-07 01:01:30 | 000,020,696 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk) DRV - [2011-05-21 08:01:00 | 010,589,800 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm) DRV - [2011-04-29 12:12:00 | 000,064,512 | ---- | M] (Lavasoft AB) [File_System | Boot | Running] -- C:\Windows\System32\drivers\Lbd.sys -- (Lbd) DRV - [2011-04-29 12:11:58 | 000,015,232 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files\Lavasoft\Ad-Aware\kernexplorer.sys -- (Lavasoft Kernexplorer) DRV - [2011-01-12 11:42:12 | 000,025,088 | ---- | M] (TeamViewer GmbH) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\teamviewervpn.sys -- (teamviewervpn) DRV - [2010-07-04 21:51:26 | 000,004,096 | ---- | M] () [Kernel | Unavailable | Unknown] -- C:\Program Files\Unlocker\UnlockerDriver5.sys -- (UnlockerDriver5) DRV - [2010-06-28 22:50:22 | 000,087,536 | ---- | M] (CyberLink Corp.) [2010/08/09 16:15:06] [Kernel | Auto | Running] -- C:\Program Files\CyberLink\PowerDVD10\NavFilter\000.fcl -- ({1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC}) DRV - [2010-03-30 23:38:26 | 000,020,968 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\cpuz133_x32.sys -- (cpuz133) DRV - [2010-02-12 21:34:58 | 000,099,152 | ---- | M] (Sun Microsystems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VBoxNetAdp.sys -- (VBoxNetAdp) DRV - [2010-01-11 17:52:12 | 000,038,944 | ---- | M] (B.H.A Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\CDRBSDRV.SYS -- (cdrbsdrv) DRV - [2009-11-12 14:48:56 | 000,007,168 | ---- | M] () [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\StarOpen.sys -- (StarOpen) DRV - [2009-09-23 10:41:58 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi) DRV - [2009-06-17 15:02:46 | 000,029,192 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\btnetBus.sys -- (btnetBUs) DRV - [2009-06-17 15:02:16 | 000,027,528 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\BlueletSCOAudio.sys -- (BlueletSCOAudio) DRV - [2009-06-17 15:02:08 | 000,033,800 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\blueletaudio.sys -- (BlueletAudio) DRV - [2009-03-27 14:23:12 | 000,023,064 | ---- | M] (Screaming Bee LLC) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ScreamingBAudio.sys -- (SCREAMINGBDRIVER) DRV - [2009-02-28 16:35:40 | 000,028,672 | ---- | M] (http://libusb-win32.sourceforge.net) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\libusb0.sys -- (libusb0) DRV - [2008-08-26 11:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2008-08-23 12:57:29 | 000,717,296 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sptd.sys -- (sptd) DRV - [2008-07-24 12:03:56 | 000,101,760 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard) DRV - [2008-01-18 16:16:28 | 000,100,648 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\a016obex.sys -- (a016obex) DRV - [2008-01-18 16:16:26 | 000,110,504 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\a016mdm.sys -- (a016mdm) DRV - [2008-01-18 16:16:26 | 000,104,488 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\a016mgmt.sys -- (a016mgmt) Sony Ericsson Device A016 USB WMC Device Management Drivers (WDM) DRV - [2008-01-18 16:16:24 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\a016mdfl.sys -- (a016mdfl) DRV - [2008-01-18 16:16:22 | 000,083,880 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\a016bus.sys -- (a016bus) Sony Ericsson Device A016 driver (WDM) DRV - [2008-01-09 13:28:34 | 000,027,632 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\seehcri.sys -- (seehcri) DRV - [2007-11-06 22:22:06 | 000,034,064 | ---- | M] (CACE Technologies) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\npf.sys -- (NPF) DRV - [2007-07-13 20:34:26 | 000,163,328 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CHDART.sys -- (HdAudAddService) DRV - [2007-04-30 15:45:18 | 002,219,520 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NETw4v32.sys -- (NETw4v32) Sterownik karty Intel(R) DRV - [2007-04-23 04:35:54 | 000,036,496 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\btcusb.sys -- (Btcsrusb) DRV - [2007-03-05 05:59:04 | 000,018,320 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\btnetdrv.sys -- (BT) DRV - [2007-03-05 05:57:14 | 000,019,472 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VHIDMini.sys -- (VHidMinidrv) DRV - [2007-03-05 05:56:18 | 000,035,600 | ---- | M] (IVT Corporation.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\BtHidMgr.sys -- (BTHidMgr) DRV - [2007-03-05 05:55:12 | 000,020,880 | ---- | M] (IVT Corporation.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\VBTEnum.sys -- (BTHidEnum) DRV - [2007-03-05 05:53:18 | 000,044,304 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\VCommMgr.sys -- (VcommMgr) DRV - [2007-03-05 05:52:18 | 000,034,448 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\VComm.sys -- (VComm) DRV - [2007-02-24 15:42:22 | 000,039,936 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimmptsk.sys -- (rimmptsk) DRV - [2007-02-12 18:55:56 | 000,075,776 | ---- | M] (Prolific Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ser2pl.sys -- (Ser2pl) DRV - [2007-01-30 22:23:30 | 000,008,704 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\XAudio.sys -- (XAudio) DRV - [2007-01-23 17:40:20 | 000,042,496 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimsptsk.sys -- (rimsptsk) DRV - [2007-01-08 14:38:30 | 000,046,592 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\itecir.sys -- (itecir) DRV - [2006-11-02 10:55:05 | 000,031,616 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (winusb) DRV - [2006-07-10 18:19:58 | 000,027,032 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sfsync02.sys -- (sfsync02) StarForce Protection Synchronization Driver (version 2.x) DRV - [2006-07-05 14:39:29 | 000,059,256 | ---- | M] (Protection Technology (StarForce)) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sfdrv01.sys -- (sfdrv01) StarForce Protection Environment Driver (version 1.x) DRV - [2006-06-14 16:56:56 | 000,013,680 | ---- | M] (Protection Technology (StarForce)) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sfhlp02.sys -- (sfhlp02) StarForce Protection Helper Driver (version 2.x) DRV - [2006-03-01 10:25:12 | 000,008,704 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ggsemc.sys -- (ggsemc) DRV - [2005-10-07 12:48:22 | 000,083,344 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\k510obex.sys -- (k510obex) DRV - [2005-10-07 12:47:32 | 000,085,408 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\k510mgmt.sys -- (k510mgmt) Sony Ericsson K510 USB WMC Device Management Drivers (WDM) DRV - [2005-10-07 12:46:42 | 000,094,064 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\k510mdm.sys -- (k510mdm) DRV - [2005-10-07 12:46:38 | 000,008,336 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\k510mdfl.sys -- (k510mdfl) DRV - [2005-10-07 12:45:44 | 000,058,288 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\k510bus.sys -- (k510bus) Sony Ericsson K510 Driver driver (WDM) DRV - [2005-03-30 11:12:38 | 000,014,544 | ---- | M] (EnTech Taiwan) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\TVicPort.sys -- (TVicPort) DRV - [2000-06-29 18:24:14 | 000,003,584 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\DLPORTIO.SYS -- (DLPortIO) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.pl IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [Binary data over 100 bytes] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [Binary data over 100 bytes] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.pl IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = 203.218.55.37:9415 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "http://www.google.pl/" FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.2 FF - prefs.js..extensions.enabledItems: {DB9127A2-3381-41ec-82B3-1B6ED4C6F29A}:1.0 FF - prefs.js..extensions.enabledItems: mozilla_cc@internetdownloadmanager.com:5.7 FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3 FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.8.20100408.6 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26 FF - prefs.js..extensions.enabledItems: wrc@avast.com:6.0.1367 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}:6.0.29 FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Picasa2\npPicasa3.dll (Google, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=13: C:\Program Files\Google\Google Updater\2.4.1691.8062\npCIDetect13.dll (Google) FF - HKLM\Software\MozillaPlugins\@rayv.com/rayvplugin: C:\Program Files\RayV\RayV\plugins\nprayvplugin.dll (RayV) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2852: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.46: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1662: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.46: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@virtools.com/3DviaPlayer: C:\Program Files\Virtools\3D Life Player\npvirtools.dll (Virtools SA) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Właściciel\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Właściciel\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010-05-24 16:05:49 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-04-14 17:21:16 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-08-05 16:36:23 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-04-14 17:20:57 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010-05-24 16:05:49 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Users\Właściciel\AppData\Roaming\IDM\idmmzcc2 [2010-05-24 18:42:07 | 000,000,000 | ---D | M] [2009-01-12 17:26:07 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Właściciel\AppData\Roaming\mozilla\Extensions [2012-04-09 10:59:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Właściciel\AppData\Roaming\mozilla\Firefox\Profiles\rq4i3rcb.default\extensions [2011-01-19 18:00:28 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Właściciel\AppData\Roaming\mozilla\Firefox\Profiles\rq4i3rcb.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2011-01-19 14:33:09 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Właściciel\AppData\Roaming\mozilla\Firefox\Profiles\rq4i3rcb.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2010-07-12 14:33:50 | 000,000,000 | ---D | M] (flashget3 Extension) -- C:\Users\Właściciel\AppData\Roaming\mozilla\Firefox\Profiles\rq4i3rcb.default\extensions\{DB9127A2-3381-41ec-82B3-1B6ED4C6F29A} [2011-01-19 14:33:08 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Users\Właściciel\AppData\Roaming\mozilla\Firefox\Profiles\rq4i3rcb.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781} [2012-04-14 17:53:53 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2010-04-20 19:07:02 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} [2011-06-09 17:10:06 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} [2012-04-14 17:53:53 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} [2012-04-14 17:21:16 | 000,000,000 | ---D | M] (avast! WebRep) -- C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF File not found (No name found) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} File not found (No name found) -- C:\USERS\WĹ‚AĹ›CICIEL\APPDATA\ROAMING\IDM\IDMMZCC2 File not found (No name found) -- C:\USERS\WĹ‚AĹ›CICIEL\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RQ4I3RCB.DEFAULT\EXTENSIONS\{B9DB16A4-6EDC-47EC-A1F4-B86292ED211D} File not found (No name found) -- C:\USERS\WĹ‚AĹ›CICIEL\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RQ4I3RCB.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D} File not found (No name found) -- C:\USERS\WĹ‚AĹ›CICIEL\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RQ4I3RCB.DEFAULT\EXTENSIONS\{DB9127A2-3381-41EC-82B3-1B6ED4C6F29A} File not found (No name found) -- C:\USERS\WĹ‚AĹ›CICIEL\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\RQ4I3RCB.DEFAULT\EXTENSIONS\{E4A8A97B-F2ED-450B-B12D-EE082BA24781} [2012-04-14 17:53:12 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2010-01-16 03:08:36 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2010-01-16 03:08:36 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2010-01-16 03:08:36 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2010-01-16 03:08:36 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2012-04-20 13:20:10 | 000,000,428 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\v9.xml [2010-01-16 03:08:36 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2010-01-16 03:08:36 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}, CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Users\W\u0142a\u015Bciciel\AppData\Local\Google\Chrome\Application\18.0.1025.162\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Disabled) = C:\Users\W\u0142a\u015Bciciel\AppData\Local\Google\Chrome\Application\18.0.1025.162\pdf.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Users\W\u0142a\u015Bciciel\AppData\Local\Google\Chrome\Application\18.0.1025.162\gcswf32.dll CHR - plugin: Shockwave Flash (Disabled) = C:\Users\W\u0142a\u015Bciciel\AppData\Local\Google\Chrome\User Data\PepperFlash\11.1.31.203\pepflashplayer.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll CHR - plugin: Java Deployment Toolkit 6.0.310.5 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 6 U31 (Enabled) = C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll CHR - plugin: Google Updater (Enabled) = C:\Program Files\Google\Google Updater\2.4.1691.8062\npCIDetect13.dll CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll CHR - plugin: Picasa (Enabled) = C:\Program Files\Picasa2\npPicasa3.dll CHR - plugin: RayV Plugin (Enabled) = C:\Program Files\RayV\RayV\plugins\nprayvplugin.dll CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll CHR - plugin: 3DVIA Player (Enabled) = C:\Program Files\Virtools\3D Life Player\npvirtools.dll CHR - plugin: Windows Presentation Foundation (Enabled) = C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll CHR - Extension: Session Manager = C:\Users\Właściciel\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbcnbpafconjjigibnhbfmmgdbbkcjfi\0.4_0\ CHR - Extension: YouTube = C:\Users\Właściciel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: Szukaj w Google = C:\Users\Właściciel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\ CHR - Extension: avast! WebRep = C:\Users\Właściciel\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1426_0\ CHR - Extension: Megaupload auto-fill captcha = C:\Users\Właściciel\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpalnpkfghhmehfieccanioofignbkgb\0.1.1_0\ CHR - Extension: Rozszerzenie Subskrypcje RSS (od Google) = C:\Users\Właściciel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlbjncdgjeocebhnmkbbbdekmmmcbfjd\2.1.3_0\ CHR - Extension: AT_DJTiesto = C:\Users\Właściciel\AppData\Local\Google\Chrome\User Data\Default\Extensions\okmcbgkkeagngnijeiighgblfljbekip\2\ CHR - Extension: Gmail = C:\Users\Właściciel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2011-05-25 20:49:08 | 000,000,796 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O1 - Hosts: 127.0.0.1 activation.guitar-pro.com O2 - BHO: (IDMIEHlprObj Class) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll (Tonec Inc.) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O2 - BHO: (CatcherBHO Class) - {9B4DF450-DCC7-4B07-935D-0CD757A64583} - C:\Program Files\Moyea\YouTube FLV Downloader\MoyeaCatcher.dll (Moyea Software Co., Ltd.) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.) O2 - BHO: (FlashGetBHO) - {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} - C:\Users\Właściciel\AppData\Roaming\FlashGetBHO\FlashGetBHO3.dll (Trend Media Group) O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google\Google_BAE\BAE.dll (Packard Bell) O2 - BHO: (FDMIECookiesBHO Class) - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll () O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\ProgramData\Gadu-Gadu 10\_userdata\ggbho.2.dll File not found O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found. O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software) O4 - HKLM..\Run: [DataCardMonitor] C:\Program Files\blueconnect\DataCardMonitor.exe (Huawei Technologies Co., Ltd.) O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe (Intel Corporation) O4 - HKLM..\Run: [toolbar_eula_launcher] C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe ( ) O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\daemon.exe (DT Soft Ltd) O4 - HKCU..\Run: [SmpcSys] C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe (Packard Bell BV) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableStatusMessages = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWindowsUpdate = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1 O8 - Extra context menu item: Ściągnij przez IDM - C:\Program Files\Internet Download Manager\IEExt.htm () O8 - Extra context menu item: Ściągnij wszystkie linki przez IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm () O8 - Extra context menu item: Ściągnij zawartość wideo FLV przez IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm () O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07) O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 94.246.129.1 94.246.129.3 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{97F15D4C-8580-492F-9926-EF1B1E2183E1}: DhcpNameServer = 94.246.129.1 94.246.129.3 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{FABD2795-B30C-4C57-B6EF-3A8A6F57A310}: DhcpNameServer = 192.168.2.1 O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL) - C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\Packard Bell\Wallpaper\Lounge_1900x1440.jpg O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\Packard Bell\Wallpaper\Lounge_1900x1440.jpg O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{116de3a9-431f-11df-97c2-000df050c3ed}\Shell - "" = AutoRun O33 - MountPoints2\{116de3a9-431f-11df-97c2-000df050c3ed}\Shell\AutoRun\command - "" = I:\AutoRun.exe O33 - MountPoints2\{116de3c8-431f-11df-97c2-000df050c3ed}\Shell - "" = AutoRun O33 - MountPoints2\{116de3c8-431f-11df-97c2-000df050c3ed}\Shell\AutoRun\command - "" = I:\AutoRun.exe O33 - MountPoints2\{116de3e9-431f-11df-97c2-000df050c3ed}\Shell - "" = AutoRun O33 - MountPoints2\{116de3e9-431f-11df-97c2-000df050c3ed}\Shell\AutoRun\command - "" = I:\AutoRun.exe O33 - MountPoints2\{116de3ea-431f-11df-97c2-000df050c3ed}\Shell - "" = AutoRun O33 - MountPoints2\{116de3ea-431f-11df-97c2-000df050c3ed}\Shell\AutoRun\command - "" = I:\AutoRun.exe O33 - MountPoints2\{116de3f6-431f-11df-97c2-000df050c3ed}\Shell - "" = AutoRun O33 - MountPoints2\{116de3f6-431f-11df-97c2-000df050c3ed}\Shell\AutoRun\command - "" = J:\AutoRun.exe O33 - MountPoints2\{5afaf7a4-7b40-11e1-b11f-001b24fd6529}\Shell - "" = AutoRun O33 - MountPoints2\{5afaf7a4-7b40-11e1-b11f-001b24fd6529}\Shell\AutoRun\command - "" = I:\AutoRun.exe O33 - MountPoints2\{7484b720-219c-11dd-b94f-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{7484b720-219c-11dd-b94f-806e6f6e6963}\Shell\AutoRun\command - "" = D:\autorun.exe O33 - MountPoints2\{7aad6723-814e-11df-83ad-000df050c3ed}\Shell - "" = AutoRun O33 - MountPoints2\{7aad6723-814e-11df-83ad-000df050c3ed}\Shell\AutoRun\command - "" = I:\AutoRun.exe O33 - MountPoints2\{8193b94f-8789-11e0-a1ce-001b24fd6529}\Shell - "" = AutoRun O33 - MountPoints2\{8193b94f-8789-11e0-a1ce-001b24fd6529}\Shell\AutoRun\command - "" = I:\AutoRun.exe O33 - MountPoints2\{841c1e99-21f9-11de-a550-000df050c3ed}\Shell - "" = AutoRun O33 - MountPoints2\{841c1e99-21f9-11de-a550-000df050c3ed}\Shell\AutoRun\command - "" = G:\LaunchBFII.exe O33 - MountPoints2\I\Shell - "" = AutoRun O33 - MountPoints2\I\Shell\AutoRun\command - "" = I:\AutoRun.exe O33 - MountPoints2\J\Shell - "" = AutoRun O33 - MountPoints2\J\Shell\AutoRun\command - "" = J:\AutoRun.exe O34 - HKLM BootExecute: (autocheck autochk *) O34 - HKLM BootExecute: (lsdelete) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-04-24 08:24:54 | 000,595,968 | ---- | C] (OldTimer Tools) -- C:\Users\Właściciel\Desktop\OTL.exe [2012-04-24 08:03:21 | 000,000,000 | ---D | C] -- C:\Users\Właściciel\AppData\Roaming\Wise Registry Cleaner [2012-04-24 08:03:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Registry Cleaner [2012-04-24 08:03:03 | 000,000,000 | ---D | C] -- C:\Program Files\Wise [2012-04-24 08:01:38 | 002,296,184 | ---- | C] (WiseCleaner.com ) -- C:\Users\Właściciel\Desktop\WRCFree.exe [2012-04-20 13:55:31 | 000,008,704 | ---- | C] (Sony Ericsson Mobile Communications) -- C:\Windows\System32\drivers\ggsemc.sys [2012-04-20 13:55:31 | 000,000,000 | ---D | C] -- C:\Users\Właściciel\Desktop\USBFlashDriver [2012-04-20 13:41:20 | 000,000,000 | ---D | C] -- C:\Users\Właściciel\Desktop\setool2lite [2012-04-20 13:20:13 | 000,000,000 | ---D | C] -- C:\Program Files\hpmonitor [2012-04-20 13:18:33 | 000,000,000 | ---D | C] -- C:\Users\Właściciel\AppData\Roaming\MyPhoneExplorer [2012-04-20 13:18:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer [2012-04-20 13:18:02 | 000,000,000 | ---D | C] -- C:\Program Files\MyPhoneExplorer [2012-04-19 22:51:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IVT BlueSoleil [2012-04-19 22:48:27 | 000,000,000 | ---D | C] -- C:\Program Files\IVT Corporation [2012-04-19 22:37:00 | 000,085,408 | ---- | C] (MCCI) -- C:\Windows\System32\drivers\k510mgmt.sys [2012-04-19 22:37:00 | 000,083,344 | ---- | C] (MCCI) -- C:\Windows\System32\drivers\k510obex.sys [2012-04-19 22:21:30 | 000,094,064 | ---- | C] (MCCI) -- C:\Windows\System32\drivers\k510mdm.sys [2012-04-19 22:21:30 | 000,058,288 | ---- | C] (MCCI) -- C:\Windows\System32\drivers\k510bus.sys [2012-04-19 22:21:30 | 000,008,336 | ---- | C] (MCCI) -- C:\Windows\System32\drivers\k510mdfl.sys [2012-04-19 22:21:30 | 000,006,176 | ---- | C] (MCCI) -- C:\Windows\System32\drivers\k510cmnt.sys [2012-04-19 22:21:30 | 000,006,176 | ---- | C] (MCCI) -- C:\Windows\System32\drivers\k510cm.sys [2012-04-19 22:21:30 | 000,005,808 | ---- | C] (MCCI) -- C:\Windows\System32\drivers\k510whnt.sys [2012-04-19 22:21:30 | 000,005,808 | ---- | C] (MCCI) -- C:\Windows\System32\drivers\k510wh.sys [2012-04-19 22:21:30 | 000,000,000 | ---D | C] -- C:\Users\Właściciel\Desktop\K510_signed_drivers [2012-04-19 22:16:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Avanquest [2012-04-14 17:53:42 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaws.exe [2012-04-14 17:53:41 | 000,149,280 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaw.exe [2012-04-14 17:53:41 | 000,149,280 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\java.exe [2012-04-05 16:53:36 | 000,000,000 | ---D | C] -- C:\Users\Właściciel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JADS Limited [2012-03-31 17:18:09 | 000,000,000 | ---D | C] -- C:\Users\Właściciel\Desktop\Wróbel zwyczajny – Wikipedia, wolna encyklopedia_files [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [1 C:\Users\Właściciel\Desktop\*.tmp files -> C:\Users\Właściciel\Desktop\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-04-24 09:08:10 | 000,001,078 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2431435891-1452894214-3284875751-1002UA.job [2012-04-24 09:04:59 | 000,000,414 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{D692E022-68C5-4B1F-B182-25D22EF1610E}.job [2012-04-24 08:35:00 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2012-04-24 08:25:04 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Users\Właściciel\Desktop\OTL.exe [2012-04-24 08:18:00 | 000,001,050 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2431435891-1452894214-3284875751-1003UA.job [2012-04-24 08:10:56 | 000,065,536 | ---- | M] () -- C:\Windows\System32\Ikeext.etl [2012-04-24 08:10:24 | 000,001,040 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2012-04-24 08:10:19 | 000,003,200 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2012-04-24 08:10:18 | 000,003,200 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2012-04-24 08:10:00 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012-04-24 08:03:05 | 000,000,983 | ---- | M] () -- C:\Users\Public\Desktop\Wise Registry Cleaner.lnk [2012-04-24 08:02:17 | 002,296,184 | ---- | M] (WiseCleaner.com ) -- C:\Users\Właściciel\Desktop\WRCFree.exe [2012-04-20 14:52:18 | 000,072,573 | ---- | M] () -- C:\Users\Właściciel\Desktop\K510_R4EA031_MAIN_GENERIC_CO_RED50.mbn [2012-04-20 13:48:30 | 000,544,794 | ---- | M] () -- C:\Windows\System32\perfh015.dat [2012-04-20 13:48:28 | 000,618,470 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2012-04-20 13:48:28 | 000,107,614 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2012-04-20 13:48:28 | 000,091,572 | ---- | M] () -- C:\Windows\System32\perfc015.dat [2012-04-20 13:37:34 | 026,743,488 | ---- | M] () -- C:\Users\Właściciel\Desktop\setool2lite.rar [2012-04-20 13:25:14 | 000,004,808 | ---- | M] () -- C:\Users\Właściciel\Desktop\K510i_CDA102459_2_CENT_EUROPE.zip [2012-04-20 13:21:24 | 000,052,512 | ---- | M] () -- C:\Users\Właściciel\Documents\Backup Mama 2012-04-20.mpb [2012-04-20 13:19:14 | 000,001,883 | ---- | M] () -- C:\Users\Właściciel\Desktop\Packard Bell Registration.lnk [2012-04-20 13:19:11 | 000,002,198 | ---- | M] () -- C:\Users\Właściciel\Desktop\Google Chrome.lnk [2012-04-20 13:18:14 | 000,001,817 | ---- | M] () -- C:\Users\Public\Desktop\MyPhoneExplorer.lnk [2012-04-20 13:13:01 | 000,000,972 | ---- | M] () -- C:\Windows\tasks\Google Software Updater.job [2012-04-20 12:18:01 | 000,000,998 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2431435891-1452894214-3284875751-1003Core.job [2012-04-14 17:53:10 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\deployJava1.dll [2012-04-14 17:53:10 | 000,157,472 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaws.exe [2012-04-14 17:53:10 | 000,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaw.exe [2012-04-14 17:53:10 | 000,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\java.exe [2012-04-14 17:21:17 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt [2012-04-13 09:42:01 | 000,000,375 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts.ics [2012-04-09 11:33:15 | 038,321,872 | ---- | M] () -- C:\Users\Właściciel\Desktop\videoplayback.flv [2012-04-07 16:08:00 | 000,001,026 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2431435891-1452894214-3284875751-1002Core.job [2012-04-05 19:00:14 | 000,007,421 | ---- | M] () -- C:\Users\Właściciel\Desktop\JScreenFix.jar [2012-04-05 16:53:38 | 000,000,694 | ---- | M] () -- C:\Users\Właściciel\.jscreenfix.licence [2012-03-31 20:08:03 | 027,364,165 | ---- | M] () -- C:\Users\Właściciel\Desktop\Analiza_matematyczna_w_zadaniach_cz.I.pdf [2012-03-31 17:57:05 | 000,039,210 | ---- | M] () -- C:\Users\Właściciel\Desktop\Jesus-Christ-you--are-my-life-Contralti-sheet-music-page_35437-2-1.png [2012-03-31 17:18:09 | 000,210,780 | ---- | M] () -- C:\Users\Właściciel\Desktop\Wróbel zwyczajny – Wikipedia, wolna encyklopedia.htm [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [1 C:\Users\Właściciel\Desktop\*.tmp files -> C:\Users\Właściciel\Desktop\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-04-24 08:03:05 | 000,000,983 | ---- | C] () -- C:\Users\Public\Desktop\Wise Registry Cleaner.lnk [2012-04-20 14:52:11 | 000,072,573 | ---- | C] () -- C:\Users\Właściciel\Desktop\K510_R4EA031_MAIN_GENERIC_CO_RED50.mbn [2012-04-20 13:33:13 | 026,743,488 | ---- | C] () -- C:\Users\Właściciel\Desktop\setool2lite.rar [2012-04-20 13:25:14 | 000,004,808 | ---- | C] () -- C:\Users\Właściciel\Desktop\K510i_CDA102459_2_CENT_EUROPE.zip [2012-04-20 13:21:24 | 000,052,512 | ---- | C] () -- C:\Users\Właściciel\Documents\Backup Mama 2012-04-20.mpb [2012-04-20 13:18:14 | 000,001,817 | ---- | C] () -- C:\Users\Public\Desktop\MyPhoneExplorer.lnk [2012-04-09 11:14:36 | 038,321,872 | ---- | C] () -- C:\Users\Właściciel\Desktop\videoplayback.flv [2012-04-05 19:00:14 | 000,007,421 | ---- | C] () -- C:\Users\Właściciel\Desktop\JScreenFix.jar [2012-04-05 16:53:37 | 000,000,694 | ---- | C] () -- C:\Users\Właściciel\.jscreenfix.licence [2012-03-31 20:03:13 | 027,364,165 | ---- | C] () -- C:\Users\Właściciel\Desktop\Analiza_matematyczna_w_zadaniach_cz.I.pdf [2012-03-31 17:57:07 | 000,039,210 | ---- | C] () -- C:\Users\Właściciel\Desktop\Jesus-Christ-you--are-my-life-Contralti-sheet-music-page_35437-2-1.png [2012-03-31 17:18:07 | 000,210,780 | ---- | C] () -- C:\Users\Właściciel\Desktop\Wróbel zwyczajny – Wikipedia, wolna encyklopedia.htm [2011-12-29 22:06:17 | 000,003,584 | ---- | C] () -- C:\Windows\System32\drivers\DLPORTIO.SYS [2011-06-14 20:33:55 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempiP3020.html [2011-05-25 20:44:12 | 000,000,064 | ---- | C] () -- C:\Windows\System32\rp_stats.dat [2011-05-25 20:44:12 | 000,000,044 | ---- | C] () -- C:\Windows\System32\rp_rules.dat [2011-05-25 20:25:39 | 000,016,432 | ---- | C] () -- C:\Windows\System32\lsdelete.exe [2011-05-20 22:35:28 | 000,304,744 | ---- | C] () -- C:\Windows\System32\nvStreaming.exe [2011-05-14 19:36:19 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\Tempwb2500.html [2011-03-25 18:59:40 | 000,002,828 | -HS- | C] () -- C:\ProgramData\KGyGaAvL.sys [2011-03-25 18:59:40 | 000,000,088 | RHS- | C] () -- C:\ProgramData\459CB68A85.sys [2011-01-07 21:42:15 | 000,000,215 | ---- | C] () -- C:\Windows\BsMobileModel.ini [2010-12-30 13:03:16 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempDl4460.html [2010-09-19 19:06:42 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempXw4248.html [2010-08-23 12:40:49 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\Tempcb5920.html [2010-08-23 12:40:01 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempUG4416.html [2010-08-23 12:36:49 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempDM3660.html [2010-08-23 12:36:49 | 000,002,089 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\Tempon3660.html [2010-08-17 14:38:29 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\Tempfy4944.html [2010-08-17 14:38:29 | 000,002,089 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\Templn4944.html [2010-08-14 17:21:19 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempYcH580.html [2010-08-14 17:21:19 | 000,002,089 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\Tempemc580.html [2010-07-27 15:18:46 | 000,007,168 | ---- | C] () -- C:\Windows\System32\drivers\StarOpen.sys [2010-07-14 11:42:11 | 000,000,182 | ---- | C] () -- C:\Users\Właściciel\AppData\Roaming\default.rss [2010-07-12 14:35:20 | 000,000,248 | ---- | C] () -- C:\Windows\System32\secustat.dat [2010-07-12 14:34:20 | 000,000,305 | ---- | C] () -- C:\Windows\System32\secushr.dat [2010-07-12 14:33:22 | 000,000,025 | ---- | C] () -- C:\Windows\libem.INI [2010-06-30 19:31:03 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempRs4464.html [2010-06-28 18:13:47 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempCL4692.html [2010-06-28 14:01:45 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\Tempev4088.html [2010-06-28 14:01:45 | 000,002,089 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempZU4088.html [2010-06-28 11:30:45 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\Tempkp3536.html [2010-06-28 10:06:59 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\Tempdg5700.html [2010-06-27 21:11:16 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempYx5440.html [2010-06-21 17:42:02 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempTL3124.html [2010-06-19 14:54:55 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempZL2416.html [2010-06-16 19:21:44 | 000,000,029 | ---- | C] () -- C:\Windows\Irremote.ini [2010-06-16 16:24:29 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\Temppu3808.html [2010-06-15 19:31:39 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempLx3148.html [2010-06-06 15:53:57 | 000,000,210 | ---- | C] () -- C:\Windows\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini [2010-06-02 19:16:21 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\Temppi3704.html [2010-06-02 19:16:21 | 000,002,089 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempLz3704.html [2010-06-02 15:08:38 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempbZ4184.html [2010-06-02 13:51:35 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempLH3652.html [2010-05-31 20:02:36 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempBQ5064.html [2010-05-28 19:37:08 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\Tempax3940.html [2010-05-28 15:43:31 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempHM3744.html [2010-05-27 19:55:12 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempZF4508.html [2010-05-26 14:01:23 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempAQ3816.html [2010-05-26 14:01:23 | 000,002,089 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempoO3816.html [2010-05-24 19:49:07 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempZY3748.html [2010-05-24 16:05:16 | 000,023,192 | ---- | C] () -- C:\Windows\hpqins15.dat [2010-05-23 16:19:19 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempvI3760.html [2010-05-23 16:19:19 | 000,002,089 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempJW3760.html [2010-05-20 18:29:47 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\Tempqc3080.html [2010-05-20 15:48:48 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempWHT556.html [2010-05-20 14:57:20 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempTy3976.html [2010-05-19 17:42:22 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempwF5936.html [2010-05-19 17:31:27 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempsJ4008.html [2010-05-19 16:19:06 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempWy4212.html [2010-05-19 15:15:32 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempEP4588.html [2010-05-19 15:15:32 | 000,002,089 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempQL4588.html [2010-05-17 18:34:50 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempqQ4236.html [2010-05-17 16:16:04 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempUB3416.html [2010-05-17 14:48:21 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempUa3408.html [2010-05-17 14:48:21 | 000,002,089 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\Tempyh3408.html [2010-05-16 20:41:23 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\Temphm5800.html [2010-05-12 16:25:01 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempuJ3956.html [2010-05-11 20:42:19 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempIy5052.html [2010-05-11 19:29:59 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\Tempzz3036.html [2010-05-11 18:58:38 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempLK1960.html [2010-05-11 14:39:43 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempQv3464.html [2010-05-09 16:46:56 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempzS3276.html [2010-05-09 15:34:11 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\Tempng5808.html [2010-05-09 15:28:33 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\Temprc5812.html [2010-05-08 10:01:43 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempLV1176.html [2010-05-08 10:01:43 | 000,002,089 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\Temphk1176.html [2010-05-07 18:57:26 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempRj6016.html [2010-05-07 18:20:19 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempjG2424.html [2010-05-07 18:20:19 | 000,002,089 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\Tempts2424.html [2010-05-07 16:26:09 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\Temptj4644.html [2010-05-06 19:22:29 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\Tempbh4236.html [2010-05-06 17:51:34 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempZj5244.html [2010-05-06 13:04:58 | 000,002,432 | ---- | C] () -- C:\Users\Właściciel\AppData\Local\TempEU4240.html [2010-04-28 16:27:19 | 000,018,752 | ---- | C] () -- C:\Windows\System32\solidlocalui.dll [2010-04-28 16:27:17 | 000,027,456 | ---- | C] () -- C:\Windows\System32\solidlocalmon.dll [2010-04-28 16:13:31 | 000,090,920 | ---- | C] () -- C:\Windows\System32\custmon32.dll [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 85 bytes -> C:\ProgramData:$SS_DESCRIPTOR_1VVTV9VTMVFBF1VJWVBH4P6XLVVVVVVVVVVVVVV @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Documents\WWT Collections:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Documents\VirtualDJ:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Documents\Updater5:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Documents\Symantec:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Documents\SH3:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Documents\Notesy programu OneNote:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Documents\Notes:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Documents\NFS Most Wanted:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Documents\NeroVision:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Documents\Nero Home:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Documents\My Music:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Documents\My Games:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Documents\Moje źródła danych:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Documents\Moje skanowanie:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Documents\Moje rozszerzenia Google Gadgets:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Documents\Moi uczniowie:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Documents\Lost Via Domus:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Documents\GoD:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Documents\F1 Challenge 99-02:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Documents\Expressivo Podcasts:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Documents\Expressivo Documents:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Documents\e-on software:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Documents\EA Games:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Documents\EA Games Saves:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Documents\Camtasia Studio:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Documents\Bus Driver:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Documents\Bluetooth:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Documents\Any Video Converter:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Documents\Alcohol 120%:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Documents\Adobe:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Documents\Activision:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Documents\18 WoS Haulin:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Desktop\Zdjęcia:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Desktop\Różne inne:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Desktop\Poczta:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Desktop\Muza:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Desktop\Moje dokumenty:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Desktop\JB.007.Quantum.of.Solace.iso:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Desktop\Gry:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Desktop\Filmy:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Users\Właściciel\Desktop\Dyskoteka:Roxio EMC Stream @Alternate Data Stream - 76 bytes -> C:\Program Files\pcwDreamScreen:Roxio EMC Stream < End of report >