Dzisiaj komputer zaczął mi trochę lagować, dlatego postanowiłem sprawdzić procesy. Zobaczyłem proces CSRSS.EXE. Nie wiem co to za proces ale nie myślę, że jakiś "nowy" nie chciany proces może być dobry. Od razu zresetowałem kompa, przestał się ciąć, a proces zniknął. Nie wiem czy mam się go obawiać i czy pojawi się na nowo. Wstawiam log z OTL (Nie mogę z Gmera gdyż gdy go włączam wyskakuje mi BSOD)
- Kod: Zaznacz wszystko
OTL logfile created on: 2011-11-28 21:15:26 - Run 2
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\ON\Moje dokumenty\Downloads
Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
3,50 Gb Total Physical Memory | 2,43 Gb Available Physical Memory | 69,52% Memory free
5,34 Gb Paging File | 4,30 Gb Available in Paging File | 80,60% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 298,08 Gb Total Space | 82,01 Gb Free Space | 27,51% Space Free | Partition Type: NTFS
Computer Name: NO | User Name: ON | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
[color=#E56717]========== Processes (SafeList) ==========[/color]
PRC - [2011-11-28 20:36:04 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\ON\Moje dokumenty\Downloads\OTL.exe
PRC - [2011-11-15 06:39:56 | 001,036,344 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
PRC - [2011-10-24 13:29:50 | 000,140,952 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Update\1.3.21.79\GoogleCrashHandler.exe
PRC - [2011-09-22 23:40:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
PRC - [2011-09-06 21:45:30 | 003,722,416 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
PRC - [2011-09-06 21:45:28 | 000,044,768 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2011-09-06 21:45:27 | 000,127,192 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\afwServ.exe
PRC - [2011-08-15 15:18:14 | 001,955,208 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
PRC - [2011-08-15 15:18:10 | 001,361,288 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
PRC - [2011-08-02 12:15:23 | 001,242,448 | ---- | M] (Valve Corporation) -- C:\Program Files\Steam\steam.exe
PRC - [2011-08-02 08:33:30 | 004,910,912 | ---- | M] (DT Soft Ltd) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe
PRC - [2011-06-15 16:33:20 | 000,249,648 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft\BingBar\SeaPort.EXE
PRC - [2011-06-01 14:14:56 | 013,349,472 | ---- | M] (GG Network S.A.) -- C:\Program Files\Gadu-Gadu 10\gg.exe
PRC - [2010-07-26 22:21:40 | 000,237,224 | ---- | M] () -- C:\Program Files\RealDesktop Toolbar\RealDesktopSvc.exe
PRC - [2009-03-12 02:25:16 | 000,233,472 | ---- | M] (Teruten) -- C:\WINDOWS\system32\FsUsbExService.Exe
PRC - [2008-04-14 18:21:16 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2008-01-29 04:20:27 | 002,177,576 | ---- | M] (Gainward Co.) -- C:\WINDOWS\TBPanel.exe
PRC - [2007-12-25 09:59:02 | 000,241,664 | ---- | M] (A4Tech Co.,Ltd.) -- C:\Program Files\A4Tech\Mouse\Amoumain.exe
PRC - [2007-06-25 08:32:24 | 000,065,536 | ---- | M] (A4Tech Co.,Ltd.) -- C:\Program Files\A4Tech\Keyboard\Ikeymain.exe
PRC - [2007-06-01 09:05:56 | 001,551,408 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
PRC - [2006-11-03 10:01:16 | 000,319,488 | ---- | M] (PixArt Imaging Incorporation) -- C:\WINDOWS\PixArt\Pac7311\Monitor.exe
[color=#E56717]========== Modules (No Company Name) ==========[/color]
MOD - [2011-11-27 07:50:50 | 001,619,456 | ---- | M] () -- C:\Program Files\Alwil Software\Avast5\defs\11112700\algo.dll
MOD - [2011-11-25 18:12:36 | 000,241,528 | ---- | M] () -- C:\Program Files\Alwil Software\Avast5\defs\11112700\aswRep.dll
MOD - [2011-11-15 15:46:00 | 014,410,024 | ---- | M] () -- C:\Program Files\Steam\bin\libcef.dll
MOD - [2011-11-15 15:45:54 | 000,194,344 | ---- | M] () -- C:\Program Files\Steam\bin\chromehtml.dll
MOD - [2011-11-15 15:45:52 | 000,091,432 | ---- | M] () -- C:\Program Files\Steam\bin\avutil-50.dll
MOD - [2011-11-15 15:45:50 | 000,155,432 | ---- | M] () -- C:\Program Files\Steam\bin\avformat-52.dll
MOD - [2011-11-15 15:45:48 | 000,914,216 | ---- | M] () -- C:\Program Files\Steam\bin\avcodec-52.dll
MOD - [2011-11-15 06:39:54 | 000,420,920 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\15.0.874.121\ppgooglenaclpluginchrome.dll
MOD - [2011-11-15 06:39:53 | 003,702,840 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\15.0.874.121\pdf.dll
MOD - [2011-11-15 06:38:16 | 000,122,952 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\15.0.874.121\avutil-51.dll
MOD - [2011-11-15 06:38:15 | 000,222,280 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\15.0.874.121\avformat-53.dll
MOD - [2011-11-15 06:38:14 | 001,746,504 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\15.0.874.121\avcodec-53.dll
MOD - [2011-11-15 03:36:18 | 008,593,056 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\15.0.874.121\gcswf32.dll
MOD - [2011-06-01 14:15:42 | 000,217,696 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\gglog.dll
MOD - [2011-06-01 14:15:40 | 000,123,488 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\ggipcradioproxy.dll
MOD - [2011-06-01 14:15:38 | 000,017,504 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\ggipc.dll
MOD - [2011-06-01 14:15:36 | 000,027,744 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\ggcrypto.dll
MOD - [2011-06-01 14:15:32 | 000,356,960 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\ggcommon.dll
MOD - [2011-04-16 04:04:30 | 014,749,696 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtWebKit4.dll
MOD - [2011-02-17 10:00:28 | 001,781,760 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtScript4.dll
MOD - [2011-02-17 10:00:28 | 000,393,216 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtXml4.dll
MOD - [2011-02-17 10:00:28 | 000,327,680 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtSvg4.dll
MOD - [2011-02-17 10:00:26 | 001,044,480 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtNetwork4.dll
MOD - [2011-02-17 10:00:24 | 009,097,216 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtGui4.dll
MOD - [2011-02-17 10:00:24 | 002,560,000 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtCore4.dll
MOD - [2010-08-06 20:00:32 | 000,311,296 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\imageformats\qtiff4.dll
MOD - [2010-08-06 20:00:32 | 000,274,432 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\imageformats\qmng4.dll
MOD - [2010-08-06 20:00:32 | 000,143,360 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\imageformats\qjpeg4.dll
MOD - [2010-08-06 20:00:32 | 000,027,648 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\imageformats\qgif4.dll
MOD - [2010-08-06 20:00:32 | 000,018,944 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\imageformats\qsvg4.dll
MOD - [2010-07-26 22:21:40 | 000,237,224 | ---- | M] () -- C:\Program Files\RealDesktop Toolbar\RealDesktopSvc.exe
MOD - [2010-03-19 08:33:38 | 000,059,904 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\zlib1.dll
MOD - [2009-02-03 03:15:28 | 003,771,296 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
MOD - [2008-04-14 18:20:37 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll
MOD - [1998-10-31 03:55:56 | 000,005,120 | ---- | M] () -- C:\WINDOWS\TBManage.dll
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
SRV - File not found [On_Demand | Stopped] -- -- (AppMgmt)
SRV - [2011-09-22 23:40:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2011-09-06 21:45:28 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2011-09-06 21:45:27 | 000,127,192 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\afwServ.exe -- (avast! Firewall)
SRV - [2011-08-15 15:18:10 | 001,361,288 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2011-07-07 18:31:08 | 000,195,336 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Program Files\Microsoft\BingBar\BBSvc.EXE -- (BBSvc)
SRV - [2011-06-15 16:33:20 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft\BingBar\SeaPort.EXE -- (BBUpdate)
SRV - [2010-07-26 22:21:40 | 000,237,224 | ---- | M] () [Auto | Running] -- C:\Program Files\RealDesktop Toolbar\RealDesktopSvc.exe -- (RealDesktop Toolbar Helper)
SRV - [2009-10-28 18:26:07 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2009-06-02 09:10:08 | 000,637,952 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2009-03-12 02:25:16 | 000,233,472 | ---- | M] (Teruten) [Auto | Running] -- C:\WINDOWS\system32\FsUsbExService.Exe -- (FsUsbExService)
SRV - [2007-06-01 09:05:56 | 001,551,408 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe -- (InCDsrv)
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
DRV - [2011-09-06 21:38:54 | 000,111,320 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswFW.sys -- (aswFW)
DRV - [2011-09-06 21:38:05 | 000,442,200 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2011-09-06 21:37:53 | 000,320,856 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2011-09-06 21:37:39 | 000,195,416 | ---- | M] (AVAST Software) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\aswNdis2.sys -- (aswNdis2)
DRV - [2011-09-06 21:36:38 | 000,034,392 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2011-09-06 21:36:36 | 000,052,568 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2011-09-06 21:36:23 | 000,110,552 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2011-09-06 21:36:12 | 000,020,568 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2011-09-06 21:33:11 | 000,030,808 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2011-08-15 15:18:24 | 000,232,512 | ---- | M] (DT Soft Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2010-06-28 21:10:45 | 000,012,112 | ---- | M] (ALWIL Software) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\aswNdis.sys -- (aswNdis)
DRV - [2009-08-05 21:48:42 | 000,054,752 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\fssfltr_tdi.sys -- (fssfltr)
DRV - [2009-07-13 15:51:12 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\winusb.sys -- (WinUSB)
DRV - [2009-03-18 16:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi)
DRV - [2009-03-12 02:25:16 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2008-08-26 09:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2008-05-26 19:07:26 | 000,016,376 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\gdrv.sys -- (gdrv)
DRV - [2007-12-25 10:08:38 | 000,014,336 | ---- | M] (A4Tech Co.,Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Amusbprt.sys -- (Amusbprt)
DRV - [2007-12-10 14:22:22 | 000,110,120 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s3017unic.sys -- (s3017unic) Sony Ericsson Device 3017 USB Ethernet Emulation SEMC3017 (WDM)
DRV - [2007-12-10 14:22:22 | 000,100,648 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s3017obex.sys -- (s3017obex)
DRV - [2007-12-10 14:22:20 | 000,104,616 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s3017mgmt.sys -- (s3017mgmt) Sony Ericsson Device 3017 USB WMC Device Management Drivers (WDM)
DRV - [2007-12-10 14:22:20 | 000,025,512 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s3017nd5.sys -- (s3017nd5) Sony Ericsson Device 3017 USB Ethernet Emulation SEMC3017 (NDIS)
DRV - [2007-12-10 14:22:18 | 000,110,632 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s3017mdm.sys -- (s3017mdm)
DRV - [2007-12-10 14:22:18 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s3017mdfl.sys -- (s3017mdfl)
DRV - [2007-12-10 14:22:14 | 000,083,880 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s3017bus.sys -- (s3017bus) Sony Ericsson Device 3017 driver (WDM)
DRV - [2007-09-19 14:44:46 | 000,101,504 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2007-09-19 10:16:32 | 004,617,728 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2007-06-25 09:43:38 | 000,098,344 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s117obex.sys -- (s117obex)
DRV - [2007-06-25 09:43:36 | 000,108,456 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s117mdm.sys -- (s117mdm)
DRV - [2007-06-25 09:43:36 | 000,100,264 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s117mgmt.sys -- (s117mgmt) Sony Ericsson Device 117 USB WMC Device Management Drivers (WDM)
DRV - [2007-06-25 09:43:36 | 000,098,856 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s117unic.sys -- (s117unic) Sony Ericsson Device 117 USB Ethernet Emulation SEMC117 (WDM)
DRV - [2007-06-25 09:43:36 | 000,022,952 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s117nd5.sys -- (s117nd5) Sony Ericsson Device 117 USB Ethernet Emulation SEMC117 (NDIS)
DRV - [2007-06-25 09:43:26 | 000,014,888 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s117mdfl.sys -- (s117mdfl)
DRV - [2007-06-25 09:43:22 | 000,082,984 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s117bus.sys -- (s117bus) Sony Ericsson Device 117 driver (WDM)
DRV - [2007-06-01 09:05:56 | 000,038,576 | ---- | M] (Nero AG) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\InCDRm.sys -- (incdrm)
DRV - [2007-06-01 09:05:56 | 000,037,040 | ---- | M] (Nero AG) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\InCDPass.sys -- (InCDPass)
DRV - [2007-06-01 09:05:46 | 000,118,704 | ---- | M] (Nero AG) [File_System | Disabled | Running] -- C:\WINDOWS\system32\drivers\InCDfs.sys -- (InCDfs)
DRV - [2007-03-16 03:11:38 | 000,012,256 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\TBPanel.sys -- (TBPanel)
DRV - [2007-03-16 03:11:38 | 000,012,256 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\TBPanel.sys -- (Cardex)
DRV - [2007-01-24 10:46:50 | 000,008,704 | ---- | M] (A4Tech Co.,Ltd.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\Amfilter.sys -- (Amfilter)
DRV - [2006-11-08 08:59:50 | 000,530,304 | ---- | M] (PixArt Imaging Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\PA707UCM.SYS -- (PAC7311)
DRV - [2006-07-05 13:46:06 | 000,063,352 | ---- | M] (Protection Technology (StarForce)) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfdrv01a.sys -- (sfdrv01a) StarForce Protection Environment Driver (version 1.x.a)
DRV - [2005-12-12 20:12:01 | 000,049,664 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfsync04.sys -- (sfsync04) StarForce Protection Synchronization Driver (version 4.x)
DRV - [2005-09-29 18:01:51 | 000,066,048 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfvfs02.sys -- (sfvfs02) StarForce Protection VFS Driver (version 2.x)
DRV - [2005-08-10 15:06:28 | 000,019,968 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfsync02.sys -- (sfsync02) StarForce Protection Synchronization Driver (version 2.x)
DRV - [2005-08-10 13:44:04 | 000,050,688 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfdrv01.sys -- (sfdrv01) StarForce Protection Environment Driver (version 1.x)
DRV - [2005-05-16 14:20:39 | 000,006,656 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfhlp02.sys -- (sfhlp02) StarForce Protection Helper Driver (version 2.x)
DRV - [2005-02-23 13:58:56 | 000,011,776 | ---- | M] (Arcsoft, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\afc.sys -- (Afc)
DRV - [2004-04-26 12:47:42 | 000,163,456 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\vidstub.sys -- (BootScreen)
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
[color=#E56717]========== Internet Explorer ==========[/color]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search bar = http://search.msn.com/spbasic.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
IE - HKCU\..\URLSearchHook: {038cb5c7-48ea-4af9-94e0-a1646542e62b} - No CLSID value found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
[color=#E56717]========== FireFox ==========[/color]
FF - prefs.js..browser.search.defaultenginename: ""
FF - prefs.js..browser.search.defaultthis.engineName: ""
FF - prefs.js..browser.search.defaulturl: ""
FF - prefs.js..browser.search.order.1: ""
FF - prefs.js..browser.search.selectedEngine: ""
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.1.3
FF - prefs.js..extensions.enabledItems: battlefieldheroespatcher@ea.com:5.0.67.0
FF - prefs.js..extensions.enabledItems: piclens@cooliris.com:1.11.6
FF - prefs.js..extensions.enabledItems: ctrl-tab@design-noir.de:0.21
FF - prefs.js..extensions.enabledItems: {c50ca3c4-5656-43c2-a061-13e717f73fc8}:3.0.8
FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.8.20091209.4
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {eaf8a4ef-d221-45ca-9deb-d0934b45fa34}:1.3.0.3
FF - prefs.js..extensions.enabledItems: {46551EC9-40F0-4e47-8E18-8E5CF550CFB8}:1.0.7
FF - prefs.js..extensions.enabledItems: personas@christopher.beard:1.5.2
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: battlefieldplay4free@ea.com:1.0.26.2
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26
FF - prefs.js..extensions.enabledItems: {5c8bfb7c-9a54-11dc-8314-0800200c9a66}:3.5
FF - prefs.js..extensions.enabledItems: fzamaan@gmail.com:1.25
FF - prefs.js..extensions.enabledItems: {de5809e0-2b07-11dd-bd0b-0800200c9a66}:1.1.3
FF - prefs.js..extensions.enabledItems: nasanightlaunch@example.com:0.6.20100112
FF - prefs.js..extensions.enabledItems: {333b42b0-9c75-11db-b606-0800200c9a66}:2.200100126
FF - prefs.js..extensions.enabledItems: {359faf50-e061-11dd-ad8b-0800200c9a66}:2.0.5
FF - prefs.js..extensions.enabledItems: {07b2a769-ed19-4483-87ce-c643914c81bb}:3.0.0.87
FF - prefs.js..extensions.enabledItems: {e213bb8f-8ebd-11db-96b7-005056c00008}:3.0.0.87
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@bittorrent.com/BitTorrentDNA: C:\Program Files\DNA\plugins\npbtdna.dll (BitTorrent, Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll (DivX, Inc)
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.102.0: C:\Program Files\Battlelog Web Plugins\1.102.0\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/RhapsodyPlayerEngine,version=1.0: C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@virtools.com/3DviaPlayer: C:\Program Files\Virtools\3D Life Player\npvirtools.dll File not found
FF - HKLM\Software\MozillaPlugins\@zylom.com/ZylomGamesPlayer: C:\Documents and Settings\All Users\Dane aplikacji\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll (Zylom)
FF - HKCU\Software\MozillaPlugins\@facebook.com/FBPlugin,version=1.0.3: C:\Documents and Settings\ON\Dane aplikacji\Facebook\npfbplugin_1_0_3.dll ( )
FF - HKCU\Software\MozillaPlugins\@nsroblox.roblox.com/launcher: C:\Documents and Settings\ON\Ustawienia lokalne\Dane aplikacji\RobloxVersions\version-b0b74ccbad4f4893\\NPRobloxProxy.dll ()
FF - HKCU\Software\MozillaPlugins\@real.com/RhapsodyPlayerEngine: C:\Documents and Settings\ON\Dane aplikacji\nprhapengine.dll File not found
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Documents and Settings\ON\Ustawienia lokalne\Dane aplikacji\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-08-15 13:04:24 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-08-10 01:23:29 | 000,000,000 | ---D | M]
[2008-07-07 16:00:27 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Extensions
[2011-08-20 22:58:21 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Firefox\Profiles\vpx55ue4.default\extensions
[2010-02-04 01:06:10 | 000,000,000 | ---D | M] (Vista-aero) -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Firefox\Profiles\vpx55ue4.default\extensions\{07b2a769-ed19-4483-87ce-c643914c81bb}
[2010-02-04 01:06:06 | 000,000,000 | ---D | M] (PinkHope) -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Firefox\Profiles\vpx55ue4.default\extensions\{333b42b0-9c75-11db-b606-0800200c9a66}
[2010-02-04 01:08:48 | 000,000,000 | ---D | M] (Slickerfox) -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Firefox\Profiles\vpx55ue4.default\extensions\{359faf50-e061-11dd-ad8b-0800200c9a66}
[2009-10-30 17:10:04 | 000,000,000 | ---D | M] (Stylish) -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Firefox\Profiles\vpx55ue4.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}
[2009-10-05 15:06:26 | 000,000,000 | ---D | M] (zblack) -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Firefox\Profiles\vpx55ue4.default\extensions\{50931610-3d8e-11dd-ae16-0800200c9a66}
[2009-07-26 09:35:57 | 000,000,000 | ---D | M] (Aero Fox) -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Firefox\Profiles\vpx55ue4.default\extensions\{5c8bfb7c-9a54-11dc-8314-0800200c9a66}
[2009-09-11 17:09:53 | 000,000,000 | ---D | M] (MushroomKingdom) -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Firefox\Profiles\vpx55ue4.default\extensions\{BF32D2C8-9C75-404b-ACF4-880DB4679236}
[2009-11-22 09:19:14 | 000,000,000 | ---D | M] (Fast Video Download (with SearchMenu)) -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Firefox\Profiles\vpx55ue4.default\extensions\{c50ca3c4-5656-43c2-a061-13e717f73fc8}
[2010-02-04 01:06:19 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Firefox\Profiles\vpx55ue4.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2009-06-13 19:41:31 | 000,000,000 | ---D | M] (Red Cats (green flavor)) -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Firefox\Profiles\vpx55ue4.default\extensions\{dd30bf68-268a-4815-ad48-8740b774c764}
[2010-02-04 01:06:05 | 000,000,000 | ---D | M] (Gradient iCool) -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Firefox\Profiles\vpx55ue4.default\extensions\{de5809e0-2b07-11dd-bd0b-0800200c9a66}
[2010-02-04 01:06:23 | 000,000,000 | ---D | M] (myFireFox) -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Firefox\Profiles\vpx55ue4.default\extensions\{e213bb8f-8ebd-11db-96b7-005056c00008}
[2010-01-02 22:13:29 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Firefox\Profiles\vpx55ue4.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2009-02-13 22:56:10 | 000,000,000 | ---D | M] (OggX (powered by TIME S.A.)) -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Firefox\Profiles\vpx55ue4.default\extensions\{eaf8a4ef-d221-45ca-9deb-d0934b45fa34}
[2009-10-30 17:09:49 | 000,000,000 | ---D | M] (AnyColor) -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Firefox\Profiles\vpx55ue4.default\extensions\anycolor.pavlos256@gmail.com
[2011-04-25 22:16:56 | 000,000,000 | ---D | M] (Battlefield Heroes Updater) -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Firefox\Profiles\vpx55ue4.default\extensions\battlefieldheroespatcher@ea.com
[2010-12-27 21:05:19 | 000,000,000 | ---D | M] (Battlefield Play4Free) -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Firefox\Profiles\vpx55ue4.default\extensions\battlefieldplay4free@ea.com
[2010-02-04 01:06:18 | 000,000,000 | ---D | M] (Ctrl-Tab) -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Firefox\Profiles\vpx55ue4.default\extensions\ctrl-tab@design-noir.de
[2009-11-08 17:49:30 | 000,000,000 | ---D | M] (Go Green) -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Firefox\Profiles\vpx55ue4.default\extensions\fzamaan@gmail.com
[2009-01-07 17:57:04 | 000,000,000 | ---D | M] (G-Fox Theme) -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Firefox\Profiles\vpx55ue4.default\extensions\G-Fox@mozillaonline.com
[2009-11-22 09:19:12 | 000,000,000 | ---D | M] ("Inline Code Finder for Firebug") -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Firefox\Profiles\vpx55ue4.default\extensions\icffirebug@robertnyman.com
[2009-01-28 18:56:03 | 000,000,000 | ---D | M] (Incomplete) -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Firefox\Profiles\vpx55ue4.default\extensions\incomplete@kumarharsh.com
[2010-02-04 01:06:05 | 000,000,000 | ---D | M] (NASA Night Launch) -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Firefox\Profiles\vpx55ue4.default\extensions\nasanightlaunch@example.com
[2009-01-07 17:44:24 | 000,000,000 | ---D | M] ("Newgrounds Classic") -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Firefox\Profiles\vpx55ue4.default\extensions\NG_Classic@snakehole.net
[2010-03-29 20:36:59 | 000,000,000 | ---D | M] (Personas) -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Firefox\Profiles\vpx55ue4.default\extensions\personas@christopher.beard
[2010-02-04 01:06:21 | 000,000,000 | ---D | M] (Cooliris) -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Firefox\Profiles\vpx55ue4.default\extensions\piclens@cooliris.com
[2009-09-11 17:09:54 | 000,000,000 | ---D | M] (RedShift V3) -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Firefox\Profiles\vpx55ue4.default\extensions\redshift_V2@shift-themes.com
[2010-02-04 01:06:13 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Firefox\Profiles\vpx55ue4.default\extensions\{07b2a769-ed19-4483-87ce-c643914c81bb}\chrome\mozapps\extensions
[2010-02-04 01:06:09 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Firefox\Profiles\vpx55ue4.default\extensions\{333b42b0-9c75-11db-b606-0800200c9a66}\chrome\mozapps\extensions
[2010-02-04 01:06:08 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Firefox\Profiles\vpx55ue4.default\extensions\{333b42b0-9c75-11db-b606-0800200c9a66}\chrome\mozapps\extensions\CVS
[2009-07-26 09:36:03 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Firefox\Profiles\vpx55ue4.default\extensions\{5c8bfb7c-9a54-11dc-8314-0800200c9a66}\chrome\mac\browser\extensions
[2009-07-26 09:36:03 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Firefox\Profiles\vpx55ue4.default\extensions\{5c8bfb7c-9a54-11dc-8314-0800200c9a66}\chrome\mac\mozapps\extensions
[2009-07-26 09:36:03 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Firefox\Profiles\vpx55ue4.default\extensions\{5c8bfb7c-9a54-11dc-8314-0800200c9a66}\chrome\win\browser\extensions
[2009-07-26 09:36:03 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Firefox\Profiles\vpx55ue4.default\extensions\{5c8bfb7c-9a54-11dc-8314-0800200c9a66}\chrome\win\mozapps\extensions
[2010-02-04 01:06:27 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Firefox\Profiles\vpx55ue4.default\extensions\{e213bb8f-8ebd-11db-96b7-005056c00008}\chrome\mozapps\extensions
[2009-06-13 19:47:39 | 000,001,824 | ---- | M] () -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Firefox\Profiles\vpx55ue4.default\searchplugins\translaticapl---angielsko-polski.xml
[2009-06-13 19:47:52 | 000,001,819 | ---- | M] () -- C:\Documents and Settings\ON\Dane aplikacji\Mozilla\Firefox\Profiles\vpx55ue4.default\searchplugins\translaticapl---polsko-angielski.xml
[2011-10-22 13:08:52 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011-11-27 19:11:57 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2010-11-10 14:51:33 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2011-05-05 21:40:26 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011-08-05 13:13:26 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
[2011-10-22 13:08:53 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}
[2009-01-15 16:48:05 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2009-09-02 07:20:52 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION
[2011-10-03 04:06:04 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2002-09-16 14:32:04 | 000,138,752 | ---- | M] () -- C:\Program Files\mozilla firefox\plugins\npImagine.dll
[2009-01-28 20:46:54 | 000,307,200 | ---- | M] (ESKA) -- C:\Program Files\mozilla firefox\plugins\npOggX.dll
[2006-07-31 15:07:16 | 000,098,304 | ---- | M] (Zylom) -- C:\Program Files\mozilla firefox\plugins\npzylomgamesplayer.dll
[2010-11-27 18:40:29 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2010-11-27 18:40:29 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2010-11-27 18:40:29 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2010-11-27 18:40:29 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2011-11-28 21:00:10 | 000,002,772 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\RealDesktop.xml
[2011-11-28 21:00:10 | 000,002,754 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\RealDesktop.xml.bak
[2010-11-27 18:40:29 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2010-11-27 18:40:29 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
[color=#E56717]========== Chrome ==========[/color]
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\15.0.874.121\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: Java Deployment Toolkit 6.0.260.3 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U26 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Acrobat 7.0\Reader\Browser\nppdf32.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\WINDOWS\system32\Adobe\Director\np32dsw.dll
CHR - plugin: DivX Web Player (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npdivx32.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll
CHR - plugin: 2007 Microsoft Office system (Enabled) = C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\15.0.874.121\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\15.0.874.121\pdf.dll
CHR - plugin: EA Battlefield Heroes Updater (Enabled) = C:\Documents and Settings\ON\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\gpdfjahpadlpfnfheehpddpcllihfkmm\5.0.122.0_0\npBFHUpdater.dll
CHR - plugin: EA Battlefield Heroes Updater (Enabled) = C:\Documents and Settings\ON\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\gpdfjahpadlpfnfheehpddpcllihfkmm\5.0.122.0_0\BFHUpdater.exe
CHR - plugin: Skype Toolbars (Enabled) = C:\Documents and Settings\ON\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8153_0\npSkypeChromePlugin.dll
CHR - plugin: DivX Player Netscape Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npDivxPlayerPlugin.dll
CHR - plugin: Imagine Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npImagine.dll
CHR - plugin: Ogg Player Gecko Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npOggX.dll
CHR - plugin: Zylom Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npzylomgamesplayer.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Facebook Plugin (Enabled) = C:\Documents and Settings\ON\Dane aplikacji\Facebook\npfbplugin_1_0_3.dll
CHR - plugin: Roblox Launcher Plugin (Enabled) = C:\Documents and Settings\ON\Ustawienia lokalne\Dane aplikacji\RobloxVersions\version-b0b74ccbad4f4893\\NPRobloxProxy.dll
CHR - plugin: Unity Player (Enabled) = C:\Documents and Settings\ON\Ustawienia lokalne\Dane aplikacji\Unity\WebPlayer\loader\npUnity3D32.dll
CHR - plugin: DNA Plug-in (Enabled) = C:\Program Files\DNA\plugins\npbtdna.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.65\npGoogleUpdate3.dll
CHR - plugin: RealNetworks Rhapsody Player Engine (Enabled) = C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll
CHR - plugin: Windows Live\u00AE Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: Google Translate = C:\Documents and Settings\ON\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb\1.2.3.1_0\
CHR - Extension: YouTube = C:\Documents and Settings\ON\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.2_0\
CHR - Extension: Bouncy Mouse = C:\Documents and Settings\ON\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\cgdllcbmneiklcmbeclfegccdjholomb\1.0.1_0\
CHR - Extension: Ocean Pacific = C:\Documents and Settings\ON\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\ecaabliejjdikjnkahhikeelbblahgoi\3_0\
CHR - Extension: Battlefield Heroes = C:\Documents and Settings\ON\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\gpdfjahpadlpfnfheehpddpcllihfkmm\5.0.127.0_0\
CHR - Extension: Voice Search = C:\Documents and Settings\ON\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\hhfkcobomkalfdlmkongnhnhahkmnaad\1.0.10_0\
CHR - Extension: Little Alchemy = C:\Documents and Settings\ON\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\knkapnclbofjjgicpkfoagdjohlfjhpd\0.0.11_0\
CHR - Extension: Skype Click to Call = C:\Documents and Settings\ON\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\
CHR - Extension: Plants vs Zombies = C:\Documents and Settings\ON\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\mmcegpfdgcoclcdfkjahiimlikdpnina\1.0.5_0\
O1 HOSTS File: ([2011-06-11 15:36:27 | 000,000,772 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 activate.adobe.com
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll ()
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5825.1100\swg.dll (Google Inc.)
O2 - BHO: (Google Dictionary Compression sdch) - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll (Google Inc.)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (EpsonToolBandKicker Class) - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
O3 - HKLM\..\Toolbar: (&Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll ()
O3 - HKLM\..\Toolbar: (Real Desktop Toolbar) - {4C350B19-6CA1-4569-B14C-296D8D653009} - C:\Program Files\RealDesktop Toolbar\realdesktoptb.dll (RealDesktop)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
O3 - HKLM\..\Toolbar: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (&Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Real Desktop Toolbar) - {4C350B19-6CA1-4569-B14C-296D8D653009} - C:\Program Files\RealDesktop Toolbar\realdesktoptb.dll (RealDesktop)
O3 - HKCU\..\Toolbar\WebBrowser: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [Gainward] C:\WINDOWS\TBPanel.exe (Gainward Co.)
O4 - HKLM..\Run: [iKeyWorks] C:\Program Files\A4Tech\Keyboard\Ikeymain.exe (A4Tech Co.,Ltd.)
O4 - HKLM..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k File not found
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [Monitor] C:\WINDOWS\PixArt\Pac7311\Monitor.exe (PixArt Imaging Incorporation)
O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\nvmctray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nview\nwiz.exe ()
O4 - HKLM..\Run: [WheelMouse] C:\Program Files\A4Tech\Mouse\Amoumain.exe (A4Tech Co.,Ltd.)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [EPSON SX100 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIEDE.EXE (SEIKO EPSON CORPORATION)
O4 - HKCU..\Run: [Gadu-Gadu 10] C:\Program Files\Gadu-Gadu 10\gg.exe (GG Network S.A.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 91 00 00 00 [binary data]
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx File not found
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {1E53EA77-34F2-474E-9046-B2B0C86F1821} http://www.eska.pl/streamplayers/OggX.ocx (OggX Control)
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab (Checkers Class)
O16 - DPF: {784797A8-342D-4072-9486-03C8D0F2F0A1} https://www.battlefieldheroes.com/static/updater/BFHUpdater_5.0.31.0.cab (Battlefield Heroes Updater)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab (MessengerStatsClient Class)
O16 - DPF: {C8BC46C7-921C-4102-B67D-F1F7E65FB0BE} https://battlefield.play4free.com/static/updater/BP4FUpdater_1.0.26.2.cab (Battlefield Play4Free Updater)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab (Minesweeper Flags Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 94.75.115.220 195.187.244.8
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{893D8F31-6E08-48EB-8AFF-D09B1EF4B6E9}: DhcpNameServer = 94.75.115.220 195.187.244.8
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\WB: DllName - (C:\Program Files\Stardock\MyColors\fastload.dll) - C:\Program Files\Stardock\MyColors\fastload.dll (Stardock)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\ON\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\ON\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008-05-26 18:45:59 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{4702ae42-c739-11e0-8b67-001d0fb39f68}\Shell - "" = AutoRun
O33 - MountPoints2\{4702ae42-c739-11e0-8b67-001d0fb39f68}\Shell\AutoRun\command - "" = E:\steambackup2.EXE
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
[2011-11-20 23:16:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ON\Pulpit\SuperMeatBoy
[2011-11-20 23:16:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ON\Menu Start\Programy\Super Meat Boy
[2011-11-20 23:15:47 | 000,000,000 | ---D | C] -- C:\Program Files\Super Meat Boy
[2011-11-20 13:40:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Google Earth
[2011-11-15 21:31:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ON\Dane aplikacji\Origin
[2011-11-15 21:31:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ON\Ustawienia lokalne\Dane aplikacji\Origin
[2011-11-15 21:28:54 | 000,000,000 | ---D | C] -- C:\Program Files\Battlelog Web Plugins
[2011-11-15 21:25:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Origin
[2011-11-15 21:25:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Origin
[2011-11-15 21:25:40 | 000,000,000 | ---D | C] -- C:\Program Files\Origin Games
[2011-11-15 21:25:11 | 000,000,000 | ---D | C] -- C:\Program Files\Origin
[2011-11-09 14:58:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ON\Dane aplikacji\Unity
[2010-11-03 11:33:35 | 000,695,296 | ---- | C] (AnjoCaido) -- C:\Documents and Settings\ON\Dane aplikacji\MinecraftSP.exe
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
[2011-11-28 21:15:12 | 000,000,558 | ---- | M] () -- C:\WINDOWS\DFC.INI
[2011-11-28 20:59:16 | 000,001,032 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011-11-28 20:58:44 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011-11-28 20:35:00 | 000,001,036 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011-11-28 20:31:49 | 000,002,437 | ---- | M] () -- C:\Documents and Settings\ON\Pulpit\HiJackThis.lnk
[2011-11-28 20:09:03 | 002,339,768 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011-11-28 20:05:33 | 000,002,938 | ---- | M] () -- C:\Documents and Settings\ON\Pulpit\Dokument.rtf
[2011-11-28 19:58:55 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\Access.dat
[2011-11-28 19:05:47 | 000,000,216 | ---- | M] () -- C:\Documents and Settings\ON\Pulpit\Assassin's Creed Revelations.url
[2011-11-28 15:02:44 | 000,000,215 | ---- | M] () -- C:\Documents and Settings\ON\Pulpit\Monday Night Combat.url
[2011-11-28 11:39:57 | 000,013,718 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011-11-27 22:45:23 | 000,361,523 | ---- | M] () -- C:\Documents and Settings\ON\Pulpit\mapaazja.png
[2011-11-27 19:08:20 | 000,002,265 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk
[2011-11-20 13:40:08 | 000,001,915 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Google Earth.lnk
[2011-11-15 21:25:51 | 000,000,654 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Origin.lnk
[2011-11-15 15:58:53 | 000,026,463 | ---- | M] () -- C:\Documents and Settings\ON\Pulpit\geo.gif
[2011-11-15 10:19:22 | 000,069,521 | ---- | M] () -- C:\Documents and Settings\ON\Pulpit\marsyliaaa.jpg
[2011-11-15 10:18:33 | 000,082,132 | ---- | M] () -- C:\Documents and Settings\ON\Pulpit\marsylia4.jpg
[2011-11-15 10:16:58 | 000,125,540 | ---- | M] () -- C:\Documents and Settings\ON\Pulpit\marsylia3.jpg
[2011-11-15 10:16:32 | 000,088,684 | ---- | M] () -- C:\Documents and Settings\ON\Pulpit\marsylia2.jpg
[2011-11-15 10:16:06 | 000,116,742 | ---- | M] () -- C:\Documents and Settings\ON\Pulpit\marsylia1.jpg
[2011-11-15 10:15:29 | 000,058,282 | ---- | M] () -- C:\Documents and Settings\ON\Pulpit\marsylia.jpg
[2011-11-14 21:48:12 | 000,004,933 | ---- | M] () -- C:\Documents and Settings\ON\Pulpit\lololololol.jpg
[2011-11-12 18:13:46 | 000,131,543 | ---- | M] () -- C:\Documents and Settings\ON\Pulpit\uuuuuuuuuu.PNG
[2011-11-09 19:05:26 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2011-11-08 20:47:40 | 000,003,059 | ---- | M] () -- C:\Documents and Settings\ON\Pulpit\char.png
[2011-11-01 00:25:48 | 000,558,918 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2011-11-01 00:25:48 | 000,496,854 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011-11-01 00:25:48 | 000,106,014 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2011-11-01 00:25:48 | 000,085,338 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011-10-31 23:41:29 | 000,000,193 | ---- | M] () -- C:\Documents and Settings\ON\Pulpit\Source SDK Base 2007.url
[2011-10-31 23:26:13 | 000,000,501 | ---- | M] () -- C:\Documents and Settings\ON\Pulpit\Skrót do Nowy Archiwum WinRAR-a (ZIP) (3).lnk
[2011-10-30 22:17:39 | 000,009,629 | ---- | M] () -- C:\Documents and Settings\ON\Pulpit\ciasteczko.jpg
[2011-10-30 10:06:23 | 004,157,362 | ---- | M] () -- C:\Documents and Settings\ON\Pulpit\DrZhark's Mo'Creatures Mod v2.13.2.zip
[2011-10-30 10:05:08 | 000,931,803 | ---- | M] () -- C:\Documents and Settings\ON\Pulpit\GuiAPI-0.11.1-1.8.1.zip
[2011-10-30 10:04:37 | 000,083,191 | ---- | M] () -- C:\Documents and Settings\ON\Pulpit\ModLoader (2).zip
[2011-10-30 10:04:35 | 000,046,888 | ---- | M] () -- C:\Documents and Settings\ON\Pulpit\AudioMod.zip
[2011-10-29 22:46:14 | 017,771,145 | ---- | M] () -- C:\Documents and Settings\ON\Pulpit\Sphax PureBDCraft 128x (1).zip
[2011-10-29 22:45:33 | 014,561,986 | ---- | M] () -- C:\Documents and Settings\ON\Pulpit\Sphax PureBDCraft 128x.zip
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[color=#E56717]========== Files Created - No Company Name ==========[/color]
[2011-11-28 20:05:33 | 000,002,938 | ---- | C] () -- C:\Documents and Settings\ON\Pulpit\Dokument.rtf
[2011-11-28 19:05:47 | 000,000,216 | ---- | C] () -- C:\Documents and Settings\ON\Pulpit\Assassin's Creed Revelations.url
[2011-11-28 15:02:27 | 000,000,215 | ---- | C] () -- C:\Documents and Settings\ON\Pulpit\Monday Night Combat.url
[2011-11-27 22:45:38 | 000,361,523 | ---- | C] () -- C:\Documents and Settings\ON\Pulpit\mapaazja.png
[2011-11-20 13:40:08 | 000,001,915 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Google Earth.lnk
[2011-11-15 21:25:51 | 000,000,654 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Origin.lnk
[2011-11-15 10:19:33 | 000,069,521 | ---- | C] () -- C:\Documents and Settings\ON\Pulpit\marsyliaaa.jpg
[2011-11-15 10:17:38 | 000,082,132 | ---- | C] () -- C:\Documents and Settings\ON\Pulpit\marsylia4.jpg
[2011-11-15 10:17:07 | 000,125,540 | ---- | C] () -- C:\Documents and Settings\ON\Pulpit\marsylia3.jpg
[2011-11-15 10:16:26 | 000,088,684 | ---- | C] () -- C:\Documents and Settings\ON\Pulpit\marsylia2.jpg
[2011-11-15 10:16:11 | 000,116,742 | ---- | C] () -- C:\Documents and Settings\ON\Pulpit\marsylia1.jpg
[2011-11-15 10:15:38 | 000,058,282 | ---- | C] () -- C:\Documents and Settings\ON\Pulpit\marsylia.jpg
[2011-11-14 21:48:24 | 000,004,933 | ---- | C] () -- C:\Documents and Settings\ON\Pulpit\lololololol.jpg
[2011-11-12 18:13:46 | 000,131,543 | ---- | C] () -- C:\Documents and Settings\ON\Pulpit\uuuuuuuuuu.PNG
[2011-11-12 18:09:46 | 000,026,463 | ---- | C] () -- C:\Documents and Settings\ON\Pulpit\geo.gif
[2011-11-04 09:19:53 | 002,084,815 | ---- | C] () -- C:\Documents and Settings\ON\Pulpit\20111025492.jpg
[2011-11-04 09:19:53 | 001,804,357 | ---- | C] () -- C:\Documents and Settings\ON\Pulpit\20111025490.jpg
[2011-10-31 23:41:29 | 000,000,193 | ---- | C] () -- C:\Documents and Settings\ON\Pulpit\Source SDK Base 2007.url
[2011-10-31 23:26:12 | 000,000,501 | ---- | C] () -- C:\Documents and Settings\ON\Pulpit\Skrót do Nowy Archiwum WinRAR-a (ZIP) (3).lnk
[2011-10-30 22:18:01 | 000,009,629 | ---- | C] () -- C:\Documents and Settings\ON\Pulpit\ciasteczko.jpg
[2011-10-30 10:05:48 | 004,157,362 | ---- | C] () -- C:\Documents and Settings\ON\Pulpit\DrZhark's Mo'Creatures Mod v2.13.2.zip
[2011-10-30 10:05:06 | 000,931,803 | ---- | C] () -- C:\Documents and Settings\ON\Pulpit\GuiAPI-0.11.1-1.8.1.zip
[2011-10-30 10:04:36 | 000,083,191 | ---- | C] () -- C:\Documents and Settings\ON\Pulpit\ModLoader (2).zip
[2011-10-30 10:04:35 | 000,046,888 | ---- | C] () -- C:\Documents and Settings\ON\Pulpit\AudioMod.zip
[2011-10-29 22:51:33 | 017,771,145 | ---- | C] () -- C:\Documents and Settings\ON\Pulpit\Sphax PureBDCraft 128x (1).zip
[2011-10-29 22:51:33 | 014,561,986 | ---- | C] () -- C:\Documents and Settings\ON\Pulpit\Sphax PureBDCraft 128x.zip
[2011-10-21 14:51:03 | 000,284,668 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2011-10-21 14:51:03 | 000,284,668 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2011-10-21 14:51:03 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin
[2011-10-21 14:49:37 | 002,129,678 | ---- | C] () -- C:\WINDOWS\System32\nvdata.data
[2011-10-10 21:33:34 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\Access.dat
[2011-08-15 09:44:35 | 000,000,041 | -HS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\.zreglib
[2011-06-19 19:20:55 | 000,074,752 | ---- | C] () -- C:\WINDOWS\System32\CLEyeDevices.dll
[2011-02-19 20:36:37 | 000,093,692 | ---- | C] () -- C:\Documents and Settings\ON\Dane aplikacji\Uninstal.exe
[2011-01-21 10:39:43 | 000,461,776 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat
[2011-01-14 07:01:34 | 000,000,004 | ---- | C] () -- C:\Documents and Settings\ON\Dane aplikacji\steam_md4.dat
[2010-10-06 22:17:13 | 002,601,752 | ---- | C] () -- C:\WINDOWS\System32\pbsvc_moh.exe
[2010-06-14 21:27:52 | 000,163,456 | ---- | C] () -- C:\WINDOWS\System32\drivers\vidstub.sys
[2010-02-21 14:27:29 | 000,003,592 | ---- | C] () -- C:\Documents and Settings\ON\Ustawienia lokalne\Dane aplikacji\HH.SAV
[2010-02-07 13:18:12 | 000,054,072 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2010-01-28 20:55:02 | 000,000,319 | ---- | C] () -- C:\WINDOWS\game.ini
[2010-01-23 14:13:07 | 000,111,932 | ---- | C] () -- C:\WINDOWS\System32\EPPICPrinterDB.dat
[2010-01-23 14:13:07 | 000,031,053 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern131.dat
[2010-01-23 14:13:07 | 000,027,417 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern121.dat
[2010-01-23 14:13:07 | 000,026,154 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern1.dat
[2010-01-23 14:13:07 | 000,024,903 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern3.dat
[2010-01-23 14:13:07 | 000,021,390 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern5.dat
[2010-01-23 14:13:07 | 000,020,148 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern2.dat
[2010-01-23 14:13:07 | 000,011,811 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern4.dat
[2010-01-23 14:13:07 | 000,004,943 | ---- | C] () -- C:\WINDOWS\System32\EPPICPattern6.dat
[2010-01-23 14:13:07 | 000,001,146 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_DU.dat
[2010-01-23 14:13:07 | 000,001,139 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_PT.dat
[2010-01-23 14:13:07 | 000,001,139 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_BP.dat
[2010-01-23 14:13:07 | 000,001,136 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_ES.dat
[2010-01-23 14:13:07 | 000,001,129 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_FR.dat
[2010-01-23 14:13:07 | 000,001,129 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_CF.dat
[2010-01-23 14:13:07 | 000,001,120 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_IT.dat
[2010-01-23 14:13:07 | 000,001,107 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_GE.dat
[2010-01-23 14:13:07 | 000,001,104 | ---- | C] () -- C:\WINDOWS\System32\EPPICPresetData_EN.dat
[2010-01-23 14:13:07 | 000,000,097 | ---- | C] () -- C:\WINDOWS\System32\PICSDK.ini
[2010-01-23 14:06:43 | 000,000,026 | ---- | C] () -- C:\WINDOWS\CDESX100EXPORT.ini
[2010-01-21 07:31:21 | 000,794,408 | ---- | C] () -- C:\WINDOWS\System32\pbsvc.exe
[2009-12-24 09:01:11 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll
[2009-12-24 09:01:11 | 000,036,608 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys
[2009-12-24 09:01:01 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\ON\Dane aplikacji\$_hpcst$.hpc
[2009-11-11 19:08:06 | 000,139,080 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2009-11-11 19:08:06 | 000,138,056 | ---- | C] () -- C:\Documents and Settings\ON\Dane aplikacji\PnkBstrK.sys
[2009-11-11 19:07:49 | 000,270,240 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe
[2009-11-11 19:07:48 | 000,075,136 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe
[2009-11-11 19:07:47 | 002,427,248 | ---- | C] () -- C:\WINDOWS\System32\pbsvc_heroes.exe
[2009-09-14 13:20:12 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI
[2009-08-20 16:56:54 | 005,433,520 | ---- | C] () -- C:\WINDOWS\System32\SpoonUninstall.exe
[2009-06-09 09:56:00 | 000,058,672 | ---- | C] () -- C:\WINDOWS\System32\wbload.dll
[2009-05-09 07:34:16 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2008-11-08 16:51:43 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\vidx16.dll
[2008-10-22 15:19:16 | 000,000,190 | ---- | C] () -- C:\WINDOWS\disneysy.ini
[2008-10-19 19:10:53 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2008-10-18 10:33:24 | 000,000,151 | ---- | C] () -- C:\WINDOWS\PhotoSnapViewer.INI
[2008-10-11 22:37:28 | 000,002,993 | ---- | C] () -- C:\WINDOWS\disney.ini
[2008-09-06 22:05:27 | 000,000,036 | ---- | C] () -- C:\WINDOWS\mafosav.INI
[2008-09-06 22:05:04 | 000,000,023 | ---- | C] () -- C:\WINDOWS\clofghls.dll
[2008-09-05 17:29:14 | 000,000,083 | ---- | C] () -- C:\WINDOWS\wa.INI
[2008-09-02 19:41:37 | 000,004,096 | ---- | C] () -- C:\WINDOWS\d3dx.dat
[2008-08-22 12:59:10 | 000,000,386 | ---- | C] () -- C:\WINDOWS\System32\Remover.ini
[2008-08-16 17:37:01 | 000,128,512 | ---- | C] () -- C:\Documents and Settings\ON\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008-07-23 17:50:52 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2008-07-23 17:46:38 | 000,012,288 | ---- | C] () -- C:\WINDOWS\System32\DivXWMPExtType.dll
[2008-07-07 16:00:28 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2008-07-01 13:15:58 | 000,000,072 | ---- | C] () -- C:\WINDOWS\System32\drivers\wnmsav.dat
[2008-06-16 19:26:16 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2008-05-26 20:37:40 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2008-05-26 20:35:06 | 002,339,768 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2008-05-26 19:17:15 | 000,000,558 | ---- | C] () -- C:\WINDOWS\DFC.INI
[2008-05-26 19:12:15 | 001,626,112 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe
[2008-05-26 19:12:13 | 001,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2008-05-26 19:12:13 | 001,339,392 | ---- | C] () -- C:\WINDOWS\System32\nvdspsch.exe
[2008-05-26 19:12:13 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2008-05-26 19:12:13 | 000,442,368 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe
[2008-05-26 19:12:13 | 000,425,984 | ---- | C] () -- C:\WINDOWS\System32\keystone.exe
[2008-05-26 19:12:12 | 001,474,560 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2008-05-26 19:12:12 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2008-05-26 19:12:12 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2008-05-26 19:11:46 | 000,032,768 | ---- | C] () -- C:\WINDOWS\TBPanelExt.dll
[2008-05-26 19:11:46 | 000,026,624 | ---- | C] () -- C:\WINDOWS\TBZoom.exe
[2008-05-26 19:11:46 | 000,012,285 | ---- | C] () -- C:\WINDOWS\Cadx3.ini
[2008-05-26 19:11:46 | 000,005,120 | ---- | C] () -- C:\WINDOWS\TBManage.dll
[2008-05-26 19:11:45 | 000,006,942 | ---- | C] () -- C:\WINDOWS\cadx2.ini
[2008-05-26 19:06:14 | 000,049,152 | R--- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2008-05-26 18:47:11 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2008-05-26 18:44:06 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2007-11-26 20:56:28 | 000,151,415 | ---- | C] () -- C:\WINDOWS\System32\xlive.dll.cat
[2007-10-25 17:26:10 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2006-11-01 07:54:30 | 000,139,264 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2006-11-01 07:52:38 | 000,524,288 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2006-10-27 12:52:34 | 000,000,518 | ---- | C] () -- C:\WINDOWS\System32\SP7311.ini
[2004-08-04 13:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2004-08-04 13:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2004-08-04 13:00:00 | 000,558,918 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat
[2004-08-04 13:00:00 | 000,496,854 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2004-08-04 13:00:00 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat
[2004-08-04 13:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2004-08-04 13:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2004-08-04 13:00:00 | 000,106,014 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat
[2004-08-04 13:00:00 | 000,085,338 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2004-08-04 13:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2004-08-04 13:00:00 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat
[2004-08-04 13:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2004-08-04 13:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004-08-04 13:00:00 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2004-08-04 13:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2004-08-04 13:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
< End of report >
P.S nie wyskoczył mi plik EXTRAS
