Oto log z OTL:
- Kod: Zaznacz wszystko
OTL logfile created on: 2009-10-16 10:25:47 - Run 1
OTL by OldTimer - Version 3.0.21.0 Folder = C:\Documents and Settings\Ja\Pulpit
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
1,75 Gb Total Physical Memory | 1,27 Gb Available Physical Memory | 72,45% Memory free
3,60 Gb Paging File | 3,22 Gb Available in Paging File | 89,59% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 19,53 Gb Total Space | 0,86 Gb Free Space | 4,41% Space Free | Partition Type: NTFS
Drive D: | 129,51 Gb Total Space | 5,10 Gb Free Space | 3,94% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
Drive F: | 2,13 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
Drive G: | 647,83 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive H: | 566,67 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
I: Drive not present or media not loaded
Computer Name: JA
Current User Name: Ja
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
[color=#E56717]========== Processes (SafeList) ==========[/color]
PRC - [2009-10-16 10:24:24 | 00,521,216 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Ja\Pulpit\OTL.exe
PRC - [2009-08-17 18:07:17 | 00,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe
PRC - [2009-08-17 17:58:55 | 00,018,752 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
PRC - [2009-05-21 11:34:40 | 00,386,480 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jucheck.exe
PRC - [2009-05-21 11:34:07 | 00,148,888 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jusched.exe
PRC - [2009-05-21 11:34:05 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe
PRC - [2008-12-19 11:29:47 | 07,678,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2008-10-28 09:32:46 | 00,611,664 | ---- | M] (Lavasoft) -- C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
PRC - [2008-05-17 14:36:34 | 01,503,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Explorer.EXE
PRC - [2008-02-26 05:00:02 | 00,520,192 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\Ati2evxx.exe
PRC - [2007-01-16 14:42:20 | 00,950,272 | ---- | M] ( ) -- C:\Program Files\SAGEM WiFi manager\WLANUTL.exe
PRC - [2006-11-02 15:24:32 | 00,184,320 | ---- | M] (VoyagerSoft, LLC) -- C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\SolidPdfService.exe
PRC - [2006-10-27 00:47:42 | 00,031,016 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
PRC - [2004-08-22 17:05:02 | 00,081,920 | ---- | M] (DAEMON'S HOME) -- C:\Program Files\D-Tools\daemon.exe
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
SRV - [2009-08-17 18:07:17 | 00,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe -- (avast! Antivirus [Auto | Running])
SRV - [2009-08-17 18:07:01 | 00,254,040 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe -- (avast! Mail Scanner [On_Demand | Stopped])
SRV - [2009-08-17 18:04:21 | 00,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe -- (avast! Web Scanner [On_Demand | Stopped])
SRV - [2009-08-17 17:58:55 | 00,018,752 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe -- (aswUpdSv [Auto | Running])
SRV - [2009-05-21 11:34:05 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService [Auto | Running])
SRV - [2008-10-28 09:32:46 | 00,611,664 | ---- | M] (Lavasoft) -- C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe -- (aawservice [Auto | Running])
SRV - [2008-07-29 21:10:04 | 00,046,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe -- (FontCache3.0.0.0 [On_Demand | Stopped])
SRV - [2008-07-29 19:24:50 | 00,881,664 | ---- | M] (Microsoft Corporation) -- c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe -- (idsvc [Unknown | Stopped])
SRV - [2008-07-29 19:16:38 | 00,132,096 | ---- | M] (Microsoft Corporation) -- c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing [Disabled | Stopped])
SRV - [2008-07-25 11:17:02 | 00,069,632 | ---- | M] (Microsoft Corporation) -- c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped])
SRV - [2008-07-25 11:16:40 | 00,034,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state [On_Demand | Stopped])
SRV - [2008-04-14 22:49:54 | 00,100,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\6to4svc.dll -- (6to4 [Auto | Running])
SRV - [2008-02-26 05:00:02 | 00,520,192 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\Ati2evxx.exe -- (Ati HotKey Poller [Auto | Running])
SRV - [2006-11-02 15:24:32 | 00,184,320 | ---- | M] (VoyagerSoft, LLC) -- C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\SolidPdfService.exe -- (ScReadSpool [Auto | Running])
SRV - [2006-10-27 00:47:54 | 00,065,824 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service [On_Demand | Stopped])
SRV - [2006-10-26 19:49:34 | 00,441,136 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv [On_Demand | Stopped])
SRV - [2006-10-26 13:03:08 | 00,145,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose [On_Demand | Stopped])
SRV - [2001-08-23 14:00:00 | 00,066,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\ipxsap.dll -- (NwSapAgent [Auto | Running])
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
DRV - [2009-08-17 18:06:43 | 00,094,160 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2 [Auto | Running])
DRV - [2009-08-17 18:05:52 | 00,114,768 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP [System | Running])
DRV - [2009-08-17 18:05:37 | 00,020,560 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\DRIVERS\aswFsBlk.sys -- (aswFsBlk [Auto | Running])
DRV - [2009-08-17 18:04:40 | 00,051,376 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi [System | Running])
DRV - [2009-08-17 18:04:29 | 00,023,152 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr [On_Demand | Running])
DRV - [2009-08-17 18:03:21 | 00,026,944 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4 [System | Running])
DRV - [2009-07-25 21:33:09 | 00,025,280 | ---- | M] (LogMeIn, Inc.) -- C:\WINDOWS\System32\DRIVERS\hamachi.sys -- (hamachi [On_Demand | Running])
DRV - [2008-09-17 16:14:00 | 00,027,672 | R--- | M] (EnTech Taiwan) -- C:\WINDOWS\System32\DRIVERS\ENTECH.sys -- (ENTECH [On_Demand | Stopped])
DRV - [2008-06-20 13:08:27 | 00,225,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\DRIVERS\tcpip6.sys -- (Tcpip6 [System | Running])
DRV - [2008-04-30 22:12:46 | 00,055,424 | ---- | M] () -- C:\WINDOWS\System32\DRIVERS\VBoxDrv.sys -- (VBoxDrv [System | Running])
DRV - [2008-04-30 22:12:46 | 00,042,048 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\DRIVERS\VBoxUSBMon.sys -- (VBoxUSBMon [System | Running])
DRV - [2008-04-14 00:26:08 | 00,088,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\DRIVERS\nwlnkipx.sys -- (NwlnkIpx [Auto | Running])
DRV - [2008-04-14 00:15:14 | 00,060,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbaudio.sys -- (usbaudio [On_Demand | Running])
DRV - [2008-04-13 22:09:18 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\System32\DRIVERS\secdrv.sys -- (Secdrv [On_Demand | Stopped])
DRV - [2008-04-13 22:06:06 | 00,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) -- C:\WINDOWS\System32\DRIVERS\HDAudBus.sys -- (HDAudBus [On_Demand | Running])
DRV - [2008-04-04 10:57:00 | 00,296,320 | ---- | M] (Marvell) -- C:\WINDOWS\System32\DRIVERS\yk51x86.sys -- (yukonwxp [On_Demand | Running])
DRV - [2008-02-26 07:51:43 | 02,863,616 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\DRIVERS\ati2mtag.sys -- (ati2mtag [On_Demand | Running])
DRV - [2007-12-18 12:18:10 | 00,732,160 | ---- | M] (Conexant Systems Inc.) -- C:\WINDOWS\System32\drivers\CHDAud.sys -- (HdAudAddService [On_Demand | Running])
DRV - [2007-11-03 00:12:32 | 00,041,456 | ---- | M] (Cyberlink Corp.) -- C:\Program Files\CyberLink\PowerDVD\000.fcl -- ({95808DC4-FA4A-4C74-92FE-5B863F82066B} [Auto | Running])
DRV - [2007-05-02 12:11:18 | 00,109,704 | ---- | M] (MCCI Corporation) -- C:\WINDOWS\System32\DRIVERS\ss_mdm.sys -- (ss_mdm [On_Demand | Stopped])
DRV - [2007-05-02 12:11:18 | 00,015,112 | ---- | M] (MCCI Corporation) -- C:\WINDOWS\System32\DRIVERS\ss_mdfl.sys -- (ss_mdfl [On_Demand | Stopped])
DRV - [2007-05-02 12:11:16 | 00,083,592 | ---- | M] (MCCI Corporation) -- C:\WINDOWS\System32\DRIVERS\ss_bus.sys -- (ss_bus [On_Demand | Stopped])
DRV - [2007-03-08 01:51:00 | 00,043,528 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20 [Boot | Running])
DRV - [2007-02-08 18:46:00 | 00,209,152 | ---- | M] (Realtek Semiconductor Corporation ) -- C:\WINDOWS\System32\DRIVERS\RTL8187B.sys -- (RTL8187B [On_Demand | Running])
DRV - [2007-01-16 14:52:20 | 00,017,664 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) -- C:\WINDOWS\System32\Drivers\ZDPSp50.sys -- (ZDPSp50 [On_Demand | Stopped])
DRV - [2006-07-24 17:05:00 | 00,005,632 | ---- | M] () -- C:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen [System | Running])
DRV - [2004-08-22 16:31:48 | 00,005,248 | ---- | M] ( ) -- C:\WINDOWS\System32\Drivers\d347prt.sys -- (d347prt [Boot | Running])
DRV - [2004-08-22 16:31:10 | 00,155,136 | ---- | M] ( ) -- C:\WINDOWS\system32\DRIVERS\d347bus.sys -- (d347bus [Boot | Running])
DRV - [2001-08-23 14:00:00 | 00,063,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\DRIVERS\nwlnknb.sys -- (NwlnkNb [Auto | Running])
DRV - [2001-08-23 14:00:00 | 00,055,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\DRIVERS\nwlnkspx.sys -- (NwlnkSpx [Auto | Running])
DRV - [2001-08-23 14:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\System32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running])
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
[color=#E56717]========== Internet Explorer ==========[/color]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie_rsearch.html
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\g, = http://www.google.com/search?q=%s
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
[color=#E56717]========== FireFox ==========[/color]
FF - prefs.js..browser.search.suggest.enabled: false
FF - prefs.js..browser.startup.homepage: "http://www.gazeta.pl"
FF - HKLM\software\mozilla\Firefox\extensions\\jqs@sun.com: C:\Program Files\Java\jre6\lib\deploy\jqs\ff [2009-06-03 09:01:08 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\extensions\\{20a82645-c095-46ed-80e3-08825760534b}: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2009-09-04 09:28:45 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 2.0.0.20\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2008-12-19 11:29:48 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 2.0.0.20\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009-06-03 12:14:58 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
[2009-10-16 09:51:58 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\mozilla\Firefox\Profiles\qrupuoqn.default\extensions
[2009-09-04 16:46:42 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\mozilla\Firefox\Profiles\qrupuoqn.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2009-10-16 09:51:58 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions
[2008-12-19 11:29:48 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2008-10-13 11:29:46 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}
[2009-06-03 09:01:22 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
[2009-06-27 19:31:22 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}
[2008-10-17 10:18:22 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\talkback@mozilla.org
[2008-12-19 11:29:38 | 00,067,688 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\jar50.dll
[2008-12-19 11:29:38 | 00,054,368 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\jsd3250.dll
[2008-12-19 11:29:38 | 00,034,944 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\myspell.dll
[2008-12-19 11:29:38 | 00,046,712 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\spellchk.dll
[2008-12-19 11:29:38 | 00,172,136 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\xpinstal.dll
[2007-04-10 18:21:08 | 00,163,256 | ---- | M] (Microsoft Corporation) -- C:\Program Files\mozilla firefox\plugins\np-mswmp.dll
[2008-11-04 11:15:38 | 00,114,688 | ---- | M] (Adobe Systems, Inc.) -- C:\Program Files\mozilla firefox\plugins\np32dsw.dll
[2009-05-21 11:33:58 | 00,410,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeploytk.dll
[2008-09-16 02:11:52 | 01,335,600 | ---- | M] (DivX,Inc.) -- C:\Program Files\mozilla firefox\plugins\npdivx32.dll
[2008-09-16 02:12:12 | 00,098,304 | ---- | M] (DivX, Inc) -- C:\Program Files\mozilla firefox\plugins\npDivxPlayerPlugin.dll
[2007-02-12 21:30:16 | 00,164,352 | ---- | M] (Indiepath Ltd) -- C:\Program Files\mozilla firefox\plugins\npigl.dll
[2008-12-19 11:29:48 | 00,022,656 | ---- | M] (mozilla.org) -- C:\Program Files\mozilla firefox\plugins\npnul32.dll
[2006-10-26 20:12:16 | 00,016,192 | ---- | M] (Microsoft Corporation) -- C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL
[2009-02-27 12:13:42 | 00,103,792 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files\mozilla firefox\plugins\nppdf32.dll
[2008-04-14 05:00:00 | 00,144,720 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\mozilla firefox\plugins\nppl3260.dll
[2008-04-03 18:12:26 | 00,143,360 | ---- | M] (Apple Inc.) -- C:\Program Files\mozilla firefox\plugins\npqtplugin.dll
[2008-04-03 18:12:26 | 00,143,360 | ---- | M] (Apple Inc.) -- C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll
[2008-04-03 18:12:26 | 00,143,360 | ---- | M] (Apple Inc.) -- C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll
[2008-04-03 18:12:26 | 00,143,360 | ---- | M] (Apple Inc.) -- C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll
[2008-04-03 18:12:26 | 00,143,360 | ---- | M] (Apple Inc.) -- C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll
[2008-04-14 05:00:00 | 00,081,920 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\mozilla firefox\plugins\nprpjplug.dll
[2008-10-17 10:18:20 | 00,000,904 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2008-10-17 10:18:20 | 00,001,419 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2008-10-17 10:18:20 | 00,002,368 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google.xml
[2008-10-17 10:18:20 | 00,000,926 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2008-10-17 10:18:20 | 00,000,866 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2008-10-17 10:18:20 | 00,001,198 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2008-10-17 10:18:20 | 00,001,693 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
O1 HOSTS File: (686 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (Solid Converter PDF) - {259F616C-A300-44F5-B04A-ED001A26C85C} - C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\ExploreExtPDF.dll (VoyagerSoft, LLC)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (Solid Converter PDF) - {259F616C-A300-44F5-B04A-ED001A26C85C} - C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\ExploreExtPDF.dll (VoyagerSoft, LLC)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avast!] C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software)
O4 - HKLM..\Run: [DAEMON Tools-1033] C:\Program Files\D-Tools\daemon.exe (DAEMON'S HOME)
O4 - HKLM..\Run: [GrooveMonitor] C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Corporation)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - HKCU..\Run: [cdoosoft] C:\Documents and Settings\Ja\Ustawienia lokalne\Temp\herss.exe ()
O4 - HKCU..\Run: [Gadu-Gadu] C:\Program Files\Gadu-Gadu\gg.exe (Gadu-Gadu S.A.)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Program sieciowy dla SAGEM Wi-Fi 11g USB adapter.lnk = C:\Program Files\SAGEM WiFi manager\WLANUTL.exe ( )
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsMenu = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRemoteRecursiveEvents = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoInternetOpenWith = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SynchronousMachineGroupPolicy = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SynchronousUserGroupPolicy = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ClearRecentDocsOnExit = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsMenu = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsHistory = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoInstrumentation = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuMFUprogramsList = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSaveSettings = 0
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\System32\nwprovau.dll (Microsoft Corporation)
O15 - HKCU\..Trusted Domains: google.com ([mail] https in Trusted sites)
O15 - HKCU\..Trusted Domains: 2 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14)
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp - No CLSID value found
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Filter: - text/xml - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\Ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008-10-13 11:14:07 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2009-10-16 10:25:34 | 00,000,059 | RHS- | M] () - C:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2009-10-16 10:25:34 | 00,000,059 | RHS- | M] () - D:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2008-10-13 20:44:59 | 00,136,448 | R--- | M] (Sports Interactive) - F:\autorun.exe -- [ UDF ]
O32 - AutoRun File - [2008-07-25 19:10:55 | 00,000,027 | R--- | M] () - F:\autorun.inf -- [ UDF ]
O32 - AutoRun File - [2004-10-26 01:40:24 | 00,000,107 | R--- | M] () - G:\autorun.inf -- [ CDFS ]
O32 - AutoRun File - [2001-01-10 16:48:42 | 00,172,032 | R--- | M] (Team17 Software Ltd) - H:\AUTORUN.EXE -- [ CDFS ]
O32 - AutoRun File - [2000-11-09 19:05:38 | 00,000,051 | R--- | M] () - H:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\{82a49570-995f-11dd-a7d0-0015af6e86c4}\Shell\AutoRun\command - "" = J:\mje12tni.exe -- File not found
O33 - MountPoints2\{82a49570-995f-11dd-a7d0-0015af6e86c4}\Shell\open\Command - "" = J:\mje12tni.exe -- File not found
O33 - MountPoints2\{95122c9a-5f61-11de-abd0-0015af6e86c4}\Shell\AutoRun\command - "" = J:\ycvvj.exe -- File not found
O33 - MountPoints2\{95122c9a-5f61-11de-abd0-0015af6e86c4}\Shell\open\Command - "" = J:\ycvvj.exe -- File not found
O34 - HKLM BootExecute: (autocheck) - File not found
O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) - File not found
O34 - HKLM BootExecute: (OODBS) - File not found
O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS\System32\lsdelete.exe ()
O34 - HKLM BootExecute: (aswBoot.exe) - C:\WINDOWS\System32\aswBoot.exe (ALWIL Software)
O34 - HKLM BootExecute: (/M:23ac1d92) - File not found
O35 - comfile [open] -- "%1" %* File not found
O35 - exefile [open] -- "%1" %* File not found
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
[1 C:\WINDOWS\System32\*.tmp files]
[2009-09-17 10:14:48 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\SolidDocuments
[2009-09-17 10:15:12 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Dane aplikacji\SolidDocuments
[2009-09-19 11:38:59 | 00,000,000 | ---D | C] -- C:\Program Files\Alwil Software
[2009-09-17 10:15:06 | 00,000,000 | ---D | C] -- C:\Program Files\SolidDocuments
[2009-10-16 10:24:27 | 00,521,216 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Ja\Pulpit\OTL.exe
[2009-10-14 20:00:14 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Pulpit\obrazy
[2009-10-07 22:33:50 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Pulpit\dsj21
[2009-10-07 09:19:24 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\appmgmt
[2009-10-07 08:09:25 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Pulpit\Kasia Kowalska - Gemini
[2009-09-26 16:45:54 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Pulpit\POLITYKA.39.2009.EBOOK
[2009-09-25 16:29:37 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Pulpit\Californication.s3e01.RMVB
[2009-09-25 15:47:15 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Pulpit\MailResender
[2009-09-21 22:49:23 | 00,000,000 | ---D | C] -- C:\HattrickOrganizer
[2009-09-19 11:39:31 | 00,051,376 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2009-09-19 11:39:31 | 00,023,152 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2009-09-19 11:39:30 | 00,026,944 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys
[2009-09-19 11:39:29 | 00,114,768 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2009-09-19 11:39:29 | 00,097,480 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\AvastSS.scr
[2009-09-19 11:39:29 | 00,094,160 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys
[2009-09-19 11:39:29 | 00,093,392 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon.sys
[2009-09-19 11:39:29 | 00,020,560 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2009-09-19 11:39:04 | 01,279,456 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\aswBoot.exe
[2008-10-13 11:51:42 | 00,155,136 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\d347bus.sys
[2008-10-13 11:51:42 | 00,005,248 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\d347prt.sys
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
[1 C:\WINDOWS\System32\*.tmp files]
[4 C:\WINDOWS\*.tmp files]
[2009-10-16 10:26:24 | 00,000,059 | RHS- | M] () -- C:\autorun.inf
[2009-10-16 10:24:24 | 00,521,216 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Ja\Pulpit\OTL.exe
[2009-10-16 10:20:33 | 00,116,414 | RHS- | M] () -- C:\2sm66r.exe
[2009-10-16 10:18:33 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2009-10-16 10:18:25 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2009-10-16 10:02:52 | 09,664,808 | -H-- | M] () -- C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2009-10-15 23:32:28 | 00,013,673 | ---- | M] () -- C:\Documents and Settings\Ja\Pulpit\1.docx
[2009-10-15 22:33:01 | 00,000,478 | ---- | M] () -- C:\Documents and Settings\Ja\Pulpit\The Office [5x05] Employee Transfer.avi.ini
[2009-10-15 22:06:06 | 92,752,646 | ---- | M] () -- C:\Documents and Settings\Ja\Pulpit\The.Office.5x5.rar
[2009-10-15 21:51:34 | 00,000,470 | ---- | M] () -- C:\Documents and Settings\Ja\Pulpit\The Office [5x04] Crime Aid.avi.ini
[2009-10-15 21:18:19 | 93,112,437 | ---- | M] () -- C:\Documents and Settings\Ja\Pulpit\The.Office.5x4(2).rar
[2009-10-14 22:08:32 | 00,000,472 | ---- | M] () -- C:\Documents and Settings\Ja\Pulpit\The Office [5x03] Baby Shower.avi.ini
[2009-10-14 21:54:22 | 93,112,437 | ---- | M] () -- C:\Documents and Settings\Ja\Pulpit\The.Office.5x4.rar
[2009-10-14 20:56:34 | 93,207,487 | ---- | M] () -- C:\Documents and Settings\Ja\Pulpit\The.Office.5x3.rar
[2009-10-14 19:14:20 | 00,025,927 | ---- | M] () -- C:\Documents and Settings\Ja\Pulpit\ISO1_DVD.nri
[2009-10-14 19:08:37 | 00,000,493 | ---- | M] () -- C:\Documents and Settings\Ja\Pulpit\The Office [5x02] Business Ethics.avi.ini
[2009-10-13 22:06:02 | 93,352,435 | ---- | M] () -- C:\Documents and Settings\Ja\Pulpit\The.Office.5x2.rar
[2009-10-11 18:11:20 | 92,244,604 | ---- | M] () -- C:\Documents and Settings\Ja\Pulpit\The.Office.4x11.rar
[2009-10-11 17:12:35 | 00,114,888 | RHS- | M] () -- C:\mje12tni.exe
[2009-10-11 13:25:53 | 00,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2009-10-10 18:45:38 | 00,114,819 | RHS- | M] () -- C:\vlvtdflx.exe
[2009-10-09 19:36:23 | 00,022,246 | ---- | M] () -- C:\Documents and Settings\Ja\Pulpit\the.office.s04e07.hdtv.xvid-xor.001.bak
[2009-10-09 16:44:39 | 00,000,491 | ---- | M] () -- C:\Documents and Settings\Ja\Pulpit\The.Office.S04E04.HDTV.XviD-LOL.rmvb.ini
[2009-10-09 08:39:45 | 00,117,508 | RHS- | M] () -- C:\1di1w.exe
[2009-10-08 19:58:58 | 00,000,477 | ---- | M] () -- C:\Documents and Settings\Ja\Pulpit\The.Office.S04E02.HDTV.XviD-XOR.rmvb.ini
[2009-10-08 18:22:55 | 00,039,424 | ---- | M] () -- C:\Documents and Settings\Ja\Pulpit\II-rok-zima-2009-2010.xls
[2009-10-08 10:20:47 | 00,000,480 | ---- | M] () -- C:\Documents and Settings\Ja\Pulpit\the.office.s04e01.hdtv.xvid-xor.[VTV].rmvb.ini
[2009-10-07 22:33:20 | 00,216,847 | ---- | M] () -- C:\Documents and Settings\Ja\Pulpit\dsj21.rar
[2009-10-07 18:37:18 | 00,117,945 | RHS- | M] () -- C:\r2g20.exe
[2009-10-06 18:42:02 | 00,117,625 | RHS- | M] () -- C:\f9o8o.exe
[2009-10-06 08:38:26 | 00,118,651 | RHS- | M] () -- C:\ctu8r.exe
[2009-10-05 18:44:10 | 00,048,128 | ---- | M] () -- C:\Documents and Settings\Ja\Pulpit\stacj_3let_Ist-pol-przy2.doc
[2009-10-05 05:15:00 | 00,117,453 | RHS- | M] () -- C:\sp1jensi.exe
[2009-09-30 22:32:07 | 00,000,493 | ---- | M] () -- C:\Documents and Settings\Ja\Pulpit\The Office [2x02] cenzura-spam Harassment.avi.ini
[2009-09-29 20:55:24 | 00,018,105 | ---- | M] () -- C:\Documents and Settings\Ja\Pulpit\Episode 3 Health Care.001.bak
[2009-09-26 17:22:19 | 00,000,038 | ---- | M] () -- C:\WINDOWS\avisplitter.INI
[2009-09-25 15:47:05 | 05,006,019 | ---- | M] () -- C:\Documents and Settings\Ja\Pulpit\MailResender.2.15.011.Patch1.(legendteam.net).rar
[2009-09-24 20:45:12 | 00,033,792 | ---- | M] () -- C:\Documents and Settings\Ja\Pulpit\podstawy wiedzy o sm - sylabus 2009.doc
[2009-09-24 20:31:11 | 00,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2009-09-21 22:49:28 | 00,001,397 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Hattrick Organizer.lnk
[2009-09-19 11:39:31 | 00,001,709 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\avast! Antivirus.lnk
[2009-09-19 11:39:29 | 00,002,645 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2009-09-17 10:43:44 | 00,000,638 | ---- | M] () -- C:\Documents and Settings\Ja\Pulpit\ipla.lnk
[2009-09-17 10:24:04 | 00,000,167 | ---- | M] () -- C:\WINDOWS\ConverterCore.INI
[2009-09-17 10:17:11 | 00,002,561 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Solid Converter PDF.lnk
[color=#E56717]========== Files - No Company Name ==========[/color]
[2009-10-16 10:20:59 | 00,116,414 | RHS- | C] () -- C:\2sm66r.exe
[2009-10-15 23:32:26 | 00,013,673 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\1.docx
[2009-10-15 22:12:05 | 00,000,478 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\The Office [5x05] Employee Transfer.avi.ini
[2009-10-15 22:11:55 | 92,729,918 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\The Office [5x05] Employee Transfer.avi
[2009-10-15 21:58:24 | 92,752,646 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\The.Office.5x5.rar
[2009-10-15 21:30:22 | 00,000,470 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\The Office [5x04] Crime Aid.avi.ini
[2009-10-15 21:30:11 | 93,089,590 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\The Office [5x04] Crime Aid.avi
[2009-10-15 21:10:41 | 93,112,437 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\The.Office.5x4(2).rar
[2009-10-14 21:47:41 | 00,000,472 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\The Office [5x03] Baby Shower.avi.ini
[2009-10-14 21:47:32 | 93,186,598 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\The Office [5x03] Baby Shower.avi
[2009-10-14 21:46:46 | 93,112,437 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\The.Office.5x4.rar
[2009-10-14 20:47:09 | 93,207,487 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\The.Office.5x3.rar
[2009-10-14 19:14:20 | 00,025,927 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\ISO1_DVD.nri
[2009-10-13 22:23:19 | 00,000,493 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\The Office [5x02] Business Ethics.avi.ini
[2009-10-13 22:23:05 | 93,330,584 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\The Office [5x02] Business Ethics.avi
[2009-10-13 21:58:23 | 93,352,435 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\The.Office.5x2.rar
[2009-10-11 18:03:44 | 92,244,604 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\The.Office.4x11.rar
[2009-10-11 17:13:02 | 00,114,888 | RHS- | C] () -- C:\mje12tni.exe
[2009-10-10 08:40:01 | 00,114,819 | RHS- | C] () -- C:\vlvtdflx.exe
[2009-10-09 20:40:50 | 92,368,978 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\The Office [4x08] The Deposition.avi
[2009-10-09 20:14:06 | 00,022,246 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\the.office.s04e07.hdtv.xvid-xor.001.bak
[2009-10-09 15:11:03 | 00,000,491 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\The.Office.S04E04.HDTV.XviD-LOL.rmvb.ini
[2009-10-09 15:10:27 | 14,646,7549 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\The.Office.S04E04.HDTV.XviD-LOL.rmvb
[2009-10-09 08:40:12 | 00,117,508 | RHS- | C] () -- C:\1di1w.exe
[2009-10-08 18:22:58 | 00,039,424 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\II-rok-zima-2009-2010.xls
[2009-10-08 15:03:36 | 00,000,477 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\The.Office.S04E02.HDTV.XviD-XOR.rmvb.ini
[2009-10-08 09:36:13 | 00,000,480 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\the.office.s04e01.hdtv.xvid-xor.[VTV].rmvb.ini
[2009-10-07 22:33:22 | 00,216,847 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\dsj21.rar
[2009-10-07 18:37:44 | 00,117,945 | RHS- | C] () -- C:\r2g20.exe
[2009-10-06 18:42:29 | 00,117,625 | RHS- | C] () -- C:\f9o8o.exe
[2009-10-06 08:38:53 | 00,118,651 | RHS- | C] () -- C:\ctu8r.exe
[2009-10-05 18:44:12 | 00,048,128 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\stacj_3let_Ist-pol-przy2.doc
[2009-10-04 16:33:12 | 00,117,453 | RHS- | C] () -- C:\sp1jensi.exe
[2009-09-30 22:32:07 | 00,000,493 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\The Office [2x02] cenzura-spam Harassment.avi.ini
[2009-09-29 21:45:24 | 00,018,105 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\Episode 3 Health Care.001.bak
[2009-09-25 16:34:35 | 00,000,059 | RHS- | C] () -- C:\autorun.inf
[2009-09-25 15:46:42 | 05,006,019 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\MailResender.2.15.011.Patch1.(legendteam.net).rar
[2009-09-24 20:45:15 | 00,033,792 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\podstawy wiedzy o sm - sylabus 2009.doc
[2009-09-21 22:49:26 | 00,001,397 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Hattrick Organizer.lnk
[2009-09-19 11:39:31 | 00,001,709 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\avast! Antivirus.lnk
[2009-09-19 11:39:04 | 00,380,928 | ---- | C] () -- C:\WINDOWS\System32\actskin4.ocx
[2009-09-17 10:43:44 | 00,000,638 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\ipla.lnk
[2009-09-17 10:24:03 | 00,000,167 | ---- | C] () -- C:\WINDOWS\ConverterCore.INI
[2009-09-17 10:15:13 | 00,002,561 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Solid Converter PDF.lnk
[2009-05-25 22:46:27 | 00,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2009-03-25 18:07:25 | 00,001,246 | ---- | C] () -- C:\WINDOWS\kaillera.ini
[2009-03-24 15:29:30 | 00,000,000 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\LauncherAccess.dt
[2009-03-24 15:19:01 | 00,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2008-11-29 13:09:13 | 00,003,584 | ---- | C] () -- C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008-11-21 17:54:30 | 00,114,688 | ---- | C] () -- C:\WINDOWS\System32\WLANUTL.dll
[2008-11-15 11:40:13 | 00,000,238 | ---- | C] () -- C:\WINDOWS\mafosav.INI
[2008-11-02 10:59:24 | 00,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.INI
[2008-10-20 21:24:19 | 00,066,552 | ---- | C] () -- C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
[2008-10-14 20:53:26 | 00,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2008-10-13 21:56:06 | 00,000,027 | ---- | C] () -- C:\WINDOWS\SmAudio.INI
[2008-10-13 12:59:41 | 00,000,062 | -HS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\desktop.ini
[2008-10-13 11:51:55 | 09,664,808 | -H-- | C] () -- C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2008-10-13 11:36:55 | 00,000,062 | -HS- | C] () -- C:\Documents and Settings\Ja\Dane aplikacji\desktop.ini
[2008-10-13 11:30:57 | 00,055,424 | ---- | C] () -- C:\WINDOWS\System32\drivers\VBoxDrv.sys
[2008-10-13 11:30:22 | 00,164,352 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2008-10-13 11:30:17 | 00,755,027 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2008-10-13 11:30:17 | 00,159,839 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2008-10-13 11:30:14 | 00,007,680 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2008-10-13 11:30:14 | 00,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest
[2008-10-13 11:11:09 | 00,000,063 | ---- | C] () -- C:\WINDOWS\System32\everest_cpl.ini
[2008-10-13 11:08:44 | 00,000,058 | ---- | C] () -- C:\WINDOWS\System32\Notepad2.ini
[2008-10-13 11:08:43 | 00,175,616 | ---- | C] () -- C:\WINDOWS\System32\mmm.dll
[2008-10-13 11:08:42 | 00,001,630 | ---- | C] () -- C:\WINDOWS\System32\metapath.ini
[2008-10-13 11:08:27 | 00,394,752 | ---- | C] () -- C:\WINDOWS\System32\cygwinb19.dll
[2008-09-16 02:14:24 | 03,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2008-09-16 02:12:02 | 00,000,416 | ---- | C] () -- C:\WINDOWS\System32\dtu100.dll.manifest
[2008-09-16 02:12:02 | 00,000,416 | ---- | C] () -- C:\WINDOWS\System32\dpl100.dll.manifest
[2008-09-16 02:11:10 | 00,012,288 | ---- | C] () -- C:\WINDOWS\System32\DivXWMPExtType.dll
[2008-03-06 03:37:26 | 00,000,183 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2004-08-22 17:04:56 | 00,069,120 | ---- | C] () -- C:\WINDOWS\daemon.dll
[2001-08-23 14:00:00 | 00,000,582 | ---- | C] () -- C:\WINDOWS\win.ini
[2001-08-23 14:00:00 | 00,000,227 | ---- | C] () -- C:\WINDOWS\system.ini
[color=#E56717]========== LOP Check ==========[/color]
[2009-09-17 10:14:48 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji
[2008-10-13 11:28:32 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\CyberLink
[2008-10-28 09:40:54 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ESET
[2009-09-13 11:01:22 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla
[2009-06-15 23:42:39 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Karen's Power Tools
[2008-10-20 13:54:59 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\KONAMI
[2009-06-06 16:05:19 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Last.fm
[2009-09-17 10:14:48 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SolidDocuments
[2009-03-04 12:09:20 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Sports Interactive
[2009-03-04 12:34:11 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP
[2009-09-17 10:15:12 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Ja\Dane aplikacji
[2009-03-12 13:22:37 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\2K Sports
[2009-01-12 23:18:32 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\AutoUpdate
[2009-03-14 11:45:44 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\BITS
[2009-10-11 01:25:52 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\foobar2000
[2008-10-14 07:14:37 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Gadu-Gadu
[2009-08-18 13:03:13 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\GetRightToGo
[2008-10-13 21:18:21 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\GRETECH
[2009-07-25 21:59:32 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Hamachi
[2009-10-11 20:14:14 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\ipla
[2008-11-30 16:29:36 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Jasc
[2009-01-10 18:24:40 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Leadertech
[2009-01-12 23:18:32 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Listonosz
[2009-01-19 12:52:47 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Mount&Blade
[2009-05-30 09:28:11 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Mp3tag
[2009-01-12 23:18:35 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Onet
[2008-10-13 19:11:58 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Opera
[2008-10-16 08:56:38 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Polcaster
[2009-03-24 22:05:43 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Samsung
[2009-03-02 10:11:12 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\SecuROM
[2009-10-12 22:47:16 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\SolidDocuments
[2008-11-02 08:55:40 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Sports Interactive
[2008-10-13 11:32:59 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\URSoft
[2009-10-07 22:07:40 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\uTorrent
[2008-10-13 11:11:10 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Xentient
[2001-08-23 14:00:00 | 00,000,065 | RH-- | M] () -- C:\WINDOWS\Tasks\desktop.ini
[2009-10-16 10:18:33 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\Tasks\SA.DAT
[color=#E56717]========== Purity Check ==========[/color]
[color=#E56717]========== Alternate Data Streams ==========[/color]
@Alternate Data Stream - 65 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\Sports Interactive:$ES_DESCRIPTOR_MVPUV1PKSVXJKX69UK1CWPP0DTVNYKM1UVXPJCEPP4DMJ3K1XYE7LRJEM53EPPJCFPLP45168LPSB5PL0EM6REGXHCTVVVVVVVVVVVVV
@Alternate Data Stream - 150 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:B3D74A13
< End of report >
pozdrawiam 
