Jakis czas temu mój komputer zaczął wariować. Mam vostro 1710 z vista basic 32 na pokladzie. Bardzo często się wiesza i na ekranie zaczynają biegać małe poziome białe paseczki, pomaga tylko restart. Za cholerę nie wiem co się dzieje, i bardzo, bardzo proszę o pomoc. Daję logi:
OTL:
OTL logfile created on: 2010-12-06 20:56:02 - Run 3OTL by OldTimer - Version 3.2.17.3 Folder = C:\Users\Michał\DesktopWindows Vista Home Basic Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstationInternet Explorer (Version = 8.0.6001.18975)Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 73,00% Memory free4,00 Gb Paging File | 4,00 Gb Available in Paging File | 91,00% Paging File freePaging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program FilesDrive C: | 58,59 Gb Total Space | 14,23 Gb Free Space | 24,28% Space Free | Partition Type: NTFSDrive D: | 10,00 Gb Total Space | 6,23 Gb Free Space | 62,28% Space Free | Partition Type: NTFSDrive E: | 190,33 Gb Total Space | 25,88 Gb Free Space | 13,60% Space Free | Partition Type: NTFSDrive H: | 4,87 Gb Total Space | 4,87 Gb Free Space | 100,00% Space Free | Partition Type: FAT32Drive J: | 3,77 Gb Total Space | 2,05 Gb Free Space | 54,53% Space Free | Partition Type: FAT32 Computer Name: MICHAL-PC | User Name: Michał | Logged in as Administrator.Boot Mode: SafeMode | Scan Mode: All usersCompany Name Whitelist: On | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 60 Days ========== Processes (SafeList) ========== PRC - [2010-12-06 20:38:46 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Michał\Desktop\OTL.exePRC - [2009-04-11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe ========== Modules (SafeList) ========== MOD - [2010-12-06 20:38:46 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Michał\Desktop\OTL.exeMOD - [2010-08-31 16:43:52 | 001,686,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll ========== Win32 Services (SafeList) ========== SRV - File not found [On_Demand | Stopped] -- E:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE -- (SQLAgent$SONY_MEDIAMGR)SRV - File not found [Auto | Stopped] -- e:\usr\MYSQL\bin\mysqld.exe -- (MySql)SRV - File not found [On_Demand | Stopped] -- E:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe -- (MSSQL$SONY_MEDIAMGR)SRV - File not found [Disabled | Stopped] -- E:\Program Files\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_32server.exe -- (mi-raysat_3dsMax2009_32)SRV - File not found [Disabled | Stopped] -- C:\Program Files\Bonjour\mDNSResponder.exe -- (Bonjour Service)SRV - [2010-10-16 11:46:40 | 000,369,256 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)SRV - [2010-09-27 15:54:57 | 000,085,096 | ---- | M] (Autodesk) [On_Demand | Stopped] -- C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service)SRV - [2010-08-18 16:56:20 | 000,340,520 | ---- | M] (Kaspersky Lab) [Auto | Stopped] -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe -- (AVP)SRV - [2010-05-29 18:33:02 | 000,061,440 | ---- | M] (Nalpeiron Ltd.) [Auto | Stopped] -- C:\Windows\System32\nlssrv32.exe -- (nlsX86cc)SRV - [2010-05-29 18:33:02 | 000,057,344 | ---- | M] (Nalpeiron Ltd.) [Auto | Stopped] -- C:\Windows\System32\ASTSRV.EXE -- (astcc)SRV - [2010-05-01 20:33:57 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)SRV - [2010-03-18 13:16:28 | 000,753,504 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe -- (WPFFontCache_v0400)SRV - [2010-03-18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)SRV - [2009-12-25 07:42:02 | 000,801,280 | ---- | M] () [On_Demand | Stopped] -- e:\Program Files\RDM+\rdmpserv.exe -- (RDMPLocalService)SRV - [2009-11-24 20:25:34 | 004,463,400 | ---- | M] (Wacom Technology, Corp.) [Auto | Stopped] -- C:\Windows\System32\Wacom_Tablet.exe -- (TabletServiceWacom)SRV - [2009-09-25 02:27:04 | 000,793,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\FntCache.dll -- (FontCache)SRV - [2009-06-02 09:10:08 | 000,637,952 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)SRV - [2009-03-12 17:36:24 | 000,086,016 | ---- | M] () [Disabled | Stopped] -- E:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe -- (mi-raysat_3dsmax2010_32)SRV - [2008-12-21 10:33:58 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)SRV - [2008-08-20 15:38:30 | 000,860,160 | ---- | M] (Intel(R) Corporation) [Auto | Stopped] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng)SRV - [2008-08-20 15:08:02 | 000,466,944 | ---- | M] (Intel(R) Corporation) [Auto | Stopped] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc)SRV - [2008-05-02 01:42:06 | 000,121,360 | ---- | M] (Logitech, Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe -- (LBTServ)SRV - [2008-02-14 17:46:00 | 000,065,536 | ---- | M] (O2Micro International) [On_Demand | Stopped] -- C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe -- (o2flash)SRV - [2008-02-04 13:47:00 | 000,077,824 | ---- | M] (Andrea Electronics Corporation) [Auto | Stopped] -- C:\Windows\System32\AERTSrv.exe -- (AERTFilters)SRV - [2008-01-21 03:33:00 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)SRV - [2008-01-21 03:32:50 | 000,365,568 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)SRV - [2008-01-21 03:32:50 | 000,167,936 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)SRV - [2005-11-14 01:06:04 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe -- (IDriverT) ========== Driver Services (SafeList) ========== DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\MICHA~1\AppData\Local\Temp\jswmidin.sys -- (jswmidin)DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\ipinip.sys -- (IpInIp)DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\RTKVHDA.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)DRV - File not found [Kernel | On_Demand | Stopped] -- C:\cpu.sys -- (cpu)DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\MICHA~1\AppData\Local\Temp\catchme.sys -- (catchme)DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\BCM42RLY.sys -- (BCM42RLY)DRV - [2010-10-16 19:55:00 | 010,084,360 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)DRV - [2010-09-01 06:48:30 | 000,022,016 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Program Files\Temporary\cpu.sys -- (cpudriver)DRV - [2010-08-13 15:47:19 | 000,311,312 | ---- | M] (Kaspersky Lab) [File_System | System | Stopped] -- C:\Windows\System32\drivers\klif.sys -- (KLIF)DRV - [2009-12-20 10:53:32 | 000,234,016 | ---- | M] (Realtek ) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)DRV - [2009-10-14 19:18:34 | 000,036,880 | ---- | M] (Kaspersky Lab) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\klbg.sys -- (klbg)DRV - [2009-10-02 17:39:36 | 000,019,472 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\klmouflt.sys -- (klmouflt)DRV - [2009-09-14 12:46:36 | 000,021,520 | ---- | M] (Kaspersky Lab) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\klim6.sys -- (KLIM6)DRV - [2009-09-01 13:29:50 | 000,128,016 | ---- | M] (Kaspersky Lab) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\kl1.sys -- (kl1)DRV - [2009-05-29 12:31:04 | 000,034,128 | ---- | M] (DemoForge, LLC) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\dfmirage.sys -- (dfmirage)DRV - [2009-04-11 05:42:52 | 000,031,616 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (winusb)DRV - [2009-03-19 13:48:18 | 000,136,704 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nmwcdnsu.sys -- (nmwcdnsu)DRV - [2009-03-19 13:48:12 | 000,008,320 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nmwcdnsuc.sys -- (nmwcdnsuc)DRV - [2009-02-09 07:37:56 | 000,007,808 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)DRV - [2009-02-09 07:37:48 | 000,007,808 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbser_lowerflt.sys -- (upperdev)DRV - [2009-02-09 07:37:46 | 000,022,016 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmbo.sys -- (nmwcdc)DRV - [2009-02-09 07:37:46 | 000,017,664 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmb.sys -- (nmwcd)DRV - [2009-01-30 08:54:05 | 000,034,048 | ---- | M] (Data Encryption Systems Limited) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\flsvcom.sys -- (FLSVCOM)DRV - [2009-01-30 08:54:04 | 000,016,314 | ---- | M] (Data Encryption Systems Limited) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\flspar.sys -- (FLSPAR)DRV - [2009-01-30 08:54:04 | 000,008,344 | ---- | M] (Data Encryption Systems Limited) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\flsser.sys -- (FLSSER)DRV - [2009-01-30 08:54:03 | 000,013,440 | ---- | M] (Data Encryption Systems Limited) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\flsiface.sys -- (FLSIFACE)DRV - [2009-01-30 08:54:01 | 000,033,404 | ---- | M] (Data Encryption Systems Limited) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\fle5wnnt.sys -- (FLE5WNNT)DRV - [2009-01-13 18:13:52 | 000,049,160 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\WmXlCore.sys -- (WmXlCore)DRV - [2009-01-13 18:13:44 | 000,014,728 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\WmVirHid.sys -- (WmVirHid)DRV - [2009-01-13 18:13:36 | 000,031,240 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\WmHidLo.sys -- (WmHidLo)DRV - [2009-01-13 18:13:28 | 000,029,192 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\WmFilter.sys -- (WmFilter)DRV - [2009-01-13 18:13:20 | 000,019,336 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\WmBEnum.sys -- (WmBEnum)DRV - [2008-12-31 16:16:11 | 000,010,454 | ---- | M] (Data Encryption Systems Limited) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\parldr2k.sys -- (PARLDR2K)DRV - [2008-10-09 09:19:02 | 000,717,296 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\sptd.sys -- (sptd)DRV - [2008-08-26 09:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd)DRV - [2008-07-23 23:29:16 | 000,047,744 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vserial.sys -- (vserial)DRV - [2008-07-23 23:29:16 | 000,015,264 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vsb.sys -- (vsbus)DRV - [2008-02-29 02:13:46 | 000,028,944 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\LUsbFilt.sys -- (LUsbFilt)DRV - [2008-02-29 02:13:24 | 000,036,880 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LMouFilt.Sys -- (LMouFilt)DRV - [2008-02-29 02:13:16 | 000,035,344 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LHidFilt.Sys -- (LHidFilt)DRV - [2008-02-14 17:46:00 | 000,048,472 | ---- | M] (O2Micro ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\o2media.sys -- (O2MDRDR)DRV - [2008-02-14 17:46:00 | 000,043,480 | ---- | M] (O2Micro ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\o2sd.sys -- (O2SDRDR)DRV - [2008-01-21 03:32:53 | 000,149,560 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu320.sys -- (adpu320)DRV - [2008-01-21 03:32:53 | 000,031,288 | ---- | M] (LSI Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\megasas.sys -- (megasas)DRV - [2008-01-21 03:32:52 | 000,386,616 | ---- | M] (LSI Corporation, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\megasr.sys -- (MegaSR)DRV - [2008-01-21 03:32:52 | 000,101,432 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu160m.sys -- (adpu160m)DRV - [2008-01-21 03:32:52 | 000,074,808 | ---- | M] (Silicon Integrated Systems) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid4.sys -- (SiSRaid4)DRV - [2008-01-21 03:32:52 | 000,040,504 | ---- | M] (Hewlett-Packard Company) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\hpcisss.sys -- (HpCISSs)DRV - [2008-01-21 03:32:51 | 000,300,600 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpahci.sys -- (adpahci)DRV - [2008-01-21 03:32:51 | 000,089,656 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_sas.sys -- (LSI_SAS)DRV - [2008-01-21 03:32:50 | 001,122,360 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql2300.sys -- (ql2300)DRV - [2008-01-21 03:32:50 | 000,118,784 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\E1G60I32.sys -- (E1G60) Intel(R)DRV - [2008-01-21 03:32:50 | 000,079,928 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arcsas.sys -- (arcsas)DRV - [2008-01-21 03:32:49 | 000,235,064 | ---- | M] (Intel Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iastorv.sys -- (iaStorV)DRV - [2008-01-21 03:32:49 | 000,130,616 | ---- | M] (VIA Technologies Inc.,Ltd) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\vsmraid.sys -- (vsmraid)DRV - [2008-01-21 03:32:49 | 000,115,816 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata2.sys -- (ulsata2)DRV - [2008-01-21 03:32:49 | 000,096,312 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_fc.sys -- (LSI_FC)DRV - [2008-01-21 03:32:49 | 000,079,416 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arc.sys -- (arc)DRV - [2008-01-21 03:32:48 | 000,342,584 | ---- | M] (Emulex) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\elxstor.sys -- (elxstor)DRV - [2008-01-21 03:32:48 | 000,096,312 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_scsi.sys -- (LSI_SCSI)DRV - [2008-01-21 03:32:47 | 000,102,968 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvraid.sys -- (nvraid)DRV - [2008-01-21 03:32:47 | 000,045,112 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvstor.sys -- (nvstor)DRV - [2008-01-21 03:32:46 | 000,422,968 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adp94xx.sys -- (adp94xx)DRV - [2008-01-21 03:32:45 | 000,238,648 | ---- | M] (ULi Electronics Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\uliahci.sys -- (uliahci)DRV - [2008-01-21 03:32:21 | 000,020,024 | ---- | M] (VIA Technologies, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\viaide.sys -- (viaide)DRV - [2008-01-21 03:32:21 | 000,019,000 | ---- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\cmdide.sys -- (cmdide)DRV - [2008-01-21 03:32:21 | 000,017,464 | ---- | M] (Acer Laboratories Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\aliide.sys -- (aliide)DRV - [2008-01-08 00:00:00 | 000,235,200 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\OEM13Vid.sys -- (OEM13Vid)DRV - [2007-12-14 10:42:04 | 000,155,136 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Apfiltr.sys -- (ApfiltrService)DRV - [2007-12-06 20:52:42 | 001,044,984 | ---- | M] (Broadcom Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\BCMWL6.SYS -- (BCM43XX)DRV - [2007-03-05 17:45:04 | 000,007,424 | ---- | M] (EyePower Games Pte. Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\OEM13Vfx.sys -- (OEM13Vfx)DRV - [2007-01-23 13:31:00 | 000,012,800 | ---- | M] (CSR, plc) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\BthAvrcp.sys -- (BthAvrcp)DRV - [2007-01-16 09:22:00 | 000,031,744 | ---- | M] (CSR, plc) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\csrbcxp.sys -- (CSRBC)DRV - [2006-11-06 22:13:00 | 000,013,824 | ---- | M] (CSR, plc) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\BthFilt.sys -- (BTHFILT)DRV - [2006-11-02 10:50:35 | 000,106,088 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql40xx.sys -- (ql40xx)DRV - [2006-11-02 10:50:35 | 000,098,408 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata.sys -- (UlSata)DRV - [2006-11-02 10:50:19 | 000,045,160 | ---- | M] (IBM Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nfrd960.sys -- (nfrd960)DRV - [2006-11-02 10:50:17 | 000,041,576 | ---- | M] (Intel Corp./ICP vortex GmbH) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iirsp.sys -- (iirsp)DRV - [2006-11-02 10:50:11 | 000,071,272 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\djsvs.sys -- (aic78xx)DRV - [2006-11-02 10:50:09 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteraid.sys -- (iteraid)DRV - [2006-11-02 10:50:07 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteatapi.sys -- (iteatapi)DRV - [2006-11-02 10:50:05 | 000,035,944 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\symc8xx.sys -- (Symc8xx)DRV - [2006-11-02 10:50:03 | 000,034,920 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_u3.sys -- (Sym_u3)DRV - [2006-11-02 10:49:59 | 000,033,384 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\mraid35x.sys -- (Mraid35x)DRV - [2006-11-02 10:49:56 | 000,031,848 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_hi.sys -- (Sym_hi)DRV - [2006-11-02 09:25:24 | 000,071,808 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserid.sys -- (Brserid) Brother MFC Serial Port Interface Driver (WDM)DRV - [2006-11-02 09:24:47 | 000,011,904 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brusbser.sys -- (BrUsbSer)DRV - [2006-11-02 09:24:46 | 000,005,248 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltup.sys -- (BrFiltUp)DRV - [2006-11-02 09:24:45 | 000,013,568 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltlo.sys -- (BrFiltLo)DRV - [2006-11-02 09:24:44 | 000,062,336 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserwdm.sys -- (BrSerWdm)DRV - [2006-11-02 09:24:44 | 000,012,160 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brusbmdm.sys -- (BrUsbMdm)DRV - [2006-11-02 08:36:50 | 000,020,608 | ---- | M] (N-trig Innovative Technologies) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ntrigdigi.sys -- (ntrigdigi)DRV - [2006-08-29 15:56:20 | 000,032,377 | ---- | M] (B-phreaks) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\prodigy.sys -- (PRODIGY)DRV - [2006-07-05 13:39:29 | 000,059,256 | ---- | M] (Protection Technology (StarForce)) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sfdrv01.sys -- (sfdrv01) StarForce Protection Environment Driver (version 1.x)DRV - [2006-06-14 15:56:56 | 000,013,680 | ---- | M] (Protection Technology (StarForce)) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sfhlp02.sys -- (sfhlp02) StarForce Protection Helper Driver (version 2.x)DRV - [2005-07-28 08:18:40 | 000,685,056 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\hardlock.sys -- (Hardlock)DRV - [2004-10-24 08:11:00 | 000,028,800 | ---- | M] (Deon van der Westhuysen) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\PPortJoy.sys -- (PPortJoystick)DRV - [2004-10-24 08:11:00 | 000,013,952 | ---- | M] (Deon van der Westhuysen) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\PPJoyBus.sys -- (PPJoyBus) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3991189236-1397229752-3435759232-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = IE - HKU\S-1-5-21-3991189236-1397229752-3435759232-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..browser.startup.homepage: "www.google.pl"FF - prefs.js..extensions.enabledItems: firegestures@xuldev.org:1.5.6FF - prefs.js..extensions.enabledItems: linkfilter@kaspersky.ru:9.0.0.736FF - prefs.js..extensions.enabledItems: {46551EC9-40F0-4e47-8E18-8E5CF550CFB8}:1.0.7FF - prefs.js..extensions.enabledItems: {e968fc70-8f95-4ab9-9e79-304de2a71ee1}:0.7.2FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21FF - prefs.js..network.proxy.type: 2 FF - HKLM\software\mozilla\Firefox\Extensions\\bkmrksync@nokia.com: E:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\ [2009-08-13 15:04:32 | 000,000,000 | ---D | M]FF - HKLM\software\mozilla\Mozilla Firefox 3.0.17\extensions\\Components: E:\Program Files\Mozilla Firefox\components [2010-04-16 19:47:19 | 000,000,000 | ---D | M]FF - HKLM\software\mozilla\Mozilla Firefox 3.0.17\extensions\\Plugins: E:\Program Files\Mozilla Firefox\plugins [2010-10-02 21:41:17 | 000,000,000 | ---D | M]FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Components: E:\Program Files\Mozilla Firefox\components [2010-04-16 19:47:19 | 000,000,000 | ---D | M]FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Plugins: E:\Program Files\Mozilla Firefox\plugins [2010-10-02 21:41:17 | 000,000,000 | ---D | M]FF - HKLM\software\mozilla\Mozilla Firefox 3.5.8\extensions\\Components: E:\Program Files\Mozilla Firefox\components [2010-04-16 19:47:19 | 000,000,000 | ---D | M]FF - HKLM\software\mozilla\Mozilla Firefox 3.5.8\extensions\\Plugins: E:\Program Files\Mozilla Firefox\plugins [2010-10-02 21:41:17 | 000,000,000 | ---D | M]FF - HKLM\software\mozilla\Mozilla Firefox 3.5.9\extensions\\Components: E:\Program Files\Mozilla Firefox\components [2010-04-16 19:47:19 | 000,000,000 | ---D | M]FF - HKLM\software\mozilla\Mozilla Firefox 3.5.9\extensions\\Plugins: E:\Program Files\Mozilla Firefox\plugins [2010-10-02 21:41:17 | 000,000,000 | ---D | M]FF - HKLM\software\mozilla\Thunderbird\Extensions\\{eea12ec4-729d-4703-bc37-106ce9879ce2}: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\THBExt [2010-08-13 15:31:49 | 000,000,000 | ---D | M] [2009-05-09 17:35:10 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\mozilla\Extensions[2010-10-14 20:34:32 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\mozilla\Firefox\Profiles\r0qbh2k8.default\extensions[2009-08-04 20:36:34 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Michał\AppData\Roaming\mozilla\Firefox\Profiles\r0qbh2k8.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}[2010-02-01 21:26:21 | 000,000,000 | ---D | M] (Stylish) -- C:\Users\Michał\AppData\Roaming\mozilla\Firefox\Profiles\r0qbh2k8.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}[2010-02-01 21:25:52 | 000,000,000 | ---D | M] (User Agent Switcher) -- C:\Users\Michał\AppData\Roaming\mozilla\Firefox\Profiles\r0qbh2k8.default\extensions\{e968fc70-8f95-4ab9-9e79-304de2a71ee1}[2010-02-01 21:25:51 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\mozilla\Firefox\Profiles\r0qbh2k8.default\extensions\firegestures@xuldev.org O1 HOSTS File: ([2009-06-15 13:47:20 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hostsO1 - Hosts: 127.0.0.1 localhostO2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll (Kaspersky Lab)O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll (Kaspersky Lab)O4 - HKLM..\Run: [avp] C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe (Kaspersky Lab)O4 - HKLM..\Run: [NVHotkey] C:\Windows\System32\nvHotkey.DLL (NVIDIA Corporation)O4 - HKU\S-1-5-21-3991189236-1397229752-3435759232-1003..\Run: [AQQ] E:\Program Files\WapSter\WapSter AQQ\AQQ.exe (Creative Team S.A.)O4 - Startup: C:\Users\Michał\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Stardock ObjectDock.lnk = E:\Program Files\Stardock\ObjectDock\ObjectDock.exe (Stardock)O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = [binary data]O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = [binary data]O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO7 - HKU\S-1-5-21-3991189236-1397229752-3435759232-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO7 - HKU\S-1-5-21-3991189236-1397229752-3435759232-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145O7 - HKU\S-1-5-21-3991189236-1397229752-3435759232-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0O8 - Extra context menu item: Dodaj do blokowanych banerów - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm ()O8 - Extra context menu item: E&ksport do programu Microsoft Excel - E:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE (Microsoft Corporation)O9 - Extra Button: &Wirtualna klawiatura - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll (Kaspersky Lab)O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\Program Files\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)O9 - Extra Button: &Sprawdzanie adresów - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll (Kaspersky Lab)O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Computer, Inc.)O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation)O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation)O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation)O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation)O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation)O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation)O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation)O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation)O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation)O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.76.34.50 212.76.34.49O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~2\mzvkbd3.dll) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\mzvkbd3.dll (Kaspersky Lab)O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~2\kloehk.dll) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\kloehk.dll (Kaspersky Lab)O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)O20 - Winlogon\Notify\klogon: DllName - C:\Windows\system32\klogon.dll - C:\Windows\System32\klogon.dll (Kaspersky Lab)O21 - SSODL: 0aMCPClient - {F5DF91F9-15E9-416B-A7C3-7519B11ECBFC} - CLSID or File not found.O24 - Desktop WallPaper: C:\Users\Michał\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpgO24 - Desktop BackupWallPaper: C:\Users\Michał\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpgO28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not foundO32 - HKLM CDRom: AutoRun - 1O32 - AutoRun File - [2006-09-18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]O34 - HKLM BootExecute: (autocheck autochk *) - File not foundO35 - HKLM\..comfile [open] -- "%1" %*O35 - HKLM\..exefile [open] -- "%1" %*O37 - HKLM\...com [@ = comfile] -- "%1" %*O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 60 Days ========== [2010-12-06 20:38:45 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Users\Michał\Desktop\OTL.exe[2010-12-05 16:59:23 | 000,000,000 | ---D | C] -- C:\Users\Michał\Desktop\wykres_rownania[2010-12-03 20:32:09 | 000,000,000 | ---D | C] -- C:\Users\Michał\Desktop\strona - Kopia[2010-12-03 18:42:52 | 000,000,000 | ---D | C] -- C:\Users\Michał\Desktop\strona[2010-12-03 15:19:30 | 000,000,000 | ---D | C] -- C:\Users\Michał\Desktop\images[2010-12-02 16:40:16 | 000,000,000 | ---D | C] -- C:\Users\Michał\Desktop\Yanone-Kaffeesatz[2010-12-01 19:41:02 | 000,000,000 | ---D | C] -- C:\Users\Michał\Desktop\karramba[2010-11-30 18:00:11 | 000,000,000 | ---D | C] -- C:\Users\Michał\Desktop\łosie[2010-11-30 17:29:15 | 000,000,000 | ---D | C] -- C:\Users\Michał\Desktop\chomiki[2010-11-29 00:12:29 | 000,000,000 | ---D | C] -- C:\Program Files\Sun[2010-11-28 23:53:32 | 000,000,000 | ---D | C] -- C:\Users\Michał\bluej[2010-11-28 23:42:13 | 000,000,000 | ---D | C] -- C:\Users\Michał\Desktop\REALJ[2010-11-28 23:39:58 | 000,000,000 | ---D | C] -- C:\Users\Michał\Desktop\Nowy folder[2010-11-24 21:29:14 | 000,057,960 | ---- | C] (Khronos Group) -- C:\Windows\System32\OpenCL.dll[2010-11-22 23:52:30 | 000,000,000 | ---D | C] -- C:\Users\Michał\Desktop\Pan_s_Labyrinth_-_Javier_Navarrete_2006[2010-11-22 23:52:12 | 000,000,000 | ---D | C] -- C:\Users\Michał\Desktop\Pan_s_Labyrinth_-_Soundtrack[2010-11-20 23:37:54 | 000,212,480 | ---- | C] (SteelWerX) -- C:\Windows\SWXCACLS.exe[2010-11-20 22:54:45 | 000,000,000 | ---D | C] -- C:\Qoobox[2010-11-18 15:10:31 | 000,000,000 | ---D | C] -- C:\Users\Michał\Desktop\szuruburu[2010-11-14 21:50:41 | 000,000,000 | -HSD | C] -- C:\Config.Msi[2010-11-14 19:14:36 | 000,137,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSMAPI32.OCX[2010-11-14 19:14:35 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSMPIDE.DLL[2010-11-14 19:14:34 | 000,000,000 | ---D | C] -- C:\Program Files\PDFCreator[2010-11-13 23:41:33 | 000,000,000 | ---D | C] -- C:\Users\Michał\Desktop\wallpap[2010-11-08 16:55:22 | 000,000,000 | ---D | C] -- C:\Users\Michał\AppData\Roaming\WTablet[2010-10-27 20:17:34 | 000,000,000 | ---D | C] -- C:\Users\Michał\Documents\TmForever[2010-10-27 20:17:34 | 000,000,000 | ---D | C] -- C:\ProgramData\TmForever[2010-10-27 16:12:13 | 001,696,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gameux.dll[2010-10-27 16:12:12 | 004,240,384 | ---- | C] (Microsoft) -- C:\Windows\System32\GameUXLegacyGDFs.dll[2010-10-27 16:12:12 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Apphlpdm.dll[2010-10-16 22:59:18 | 000,000,000 | ---D | C] -- C:\Users\Michał\AppData\Local\Panic Button (4)[2010-10-14 12:36:12 | 008,147,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmploc.DLL[2010-10-14 12:35:44 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netevent.dll[2010-10-14 12:35:38 | 000,157,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\t2embed.dll[2010-10-14 12:35:35 | 000,602,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll[2010-10-14 12:35:35 | 000,385,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec[2010-10-14 12:35:35 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll[2010-10-14 12:35:34 | 001,469,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl[2010-10-14 12:35:34 | 000,611,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstime.dll[2010-10-14 12:35:34 | 000,387,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll[2010-10-14 12:35:33 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll[2010-10-14 12:35:33 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll[2010-10-14 12:35:33 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe[2010-10-14 12:35:32 | 001,638,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb[2010-10-14 12:35:32 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe[2010-10-14 12:35:32 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll[2010-10-14 12:35:32 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll[2010-10-14 12:35:32 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll[2010-10-14 12:35:32 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll[2010-10-14 12:35:32 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll[2010-10-14 12:35:32 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe[2010-10-14 12:35:31 | 000,231,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msshsq.dll[2010-10-14 12:35:28 | 002,038,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys[2010-10-14 12:35:26 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc40.dll[2010-10-14 12:35:25 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc40u.dll[2010-10-14 12:35:22 | 000,867,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpmde.dll[2010-10-14 01:36:52 | 015,451,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xlive.dll[2010-10-14 01:36:50 | 013,642,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xlivefnt.dll[2010-10-10 19:09:40 | 000,000,000 | ---D | C] -- C:\Users\Michał\AppData\Roaming\Foxit Software[2010-10-09 15:52:32 | 000,000,000 | ---D | C] -- C:\Users\Michał\Desktop\IIIBeata ========== Files - Modified Within 60 Days ========== [2010-12-06 20:49:35 | 000,686,742 | ---- | M] () -- C:\Windows\System32\perfh015.dat[2010-12-06 20:49:35 | 000,611,444 | ---- | M] () -- C:\Windows\System32\perfh009.dat[2010-12-06 20:49:35 | 000,137,774 | ---- | M] () -- C:\Windows\System32\perfc015.dat[2010-12-06 20:49:35 | 000,111,112 | ---- | M] () -- C:\Windows\System32\perfc009.dat[2010-12-06 20:45:22 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat[2010-12-06 20:40:00 | 000,000,418 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{D8423A36-C1D8-4AF0-AC58-F2E120601FBA}.job[2010-12-06 20:38:49 | 000,339,991 | ---- | M] () -- C:\Users\Michał\Desktop\RSIT.exe[2010-12-06 20:38:46 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Michał\Desktop\OTL.exe[2010-12-06 20:35:00 | 000,001,036 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job[2010-12-06 20:32:37 | 000,003,840 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0[2010-12-06 20:32:34 | 000,003,840 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0[2010-12-06 20:32:31 | 000,001,032 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job[2010-12-06 20:32:06 | 008,405,015 | ---- | M] () -- C:\Windows\TempFile[2010-12-06 19:56:00 | 000,001,062 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3991189236-1397229752-3435759232-1003UA.job[2010-12-06 16:56:01 | 000,001,010 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3991189236-1397229752-3435759232-1003Core.job[2010-12-06 15:39:25 | 000,007,626 | ---- | M] () -- C:\Users\Michał\Desktop\sweet_home_alabama_acoustic.gp3[2010-12-06 15:23:08 | 004,001,440 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT[2010-12-06 00:26:50 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat[2010-12-05 23:54:20 | 000,035,840 | ---- | M] () -- C:\Users\Michał\Desktop\[2010-12-05 14:57:27 | 037,143,212 | ---- | M] () -- C:\Users\Michał\Desktop\sum.psd[2010-12-05 14:27:52 | 000,040,197 | ---- | M] () -- C:\Windows\php.ini[2010-12-05 13:19:00 | 000,000,427 | ---- | M] () -- C:\Windows\my.ini[2010-12-05 00:01:23 | 000,715,728 | ---- | M] () -- C:\Users\Michał\Desktop\inf.psd[2010-12-04 23:58:11 | 000,001,496 | ---- | M] () -- C:\Users\Michał\AppData\Local\Adobe Zapisz dla Internetu 12.0 Prefs[2010-12-04 23:52:21 | 000,000,132 | ---- | M] () -- C:\Users\Michał\AppData\Roaming\Preferencje Adobe CS5 dla formatu PNG[2010-12-04 01:21:35 | 000,002,251 | ---- | M] () -- C:\my_cnf.bak[2010-12-02 21:07:47 | 000,007,294 | ---- | M] () -- C:\Users\Michał\Desktop\IMG_8515.xmp[2010-12-02 18:03:08 | 004,038,392 | ---- | M] () -- C:\Users\Michał\Desktop\wall.png[2010-12-01 19:32:37 | 004,615,063 | ---- | M] () -- C:\Users\Michał\Desktop\karramba.rar[2010-12-01 19:13:40 | 002,059,986 | ---- | M] () -- C:\Users\Michał\Desktop\SCAN0001.jpg[2010-12-01 19:13:38 | 001,941,129 | ---- | M] () -- C:\Users\Michał\Desktop\SCAN0000.jpg[2010-12-01 18:58:14 | 000,615,504 | ---- | M] () -- C:\Users\Michał\Desktop\Untitled 1.c4d[2010-11-30 22:14:35 | 000,054,272 | ---- | M] () -- C:\Users\Michał\Desktop\Alina Witkowska - Mickiewicz. Słowo i czyn.doc[2010-11-28 23:18:23 | 416,026,581 | ---- | M] () -- C:\Windows\MEMORY.DMP[2010-11-28 15:38:47 | 000,000,145 | ---- | M] () -- C:\Users\Michał\.appletviewer[2010-11-27 22:09:37 | 001,794,903 | ---- | M] () -- C:\Users\Michał\Desktop\wielka[beeep].png[2010-11-25 18:24:54 | 000,001,356 | ---- | M] () -- C:\Users\Michał\AppData\Local\d3d9caps.dat[2010-11-21 20:52:46 | 000,031,744 | ---- | M] () -- C:\Users\Michał\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini[2010-11-21 13:16:58 | 000,828,591 | ---- | M] () -- C:\Users\Michał\Desktop\ub_win.psd[2010-11-21 00:50:00 | 000,076,800 | ---- | M] () -- C:\Windows\System32\umstartup.etl[2010-11-17 22:52:15 | 000,115,465 | ---- | M] () -- C:\Windows\System32\drivers\klin.dat[2010-11-17 22:52:15 | 000,097,545 | ---- | M] () -- C:\Windows\System32\drivers\klick.dat[2010-11-15 22:00:03 | 000,038,912 | ---- | M] () -- C:\Users\Michał\Desktop\bcfp.doc[2010-11-13 16:39:33 | 000,007,264 | ---- | M] () -- C:\Users\Michał\Desktop\moje.aup[2010-11-13 16:33:05 | 000,640,730 | ---- | M] () -- C:\Users\Michał\Desktop\ttghfh.mp3[2010-11-08 01:20:24 | 000,089,088 | ---- | M] () -- C:\Windows\MBR.exe[2010-11-07 23:46:24 | 010,262,474 | ---- | M] () -- C:\Users\Michał\Desktop\nanana.psd[2010-11-07 12:07:11 | 162,737,378 | ---- | M] () -- C:\Users\Michał\Desktop\Advanced_Photoshop_Magazine_Issue_64.pdf[2010-10-27 16:04:32 | 000,000,000 | ---- | M] () -- C:\Windows\System32\Wacom_Tablet.dat[2010-10-26 19:48:02 | 001,187,328 | ---- | M] () -- C:\Users\Michał\Desktop\OWDSGenerator.exe[2010-10-25 22:56:00 | 000,121,035 | ---- | M] () -- C:\Users\Michał\Desktop\cbbg.png[2010-10-23 23:36:15 | 001,411,353 | ---- | M] () -- C:\Users\Michał\Desktop\a.png[2010-10-19 10:41:44 | 000,222,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MpSigStub.exe[2010-10-16 19:55:00 | 000,057,960 | ---- | M] (Khronos Group) -- C:\Windows\System32\OpenCL.dll[2010-10-16 19:55:00 | 000,004,962 | ---- | M] () -- C:\Windows\System32\nvinfo.pb[2010-10-14 01:36:52 | 015,451,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xlive.dll[2010-10-14 01:36:50 | 013,642,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xlivefnt.dll[2010-10-14 01:36:44 | 000,179,263 | ---- | M] () -- C:\Windows\System32\xlive.dll.cat[2010-10-11 22:26:40 | 001,454,285 | ---- | M] () -- C:\Users\Michał\Desktop\a1.png[2010-10-09 14:55:55 | 000,000,767 | ---- | M] () -- C:\Users\Michał\Desktop\CINEMA 4D R11.5_A8911BAE — skrót.lnk ========== Files Created - No Company Name ========== [2010-12-06 20:38:49 | 000,339,991 | ---- | C] () -- C:\Users\Michał\Desktop\RSIT.exe[2010-12-06 15:39:25 | 000,007,626 | ---- | C] () -- C:\Users\Michał\Desktop\sweet_home_alabama_acoustic.gp3[2010-12-05 23:54:19 | 000,035,840 | ---- | C] () -- C:\Users\Michał\Desktop\[2010-12-05 13:15:03 | 000,130,048 | ---- | C] () -- C:\Windows\System32\webserv.cpl[2010-12-05 13:15:00 | 000,419,840 | ---- | C] () -- C:\Windows\System32\ws_edit.lib[2010-12-05 13:14:39 | 000,040,197 | ---- | C] () -- C:\Windows\php.ini[2010-12-05 13:14:39 | 000,000,427 | ---- | C] () -- C:\Windows\my.ini[2010-12-03 15:18:59 | 000,715,728 | ---- | C] () -- C:\Users\Michał\Desktop\inf.psd[2010-12-02 22:43:05 | 037,143,212 | ---- | C] () -- C:\Users\Michał\Desktop\sum.psd[2010-12-02 21:07:47 | 000,007,294 | ---- | C] () -- C:\Users\Michał\Desktop\IMG_8515.xmp[2010-12-02 21:06:25 | 012,885,269 | ---- | C] () -- C:\Users\Michał\Desktop\IMG_8515.CR2[2010-12-02 18:02:58 | 004,038,392 | ---- | C] () -- C:\Users\Michał\Desktop\wall.png[2010-12-01 19:32:37 | 004,615,063 | ---- | C] () -- C:\Users\Michał\Desktop\karramba.rar[2010-12-01 19:13:28 | 002,059,986 | ---- | C] () -- C:\Users\Michał\Desktop\SCAN0001.jpg[2010-12-01 19:13:26 | 001,941,129 | ---- | C] () -- C:\Users\Michał\Desktop\SCAN0000.jpg[2010-12-01 17:29:02 | 000,615,504 | ---- | C] () -- C:\Users\Michał\Desktop\Untitled 1.c4d[2010-11-30 22:14:35 | 000,054,272 | ---- | C] () -- C:\Users\Michał\Desktop\Alina Witkowska - Mickiewicz. Słowo i czyn.doc[2010-11-28 23:18:23 | 416,026,581 | ---- | C] () -- C:\Windows\MEMORY.DMP[2010-11-28 15:38:47 | 000,000,145 | ---- | C] () -- C:\Users\Michał\.appletviewer[2010-11-27 22:09:23 | 001,794,903 | ---- | C] () -- C:\Users\Michał\Desktop\wielka[beeep].png[2010-11-20 13:44:29 | 000,828,591 | ---- | C] () -- C:\Users\Michał\Desktop\ub_win.psd[2010-11-15 22:00:02 | 000,038,912 | ---- | C] () -- C:\Users\Michał\Desktop\bcfp.doc[2010-11-14 19:14:36 | 000,116,224 | ---- | C] () -- C:\Windows\System32\pdfcmnnt.dll[2010-11-13 16:39:33 | 000,007,264 | ---- | C] () -- C:\Users\Michał\Desktop\moje.aup[2010-11-13 16:24:26 | 000,640,730 | ---- | C] () -- C:\Users\Michał\Desktop\ttghfh.mp3[2010-11-07 20:46:39 | 010,262,474 | ---- | C] () -- C:\Users\Michał\Desktop\nanana.psd[2010-11-07 12:04:16 | 162,737,378 | ---- | C] () -- C:\Users\Michał\Desktop\Advanced_Photoshop_Magazine_Issue_64.pdf[2010-10-27 16:04:32 | 000,000,000 | ---- | C] () -- C:\Windows\System32\Wacom_Tablet.dat[2010-10-26 19:48:02 | 001,187,328 | ---- | C] () -- C:\Users\Michał\Desktop\OWDSGenerator.exe[2010-10-25 22:52:33 | 000,121,035 | ---- | C] () -- C:\Users\Michał\Desktop\cbbg.png[2010-10-23 23:36:06 | 001,411,353 | ---- | C] () -- C:\Users\Michał\Desktop\a.png[2010-10-14 01:36:44 | 000,179,263 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat[2010-10-11 22:26:33 | 001,454,285 | ---- | C] () -- C:\Users\Michał\Desktop\a1.png[2010-10-09 14:55:55 | 000,000,767 | ---- | C] () -- C:\Users\Michał\Desktop\CINEMA 4D R11.5_A8911BAE — skrót.lnk[2010-06-29 19:10:29 | 000,000,132 | ---- | C] () -- C:\Users\Michał\AppData\Roaming\Preferencje Adobe CS5 dla formatu GIF[2010-06-12 13:47:46 | 000,001,496 | ---- | C] () -- C:\Users\Michał\AppData\Local\Adobe Zapisz dla Internetu 12.0 Prefs[2010-05-03 10:45:24 | 000,043,520 | ---- | C] () -- C:\Windows\System32\CmdLineExt03.dll[2010-05-01 22:10:08 | 000,000,132 | ---- | C] () -- C:\Users\Michał\AppData\Roaming\Preferencje Adobe CS5 dla formatu PNG[2010-03-21 11:17:24 | 000,000,052 | ---- | C] () -- C:\Windows\MobiTrans.ini[2010-03-14 08:34:35 | 000,000,008 | RHS- | C] () -- C:\Windows\System32\1A324A02A6.dll[2010-03-13 20:34:30 | 000,000,080 | RHS- | C] () -- C:\Windows\System32\9A1B63E8E7.dll[2010-02-27 23:11:38 | 000,178,176 | ---- | C] () -- C:\Windows\System32\unrar.dll[2010-02-19 18:50:00 | 000,001,024 | ---- | C] () -- C:\Windows\System32\grcauth2.dll[2010-02-19 18:50:00 | 000,001,024 | ---- | C] () -- C:\Windows\System32\grcauth1.dll[2010-02-19 18:50:00 | 000,000,100 | ---- | C] () -- C:\Windows\System32\prsgrc.dll[2010-02-18 22:07:46 | 000,001,024 | ---- | C] () -- C:\Windows\System32\clauth2.dll[2010-02-18 22:07:46 | 000,001,024 | ---- | C] () -- C:\Windows\System32\clauth1.dll[2010-02-18 22:07:46 | 000,000,000 | ---- | C] () -- C:\Windows\System32\ssprs.dll[2010-02-18 22:07:46 | 000,000,000 | ---- | C] () -- C:\Windows\System32\serauth2.dll[2010-02-18 22:07:46 | 000,000,000 | ---- | C] () -- C:\Windows\System32\serauth1.dll[2010-02-18 22:07:46 | 000,000,000 | ---- | C] () -- C:\Windows\System32\nsprs.dll[2010-02-18 22:05:04 | 000,001,025 | ---- | C] () -- C:\Windows\System32\sysprs7.dll[2010-02-18 22:05:04 | 000,000,338 | ---- | C] () -- C:\Windows\System32\lsprst7.dll[2010-02-10 11:44:43 | 000,000,197 | ---- | C] () -- C:\Windows\MBMTool.INI[2010-02-02 18:28:32 | 000,970,862 | ---- | C] () -- C:\Windows\System32\awt.dll[2010-01-02 17:37:04 | 000,015,360 | ---- | C] () -- C:\Windows\System32\BASSMOD.dll[2010-01-02 13:17:09 | 000,000,002 | ---- | C] () -- C:\Windows\pvpeformr.dll[2009-12-23 22:17:59 | 000,000,634 | ---- | C] () -- C:\Windows\ODBC.INI[2009-12-03 09:27:28 | 000,080,416 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll[2009-12-02 20:46:34 | 000,246,784 | ---- | C] () -- C:\Windows\System32\sqlite3.dll[2009-11-21 11:23:41 | 000,138,184 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys[2009-10-11 10:32:53 | 000,000,552 | ---- | C] () -- C:\Users\Michał\AppData\Local\d3d8caps.dat[2009-09-24 09:58:01 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll[2009-09-17 14:09:16 | 005,423,104 | ---- | C] () -- C:\Windows\System32\tlpsplib10.dll[2009-08-25 18:05:21 | 000,000,000 | ---- | C] () -- C:\Users\Michał\AppData\Roaming\AVSMediaPlayer.m3u[2009-08-03 14:07:42 | 000,403,816 | ---- | C] () -- C:\Windows\System32\OGACheckControl.dll[2009-06-15 14:10:27 | 000,000,266 | RHS- | C] () -- C:\ProgramData\ntuser.pol[2009-06-13 12:12:40 | 000,001,356 | ---- | C] () -- C:\Users\Michał\AppData\Local\d3d9caps.dat[2009-05-10 13:02:07 | 000,000,760 | ---- | C] () -- C:\Users\Michał\AppData\Roaming\setup_ldm.iss[2009-05-09 17:15:04 | 000,031,744 | ---- | C] () -- C:\Users\Michał\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini[2009-05-09 14:33:12 | 000,000,000 | ---- | C] () -- C:\Windows\WB.ini[2009-05-09 14:10:53 | 000,058,792 | ---- | C] () -- C:\Windows\System32\wbload.dll[2009-04-19 07:44:31 | 000,258,048 | ---- | C] () -- C:\Windows\System32\libFLAC.dll[2009-04-19 07:44:06 | 000,108,032 | ---- | C] () -- C:\Windows\System32\avi.dll[2009-04-19 07:44:04 | 000,246,784 | ---- | C] () -- C:\Windows\System32\dxr.dll[2009-04-19 07:44:03 | 000,141,312 | ---- | C] () -- C:\Windows\System32\mp4.dll[2009-04-19 07:44:02 | 000,148,480 | ---- | C] () -- C:\Windows\System32\mkx.dll[2009-04-19 07:44:01 | 000,159,744 | ---- | C] () -- C:\Windows\System32\mmfinfo.dll[2009-04-19 07:44:00 | 000,120,832 | ---- | C] () -- C:\Windows\System32\ogm.dll[2009-04-19 07:43:59 | 000,163,840 | ---- | C] () -- C:\Windows\System32\ts.dll[2009-04-19 07:43:58 | 000,079,360 | ---- | C] () -- C:\Windows\System32\mkzlib.dll[2009-04-19 07:43:57 | 000,023,552 | ---- | C] () -- C:\Windows\System32\mkunicode.dll[2009-04-19 07:43:48 | 001,388,966 | ---- | C] () -- C:\Windows\System32\ffmpegmt.dll[2009-04-19 07:43:45 | 000,557,451 | ---- | C] () -- C:\Windows\System32\libmplayer.dll[2009-04-19 07:43:44 | 000,145,081 | ---- | C] () -- C:\Windows\System32\libmpeg2_ff.dll[2009-04-19 07:43:43 | 004,421,889 | ---- | C] () -- C:\Windows\System32\libavcodec.dll[2009-04-19 07:43:35 | 000,098,304 | ---- | C] () -- C:\Windows\System32\ff_wmv9.dll[2009-04-19 07:43:34 | 000,113,152 | ---- | C] () -- C:\Windows\System32\ff_unrar.dll[2009-04-19 07:43:33 | 000,183,296 | ---- | C] () -- C:\Windows\System32\ff_samplerate.dll[2009-04-19 07:43:31 | 000,178,688 | ---- | C] () -- C:\Windows\System32\ff_libmad.dll[2009-04-19 07:43:29 | 000,486,400 | ---- | C] () -- C:\Windows\System32\ff_libfaad2.dll[2009-04-19 07:43:27 | 000,257,024 | ---- | C] () -- C:\Windows\System32\ff_libdts.dll[2009-04-19 07:43:24 | 000,142,848 | ---- | C] () -- C:\Windows\System32\ff_liba52.dll[2009-04-19 07:43:17 | 002,041,363 | ---- | C] () -- C:\Windows\System32\x264vfw.dll[2009-04-19 07:38:33 | 000,237,568 | ---- | C] () -- C:\Windows\System32\OggDS.dll[2009-04-19 07:38:32 | 000,921,600 | ---- | C] () -- C:\Windows\System32\vorbisenc.dll[2009-04-19 07:38:30 | 000,188,416 | ---- | C] () -- C:\Windows\System32\vorbis.dll[2009-04-19 07:38:29 | 000,045,056 | ---- | C] () -- C:\Windows\System32\ogg.dll[2009-04-19 07:38:21 | 000,009,216 | ---- | C] () -- C:\Windows\System32\cpuinf32.dll[2009-04-19 07:38:18 | 000,881,664 | ---- | C] () -- C:\Windows\System32\xvidcore.dll[2009-04-19 07:38:16 | 000,139,264 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll[2009-04-04 21:40:33 | 000,000,203 | ---- | C] () -- C:\Windows\SpssLM.ini[2009-01-30 09:44:14 | 000,004,263 | ---- | C] () -- C:\Windows\System32\FLSINSTU.INI[2009-01-30 08:54:04 | 000,004,263 | ---- | C] () -- C:\Windows\System32\flsinst.ini[2009-01-30 08:54:00 | 001,859,584 | ---- | C] () -- C:\Windows\System32\FLSINST.DLL[2009-01-09 16:39:37 | 000,286,208 | ---- | C] () -- C:\Windows\System32\binkw32.dll[2008-11-18 18:36:28 | 000,000,319 | ---- | C] () -- C:\Windows\game.ini[2008-10-09 09:18:12 | 000,717,296 | ---- | C] () -- C:\Windows\System32\drivers\sptd.sys[2008-10-08 10:47:06 | 000,000,119 | ---- | C] () -- C:\Windows\disney.ini[2008-10-07 09:19:45 | 000,000,279 | ---- | C] () -- C:\Windows\wininit.ini[2008-10-07 08:26:52 | 000,054,784 | ---- | C] () -- C:\Windows\System32\bcmwlrmt.dll[2008-07-23 23:29:16 | 000,047,744 | ---- | C] () -- C:\Windows\System32\drivers\vserial.sys[2008-07-23 23:29:16 | 000,015,264 | ---- | C] () -- C:\Windows\System32\drivers\vsb.sys[2006-11-02 08:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini[2001-08-29 14:11:40 | 000,398,848 | R--- | C] () -- C:\Windows\System32\dk2win32.dll ========== LOP Check ========== [2009-05-05 20:03:14 | 000,000,000 | ---D | M] -- C:\Users\Ania\AppData\Roaming\ACD Systems[2010-07-31 02:20:29 | 000,000,000 | ---D | M] -- C:\Users\Ania\AppData\Roaming\AIMP[2010-07-30 18:16:34 | 000,000,000 | ---D | M] -- C:\Users\Ania\AppData\Roaming\BESTplayer[2008-10-20 21:09:06 | 000,000,000 | ---D | M] -- C:\Users\Ania\AppData\Roaming\Gadu-Gadu[2008-10-12 12:48:49 | 000,000,000 | ---D | M] -- C:\Users\Ania\AppData\Roaming\Opera[2009-10-25 21:26:59 | 000,000,000 | ---D | M] -- C:\Users\Ania\AppData\Roaming\PC Suite[2009-04-28 17:06:53 | 000,000,000 | ---D | M] -- C:\Users\Kasia\AppData\Roaming\ACD Systems[2010-09-27 16:00:02 | 000,000,000 | ---D | M] -- C:\Users\Kasia\AppData\Roaming\Autodesk[2010-03-22 23:26:59 | 000,000,000 | ---D | M] -- C:\Users\Kasia\AppData\Roaming\BESTplayer[2008-12-14 22:42:45 | 000,000,000 | ---D | M] -- C:\Users\Kasia\AppData\Roaming\DAEMON Tools[2010-11-18 16:06:52 | 000,000,000 | ---D | M] -- C:\Users\Kasia\AppData\Roaming\EurekaLog[2010-10-10 20:44:34 | 000,000,000 | ---D | M] -- C:\Users\Kasia\AppData\Roaming\Foxit Software[2009-03-29 14:55:44 | 000,000,000 | ---D | M] -- C:\Users\Kasia\AppData\Roaming\Gadu-Gadu[2010-01-09 00:10:37 | 000,000,000 | ---D | M] -- C:\Users\Kasia\AppData\Roaming\GetRightToGo[2009-12-03 21:16:10 | 000,000,000 | ---D | M] -- C:\Users\Kasia\AppData\Roaming\MAXON[2010-07-22 11:09:41 | 000,000,000 | ---D | M] -- C:\Users\Kasia\AppData\Roaming\Notepad++[2008-10-15 15:13:31 | 000,000,000 | ---D | M] -- C:\Users\Kasia\AppData\Roaming\Opera[2009-01-30 23:16:25 | 000,000,000 | ---D | M] -- C:\Users\Kasia\AppData\Roaming\PC Suite[2009-01-25 15:38:18 | 000,000,000 | ---D | M] -- C:\Users\Kasia\AppData\Roaming\Thinking Minds Budiling Bytes[2009-05-18 20:55:05 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\ACD Systems[2010-12-05 22:59:56 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\AIMP[2010-01-02 17:41:07 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\Ashampoo[2010-11-13 16:39:33 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\Audacity[2010-10-13 16:21:13 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\Autodesk[2010-10-21 16:09:19 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\BESTplayer[2009-10-01 22:01:56 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\Blender Foundation[2009-10-02 19:44:11 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\Bump Technologies, Inc[2010-04-09 21:40:16 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\Coccinella[2009-06-18 22:22:38 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\CoSoSys[2009-05-12 16:12:12 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\DAEMON Tools[2010-02-22 21:27:15 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\Dev-Cpp[2010-03-13 20:55:17 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\DJJava[2010-07-14 21:16:38 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\DMCache[2009-12-05 20:14:35 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\EurekaLog[2010-12-06 16:56:43 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\FileZilla[2010-02-02 11:10:42 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\Foxit[2010-10-10 19:09:40 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\Foxit Software[2009-05-09 21:49:04 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\Gadu-Gadu[2010-01-20 09:48:53 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\GetRightToGo[2010-08-31 15:03:12 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\GHISLER[2010-07-04 11:42:51 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\GlarySoft[2010-08-14 15:03:52 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\ipla[2009-08-21 10:46:07 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\Jasc[2009-11-21 11:20:49 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\Leadertech[2009-06-23 16:36:11 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\LuckieDIPS[2010-10-09 14:55:57 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\MAXON[2009-08-13 08:03:10 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\Nokia[2010-03-24 15:46:09 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\Notepad++[2010-10-17 21:50:17 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\onOne Software[2010-10-16 22:59:21 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\Opera[2009-08-03 18:40:08 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\PC Suite[2010-01-07 20:01:00 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\PhoneRemoteControl[2009-08-28 10:24:02 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\Publish Providers[2010-03-07 21:06:28 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\Softi Software[2010-02-13 10:14:54 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\Sony[2009-08-28 14:52:13 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\Sony Creative Software[2010-02-20 15:13:56 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\Sports Interactive[2010-06-11 21:26:00 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1[2009-07-28 20:41:49 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\Stardock[2009-05-10 12:40:06 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\Thinking Minds Budiling Bytes[2010-08-14 19:47:09 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\Thinstall[2009-05-28 14:55:17 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\Ubisoft[2010-05-12 19:29:37 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\Uniblue[2009-02-10 21:50:19 | 000,000,000 | ---D | M] -- C:\Users\Piotr\AppData\Roaming\ACD Systems[2009-02-15 08:37:08 | 000,000,000 | ---D | M] -- C:\Users\Piotr\AppData\Roaming\Autodesk[2009-03-06 17:28:42 | 000,000,000 | ---D | M] -- C:\Users\Piotr\AppData\Roaming\avidemux[2008-10-09 09:16:46 | 000,000,000 | ---D | M] -- C:\Users\Piotr\AppData\Roaming\DAEMON Tools[2009-04-13 14:23:10 | 000,000,000 | ---D | M] -- C:\Users\Piotr\AppData\Roaming\DMCache[2009-05-09 08:52:37 | 000,000,000 | ---D | M] -- C:\Users\Piotr\AppData\Roaming\FileZilla[2008-10-09 12:06:00 | 000,000,000 | ---D | M] -- C:\Users\Piotr\AppData\Roaming\Gadu-Gadu[2008-12-21 14:31:16 | 000,000,000 | ---D | M] -- C:\Users\Piotr\AppData\Roaming\ipla[2008-12-30 10:46:29 | 000,000,000 | ---D | M] -- C:\Users\Piotr\AppData\Roaming\Nokia[2009-05-03 12:19:37 | 000,000,000 | ---D | M] -- C:\Users\Piotr\AppData\Roaming\Notepad++[2009-02-09 18:55:39 | 000,000,000 | ---D | M] -- C:\Users\Piotr\AppData\Roaming\Nowe Gadu-Gadu[2008-10-08 13:14:13 | 000,000,000 | ---D | M] -- C:\Users\Piotr\AppData\Roaming\Opera[2008-12-30 10:46:35 | 000,000,000 | ---D | M] -- C:\Users\Piotr\AppData\Roaming\PC Suite[2009-04-01 17:03:35 | 000,000,000 | ---D | M] -- C:\Users\Piotr\AppData\Roaming\REAPER[2008-12-04 19:13:51 | 000,000,000 | ---D | M] -- C:\Users\Piotr\AppData\Roaming\SPORE[2009-01-24 16:21:21 | 000,000,000 | ---D | M] -- C:\Users\Piotr\AppData\Roaming\Thinking Minds Budiling Bytes[2009-01-28 08:02:07 | 000,000,000 | ---D | M] -- C:\Users\Piotr\AppData\Roaming\tmp[2010-12-06 00:26:51 | 000,032,546 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT[2010-12-06 20:40:00 | 000,000,418 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{D8423A36-C1D8-4AF0-AC58-F2E120601FBA}.job ========== Purity Check ========== ========== Alternate Data Streams ========== @Alternate Data Stream - 237 bytes -> C:\ProgramData\TEMP:0CE7F3C9@Alternate Data Stream - 129 bytes -> C:\ProgramData\TEMP:05EE1EEF@Alternate Data Stream - 128 bytes -> C:\Windows:nlsPreferences@Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:95E14BBC@Alternate Data Stream - 111 bytes -> C:\ProgramData\TEMP:4F8F308F< End of report >
Użytkownik mik2 edytował ten post 03 02 2011 - 23:44