x-kom hosting

Otwierające się strony i wykradanie haseł

EnergyShot
utworzono
utworzono

Witam,

Dzieją mi się dziwne rzeczy z komputerem, mianowicie - raz na jakiś czas(nie zawsze) przy uruchomieniu systemu włączają się strony XXX. Zostały mi także zabrane hasła z przeglądarek, ponieważ straciłem parę ważniejszych kont które odzyskałem.

Log z OTL :
[log]
OTL logfile created on: 2010-08-26 15:52:10 - Run 1
OTL by OldTimer - Version 3.2.10.0 Folder = C:\Documents and Settings\ADMIN\Pulpit
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 83,00% Memory free
5,00 Gb Paging File | 4,00 Gb Available in Paging File | 93,00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 58,59 Gb Total Space | 4,42 Gb Free Space | 7,54% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: ADMIN
Current User Name: ADMIN
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 60 Days
Output = Standard

[color=#E56717]========== Processes (All) ==========[/color]

PRC - [2010-08-26 15:50:55 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\ADMIN\Pulpit\OTL.exe
PRC - [2010-08-24 12:56:30 | 001,242,448 | ---- | M] (Valve Corporation) -- C:\Program Files\Steam\Steam.exe
PRC - [2010-08-09 15:27:06 | 000,836,464 | ---- | M] (Opera Software) -- C:\Program Files\Opera\opera.exe
PRC - [2010-07-26 19:27:17 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe
PRC - [2009-09-04 16:22:56 | 001,391,136 | ---- | M] (Hagel Technologies Ltd.) -- C:\Program Files\DU Meter\DUMeterSvc.exe
PRC - [2009-07-16 23:33:00 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2009-07-16 23:33:00 | 000,510,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\winlogon.exe
PRC - [2009-07-16 23:33:00 | 000,126,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\wmiapsrv.exe
PRC - [2009-07-16 23:33:00 | 000,111,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\services.exe
PRC - [2009-07-16 23:33:00 | 000,070,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\notepad.exe
PRC - [2009-07-16 23:33:00 | 000,057,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spoolsv.exe
PRC - [2009-07-16 23:33:00 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\smss.exe
PRC - [2009-07-16 23:33:00 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\alg.exe
PRC - [2009-07-16 23:33:00 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\svchost.exe [RPCSS]
PRC - [2009-07-16 23:33:00 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\svchost.exe [NETWORKSERVICE]
PRC - [2009-07-16 23:33:00 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\svchost.exe [NETSVCS]
PRC - [2009-07-16 23:33:00 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\svchost.exe [LOCALSERVICE]
PRC - [2009-07-16 23:33:00 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\svchost.exe [LOCALSERVICE]
PRC - [2009-07-16 23:33:00 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\svchost.exe [DCOMLAUNCH]
PRC - [2009-07-16 23:33:00 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wscntfy.exe
PRC - [2009-07-16 23:33:00 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\lsass.exe
PRC - [2009-07-16 23:33:00 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\csrss.exe
PRC - [2008-10-30 06:52:00 | 000,168,004 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\nvsvc32.exe


[color=#E56717]========== Modules (All) ==========[/color]

MOD - [2010-08-26 15:50:55 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\ADMIN\Pulpit\OTL.exe
MOD - [2009-07-16 23:33:00 | 008,490,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\shell32.dll
MOD - [2009-07-16 23:33:00 | 001,287,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\ole32.dll
MOD - [2009-07-16 23:33:00 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
MOD - [2009-07-16 23:33:00 | 001,020,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\kernel32.dll
MOD - [2009-07-16 23:33:00 | 000,997,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\setupapi.dll
MOD - [2009-07-16 23:33:00 | 000,822,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\comres.dll
MOD - [2009-07-16 23:33:00 | 000,732,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\userenv.dll
MOD - [2009-07-16 23:33:00 | 000,723,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\ntdll.dll
MOD - [2009-07-16 23:33:00 | 000,686,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\advapi32.dll
MOD - [2009-07-16 23:33:00 | 000,585,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\rpcrt4.dll
MOD - [2009-07-16 23:33:00 | 000,580,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\user32.dll
MOD - [2009-07-16 23:33:00 | 000,551,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\oleaut32.dll
MOD - [2009-07-16 23:33:00 | 000,498,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\clbcatq.dll
MOD - [2009-07-16 23:33:00 | 000,474,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\shlwapi.dll
MOD - [2009-07-16 23:33:00 | 000,343,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msvcrt.dll
MOD - [2009-07-16 23:33:00 | 000,286,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\gdi32.dll
MOD - [2009-07-16 23:33:00 | 000,280,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\comdlg32.dll
MOD - [2009-07-16 23:33:00 | 000,219,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\uxtheme.dll
MOD - [2009-07-16 23:33:00 | 000,185,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\framedyn.dll
MOD - [2009-07-16 23:33:00 | 000,177,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\MSCTFIME.IME
MOD - [2009-07-16 23:33:00 | 000,172,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wldap32.dll
MOD - [2009-07-16 23:33:00 | 000,146,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\winspool.drv
MOD - [2009-07-16 23:33:00 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\ntmarta.dll
MOD - [2009-07-16 23:33:00 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx
MOD - [2009-07-16 23:33:00 | 000,110,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\imm32.dll
MOD - [2009-07-16 23:33:00 | 000,084,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\olepro32.dll
MOD - [2009-07-16 23:33:00 | 000,067,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\srclient.dll
MOD - [2009-07-16 23:33:00 | 000,064,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\samlib.dll
MOD - [2009-07-16 23:33:00 | 000,056,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\secur32.dll
MOD - [2009-07-16 23:33:00 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\psapi.dll
MOD - [2009-07-16 23:33:00 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\version.dll


[color=#E56717]========== Win32 Services (SafeList) ==========[/color]

SRV - [2010-08-01 13:47:23 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2009-09-04 16:22:56 | 001,391,136 | ---- | M] (Hagel Technologies Ltd.) [Auto | Running] -- C:\Program Files\DU Meter\DUMeterSvc.exe -- (DUMeterSvc)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV - [2010-07-26 20:15:51 | 000,691,696 | ---- | M] (Duplex Secure Ltd.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\drivers\sptd.sys -- (sptd)
DRV - [2009-09-07 18:59:16 | 001,584,448 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\athw.sys -- (AR5416)
DRV - [2009-07-16 23:33:00 | 000,215,856 | ---- | M] (Silicon Image, Inc) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\Si3132r5.sys -- (Si3132r5)
DRV - [2009-07-16 23:33:00 | 000,212,520 | ---- | M] (Silicon Image, Inc) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\Si3531.sys -- (Si3531)
DRV - [2009-07-16 23:33:00 | 000,195,072 | ---- | M] (Silicon Image, Inc) [Kernel | Boot | Stopped] -- C:\WINDOWS\System32\drivers\Si3114r5.sys -- (Si3114r5)
DRV - [2009-07-16 23:33:00 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2009-07-16 23:33:00 | 000,125,952 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\ulsata2.sys -- (ulsata2)
DRV - [2009-07-16 23:33:00 | 000,074,672 | ---- | M] (Silicon Image, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\si3132.sys -- (Si3132)
DRV - [2009-07-16 23:33:00 | 000,069,248 | ---- | M] (Silicon Image, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\si3124.sys -- (Si3124)
DRV - [2009-07-16 23:33:00 | 000,062,336 | ---- | M] (Silicon Image, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\si3112.sys -- (Si3112)
DRV - [2008-10-30 06:52:00 | 006,626,464 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2008-08-25 03:22:40 | 000,014,208 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvsmu.sys -- (nvsmu)
DRV - [2008-08-20 19:07:06 | 004,751,872 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2008-08-18 18:54:24 | 000,145,952 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\nvgts.sys -- (nvgts)
DRV - [2008-08-14 07:57:42 | 000,074,720 | ---- | M] (Adobe Systems, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\adfs.sys -- (adfs)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]


IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



O1 HOSTS File: ([2010-08-26 15:48:16 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O4 - HKLM..\Run: [AdobeCS4ServiceManager] C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKCU..\Run: [AQQ] C:\Program Files\WapSter\WapSter AQQ\AQQ.exe (Creative Team S.A.)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [DU Meter] C:\Program Files\DU Meter\DUMeter.exe (Hagel Technologies Ltd.)
O4 - HKCU..\Run: [IPLA!] C:\Program Files\ipla\ipla.exe (Redefine Sp z o.o.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.100 89.191.147.2 212.122.200.3
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010-07-22 12:00:28 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found


SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: sermouse.sys - Driver
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vga.sys - Driver
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: sermouse.sys - Driver
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vga.sys - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

[color=#E56717]========== Files/Folders - Created Within 60 Days ==========[/color]

[2010-08-26 15:50:53 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\ADMIN\Pulpit\OTL.exe
[2010-08-26 15:42:14 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2010-08-26 15:42:14 | 000,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2010-08-26 15:42:14 | 000,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2010-08-26 15:42:14 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2010-08-26 15:41:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2010-08-26 15:40:41 | 000,000,000 | ---D | C] -- C:\Qoobox
[2010-08-25 22:31:54 | 000,107,888 | ---- | C] (Sony DADC Austria AG.) -- C:\WINDOWS\System32\CmdLineExt.dll
[2010-08-25 13:36:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Pulpit\ss
[2010-08-24 20:49:32 | 000,000,000 | ---D | C] -- C:\sprzedaz
[2010-08-24 19:39:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Dane aplikacji\Artisteer
[2010-08-24 19:38:25 | 000,000,000 | ---D | C] -- C:\Program Files\Artisteer 2
[2010-08-24 19:36:36 | 000,000,000 | R-SD | C] -- C:\WINDOWS\assembly
[2010-08-24 19:36:04 | 000,000,000 | ---D | C] -- C:\WINDOWS\Microsoft.NET
[2010-08-24 19:34:55 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\appmgmt
[2010-08-24 18:46:58 | 000,000,000 | ---D | C] -- C:\Program Files\Spritefixer
[2010-08-24 18:46:50 | 000,049,152 | ---- | C] (PCSCT Software) -- C:\WINDOWS\UNINS.EXE
[2010-08-24 18:46:50 | 000,028,672 | ---- | C] ( ) -- C:\WINDOWS\System32\shelllnk.dll
[2010-08-24 18:46:24 | 000,000,000 | ---D | C] -- C:\sprite
[2010-08-24 16:15:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Pulpit\SSPatologia
[2010-08-24 13:11:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Pulpit\spr
[2010-08-24 01:31:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Pulpit\SSy by DUCHU25
[2010-08-23 20:54:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Pulpit\Sims2PetsPLUS5Trainer
[2010-08-23 17:23:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Pulpit\petstrainer5
[2010-08-22 23:37:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Pulpit\rld-sofb
[2010-08-22 22:53:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Pulpit\SimUFO
[2010-08-22 17:27:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dokumenty\EA Games
[2010-08-22 17:25:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\EA Games
[2010-08-22 17:22:18 | 000,442,368 | R--- | C] (On2.com) -- C:\WINDOWS\System32\vp6vfw.dll
[2010-08-21 21:30:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\python24
[2010-08-21 21:28:44 | 000,000,000 | ---D | C] -- C:\Python27
[2010-08-21 21:27:14 | 000,000,000 | ---D | C] -- C:\Program Files\Tibia Auto
[2010-08-21 21:23:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\tibiabot_ng_8.60
[2010-08-21 20:20:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Dane aplikacji\Tibia
[2010-08-21 20:01:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Pulpit\szablon_aukcji_1015
[2010-08-21 20:00:40 | 000,000,000 | ---D | C] -- C:\Program Files\Tibia
[2010-08-20 19:57:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla
[2010-08-20 19:57:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Dane aplikacji\ipla
[2010-08-20 19:57:21 | 000,000,000 | ---D | C] -- C:\Program Files\ipla
[2010-08-17 11:43:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Dane aplikacji\Media Player Classic
[2010-08-17 11:18:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Pulpit\trainer2
[2010-08-17 11:18:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Pulpit\nfsmw_save
[2010-08-17 11:16:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\NFS Most Wanted
[2010-08-17 11:06:55 | 000,000,000 | ---D | C] -- C:\Program Files\EA GAMES
[2010-08-17 11:04:55 | 000,000,000 | ---D | C] -- C:\WINDOWS\RegisteredPackages
[2010-08-17 00:34:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Pulpit\u175_ Thomson-Need.For.Speed-Most.Wanted Black Edition .PL
[2010-08-16 17:38:45 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\ADMIN\Recent
[2010-08-16 17:38:27 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2010-08-16 17:38:13 | 003,420,304 | ---- | C] (Piriform Ltd) -- C:\Documents and Settings\ADMIN\Moje dokumenty\ccsetup234.exe
[2010-08-16 17:28:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\ss
[2010-08-15 01:31:12 | 000,000,000 | -H-D | C] -- C:\WINDOWS\PIF
[2010-08-14 18:09:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\aim
[2010-08-13 16:00:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\trainer2
[2010-08-12 23:56:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\ub0rgamerz
[2010-08-12 23:56:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\trainer
[2010-08-12 12:12:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\mr.warlee SS
[2010-08-11 14:38:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\SS'y
[2010-08-10 16:25:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\Ssy By NoOoBeQ
[2010-08-10 00:37:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\DC++
[2010-08-10 00:37:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Dane aplikacji\DC++
[2010-08-10 00:37:23 | 000,000,000 | ---D | C] -- C:\Program Files\DC++
[2010-08-09 18:23:40 | 000,000,000 | ---D | C] -- C:\Program Files\EVGA Precision
[2010-08-09 18:23:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\EVGAPrecision195_[www.programosy.pl]
[2010-08-09 13:20:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\aztec
[2010-08-08 16:25:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\roundy
[2010-08-07 19:19:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Pulpit\cstrike_www.przeklej.pl
[2010-08-07 11:08:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\raZ'
[2010-08-05 22:33:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\LC Hp + Mp Selector v1.03
[2010-08-05 21:58:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\Last Chaos Hack
[2010-08-05 21:48:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\LCToolkitv2
[2010-08-05 15:10:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\SSy DrEwNiaK
[2010-08-05 08:28:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\Ss By WaRiiAt
[2010-08-04 00:00:41 | 000,000,000 | --SD | C] -- C:\Program Files\HLSW
[2010-08-04 00:00:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Dane aplikacji\HLSW
[2010-08-03 22:16:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\gaa
[2010-08-03 20:03:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\jo
[2010-08-03 19:40:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\megusia
[2010-08-03 16:49:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\cstrike polish
[2010-08-02 20:25:26 | 000,000,000 | ---D | C] -- C:\GAMIGO
[2010-08-01 21:29:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\18 WoS Haulin
[2010-08-01 21:28:56 | 000,000,000 | ---D | C] -- C:\Program Files\18 Wheels of Steel Haulin
[2010-08-01 19:23:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Pulpit\westwood
[2010-08-01 18:44:55 | 000,000,000 | ---D | C] -- C:\Program Files\Robster Productions
[2010-08-01 16:34:49 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DirectX
[2010-08-01 16:34:29 | 000,000,000 | ---D | C] -- C:\Program Files\Buka
[2010-08-01 14:19:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\brushes
[2010-08-01 13:56:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\FLEXnet
[2010-08-01 13:53:11 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe Media Player
[2010-08-01 13:51:18 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe AIR
[2010-08-01 13:47:23 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Macrovision Shared
[2010-08-01 11:59:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\Reklama
[2010-07-31 22:26:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\NIE TYKAC - AMXMODX
[2010-07-31 22:25:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\AMXX_Studio_1.4.3_final
[2010-07-31 19:08:01 | 000,679,936 | ---- | C] (Generated by JEDI) -- C:\WINDOWS\System32\D3DX81ab.dll
[2010-07-31 19:08:00 | 000,000,000 | ---D | C] -- C:\Program Files\Cheat Engine
[2010-07-31 19:04:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\MoFunZone.com--theme_park_gold_trainer
[2010-07-31 18:54:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\MoFunZone.com--themepark_money_cheat
[2010-07-31 12:33:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\screeny
[2010-07-30 14:42:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\Antyskrypt - CSCenter.pl
[2010-07-30 03:06:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Pulpit\sdd
[2010-07-30 00:52:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\Auto-Restart v5.0
[2010-07-30 00:40:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\wybor_interpu_bez_opcji_EXIT
[2010-07-29 19:50:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Identities
[2010-07-29 19:45:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Pulpit\coolblue
[2010-07-29 19:38:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Pulpit\phpBB_modified_by_Przemo
[2010-07-29 15:13:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\ad_manager - CSCenter.pl
[2010-07-29 15:08:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\OdrzucaHE - CSCenter.pl
[2010-07-29 14:57:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\mapybb
[2010-07-29 00:16:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\bb map pack
[2010-07-28 19:05:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\Spolszczona wersja
[2010-07-28 19:03:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\basebuilder54
[2010-07-28 14:39:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\Stupid_Stealer_6.5
[2010-07-28 00:14:19 | 000,000,000 | ---D | C] -- C:\Program Files\Lavalys
[2010-07-28 00:12:44 | 010,255,080 | ---- | C] (Lavalys, Inc. ) -- C:\Documents and Settings\ADMIN\Moje dokumenty\everestultimate550.exe
[2010-07-27 17:23:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\WH XD
[2010-07-27 16:06:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\awpindia
[2010-07-27 09:12:12 | 000,217,088 | ---- | C] (www.helixcommunity.org) -- C:\WINDOWS\System32\yv12vfw.dll
[2010-07-27 09:12:12 | 000,151,552 | ---- | C] (fccHandler) -- C:\WINDOWS\System32\ac3acm.acm
[2010-07-27 09:12:11 | 000,720,384 | ---- | C] (DivX, Inc.) -- C:\WINDOWS\System32\divx.dll
[2010-07-27 09:12:11 | 000,094,208 | ---- | C] (DivX, Inc.) -- C:\WINDOWS\System32\dpl100.dll
[2010-07-27 09:12:08 | 000,000,000 | ---D | C] -- C:\Program Files\K-Lite Codec Pack
[2010-07-27 09:10:38 | 026,568,956 | ---- | C] ( ) -- C:\Documents and Settings\ADMIN\Pulpit\K-Lite_Codec_Pack_610_Mega.exe
[2010-07-27 09:09:22 | 000,000,000 | ---D | C] -- C:\Program Files\InterActual
[2010-07-27 09:09:15 | 000,278,528 | ---- | C] (Real Networks, Inc) -- C:\WINDOWS\System32\pncrt.dll
[2010-07-27 09:09:14 | 000,000,000 | ---D | C] -- C:\Program Files\Real Alternative
[2010-07-27 09:08:46 | 006,909,232 | ---- | C] ( ) -- C:\Documents and Settings\ADMIN\Pulpit\Real_Alternative_202_[www.programosy.pl].exe
[2010-07-27 08:41:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Pulpit\AMXBANS - CSCenter.pl
[2010-07-27 08:34:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Pulpit\AMXBans 5.1b Bez PL Instalacji
[2010-07-26 21:16:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Pulpit\backup
[2010-07-26 20:19:28 | 000,000,000 | ---D | C] -- C:\Program Files\Theme Park World Fix
[2010-07-26 20:18:43 | 000,000,000 | ---D | C] -- C:\Program Files\Bullfrog
[2010-07-26 20:18:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\WINDOWS
[2010-07-26 20:15:51 | 000,691,696 | ---- | C] (Duplex Secure Ltd.) -- C:\WINDOWS\System32\drivers\sptd.sys
[2010-07-26 20:15:47 | 000,000,000 | ---D | C] -- C:\Program Files\DAEMON Tools Lite
[2010-07-26 20:15:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Dane aplikacji\DAEMON Tools Lite
[2010-07-26 20:15:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite
[2010-07-26 19:29:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Pulpit\viewmode_v2
[2010-07-26 19:27:29 | 000,000,000 | ---D | C] -- C:\Program Files\JDownloader
[2010-07-26 19:27:14 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2010-07-26 19:26:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Dane aplikacji\Sun
[2010-07-26 19:25:13 | 019,231,200 | ---- | C] (AppWork UG (haftungsbeschränkt)) -- C:\Documents and Settings\ADMIN\Pulpit\JDownloaderSetup_0.9579(dobreprogramy.pl).exe
[2010-07-26 17:00:08 | 002,395,860 | ---- | C] (AppWork UG (haftungsbeschränkt)) -- C:\Documents and Settings\ADMIN\Pulpit\JDownloaderSetup_kikin.exe
[2010-07-26 13:43:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\brudas
[2010-07-26 13:07:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Hagel Technologies
[2010-07-26 13:07:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Hagel Technologies
[2010-07-26 13:07:36 | 000,000,000 | ---D | C] -- C:\Program Files\DU Meter
[2010-07-26 13:06:43 | 001,985,216 | ---- | C] (Hagel Technologies Ltd. ) -- C:\Documents and Settings\ADMIN\Pulpit\DUMeter-Install.exe
[2010-07-25 15:48:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Pulpit\no50
[2010-07-25 15:45:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Dane aplikacji\TeamViewer
[2010-07-25 15:45:25 | 000,000,000 | ---D | C] -- C:\Program Files\TeamViewer
[2010-07-25 15:44:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Pulpit\freecsstemplates_043
[2010-07-25 15:44:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Pulpit\Pricing.Table.–.PSD.HTML.CSS.[GraphicRiver].dESiGNERz-CREW.iNFO
[2010-07-25 15:41:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Pulpit\44
[2010-07-25 15:00:51 | 000,454,656 | ---- | C] (Simon Tatham) -- C:\Documents and Settings\ADMIN\Moje dokumenty\putty.exe
[2010-07-25 14:48:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\Pulpit
[2010-07-24 17:26:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Pulpit\CoolWater11
[2010-07-24 17:23:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Pulpit\Underground12
[2010-07-24 17:23:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Pulpit\Envision12
[2010-07-24 12:08:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Adobe
[2010-07-24 12:08:27 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2010-07-24 12:08:27 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
[2010-07-24 12:02:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Adobe
[2010-07-24 11:17:30 | 000,000,000 | R--D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\Moje wideo
[2010-07-23 21:55:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Pulpit\SSY
[2010-07-23 20:03:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Pulpit\dowod
[2010-07-23 15:22:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Pulpit\muzyka
[2010-07-23 15:14:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Pulpit\Nowy folder
[2010-07-22 22:25:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\.mysqlcc
[2010-07-22 21:42:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Pulpit\Kabul
[2010-07-22 21:01:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Pulpit\zdjecia
[2010-07-22 20:16:38 | 000,000,000 | ---D | C] -- C:\Program Files\WebServ
[2010-07-22 20:15:05 | 033,428,328 | ---- | C] (WebsSrv.PL ) -- C:\Documents and Settings\ADMIN\Pulpit\WebServ-2.0.exe
[2010-07-22 16:13:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Dane aplikacji\skypePM
[2010-07-22 16:12:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Dane aplikacji\Skype
[2010-07-22 16:12:32 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2010-07-22 16:12:31 | 000,000,000 | R--D | C] -- C:\Program Files\Skype
[2010-07-22 16:12:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Skype
[2010-07-22 16:11:40 | 001,704,744 | ---- | C] (Skype Technologies S.A.) -- C:\Documents and Settings\ADMIN\Pulpit\SkypeSetup.exe
[2010-07-22 16:09:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Pulpit\screeny
[2010-07-22 16:01:09 | 000,000,000 | ---D | C] -- C:\Program Files\Notepad++
[2010-07-22 16:01:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Dane aplikacji\Notepad++
[2010-07-22 16:00:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Dane aplikacji\FileZilla
[2010-07-22 15:55:42 | 000,000,000 | ---D | C] -- C:\Program Files\FileZilla FTP Client
[2010-07-22 15:18:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\WapSter
[2010-07-22 15:18:19 | 000,000,000 | ---D | C] -- C:\Program Files\WapSter
[2010-07-22 15:11:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Dane aplikacji\Macromedia
[2010-07-22 15:11:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Dane aplikacji\Adobe
[2010-07-22 13:54:32 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Dokumenty\Moja muzyka
[2010-07-22 13:54:16 | 000,000,000 | -HSD | C] -- C:\WINDOWS\Installer
[2010-07-22 13:54:16 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ODBC
[2010-07-22 13:54:13 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\SpeechEngines
[2010-07-22 13:54:12 | 000,000,000 | R--D | C] -- C:\Program Files
[2010-07-22 13:54:12 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Microsoft Shared
[2010-07-22 13:54:12 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files
[2010-07-22 13:53:48 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Menu Start
[2010-07-22 13:53:48 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Dokumenty
[2010-07-22 13:53:48 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Szablony
[2010-07-22 13:53:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Ulubione
[2010-07-22 13:53:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Pulpit
[2010-07-22 13:53:36 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot2
[2010-07-22 13:53:36 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot
[2010-07-22 13:53:31 | 000,000,000 | --SD | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Microsoft
[2010-07-22 13:53:31 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\All Users\Dane aplikacji
[2010-07-22 13:53:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings
[2010-07-22 13:53:09 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[2010-07-22 13:48:48 | 000,000,000 | --SD | C] -- C:\WINDOWS\Offline Web Pages
[2010-07-22 13:48:48 | 000,000,000 | --SD | C] -- C:\WINDOWS\Downloaded Program Files
[2010-07-22 13:48:48 | 000,000,000 | R-SD | C] -- C:\WINDOWS\Fonts
[2010-07-22 13:48:48 | 000,000,000 | RHSD | C] -- C:\WINDOWS\System32\dllcache
[2010-07-22 13:48:48 | 000,000,000 | R--D | C] -- C:\WINDOWS\Web
[2010-07-22 13:48:48 | 000,000,000 | -H-D | C] -- C:\WINDOWS\inf
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\WinSxS
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\wins
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\WBEM
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\wbem
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\usmt
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\UMDF
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\twain_32
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\Temp
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\system32
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\system
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\spool
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ShellExt
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Setup
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\security
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\Resources
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\repair
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ras
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\Provisioning
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\pl-pl
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\pl
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\PeerNet
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\pchealth
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\oobe
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\npp
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\NLDRV
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\Network Diagnostic
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\mui
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\mui
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\msapps
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\msagent
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\Media
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\L2Schemas
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\java
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\inetsrv
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\IME
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\ime
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\icsxml
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ias
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\Help
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\export
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\etc
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\ehome
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\Driver Cache
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\disdn
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\dhcp
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\Debug
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\Cursors
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\Connection Wizard
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\config
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\Config
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\AppPatch
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\addins
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\3com_dmi
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\3076
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\2052
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1054
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1045
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1042
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1041
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1037
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1033
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1031
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1028
[2010-07-22 13:48:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1025
[2010-07-22 12:16:53 | 000,000,000 | ---D | C] -- C:\Program Files\Steam
[2010-07-22 12:16:04 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Lang
[2010-07-22 12:13:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Opera
[2010-07-22 12:13:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Dane aplikacji\Opera
[2010-07-22 12:13:49 | 000,000,000 | ---D | C] -- C:\Program Files\Opera
[2010-07-22 12:13:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ReinstallBackups
[2010-07-22 12:13:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Dane aplikacji\WinRAR
[2010-07-22 12:13:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Pulpit\vr630_cs_15.23_xp32
[2010-07-22 12:12:39 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2010-07-22 12:10:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\RTCOM
[2010-07-22 12:10:43 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\ADMIN\PrivacIE
[2010-07-22 12:10:36 | 002,808,832 | ---- | C] (RealTek Semicoductor Corp.) -- C:\WINDOWS\ALCWZRD.EXE
[2010-07-22 12:10:36 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2010-07-22 12:10:31 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield
[2010-07-22 12:08:31 | 001,584,448 | ---- | C] (Atheros Communications, Inc.) -- C:\WINDOWS\System32\drivers\athw.sys
[2010-07-22 12:08:31 | 001,584,448 | ---- | C] (Atheros Communications, Inc.) -- C:\WINDOWS\System32\athw.sys
[2010-07-22 12:08:31 | 000,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information
[2010-07-22 12:08:31 | 000,000,000 | ---D | C] -- C:\Program Files\Atheros
[2010-07-22 12:08:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Atheros
[2010-07-22 12:08:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Dane aplikacji\InstallShield
[2010-07-22 12:06:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\nview
[2010-07-22 12:04:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Dane aplikacji\Identities
[2010-07-22 12:04:18 | 000,000,000 | R--D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\Moje obrazy
[2010-07-22 12:04:18 | 000,000,000 | R--D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty\Moja muzyka
[2010-07-22 12:04:18 | 000,000,000 | -H-D | C] -- C:\Program Files\Uninstall Information
[2010-07-22 12:04:15 | 000,000,000 | --SD | C] -- C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Microsoft
[2010-07-22 12:04:15 | 000,000,000 | --SD | C] -- C:\Documents and Settings\ADMIN\Dane aplikacji\Microsoft
[2010-07-22 12:04:15 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\ADMIN\SendTo
[2010-07-22 12:04:15 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\ADMIN\Dane aplikacji
[2010-07-22 12:04:15 | 000,000,000 | R--D | C] -- C:\Documents and Settings\ADMIN\Ulubione
[2010-07-22 12:04:15 | 000,000,000 | R--D | C] -- C:\Documents and Settings\ADMIN\Moje dokumenty
[2010-07-22 12:04:15 | 000,000,000 | R--D | C] -- C:\Documents and Settings\ADMIN\Menu Start
[2010-07-22 12:04:15 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\ADMIN\IETldCache
[2010-07-22 12:04:15 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\ADMIN\Cookies
[2010-07-22 12:04:15 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\ADMIN\Ustawienia lokalne
[2010-07-22 12:04:15 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\ADMIN\Szablony
[2010-07-22 12:04:15 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\ADMIN\PrintHood
[2010-07-22 12:04:15 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\ADMIN\NetHood
[2010-07-22 12:04:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ADMIN\Pulpit
[2010-07-22 12:04:09 | 000,000,000 | ---D | C] -- C:\WINDOWS\SoftwareDistribution
[2010-07-22 12:04:06 | 000,000,000 | --SD | C] -- C:\WINDOWS\System32\Microsoft
[2010-07-22 12:04:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2010-07-22 12:04:05 | 000,000,000 | --SD | C] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Microsoft
[2010-07-22 12:04:05 | 000,000,000 | --SD | C] -- C:\Documents and Settings\LocalService\Dane aplikacji\Microsoft
[2010-07-22 12:04:01 | 000,000,000 | --SD | C] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Microsoft
[2010-07-22 12:04:01 | 000,000,000 | --SD | C] -- C:\Documents and Settings\NetworkService\Dane aplikacji\Microsoft
[2010-07-22 12:02:39 | 000,080,384 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia330.dll
[2010-07-22 12:02:39 | 000,080,384 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia001.dll
[2010-07-22 12:02:39 | 000,029,184 | ---- | C] (RICOH Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rw330ext.dll
[2010-07-22 12:01:46 | 000,054,528 | ---- | C] (Philips Semiconductors GmbH) -- C:\WINDOWS\System32\dllcache\cap7146.sys
[2010-07-22 12:01:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\xircom
[2010-07-22 12:01:22 | 000,000,000 | ---D | C] -- C:\Program Files\xerox
[2010-07-22 12:01:22 | 000,000,000 | ---D | C] -- C:\Program Files\microsoft frontpage
[2010-07-22 12:00:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\PreInstall
[2010-07-22 12:00:40 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$hf_mig$
[2010-07-22 11:59:36 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\All Users\DRM
[2010-07-22 11:59:19 | 000,000,000 | -H-D | C] -- C:\Program Files\WindowsUpdate
[2010-07-22 11:59:17 | 000,000,000 | ---D | C] -- C:\Program Files\Usługi online
[2010-07-22 11:58:59 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\DirectX
[2010-07-22 11:58:40 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Services
[2010-07-22 11:58:38 | 000,000,000 | --SD | C] -- C:\WINDOWS\Tasks
[2010-07-22 11:58:37 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\MSSoap
[2010-07-22 11:58:31 | 000,000,000 | ---D | C] -- C:\WINDOWS\srchasst
[2010-07-22 11:58:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Macromed
[2010-07-22 11:58:24 | 000,000,000 | ---D | C] -- C:\Program Files\Movie Maker
[2010-07-22 11:58:01 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Restore
[2010-07-22 11:57:57 | 000,000,000 | ---D | C] -- C:\Program Files\NetMeeting
[2010-07-22 11:57:54 | 000,000,000 | ---D | C] -- C:\Program Files\Outlook Express
[2010-07-22 11:57:47 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\System
[2010-07-22 11:57:43 | 000,000,000 | ---D | C] -- C:\Program Files\Internet Explorer
[2010-07-22 11:57:42 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Dokumenty\Moje obrazy
[2010-07-22 11:57:19 | 000,000,000 | ---D | C] -- C:\Program Files\ComPlus Applications
[2010-07-22 11:57:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\Registration
[2010-07-22 11:57:10 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Media Connect 2
[2010-07-22 11:57:09 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Media Player
[2010-07-22 11:57:08 | 000,000,000 | ---D | C] -- C:\Program Files\Messenger
[2010-07-22 11:57:04 | 000,000,000 | ---D | C] -- C:\Program Files\MSN Gaming Zone
[2010-07-22 11:56:37 | 000,283,136 | ---- | C] (Cinematronics) -- C:\WINDOWS\System32\dllcache\pinball.exe
[2010-07-22 11:56:35 | 000,000,000 | ---D | C] -- C:\Program Files\Windows NT
[2010-07-22 11:56:31 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\MsDtc
[2010-07-22 11:56:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Com
[2010-07-22 11:56:15 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Dokumenty\Moje wideo
[2010-07-22 11:44:20 | 000,000,000 | ---D | C] -- C:\Format
[2010-07-04 09:03:00 | 002,286,080 | ---- | C] (Python Software Foundation) -- C:\WINDOWS\System32\python27.dll
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

[color=#E56717]========== Files - Modified Within 60 Days ==========[/color]

[2010-08-26 15:50:55 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\ADMIN\Pulpit\OTL.exe
[2010-08-26 15:49:11 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010-08-26 15:48:21 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2010-08-26 15:48:16 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2010-08-26 15:41:55 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010-08-26 15:41:07 | 002,883,584 | -H-- | M] () -- C:\Documents and Settings\ADMIN\NTUSER.DAT
[2010-08-26 15:40:23 | 003,828,374 | R--- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\ComboFix.exe
[2010-08-26 15:37:20 | 000,191,286 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2010-08-25 22:31:54 | 000,107,888 | ---- | M] (Sony DADC Austria AG.) -- C:\WINDOWS\System32\CmdLineExt.dll
[2010-08-25 22:31:31 | 000,001,941 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\The Sims™ 2 Osiedlowe życie.lnk
[2010-08-25 22:31:31 | 000,001,138 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\www.thesims3.com.lnk
[2010-08-25 21:27:26 | 000,002,267 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk
[2010-08-25 18:37:20 | 000,000,501 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\sql.cfg
[2010-08-25 17:35:42 | 000,002,895 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\users.ini
[2010-08-25 17:31:40 | 000,022,802 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\admin_spec_esp.sma
[2010-08-25 13:36:41 | 001,285,544 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\ss.rar
[2010-08-25 02:16:44 | 000,017,734 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\weaponmenu.amxx
[2010-08-25 02:16:43 | 000,027,963 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\weaponmenu.sma
[2010-08-25 02:16:28 | 000,027,963 | -H-- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\weaponmenu.sma.bak
[2010-08-24 19:38:14 | 000,866,672 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010-08-24 19:38:14 | 000,448,242 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2010-08-24 19:38:14 | 000,392,494 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010-08-24 19:38:14 | 000,074,428 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2010-08-24 19:38:14 | 000,058,794 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010-08-24 19:35:34 | 000,004,566 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2010-08-24 19:08:00 | 000,003,478 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\server.cfg
[2010-08-24 18:47:08 | 000,001,605 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\Spritefixer.lnk
[2010-08-24 18:46:50 | 000,049,152 | ---- | M] (PCSCT Software) -- C:\WINDOWS\UNINS.EXE
[2010-08-24 18:46:50 | 000,028,672 | ---- | M] ( ) -- C:\WINDOWS\System32\shelllnk.dll
[2010-08-24 18:46:50 | 000,006,114 | ---- | M] () -- C:\WINDOWS\System32\shelllnk.tlb
[2010-08-24 18:46:50 | 000,002,616 | ---- | M] () -- C:\WINDOWS\System32\shelllnk.lib
[2010-08-24 18:46:50 | 000,000,975 | ---- | M] () -- C:\WINDOWS\System32\shelllnk.exp
[2010-08-24 18:46:46 | 000,053,760 | ---- | M] () -- C:\WINDOWS\System32\zlib.dll
[2010-08-24 17:35:52 | 000,000,637 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\maps.ini
[2010-08-24 17:34:50 | 000,004,945 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\plugins.ini
[2010-08-24 16:15:15 | 002,080,610 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\SSPatologia.rar
[2010-08-24 12:53:06 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010-08-24 01:31:51 | 001,803,400 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\SSy by DUCHU25.rar
[2010-08-23 20:54:24 | 000,018,411 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\Sims2PetsPLUS5Trainer.zip
[2010-08-23 17:23:17 | 000,020,461 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\petstrainer5.rar
[2010-08-23 13:55:49 | 000,001,871 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\The Sims™ 2 Zwierzaki.lnk
[2010-08-22 23:36:13 | 005,199,149 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\rld-sofb.rar
[2010-08-22 23:08:14 | 000,001,898 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\The Sims 2 Własny biznes.lnk
[2010-08-22 22:52:57 | 000,093,320 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\SimUFO.7z
[2010-08-22 17:25:51 | 000,001,747 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\The Sims 2.lnk
[2010-08-21 21:30:49 | 000,001,580 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\Tibia Auto.lnk
[2010-08-21 21:30:21 | 000,869,417 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\python24.zip
[2010-08-21 21:27:09 | 003,671,797 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\TibiaAutoSetup_2_5_2.exe
[2010-08-21 21:23:37 | 001,061,649 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\tibiabot_ng_8.60.rar
[2010-08-21 20:06:48 | 000,008,022 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\mbank_logo.gif
[2010-08-21 20:01:20 | 000,191,796 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\szablon_aukcji_1015.zip
[2010-08-21 20:00:42 | 000,000,645 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Tibia.lnk
[2010-08-21 13:44:48 | 000,000,364 | ---- | M] () -- C:\test.html
[2010-08-20 19:57:24 | 000,000,633 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\ipla.lnk
[2010-08-20 19:56:45 | 013,863,272 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\iplasetup.exe
[2010-08-20 19:44:16 | 000,003,584 | ---- | M] () -- C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-08-18 12:49:46 | 004,810,150 | -H-- | M] () -- C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2010-08-17 11:18:38 | 000,032,321 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\trainer2.rar
[2010-08-17 11:17:46 | 000,010,915 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\nfsmw_save.rar
[2010-08-17 11:15:47 | 000,001,829 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Need for Speed™ Most Wanted.lnk
[2010-08-16 17:38:19 | 003,420,304 | ---- | M] (Piriform Ltd) -- C:\Documents and Settings\ADMIN\Moje dokumenty\ccsetup234.exe
[2010-08-16 17:28:19 | 003,382,935 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\ss.rar
[2010-08-15 15:30:29 | 000,000,088 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\listip.cfg
[2010-08-13 17:52:58 | 000,000,500 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\logowanie.sma
[2010-08-13 16:00:43 | 000,337,898 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\trainer2.rar
[2010-08-13 00:15:14 | 000,683,012 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\bot.exe
[2010-08-12 23:56:42 | 000,347,088 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\trainer.rar
[2010-08-12 23:31:53 | 000,000,599 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Opera.lnk
[2010-08-12 22:12:02 | 000,001,932 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\znikadlo.amxx
[2010-08-12 22:12:02 | 000,001,000 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\znikadlo.sma
[2010-08-12 12:12:27 | 005,342,207 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\mr.warlee SS.rar
[2010-08-11 14:38:47 | 004,555,437 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\SS'y.rar
[2010-08-10 16:25:24 | 003,392,984 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\Ssy By NoOoBeQ.rar
[2010-08-10 13:15:44 | 000,006,348 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\history.html
[2010-08-10 00:37:03 | 022,730,983 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\DCPlusPlus-0.770.exe
[2010-08-09 22:10:23 | 000,061,202 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\asdsadasd.PNG
[2010-08-09 18:23:42 | 000,000,756 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\EVGA Precision.lnk
[2010-08-09 18:23:28 | 001,669,642 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\EVGAPrecision195_[www.programosy.pl].ZIP
[2010-08-09 16:55:02 | 000,019,456 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\amxx.cfg
[2010-08-09 13:20:25 | 004,199,896 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\aztec.rar
[2010-08-08 14:29:29 | 000,002,868 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\users.ini
[2010-08-08 13:05:37 | 000,004,002 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\config.inc.php
[2010-08-07 20:53:02 | 002,764,129 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\hachi.png
[2010-08-07 19:24:03 | 000,811,365 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\wtf.PNG
[2010-08-07 19:19:15 | 006,843,480 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\cstrike_www.przeklej.pl.rar
[2010-08-07 16:19:03 | 000,000,108 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\roundsound.ini
[2010-08-07 15:28:56 | 000,931,625 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\demos7.dem
[2010-08-07 15:26:21 | 000,153,922 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\demos.dem
[2010-08-07 15:24:11 | 000,448,559 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\demos6.dem
[2010-08-07 15:22:20 | 006,267,007 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\demos4.dem
[2010-08-07 15:13:58 | 000,424,132 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\demos3.dem
[2010-08-07 15:13:23 | 000,587,126 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\demos2.dem
[2010-08-07 15:11:53 | 001,125,271 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\demos1.dem
[2010-08-07 11:08:20 | 000,481,028 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\raZ'.rar
[2010-08-06 23:50:28 | 001,803,866 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\screen.PNG
[2010-08-06 19:01:33 | 000,009,025 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\anime-music-150x150.jpg
[2010-08-05 22:33:02 | 001,194,666 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\LC Hp + Mp Selector v1.03.rar
[2010-08-05 22:29:24 | 000,000,331 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\Nksp.CT
[2010-08-05 21:58:17 | 000,066,076 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\Last Chaos Hack.rar
[2010-08-05 21:47:59 | 000,278,021 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\LCToolkitv2.rar
[2010-08-05 17:14:14 | 000,014,858 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\ad_manager.amxx
[2010-08-05 17:13:53 | 000,000,544 | -H-- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\znikadlo.sma.bak
[2010-08-05 15:10:32 | 001,731,992 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\SSy DrEwNiaK.rar
[2010-08-05 12:35:00 | 000,000,108 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\roundsound.ini
[2010-08-05 12:22:29 | 002,388,932 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\podwierdzeniewpaty.jpg
[2010-08-05 08:41:52 | 000,013,732 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\sssss.PNG
[2010-08-05 08:28:17 | 007,425,859 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\Ss By WaRiiAt.rar
[2010-08-04 23:00:51 | 000,141,604 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\dowod2.PNG
[2010-08-04 23:00:33 | 000,071,708 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\dowod1.PNG
[2010-08-04 00:05:01 | 000,026,296 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\c76e01ad000066b8.jpg
[2010-08-04 00:00:44 | 000,000,633 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\HLSW.lnk
[2010-08-03 22:16:19 | 005,320,237 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\gaa.rar
[2010-08-03 20:03:54 | 004,386,514 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\jo.rar
[2010-08-03 19:40:50 | 000,547,322 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\megusia.rar
[2010-08-03 16:49:01 | 002,057,776 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\cstrike polish.rar
[2010-08-02 22:29:29 | 000,010,162 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\avatar100x100[25].jpg
[2010-08-02 20:28:25 | 000,001,489 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\LastChaosPoland.lnk
[2010-08-02 20:25:26 | 000,000,121 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\LastChaos Homepage.url
[2010-08-02 20:22:10 | 000,002,145 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\championka.rar
[2010-08-02 20:07:14 | 000,041,041 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\L20100802.rar
[2010-08-02 14:51:55 | 000,185,016 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010-08-01 21:29:22 | 000,000,752 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\18 Wheels of Steel Haulin.lnk
[2010-08-01 20:06:31 | 000,000,211 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\Dedicated Server.url
[2010-08-01 20:03:18 | 000,000,500 | -H-- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\logowanie.sma.bak
[2010-08-01 19:22:29 | 000,004,883 | ---- | M] () -- C:\Documents and Settings\ADMIN\plugins.ini
[2010-08-01 19:22:13 | 002,779,606 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\westwood.rar
[2010-08-01 19:19:00 | 000,003,232 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\plugins.ini
[2010-08-01 18:50:44 | 000,011,736 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\tempdecal.wad
[2010-08-01 18:50:15 | 000,003,053 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\spray.PNG
[2010-08-01 18:46:21 | 000,013,096 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\Kopia pldecal.wad
[2010-08-01 18:43:52 | 001,280,303 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\HLC_1_setup.exe
[2010-08-01 16:34:38 | 000,000,798 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\Hard Truck Tycoon.lnk
[2010-08-01 15:16:02 | 000,326,757 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\abc3.png
[2010-08-01 15:06:16 | 000,306,440 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\abc2.png
[2010-08-01 14:48:03 | 000,881,068 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\abc.png
[2010-08-01 14:42:33 | 000,020,096 | ---- | M] () -- C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
[2010-08-01 12:27:06 | 000,002,150 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\czat_log.amxx
[2010-08-01 12:27:01 | 000,001,257 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\logowanie.amxx
[2010-08-01 11:59:18 | 000,535,558 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\Reklama.rar
[2010-07-31 22:26:36 | 000,000,796 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\AMX Mod X Studio.lnk
[2010-07-31 22:25:49 | 001,966,725 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\AMXX_Studio_1.4.3_final.zip
[2010-07-31 19:08:02 | 000,000,677 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\Cheat Engine.lnk
[2010-07-31 19:03:42 | 000,011,731 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\MoFunZone.com--theme_park_gold_trainer.zip
[2010-07-31 18:54:28 | 000,009,305 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\MoFunZone.com--themepark_money_cheat.zip
[2010-07-31 16:57:00 | 000,025,227 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\ss.PNG
[2010-07-31 13:25:21 | 000,002,979 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\bhop_detector.sma
[2010-07-31 13:25:19 | 000,005,027 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\bhop_detector.amxx
[2010-07-31 12:33:22 | 006,081,878 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\screeny.zip
[2010-07-31 00:10:31 | 000,003,505 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\server.cfg
[2010-07-30 14:42:16 | 000,009,313 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\Antyskrypt - CSCenter.pl.rar
[2010-07-30 14:24:15 | 000,003,464 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\menu_zasad_x2.sma
[2010-07-30 14:24:13 | 000,007,694 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\menu_zasad_x2.amxx
[2010-07-30 03:18:13 | 000,007,073 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\mutemenu.amxx
[2010-07-30 00:55:29 | 000,019,456 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\amxx.cfg
[2010-07-30 00:52:38 | 000,046,239 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\Auto-Restart v5.0.rar
[2010-07-30 00:40:39 | 000,004,644 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\wybor_interpu_bez_opcji_EXIT.rar
[2010-07-29 19:51:09 | 000,000,747 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\outlook_energyshot.reg
[2010-07-29 19:45:03 | 000,575,960 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\coolblue.zip
[2010-07-29 19:43:41 | 000,000,278 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\config.php
[2010-07-29 19:38:03 | 002,077,480 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\phpBB_modified_by_Przemo.zip
[2010-07-29 19:15:01 | 000,126,641 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\bb winter.rar
[2010-07-29 15:15:22 | 000,001,075 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\advertisements.ini
[2010-07-29 15:13:05 | 000,017,986 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\ad_manager - CSCenter.pl.rar
[2010-07-29 15:08:33 | 000,005,108 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\OdrzucaHE - CSCenter.pl.rar
[2010-07-29 14:45:13 | 033,649,271 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\mapybb.rar
[2010-07-29 13:14:57 | 000,002,560 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\Allow_round_finish.amxx
[2010-07-29 00:29:01 | 000,000,212 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\maps.ini
[2010-07-29 00:16:41 | 004,266,059 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\bb map pack.zip
[2010-07-28 19:05:49 | 000,069,021 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\Spolszczona wersja.rar
[2010-07-28 19:03:27 | 001,110,155 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\basebuilder54.zip
[2010-07-28 17:56:01 | 000,005,019 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\cms2.sql
[2010-07-28 14:39:02 | 000,159,135 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\Stupid_Stealer_6.5.rar
[2010-07-28 13:15:32 | 000,003,825 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\tserwery
[2010-07-28 00:14:22 | 000,000,794 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\EVEREST Ultimate Edition.lnk
[2010-07-28 00:14:08 | 010,255,080 | ---- | M] (Lavalys, Inc. ) -- C:\Documents and Settings\ADMIN\Moje dokumenty\everestultimate550.exe
[2010-07-27 17:23:46 | 005,892,954 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\WH XD.rar
[2010-07-27 16:06:08 | 001,435,189 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\awpindia.rar
[2010-07-27 12:34:25 | 003,021,781 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\img006.jpg
[2010-07-27 09:11:40 | 026,568,956 | ---- | M] ( ) -- C:\Documents and Settings\ADMIN\Pulpit\K-Lite_Codec_Pack_610_Mega.exe
[2010-07-27 09:10:32 | 000,107,833 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\K-Lite_Codec_Pack_620_Mega.exe
[2010-07-27 09:09:59 | 000,000,000 | ---- | M] () -- C:\WINDOWS\iPlayer.INI
[2010-07-27 09:09:27 | 000,000,786 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\InterActual Player.lnk
[2010-07-27 09:09:00 | 006,909,232 | ---- | M] ( ) -- C:\Documents and Settings\ADMIN\Pulpit\Real_Alternative_202_[www.programosy.pl].exe
[2010-07-27 08:41:46 | 000,967,538 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\AMXBANS - CSCenter.pl.rar
[2010-07-27 08:34:29 | 004,629,141 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\AMXBans 5.1b Bez PL Instalacji.zip
[2010-07-27 00:03:24 | 005,017,688 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\zoompl2_pat.sql
[2010-07-26 21:13:04 | 013,079,378 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\backup.tar.gz
[2010-07-26 20:19:13 | 000,000,818 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Theme Park World.lnk
[2010-07-26 20:15:51 | 000,691,696 | ---- | M] (Duplex Secure Ltd.) -- C:\WINDOWS\System32\drivers\sptd.sys
[2010-07-26 19:27:37 | 000,000,745 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\JDownloader.lnk
[2010-07-26 19:27:36 | 000,010,017 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\viewmode_v2.rar
[2010-07-26 19:26:03 | 019,231,200 | ---- | M] (AppWork UG (haftungsbeschränkt)) -- C:\Documents and Settings\ADMIN\Pulpit\JDownloaderSetup_0.9579(dobreprogramy.pl).exe
[2010-07-26 19:25:17 | 002,395,860 | ---- | M] (AppWork UG (haftungsbeschränkt)) -- C:\Documents and Settings\ADMIN\Pulpit\JDownloaderSetup_kikin.exe
[2010-07-26 13:43:36 | 035,085,123 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\brudas.rar
[2010-07-26 13:37:54 | 000,409,844 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\brudas.rar
[2010-07-26 13:07:00 | 001,985,216 | ---- | M] (Hagel Technologies Ltd. ) -- C:\Documents and Settings\ADMIN\Pulpit\DUMeter-Install.exe
[2010-07-25 18:00:43 | 000,001,163 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\advertisements.ini
[2010-07-25 16:44:54 | 000,000,600 | ---- | M] () -- C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\PUTTY.RND
[2010-07-25 15:47:57 | 000,051,947 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\no50.zip
[2010-07-25 15:45:30 | 000,000,886 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\TeamViewer 5.lnk
[2010-07-25 15:44:46 | 003,398,355 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\freecsstemplates_043.zip
[2010-07-25 15:00:51 | 000,454,656 | ---- | M] (Simon Tatham) -- C:\Documents and Settings\ADMIN\Moje dokumenty\putty.exe
[2010-07-25 14:48:38 | 001,071,494 | ---- | M] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\Pulpit.rar
[2010-07-25 14:47:04 | 000,422,890 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\Pricing.Table.–.PSD.HTML.CSS.[GraphicRiver].dESiGNERz-CREW.iNFO.zip
[2010-07-25 12:29:46 | 000,000,188 | -HS- | M] () -- C:\Documents and Settings\ADMIN\ntuser.ini
[2010-07-24 17:26:04 | 000,026,677 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\CoolWater11.zip
[2010-07-24 17:23:14 | 000,012,701 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\Underground12.zip
[2010-07-24 17:22:57 | 000,017,012 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\Envision12.zip
[2010-07-24 12:08:54 | 000,001,736 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Adobe Reader 9.lnk
[2010-07-23 21:55:43 | 000,703,051 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\SSY.rar
[2010-07-23 20:21:30 | 000,000,730 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\404.shtml
[2010-07-23 20:03:06 | 007,796,315 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\dowod..rar
[2010-07-23 15:22:07 | 007,721,357 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\muzyka.rar
[2010-07-23 15:10:50 | 005,298,971 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\Nowy folder.rar
[2010-07-23 15:10:42 | 002,275,165 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\eminem-you dont know.mp3
[2010-07-22 21:42:28 | 005,904,088 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\Kabul.rar
[2010-07-22 21:01:01 | 000,045,936 | ---- | M] () -- C:\WINDOWS\php.ini
[2010-07-22 20:17:56 | 001,265,481 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\zdjecia.rar
[2010-07-22 20:16:51 | 000,000,623 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\WebServ.lnk
[2010-07-22 20:16:26 | 033,428,328 | ---- | M] (WebsSrv.PL ) -- C:\Documents and Settings\ADMIN\Pulpit\WebServ-2.0.exe
[2010-07-22 16:37:15 | 001,191,409 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\1971_Chevrolet_Camaro_by_donkolondoy.jpg
[2010-07-22 16:13:52 | 000,000,056 | -H-- | M] () -- C:\WINDOWS\System32\ezsidmv.dat
[2010-07-22 16:11:41 | 001,704,744 | ---- | M] (Skype Technologies S.A.) -- C:\Documents and Settings\ADMIN\Pulpit\SkypeSetup.exe
[2010-07-22 16:09:26 | 004,506,293 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\screeny.rar
[2010-07-22 16:03:25 | 000,001,738 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\konsola.sma
[2010-07-22 16:03:19 | 000,003,705 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\konsola.amxx
[2010-07-22 16:03:15 | 000,004,701 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\adminlisten.amxx
[2010-07-22 16:03:10 | 000,004,717 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\adminlisten.sma
[2010-07-22 16:03:05 | 000,003,522 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\admin_freelook.sma
[2010-07-22 16:02:58 | 000,006,233 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\admin_freelook.amxx
[2010-07-22 16:01:10 | 000,000,727 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Notepad++.lnk
[2010-07-22 15:18:25 | 000,000,591 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\AQQ.lnk
[2010-07-22 15:18:14 | 009,693,307 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\AQQ_MV_22210.exe
[2010-07-22 15:07:16 | 000,000,671 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Steam.lnk
[2010-07-22 13:54:22 | 000,004,444 | ---- | M] () -- C:\WINDOWS\System32\pid.PNF
[2010-07-22 12:16:05 | 000,940,794 | ---- | M] () -- C:\WINDOWS\System32\LoopyMusic.wav
[2010-07-22 12:16:05 | 000,146,650 | ---- | M] () -- C:\WINDOWS\System32\BuzzingBee.wav
[2010-07-22 12:13:00 | 022,863,635 | ---- | M] () -- C:\Documents and Settings\ADMIN\Pulpit\vr630_cs_15.23_xp32.zip
[2010-07-22 12:04:05 | 000,008,192 | ---- | M] () -- C:\WINDOWS\REGLOCS.OLD
[2010-07-22 12:03:11 | 000,000,894 | ---- | M] () -- C:\WINDOWS\System32\$winnt$.inf
[2010-07-22 12:00:28 | 000,002,596 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2010-07-22 12:00:28 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2010-07-22 12:00:28 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2010-07-22 12:00:28 | 000,000,000 | ---- | M] () -- C:\WINDOWS\control.ini
[2010-07-22 12:00:28 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2010-07-22 12:00:28 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2010-07-22 12:00:26 | 000,000,507 | ---- | M] () -- C:\WINDOWS\win.ini
[2010-07-22 12:00:21 | 000,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb
[2010-07-22 12:00:21 | 000,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb
[2010-07-22 12:00:20 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx
[2010-07-22 12:00:14 | 000,004,293 | ---- | M] () -- C:\WINDOWS\ODBCINST.INI
[2010-07-22 11:59:26 | 000,000,488 | RH-- | M] () -- C:\WINDOWS\System32\WindowsLogon.manifest
[2010-07-22 11:59:26 | 000,000,488 | RH-- | M] () -- C:\WINDOWS\System32\logonui.exe.manifest
[2010-07-22 11:59:23 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\wuaucpl.cpl.manifest
[2010-07-22 11:59:23 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\WindowsShell.Manifest
[2010-07-22 11:59:23 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\sapi.cpl.manifest
[2010-07-22 11:59:23 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\nwc.cpl.manifest
[2010-07-22 11:59:23 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\ncpa.cpl.manifest
[2010-07-22 11:59:23 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\cdplayer.exe.manifest
[2010-07-22 11:57:20 | 000,021,856 | ---- | M] () -- C:\WINDOWS\System32\emptyregdb.dat
[2010-07-22 11:57:19 | 000,000,037 | ---- | M] () -- C:\WINDOWS\vbaddin.ini
[2010-07-22 11:57:19 | 000,000,036 | ---- | M] () -- C:\WINDOWS\vb.ini
[2010-07-22 11:56:06 | 000,000,211 | -HS- | M] () -- C:\boot.ini
[2010-07-04 09:03:00 | 002,286,080 | ---- | M] (Python Software Foundation) -- C:\WINDOWS\System32\python27.dll
[2010-06-28 10:00:00 | 000,108,032 | ---- | M] () -- C:\WINDOWS\System32\ff_vfw.dll
[2010-06-28 10:00:00 | 000,000,038 | ---- | M] () -- C:\WINDOWS\avisplitter.ini
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2010-08-26 15:42:14 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2010-08-26 15:42:14 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2010-08-26 15:42:14 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2010-08-26 15:42:14 | 000,077,312 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2010-08-26 15:42:14 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2010-08-26 15:39:55 | 003,828,374 | R--- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\ComboFix.exe
[2010-08-25 22:31:31 | 000,001,941 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\The Sims™ 2 Osiedlowe życie.lnk
[2010-08-25 22:31:31 | 000,001,138 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\www.thesims3.com.lnk
[2010-08-25 17:31:40 | 000,022,802 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\admin_spec_esp.sma
[2010-08-25 13:36:36 | 001,285,544 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\ss.rar
[2010-08-25 02:16:44 | 000,017,734 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\weaponmenu.amxx
[2010-08-25 02:16:41 | 000,027,963 | -H-- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\weaponmenu.sma.bak
[2010-08-25 02:15:27 | 000,027,963 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\weaponmenu.sma
[2010-08-24 19:35:03 | 000,004,566 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2010-08-24 18:47:08 | 000,001,605 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\Spritefixer.lnk
[2010-08-24 18:46:50 | 000,006,114 | ---- | C] () -- C:\WINDOWS\System32\shelllnk.tlb
[2010-08-24 18:46:50 | 000,002,616 | ---- | C] () -- C:\WINDOWS\System32\shelllnk.lib
[2010-08-24 18:46:50 | 000,000,975 | ---- | C] () -- C:\WINDOWS\System32\shelllnk.exp
[2010-08-24 18:46:46 | 000,053,760 | ---- | C] () -- C:\WINDOWS\System32\zlib.dll
[2010-08-24 17:35:52 | 000,000,637 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\maps.ini
[2010-08-24 16:14:59 | 002,080,610 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\SSPatologia.rar
[2010-08-24 01:31:37 | 001,803,400 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\SSy by DUCHU25.rar
[2010-08-23 20:54:24 | 000,018,411 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\Sims2PetsPLUS5Trainer.zip
[2010-08-23 17:23:17 | 000,020,461 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\petstrainer5.rar
[2010-08-23 13:55:49 | 000,001,871 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\The Sims™ 2 Zwierzaki.lnk
[2010-08-22 23:36:02 | 005,199,149 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\rld-sofb.rar
[2010-08-22 23:08:14 | 000,001,898 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\The Sims 2 Własny biznes.lnk
[2010-08-22 22:52:57 | 000,093,320 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\SimUFO.7z
[2010-08-22 17:25:51 | 000,001,747 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\The Sims 2.lnk
[2010-08-21 21:30:49 | 000,001,580 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\Tibia Auto.lnk
[2010-08-21 21:30:40 | 001,867,776 | ---- | C] () -- C:\WINDOWS\System32\python24.dll
[2010-08-21 21:30:15 | 000,869,417 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\python24.zip
[2010-08-21 21:27:04 | 003,671,797 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\TibiaAutoSetup_2_5_2.exe
[2010-08-21 21:23:34 | 001,061,649 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\tibiabot_ng_8.60.rar
[2010-08-21 20:06:48 | 000,008,022 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\mbank_logo.gif
[2010-08-21 20:01:20 | 000,191,796 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\szablon_aukcji_1015.zip
[2010-08-21 20:00:42 | 000,000,645 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Tibia.lnk
[2010-08-21 13:36:41 | 000,000,364 | ---- | C] () -- C:\test.html
[2010-08-20 19:57:24 | 000,000,633 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\ipla.lnk
[2010-08-20 19:56:05 | 013,863,272 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\iplasetup.exe
[2010-08-17 11:43:26 | 000,003,584 | ---- | C] () -- C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-08-17 11:18:37 | 000,032,321 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\trainer2.rar
[2010-08-17 11:17:46 | 000,010,915 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\nfsmw_save.rar
[2010-08-17 11:15:47 | 000,001,829 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Need for Speed™ Most Wanted.lnk
[2010-08-17 11:04:39 | 000,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2010-08-17 11:04:39 | 000,354,816 | ---- | C] () -- C:\WINDOWS\System32\dllcache\psisdecd.dll
[2010-08-17 11:04:39 | 000,052,224 | ---- | C] () -- C:\WINDOWS\System32\msdvbnp.ax
[2010-08-17 11:04:39 | 000,052,224 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msdvbnp.ax
[2010-08-17 11:04:39 | 000,030,208 | ---- | C] () -- C:\WINDOWS\System32\psisrndr.ax
[2010-08-17 11:04:39 | 000,030,208 | ---- | C] () -- C:\WINDOWS\System32\dllcache\psisrndr.ax
[2010-08-16 17:27:58 | 003,382,935 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\ss.rar
[2010-08-15 15:29:22 | 000,000,088 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\listip.cfg
[2010-08-13 16:00:43 | 000,337,898 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\trainer2.rar
[2010-08-13 00:15:09 | 000,683,012 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\bot.exe
[2010-08-12 23:56:42 | 000,347,088 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\trainer.rar
[2010-08-12 12:11:43 | 005,342,207 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\mr.warlee SS.rar
[2010-08-11 14:38:10 | 004,555,437 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\SS'y.rar
[2010-08-10 16:24:57 | 003,392,984 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\Ssy By NoOoBeQ.rar
[2010-08-10 13:15:44 | 000,006,348 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\history.html
[2010-08-10 00:36:12 | 022,730,983 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\DCPlusPlus-0.770.exe
[2010-08-09 22:10:23 | 000,061,202 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\asdsadasd.PNG
[2010-08-09 18:23:42 | 000,000,756 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\EVGA Precision.lnk
[2010-08-09 18:23:26 | 001,669,642 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\EVGAPrecision195_[www.programosy.pl].ZIP
[2010-08-09 13:20:03 | 004,199,896 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\aztec.rar
[2010-08-08 13:05:23 | 000,004,002 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\config.inc.php
[2010-08-07 20:53:02 | 002,764,129 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\hachi.png
[2010-08-07 19:24:02 | 000,811,365 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\wtf.PNG
[2010-08-07 19:19:00 | 006,843,480 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\cstrike_www.przeklej.pl.rar
[2010-08-07 16:18:41 | 000,000,108 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\roundsound.ini
[2010-08-07 15:45:12 | 000,003,478 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\server.cfg
[2010-08-07 15:25:46 | 000,153,922 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\demos.dem
[2010-08-07 15:25:40 | 000,931,625 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\demos7.dem
[2010-08-07 15:23:06 | 000,448,559 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\demos6.dem
[2010-08-07 15:14:05 | 006,267,007 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\demos4.dem
[2010-08-07 15:13:20 | 000,424,132 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\demos3.dem
[2010-08-07 15:12:15 | 000,587,126 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\demos2.dem
[2010-08-07 15:09:12 | 001,125,271 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\demos1.dem
[2010-08-07 11:08:18 | 000,481,028 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\raZ'.rar
[2010-08-06 23:50:28 | 001,803,866 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\screen.PNG
[2010-08-06 19:01:33 | 000,009,025 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\anime-music-150x150.jpg
[2010-08-05 22:32:49 | 001,194,666 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\LC Hp + Mp Selector v1.03.rar
[2010-08-05 22:29:24 | 000,000,331 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\Nksp.CT
[2010-08-05 21:58:17 | 000,066,076 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\Last Chaos Hack.rar
[2010-08-05 21:47:58 | 000,278,021 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\LCToolkitv2.rar
[2010-08-05 17:14:14 | 000,014,858 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\ad_manager.amxx
[2010-08-05 17:13:55 | 000,000,544 | -H-- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\znikadlo.sma.bak
[2010-08-05 17:13:54 | 000,001,932 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\znikadlo.amxx
[2010-08-05 17:12:40 | 000,001,000 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\znikadlo.sma
[2010-08-05 16:38:55 | 000,000,501 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\sql.cfg
[2010-08-05 15:10:19 | 001,731,992 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\SSy DrEwNiaK.rar
[2010-08-05 12:34:41 | 000,000,108 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\roundsound.ini
[2010-08-05 12:22:27 | 002,388,932 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\podwierdzeniewpaty.jpg
[2010-08-05 08:41:52 | 000,013,732 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\sssss.PNG
[2010-08-05 08:28:06 | 007,425,859 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\Ss By WaRiiAt.rar
[2010-08-04 23:00:51 | 000,141,604 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\dowod2.PNG
[2010-08-04 23:00:32 | 000,071,708 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\dowod1.PNG
[2010-08-04 00:23:03 | 000,026,296 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\c76e01ad000066b8.jpg
[2010-08-04 00:00:44 | 000,000,633 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\HLSW.lnk
[2010-08-03 22:15:36 | 005,320,237 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\gaa.rar
[2010-08-03 20:03:19 | 004,386,514 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\jo.rar
[2010-08-03 19:40:01 | 000,547,322 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\megusia.rar
[2010-08-03 16:48:45 | 002,057,776 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\cstrike polish.rar
[2010-08-02 22:29:29 | 000,010,162 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\avatar100x100[25].jpg
[2010-08-02 20:28:25 | 000,001,489 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\LastChaosPoland.lnk
[2010-08-02 20:25:26 | 000,000,121 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\LastChaos Homepage.url
[2010-08-02 20:22:10 | 000,002,145 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\championka.rar
[2010-08-02 20:07:14 | 000,041,041 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\L20100802.rar
[2010-08-01 21:29:22 | 000,000,752 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\18 Wheels of Steel Haulin.lnk
[2010-08-01 20:06:31 | 000,000,211 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\Dedicated Server.url
[2010-08-01 20:03:30 | 000,000,500 | -H-- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\logowanie.sma.bak
[2010-08-01 20:03:18 | 000,000,500 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\logowanie.sma
[2010-08-01 19:22:29 | 000,004,883 | ---- | C] () -- C:\Documents and Settings\ADMIN\plugins.ini
[2010-08-01 19:21:51 | 002,779,606 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\westwood.rar
[2010-08-01 18:46:25 | 000,013,096 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\Kopia pldecal.wad
[2010-08-01 18:46:21 | 000,011,736 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\tempdecal.wad
[2010-08-01 18:44:45 | 000,003,053 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\spray.PNG
[2010-08-01 18:43:39 | 001,280,303 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\HLC_1_setup.exe
[2010-08-01 16:34:38 | 000,000,798 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\Hard Truck Tycoon.lnk
[2010-08-01 15:16:00 | 000,326,757 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\abc3.png
[2010-08-01 15:06:14 | 000,306,440 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\abc2.png
[2010-08-01 14:47:59 | 000,881,068 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\abc.png
[2010-08-01 12:27:06 | 000,002,150 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\czat_log.amxx
[2010-08-01 12:27:01 | 000,001,257 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\logowanie.amxx
[2010-08-01 11:59:15 | 000,535,558 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\Reklama.rar
[2010-07-31 22:26:36 | 000,000,796 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\AMX Mod X Studio.lnk
[2010-07-31 22:25:44 | 001,966,725 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\AMXX_Studio_1.4.3_final.zip
[2010-07-31 19:08:02 | 000,000,677 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\Cheat Engine.lnk
[2010-07-31 19:08:01 | 001,970,176 | ---- | C] () -- C:\WINDOWS\System32\d3dx9.dll
[2010-07-31 19:03:42 | 000,011,731 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\MoFunZone.com--theme_park_gold_trainer.zip
[2010-07-31 18:54:28 | 000,009,305 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\MoFunZone.com--themepark_money_cheat.zip
[2010-07-31 16:57:00 | 000,025,227 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\ss.PNG
[2010-07-31 15:46:35 | 000,002,895 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\users.ini
[2010-07-31 13:25:21 | 000,002,979 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\bhop_detector.sma
[2010-07-31 13:25:19 | 000,005,027 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\bhop_detector.amxx
[2010-07-31 12:33:22 | 006,081,878 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\screeny.zip
[2010-07-30 14:42:16 | 000,009,313 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\Antyskrypt - CSCenter.pl.rar
[2010-07-30 14:24:15 | 000,003,464 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\menu_zasad_x2.sma
[2010-07-30 14:24:13 | 000,007,694 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\menu_zasad_x2.amxx
[2010-07-30 03:18:13 | 000,007,073 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\mutemenu.amxx
[2010-07-30 00:52:38 | 000,046,239 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\Auto-Restart v5.0.rar
[2010-07-30 00:40:39 | 000,004,644 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\wybor_interpu_bez_opcji_EXIT.rar
[2010-07-29 19:51:09 | 000,000,747 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\outlook_energyshot.reg
[2010-07-29 19:45:02 | 000,575,960 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\coolblue.zip
[2010-07-29 19:38:01 | 002,077,480 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\phpBB_modified_by_Przemo.zip
[2010-07-29 19:15:01 | 000,126,641 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\bb winter.rar
[2010-07-29 15:14:03 | 000,001,075 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\advertisements.ini
[2010-07-29 15:13:04 | 000,017,986 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\ad_manager - CSCenter.pl.rar
[2010-07-29 15:08:33 | 000,005,108 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\OdrzucaHE - CSCenter.pl.rar
[2010-07-29 14:43:58 | 033,649,271 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\mapybb.rar
[2010-07-29 13:14:57 | 000,002,560 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\Allow_round_finish.amxx
[2010-07-29 00:29:01 | 000,000,212 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\maps.ini
[2010-07-29 00:16:08 | 004,266,059 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\bb map pack.zip
[2010-07-28 19:08:54 | 000,004,945 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\plugins.ini
[2010-07-28 19:07:05 | 000,019,456 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\amxx.cfg
[2010-07-28 19:05:49 | 000,069,021 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\Spolszczona wersja.rar
[2010-07-28 19:03:25 | 001,110,155 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\basebuilder54.zip
[2010-07-28 17:51:22 | 000,005,019 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\cms2.sql
[2010-07-28 14:39:02 | 000,159,135 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\Stupid_Stealer_6.5.rar
[2010-07-28 13:07:48 | 000,003,825 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\tserwery
[2010-07-28 00:14:22 | 000,000,794 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\EVEREST Ultimate Edition.lnk
[2010-07-27 17:22:53 | 005,892,954 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\WH XD.rar
[2010-07-27 16:05:58 | 001,435,189 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\awpindia.rar
[2010-07-27 12:34:25 | 003,021,781 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\img006.jpg
[2010-07-27 09:12:13 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2010-07-27 09:12:13 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2010-07-27 09:12:11 | 000,790,528 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2010-07-27 09:12:11 | 000,134,144 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2010-07-27 09:12:11 | 000,108,032 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2010-07-27 09:12:11 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest
[2010-07-27 09:10:27 | 000,107,833 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\K-Lite_Codec_Pack_620_Mega.exe
[2010-07-27 09:09:59 | 000,000,000 | ---- | C] () -- C:\WINDOWS\iPlayer.INI
[2010-07-27 09:09:27 | 000,000,786 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\InterActual Player.lnk
[2010-07-27 08:41:45 | 000,967,538 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\AMXBANS - CSCenter.pl.rar
[2010-07-27 08:33:52 | 004,629,141 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\AMXBans 5.1b Bez PL Instalacji.zip
[2010-07-27 00:07:13 | 000,000,278 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\config.php
[2010-07-26 21:12:36 | 013,079,378 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\backup.tar.gz
[2010-07-26 20:19:13 | 000,000,818 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Theme Park World.lnk
[2010-07-26 19:41:45 | 000,019,456 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\amxx.cfg
[2010-07-26 19:27:37 | 000,000,745 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\JDownloader.lnk
[2010-07-26 19:27:36 | 000,010,017 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\viewmode_v2.rar
[2010-07-26 16:15:57 | 005,017,688 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\zoompl2_pat.sql
[2010-07-26 15:31:30 | 000,002,868 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\users.ini
[2010-07-26 13:43:35 | 035,085,123 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\brudas.rar
[2010-07-26 13:36:57 | 000,409,844 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\brudas.rar
[2010-07-25 18:00:01 | 000,001,163 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\advertisements.ini
[2010-07-25 15:47:57 | 000,051,947 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\no50.zip
[2010-07-25 15:45:30 | 000,000,886 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\TeamViewer 5.lnk
[2010-07-25 15:44:12 | 003,398,355 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\freecsstemplates_043.zip
[2010-07-25 15:09:02 | 000,000,600 | ---- | C] () -- C:\Documents and Settings\ADMIN\Ustawienia lokalne\Dane aplikacji\PUTTY.RND
[2010-07-25 14:48:32 | 001,071,494 | ---- | C] () -- C:\Documents and Settings\ADMIN\Moje dokumenty\Pulpit.rar
[2010-07-25 14:46:54 | 000,422,890 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\Pricing.Table.–.PSD.HTML.CSS.[GraphicRiver].dESiGNERz-CREW.iNFO.zip
[2010-07-24 17:26:04 | 000,026,677 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\CoolWater11.zip
[2010-07-24 17:23:14 | 000,012,701 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\Underground12.zip
[2010-07-24 17:22:57 | 000,017,012 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\Envision12.zip
[2010-07-24 12:08:54 | 000,001,736 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Adobe Reader 9.lnk
[2010-07-23 21:55:24 | 000,703,051 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\SSY.rar
[2010-07-23 20:21:12 | 000,000,730 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\404.shtml
[2010-07-23 20:01:57 | 007,796,315 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\dowod..rar
[2010-07-23 18:32:52 | 000,003,505 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\server.cfg
[2010-07-23 15:21:14 | 007,721,357 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\muzyka.rar
[2010-07-23 15:10:42 | 002,275,165 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\eminem-you dont know.mp3
[2010-07-23 15:10:08 | 005,298,971 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\Nowy folder.rar
[2010-07-22 21:41:35 | 005,904,088 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\Kabul.rar
[2010-07-22 20:17:47 | 001,265,481 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\zdjecia.rar
[2010-07-22 20:16:51 | 000,419,840 | ---- | C] () -- C:\WINDOWS\System32\ws_edit.lib
[2010-07-22 20:16:51 | 000,130,048 | ---- | C] () -- C:\WINDOWS\System32\webserv.cpl
[2010-07-22 20:16:51 | 000,000,623 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\WebServ.lnk
[2010-07-22 20:16:43 | 000,045,936 | ---- | C] () -- C:\WINDOWS\php.ini
[2010-07-22 16:37:14 | 001,191,409 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\1971_Chevrolet_Camaro_by_donkolondoy.jpg
[2010-07-22 16:13:52 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2010-07-22 16:12:32 | 000,002,267 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk
[2010-07-22 16:08:49 | 004,506,293 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\screeny.rar
[2010-07-22 16:03:24 | 000,001,738 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\konsola.sma
[2010-07-22 16:03:19 | 000,003,705 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\konsola.amxx
[2010-07-22 16:03:15 | 000,004,701 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\adminlisten.amxx
[2010-07-22 16:03:10 | 000,004,717 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\adminlisten.sma
[2010-07-22 16:03:05 | 000,003,522 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\admin_freelook.sma
[2010-07-22 16:02:58 | 000,006,233 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\admin_freelook.amxx
[2010-07-22 16:01:10 | 000,000,727 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Notepad++.lnk
[2010-07-22 16:00:45 | 000,003,232 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\plugins.ini
[2010-07-22 15:18:25 | 000,000,591 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\AQQ.lnk
[2010-07-22 15:17:58 | 009,693,307 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\AQQ_MV_22210.exe
[2010-07-22 13:54:21 | 000,004,444 | ---- | C] () -- C:\WINDOWS\System32\pid.PNF
[2010-07-22 13:54:14 | 001,685,606 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.spd
[2010-07-22 13:54:14 | 000,000,888 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.sdf
[2010-07-22 13:54:13 | 000,643,717 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ltts1033.lxa
[2010-07-22 13:54:13 | 000,605,050 | ---- | C] () -- C:\WINDOWS\System32\dllcache\r1033tts.lxa
[2010-07-22 13:54:11 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28603.nls
[2010-07-22 13:54:11 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_28603.nls
[2010-07-22 13:54:09 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_857.nls
[2010-07-22 13:54:09 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_857.nls
[2010-07-22 13:54:09 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28599.nls
[2010-07-22 13:54:09 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_28599.nls
[2010-07-22 13:54:09 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10081.nls
[2010-07-22 13:54:09 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10081.nls
[2010-07-22 13:54:07 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28595.nls
[2010-07-22 13:54:07 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28595.NLS
[2010-07-22 13:54:07 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10017.nls
[2010-07-22 13:54:07 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10017.nls
[2010-07-22 13:54:07 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10007.nls
[2010-07-22 13:54:07 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10007.nls
[2010-07-22 13:54:05 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_869.nls
[2010-07-22 13:54:05 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_869.nls
[2010-07-22 13:54:05 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_737.nls
[2010-07-22 13:54:05 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_737.nls
[2010-07-22 13:54:05 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_875.nls
[2010-07-22 13:54:05 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_875.nls
[2010-07-22 13:54:05 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28597.nls
[2010-07-22 13:54:05 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28597.NLS
[2010-07-22 13:54:05 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10006.nls
[2010-07-22 13:54:05 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10006.nls
[2010-07-22 13:54:04 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_866.nls
[2010-07-22 13:54:04 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_866.nls
[2010-07-22 13:54:04 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_855.nls
[2010-07-22 13:54:04 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_855.nls
[2010-07-22 13:54:04 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28594.nls
[2010-07-22 13:54:04 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28594.NLS
[2010-07-22 13:54:00 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20127.nls
[2010-07-22 13:54:00 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_20127.nls
[2010-07-22 13:53:58 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10082.nls
[2010-07-22 13:53:58 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10082.nls
[2010-07-22 13:53:58 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10029.nls
[2010-07-22 13:53:58 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10029.nls
[2010-07-22 13:53:58 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10010.nls
[2010-07-22 13:53:58 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10010.nls
[2010-07-22 13:53:53 | 000,001,734 | ---- | C] () -- C:\WINDOWS\System32\AUTOEXEC.NT
[2010-07-22 13:53:46 | 000,144,484 | ---- | C] () -- C:\WINDOWS\System32\dllcache\netfx.cat
[2010-07-22 13:53:46 | 000,105,628 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tabletpc.cat
[2010-07-22 13:53:46 | 000,037,509 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MW770.CAT
[2010-07-22 13:53:46 | 000,034,747 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mediactr.cat
[2010-07-22 13:53:46 | 000,013,497 | ---- | C] () -- C:\WINDOWS\System32\dllcache\HPCRDP.CAT
[2010-07-22 13:53:46 | 000,012,363 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MSMSGS.CAT
[2010-07-22 13:53:46 | 000,010,027 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MSTSWEB.CAT
[2010-07-22 13:53:46 | 000,008,599 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IASNT4.CAT
[2010-07-22 13:53:46 | 000,007,382 | ---- | C] () -- C:\WINDOWS\System32\dllcache\OEMBIOS.CAT
[2010-07-22 13:53:46 | 000,007,334 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmerrenu.cat
[2010-07-22 13:53:45 | 002,033,887 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5.CAT
[2010-07-22 13:53:45 | 001,246,357 | ---- | C] () -- C:\WINDOWS\System32\dllcache\SP3.CAT
[2010-07-22 13:53:45 | 000,808,524 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5IIS.CAT
[2010-07-22 13:53:45 | 000,634,012 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5INF.CAT
[2010-07-22 13:53:45 | 000,399,670 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MAPIMIG.CAT
[2010-07-22 13:53:45 | 000,033,765 | ---- | C] () -- C:\WINDOWS\System32\dllcache\FP4.CAT
[2010-07-22 13:53:45 | 000,016,825 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IMS.CAT
[2010-07-22 13:53:08 | 000,185,016 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010-07-22 13:52:28 | 000,000,211 | -HS- | C] () -- C:\boot.ini
[2010-07-22 13:52:27 | 000,000,894 | ---- | C] () -- C:\WINDOWS\System32\$winnt$.inf
[2010-07-22 12:16:53 | 000,000,671 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Steam.lnk
[2010-07-22 12:16:05 | 000,940,794 | ---- | C] () -- C:\WINDOWS\System32\LoopyMusic.wav
[2010-07-22 12:16:05 | 000,146,650 | ---- | C] () -- C:\WINDOWS\System32\BuzzingBee.wav
[2010-07-22 12:13:51 | 000,000,599 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Opera.lnk
[2010-07-22 12:13:28 | 000,007,143 | ---- | C] () -- C:\WINDOWS\System32\nvide.nvu
[2010-07-22 12:13:10 | 000,002,344 | ---- | C] () -- C:\WINDOWS\System32\nvsmb.nvu
[2010-07-22 12:13:10 | 000,000,898 | ---- | C] () -- C:\WINDOWS\System32\nvsmu.nvu
[2010-07-22 12:12:58 | 022,863,635 | ---- | C] () -- C:\Documents and Settings\ADMIN\Pulpit\vr630_cs_15.23_xp32.zip
[2010-07-22 12:11:12 | 000,000,553 | ---- | C] () -- C:\WINDOWS\USetup.iss
[2010-07-22 12:08:31 | 000,187,804 | ---- | C] () -- C:\WINDOWS\System32\netathw.inf
[2010-07-22 12:08:31 | 000,045,983 | ---- | C] () -- C:\WINDOWS\System32\netathw.cat
[2010-07-22 12:06:47 | 000,191,286 | ---- | C] () -- C:\WINDOWS\System32\nvapps.xml
[2010-07-22 12:06:41 | 000,018,477 | ---- | C] () -- C:\WINDOWS\System32\nvdisp.nvu
[2010-07-22 12:04:16 | 000,053,248 | -H-- | C] () -- C:\Documents and Settings\ADMIN\ntuser.dat.LOG
[2010-07-22 12:04:16 | 000,000,188 | -HS- | C] () -- C:\Documents and Settings\ADMIN\ntuser.ini
[2010-07-22 12:04:15 | 002,883,584 | -H-- | C] () -- C:\Documents and Settings\ADMIN\NTUSER.DAT
[2010-07-22 12:04:05 | 000,008,192 | ---- | C] () -- C:\WINDOWS\REGLOCS.OLD
[2010-07-22 12:03:06 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2010-07-22 12:03:00 | 000,028,288 | ---- | C] () -- C:\WINDOWS\System32\dllcache\xjis.nls
[2010-07-22 12:02:35 | 000,083,748 | ---- | C] () -- C:\WINDOWS\System32\dllcache\prcp.nls
[2010-07-22 12:02:35 | 000,083,748 | ---- | C] () -- C:\WINDOWS\System32\dllcache\prc.nls
[2010-07-22 12:02:34 | 000,175,104 | ---- | C] () -- C:\WINDOWS\System32\dllcache\pintlcsa.dll
[2010-07-22 12:02:20 | 000,047,066 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ksc.nls
[2010-07-22 12:02:19 | 001,158,818 | ---- | C] () -- C:\WINDOWS\System32\dllcache\korwbrkr.lex
[2010-07-22 12:02:14 | 000,059,392 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imscinst.exe
[2010-07-22 12:02:13 | 000,196,665 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imjpinst.exe
[2010-07-22 12:02:12 | 000,134,339 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imekr.lex
[2010-07-22 12:02:04 | 013,463,552 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hwxjpn.dll
[2010-07-22 12:02:01 | 000,108,827 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hanja.lex
[2010-07-22 12:01:58 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\dllcache\fpencode.dll
[2010-07-22 12:01:48 | 000,173,568 | ---- | C] () -- C:\WINDOWS\System32\dllcache\chtskf.dll
[2010-07-22 12:01:46 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_870.nls
[2010-07-22 12:01:45 | 000,180,770 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20932.nls
[2010-07-22 12:01:45 | 000,177,698 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20949.nls
[2010-07-22 12:01:45 | 000,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20936.nls
[2010-07-22 12:01:45 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_864.nls
[2010-07-22 12:01:45 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_862.nls
[2010-07-22 12:01:45 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_858.nls
[2010-07-22 12:01:45 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_720.nls
[2010-07-22 12:01:45 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_708.nls
[2010-07-22 12:01:45 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28596.nls
[2010-07-22 12:01:45 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_21027.nls
[2010-07-22 12:01:45 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_21025.nls
[2010-07-22 12:01:44 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20924.nls
[2010-07-22 12:01:44 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20880.nls
[2010-07-22 12:01:44 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20871.nls
[2010-07-22 12:01:44 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20838.nls
[2010-07-22 12:01:44 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20833.nls
[2010-07-22 12:01:44 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20424.nls
[2010-07-22 12:01:44 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20423.nls
[2010-07-22 12:01:44 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20420.nls
[2010-07-22 12:01:44 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20297.nls
[2010-07-22 12:01:44 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20290.nls
[2010-07-22 12:01:44 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20285.nls
[2010-07-22 12:01:44 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20284.nls
[2010-07-22 12:01:44 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20280.nls
[2010-07-22 12:01:44 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20278.nls
[2010-07-22 12:01:43 | 000,189,986 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1361.nls
[2010-07-22 12:01:43 | 000,187,938 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20005.nls
[2010-07-22 12:01:43 | 000,186,402 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20001.nls
[2010-07-22 12:01:43 | 000,185,378 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20003.nls
[2010-07-22 12:01:43 | 000,180,258 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20004.nls
[2010-07-22 12:01:43 | 000,180,258 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20000.nls
[2010-07-22 12:01:43 | 000,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20002.nls
[2010-07-22 12:01:43 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20277.nls
[2010-07-22 12:01:43 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20273.nls
[2010-07-22 12:01:43 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20269.nls
[2010-07-22 12:01:43 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20108.nls
[2010-07-22 12:01:43 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20107.nls
[2010-07-22 12:01:43 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20106.nls
[2010-07-22 12:01:43 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20105.nls
[2010-07-22 12:01:42 | 000,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10008.nls
[2010-07-22 12:01:42 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1149.nls
[2010-07-22 12:01:42 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1148.nls
[2010-07-22 12:01:42 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1147.nls
[2010-07-22 12:01:42 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1146.nls
[2010-07-22 12:01:42 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1145.nls
[2010-07-22 12:01:42 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1144.nls
[2010-07-22 12:01:42 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1143.nls
[2010-07-22 12:01:42 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1142.nls
[2010-07-22 12:01:42 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1141.nls
[2010-07-22 12:01:42 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1140.nls
[2010-07-22 12:01:42 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1047.nls
[2010-07-22 12:01:42 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10021.nls
[2010-07-22 12:01:41 | 000,195,618 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10002.nls
[2010-07-22 12:01:41 | 000,177,698 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10003.nls
[2010-07-22 12:01:41 | 000,162,850 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10001.nls
[2010-07-22 12:01:41 | 000,082,172 | ---- | C] () -- C:\WINDOWS\System32\dllcache\bopomofo.nls
[2010-07-22 12:01:41 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10005.nls
[2010-07-22 12:01:41 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10004.nls
[2010-07-22 12:01:40 | 000,066,728 | ---- | C] () -- C:\WINDOWS\System32\dllcache\big5.nls
[2010-07-22 12:00:28 | 000,002,596 | ---- | C] () -- C:\WINDOWS\System32\CONFIG.NT
[2010-07-22 12:00:28 | 000,000,000 | RHS- | C] () -- C:\MSDOS.SYS
[2010-07-22 12:00:28 | 000,000,000 | RHS- | C] () -- C:\IO.SYS
[2010-07-22 12:00:28 | 000,000,000 | ---- | C] () -- C:\CONFIG.SYS
[2010-07-22 12:00:28 | 000,000,000 | ---- | C] () -- C:\AUTOEXEC.BAT
[2010-07-22 12:00:21 | 000,023,392 | ---- | C] () -- C:\WINDOWS\System32\nscompat.tlb
[2010-07-22 12:00:21 | 000,016,832 | ---- | C] () -- C:\WINDOWS\System32\amcompat.tlb
[2010-07-22 12:00:19 | 000,316,640 | ---- | C] () -- C:\WINDOWS\WMSysPr9.prx
[2010-07-22 11:59:26 | 000,000,488 | RH-- | C] () -- C:\WINDOWS\System32\WindowsLogon.manifest
[2010-07-22 11:59:26 | 000,000,488 | RH-- | C] () -- C:\WINDOWS\System32\logonui.exe.manifest
[2010-07-22 11:59:23 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\wuaucpl.cpl.manifest
[2010-07-22 11:59:23 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\WindowsShell.Manifest
[2010-07-22 11:59:23 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\sapi.cpl.manifest
[2010-07-22 11:59:23 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\nwc.cpl.manifest
[2010-07-22 11:59:23 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\ncpa.cpl.manifest
[2010-07-22 11:59:23 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\cdplayer.exe.manifest
[2010-07-22 11:59:07 | 004,399,505 | ---- | C] () -- C:\WINDOWS\System32\dllcache\nls302en.lex
[2010-07-22 11:58:49 | 000,048,680 | -HS- | C] () -- C:\WINDOWS\winnt256.bmp
[2010-07-22 11:58:49 | 000,048,680 | -HS- | C] () -- C:\WINDOWS\winnt.bmp
[2010-07-22 11:58:43 | 000,000,984 | ---- | C] () -- C:\WINDOWS\System32\dllcache\srframe.mmf
[2010-07-22 11:58:03 | 000,380,416 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msinfo.dll
[2010-07-22 11:57:20 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2010-07-22 11:56:48 | 000,065,954 | ---- | C] () -- C:\WINDOWS\Pod mikroskopem.bmp
[2010-07-22 11:56:48 | 000,065,832 | ---- | C] () -- C:\WINDOWS\Stiuk z Santa Fe.bmp
[2010-07-22 11:56:48 | 000,026,680 | ---- | C] () -- C:\WINDOWS\Wachlarze.bmp
[2010-07-22 11:56:48 | 000,017,362 | ---- | C] () -- C:\WINDOWS\Rododendron.bmp
[2010-07-22 11:56:48 | 000,009,522 | ---- | C] () -- C:\WINDOWS\Indiański pled.bmp
[2010-07-22 11:56:47 | 000,093,702 | ---- | C] () -- C:\WINDOWS\System32\subrange.uce
[2010-07-22 11:56:47 | 000,065,978 | ---- | C] () -- C:\WINDOWS\Bąbelki.bmp
[2010-07-22 11:56:47 | 000,026,582 | ---- | C] () -- C:\WINDOWS\Nefryt.bmp
[2010-07-22 11:56:47 | 000,017,336 | ---- | C] () -- C:\WINDOWS\Na rybkach.bmp
[2010-07-22 11:56:47 | 000,017,062 | ---- | C] () -- C:\WINDOWS\Kawa.bmp
[2010-07-22 11:56:47 | 000,016,740 | ---- | C] () -- C:\WINDOWS\System32\shiftjis.uce
[2010-07-22 11:56:47 | 000,016,730 | ---- | C] () -- C:\WINDOWS\Puch.bmp
[2010-07-22 11:56:47 | 000,001,272 | ---- | C] () -- C:\WINDOWS\Niebieska koronka 16.bmp
[2010-07-22 11:56:46 | 000,060,458 | ---- | C] () -- C:\WINDOWS\System32\ideograf.uce
[2010-07-22 11:56:46 | 000,024,006 | ---- | C] () -- C:\WINDOWS\System32\gb2312.uce
[2010-07-22 11:56:46 | 000,022,984 | ---- | C] () -- C:\WINDOWS\System32\bopomofo.uce
[2010-07-22 11:56:46 | 000,012,876 | ---- | C] () -- C:\WINDOWS\System32\korean.uce
[2010-07-22 11:56:46 | 000,008,484 | ---- | C] () -- C:\WINDOWS\System32\kanji_2.uce
[2010-07-22 11:56:46 | 000,006,948 | ---- | C] () -- C:\WINDOWS\System32\kanji_1.uce
[2010-07-22 11:56:44 | 000,003,286 | ---- | C] () -- C:\WINDOWS\System32\tslabels.h
[2010-07-22 11:56:44 | 000,001,225 | ---- | C] () -- C:\WINDOWS\System32\usrlogon.cmd
[2010-07-22 11:56:43 | 000,000,768 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.h
[2010-07-22 11:56:37 | 000,063,488 | ---- | C] () -- C:\WINDOWS\System32\wmimgmt.msc
[2010-07-22 11:44:08 | 001,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2010-07-22 11:44:08 | 001,630,208 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe
[2010-07-22 11:44:08 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2010-07-22 11:44:07 | 001,486,848 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2010-07-22 11:44:07 | 001,339,392 | ---- | C] () -- C:\WINDOWS\System32\nvdspsch.exe
[2010-07-22 11:44:07 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2010-07-22 11:44:07 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\nvtuicpl.cpl
[2010-07-22 11:44:06 | 000,442,368 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe
[2010-07-22 11:44:05 | 000,425,984 | ---- | C] () -- C:\WINDOWS\System32\keystone.exe

[color=#E56717]========== LOP Check ==========[/color]

[2010-08-24 19:39:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ADMIN\Dane aplikacji\Artisteer
[2010-07-26 20:18:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ADMIN\Dane aplikacji\DAEMON Tools Lite
[2010-08-10 00:48:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ADMIN\Dane aplikacji\DC++
[2010-08-25 18:40:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ADMIN\Dane aplikacji\FileZilla
[2010-08-24 02:15:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ADMIN\Dane aplikacji\HLSW
[2010-08-26 15:37:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ADMIN\Dane aplikacji\ipla
[2010-07-22 16:01:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ADMIN\Dane aplikacji\Notepad++
[2010-07-22 12:13:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ADMIN\Dane aplikacji\Opera
[2010-08-11 22:42:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ADMIN\Dane aplikacji\TeamViewer
[2010-08-21 20:21:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ADMIN\Dane aplikacji\Tibia
[2010-07-26 20:15:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite
[2010-07-26 13:07:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Hagel Technologies
[2010-08-20 19:57:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla

[color=#E56717]========== Purity Check ==========[/color]



[color=#E56717]========== Custom Scans ==========[/color]


[color=#A23BEC]< %systemdrive%\*.* >[/color]
[2010-07-22 12:00:28 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2010-07-22 11:56:06 | 000,000,211 | -HS- | M] () -- C:\boot.ini
[2009-07-16 23:33:00 | 000,004,952 | RHS- | M] () -- C:\Bootfont.bin
[2010-08-26 15:49:11 | 000,014,214 | ---- | M] () -- C:\ComboFix.txt
[2010-07-22 12:00:28 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2010-08-25 18:36:12 | 000,000,056 | ---- | M] () -- C:\hasla.txt
[2010-07-22 12:00:28 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2010-07-22 12:00:28 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2009-07-16 23:33:00 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM
[2009-07-16 23:33:00 | 000,251,152 | RHS- | M] () -- C:\ntldr
[2010-08-26 15:41:49 | 2145,386,496 | -HS- | M] () -- C:\pagefile.sys
[2010-08-21 13:44:48 | 000,000,364 | ---- | M] () -- C:\test.html


[color=#A23BEC]< MD5 for: AGP440.SYS >[/color]
[2009-07-16 23:33:00 | 017,821,884 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:agp440.sys

[color=#A23BEC]< MD5 for: ATAPI.SYS >[/color]
[2009-07-16 23:33:00 | 017,821,884 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2009-07-16 23:33:00 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ERDNT\cache\atapi.sys
[2009-07-16 23:33:00 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys

[color=#A23BEC]< MD5 for: BEEP.SYS >[/color]
[2009-07-16 23:33:00 | 000,004,224 | ---- | M] (Microsoft Corporation) MD5=DA1F27D85E0D1525F6621372E7B685E9 -- C:\WINDOWS\ERDNT\cache\beep.sys
[2009-07-16 23:33:00 | 000,004,224 | ---- | M] (Microsoft Corporation) MD5=DA1F27D85E0D1525F6621372E7B685E9 -- C:\WINDOWS\system32\dllcache\beep.sys
[2009-07-16 23:33:00 | 000,004,224 | ---- | M] (Microsoft Corporation) MD5=DA1F27D85E0D1525F6621372E7B685E9 -- C:\WINDOWS\system32\drivers\beep.sys

[color=#A23BEC]< MD5 for: CDROM.SYS >[/color]
[2009-07-16 23:33:00 | 017,821,884 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:cdrom.sys
[2009-07-16 23:33:00 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\system32\drivers\cdrom.sys

[color=#A23BEC]< MD5 for: EVENTLOG.DLL >[/color]
[2009-07-16 23:33:00 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=35FCCFD093582FA9098762E6F84EE119 -- C:\WINDOWS\ERDNT\cache\eventlog.dll
[2009-07-16 23:33:00 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=35FCCFD093582FA9098762E6F84EE119 -- C:\WINDOWS\system32\dllcache\eventlog.dll
[2009-07-16 23:33:00 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=35FCCFD093582FA9098762E6F84EE119 -- C:\WINDOWS\system32\eventlog.dll

[color=#A23BEC]< MD5 for: NDIS.SYS >[/color]
[2009-07-16 23:33:00 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\ERDNT\cache\ndis.sys
[2009-07-16 23:33:00 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\dllcache\ndis.sys
[2009-07-16 23:33:00 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\drivers\ndis.sys

[color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
[2009-07-16 23:33:00 | 000,510,464 | ---- | M] (Microsoft Corporation) MD5=51FD2E13D723857B9CA239AE77150F48 -- C:\WINDOWS\ERDNT\cache\winlogon.exe
[2009-07-16 23:33:00 | 000,510,464 | ---- | M] (Microsoft Corporation) MD5=51FD2E13D723857B9CA239AE77150F48 -- C:\WINDOWS\system32\dllcache\winlogon.exe
[2009-07-16 23:33:00 | 000,510,464 | ---- | M] (Microsoft Corporation) MD5=51FD2E13D723857B9CA239AE77150F48 -- C:\WINDOWS\system32\winlogon.exe
< End of report >

[/log]

OTL Extras
[log]
OTL Extras logfile created on: 2010-08-26 15:52:10 - Run 1
OTL by OldTimer - Version 3.2.10.0 Folder = C:\Documents and Settings\ADMIN\Pulpit
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 83,00% Memory free
5,00 Gb Paging File | 4,00 Gb Available in Paging File | 93,00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 58,59 Gb Total Space | 4,42 Gb Free Space | 7,54% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: ADMIN
Current User Name: ADMIN
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 60 Days
Output = Standard

[color=#E56717]========== Extra Registry (SafeList) ==========[/color]


[color=#E56717]========== File Associations ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html [@ = Opera.HTML] -- C:\Program Files\Opera\opera.exe (Opera Software)

[color=#E56717]========== Shell Spawning ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
http [open] -- "C:\Program Files\Opera\opera.exe" "%1" (Opera Software)
https [open] -- "C:\Program Files\Opera\opera.exe" "%1" (Opera Software)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[color=#E56717]========== Security Center Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"5353:TCP" = 5353:TCP:*:Enabled:Adobe CSI CS4

[color=#E56717]========== Authorized Applications List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Opera\opera.exe" = C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser -- (Opera Software)
"C:\Program Files\Steam\Steam.exe" = C:\Program Files\Steam\Steam.exe:*:Enabled:Steam -- (Valve Corporation)
"C:\Program Files\WebServ\mysql\bin\WebServ(mysqld).exe" = C:\Program Files\WebServ\mysql\bin\WebServ(mysqld).exe:*:Enabled:WebServ(mysqld) -- ()
"C:\Program Files\WebServ\apache2\bin\WebServ(apache).exe" = C:\Program Files\WebServ\apache2\bin\WebServ(apache).exe:*:Enabled:Apache HTTP Server -- (Apache Software Foundation)
"C:\Program Files\TeamViewer\Version5\TeamViewer.exe" = C:\Program Files\TeamViewer\Version5\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application -- (TeamViewer GmbH)
"C:\Program Files\Java\jre6\bin\javaw.exe" = C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary -- (Sun Microsystems, Inc.)
"C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" = C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4 -- (Adobe Systems Incorporated)
"C:\Program Files\Buka\Hard Truck Tycoon\HTT.exe" = C:\Program Files\Buka\Hard Truck Tycoon\HTT.exe:*:Enabled:HTT -- ()
"C:\Program Files\Steam\steamapps\wounky\dedicated server\hlds.exe" = C:\Program Files\Steam\steamapps\wounky\dedicated server\hlds.exe:*:Enabled:HLDS Launcher -- (Valve)
"C:\Program Files\HLSW\hlsw.exe" = C:\Program Files\HLSW\hlsw.exe:*:Enabled:HLSW Application -- (Stripf Software)
"C:\Program Files\DC++\DCPlusPlus.exe" = C:\Program Files\DC++\DCPlusPlus.exe:*:Enabled:DC++ -- ()
"C:\Program Files\Steam\steamapps\wounky\counter-strike\hl.exe" = C:\Program Files\Steam\steamapps\wounky\counter-strike\hl.exe:*:Enabled:Counter-Strike -- (Valve)


[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00ADFB20-AE75-46F4-AD2C-F48B15AC3100}" = Adobe Color NA Recommended Settings CS4
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{05308C4E-7285-4066-BAE3-6B50DA6ED755}" = Adobe Update Manager CS4
"{054EFA56-2AC1-48F4-A883-0AB89874B972}" = Adobe Extension Manager CS4
"{098727E1-775A-4450-B573-3F441F1CA243}" = kuler
"{0D6013AB-A0C7-41DC-973C-E93129C9A29F}" = Adobe Color JA Extra Settings CS4
"{0D67A4E4-5BE0-4C9A-8AD8-AB552B433F23}" = Adobe Setup
"{0F723FC1-7606-4867-866C-CE80AD292DAF}" = Adobe CSI CS4
"{1618734A-3957-4ADD-8199-F973763109A8}" = Adobe Anchor Service CS4
"{16E16F01-2E2D-4248-A42F-76261C147B6C}" = Adobe Drive CS4
"{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}" = AdobeColorCommonSetRGB
"{197A3012-8C85-4FD3-AB66-9EC7E13DB92E}" = Adobe AIR
"{20c31435-2a0a-4580-be8b-ac06fc243ca4}" = Python 2.7
"{26A24AE4-039D-4CA4-87B4-2F83216017FF}" = Java(TM) 6 Update 17
"{28006915-2739-4EBE-B5E8-49B25D32EB33}" = Atheros Client Installation Program
"{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}" = PDF Settings CS4
"{39F6E2B4-CFE8-C30A-66E8-489651F0F34C}" = Adobe Media Player
"{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}" = Adobe XMP Panels CS4
"{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}" = Adobe Color - Photoshop Specific CS4
"{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}" = Adobe WinSoft Linguistics Plugin
"{42082D6A-7C60-4CD9-B6FC-81E6F1FA96EF}" = Theme Park World Fix
"{4817189D-1785-4627-A33C-39FD90919300}" = The Sims™ 2 Zwierzaki
"{4943EFF5-229F-435D-BEA9-BE3CAEA783A7}" = Adobe Service Manager Extension
"{5570C7F0-43D0-4916-8A9E-AEDD52FA86F4}" = Adobe Color EU Extra Settings CS4
"{56780980-C930-4775-88B8-85301EDBEBE6}_is1" = Hard Truck Tycoon
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{63C24A08-70F3-4C8E-B9FB-9F21A903801D}" = Adobe Color Video Profiles CS CS4
"{63E5CDBF-8214-4F03-84F8-CD3CE48639AD}" = Adobe Photoshop CS4 Support
"{67F0E67A-8E93-4C2C-B29D-47C48262738A}" = Adobe Device Central CS4
"{68243FF8-83CA-466B-B2B8-9F99DA5479C4}" = AdobeColorCommonSetCMYK
"{6E7DD182-9FC6-4651-0095-2E666CC6AF35}" = The Sims 2
"{70858C67-8761-4444-895A-0A8B2E9E144E}" = Opera 10.61
"{7131646D-CD3C-40F4-97B9-CD9E4E6262EF}" = Microsoft .NET Framework 2.0
"{7B3577F5-1D82-4C9B-008B-69D026FD8BCA}" = The Sims 2 Własny biznes
"{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4
"{83877DB1-8B77-45BC-AB43-2BAC22E093E0}" = Adobe Bridge CS4
"{842B4B72-9E8F-4962-B3C1-1C422A5C4434}" = Suite Shared Configuration CS4
"{931AB7EA-3656-4BB7-864D-022B09E3DD67}" = Adobe Linguistics CS4
"{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4
"{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A56028FC-1F40-4369-9941-7AAAC6ACE924}" = LastChaosPoland
"{AC76BA86-7AD7-1033-7B44-A93000000001}" = Adobe Reader 9.3.3
"{ADE91A13-434D-4229-00BC-182BAD607303}" = Need for Speed™ Most Wanted
"{B29AD377-CC12-490A-A480-1452337C618D}" = Connect
"{B65BA85C-0A27-4BC0-A22D-A66F0E5B9494}" = Adobe Photoshop CS4
"{B6F5B704-06D3-4687-90F3-6195304AD755}" = The Sims™ 2 Osiedlowe życie
"{BB4E33EC-8181-4685-96F7-8554293DEC6A}" = Adobe Output Module
"{C52E3EC1-048C-45E1-8D53-10B0C6509683}" = Adobe Default Language CS4
"{CC75AB5C-2110-4A7F-AF52-708680D22FE8}" = Photoshop Camera Raw
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{E4848436-0345-47E2-B648-8B522FCDA623}" = Adobe Photoshop CS4
"{F0E64E2E-3A60-40D8-A55D-92F6831875DA}" = Adobe Search for Help
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}" = Adobe ExtendScript Toolkit CS4
"{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4
"{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}" = Adobe Fonts All
"18 Wheels of Steel Haulin" = 18 Wheels of Steel Haulin
"Adobe AIR" = Adobe AIR
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe_faf656ef605427ee2f42989c3ad31b8" = Adobe Photoshop CS4
"AMX Mod X Installer" = AMX Mod X Installer 1.8.1
"AQQ" = WapSter AQQ
"Artisteer 2" = Artisteer 2
"CCleaner" = CCleaner
"Cheat Engine 5.6.1_is1" = Cheat Engine 5.6.1
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"DC++" = DC++ 0.770
"DUMeter3_is1" = DU Meter
"EVEREST Ultimate Edition_is1" = EVEREST Ultimate Edition v5.50
"FileZilla Client" = FileZilla Client 3.3.3
"HLSW_is1" = HLSW v1.3.3.7b
"InterActual Player" = InterActual Player
"ipla" = ipla 2.1.5
"JDownloader" = JDownloader
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 6.1.0
"Microsoft .NET Framework 2.0" = Microsoft .NET Framework 2.0
"Notepad++" = Notepad++
"NVIDIA Drivers" = NVIDIA Drivers
"Precision" = EVGA Precision 1.9.5
"RealAlt_is1" = Real Alternative 2.0.2
"Spritefixer" = Spritefixer
"Steam App 10" = Counter-Strike
"Steam App 5" = Dedicated Server
"TeamViewer 5" = TeamViewer 5
"Theme Park World" = Theme Park World
"Tibia Auto" = NSIS Example2
"Tibia_is1" = Tibia
"WebServ_is1" = WebServ 2.0
"WinRAR archiver" = Archiwizator WinRAR

[color=#E56717]========== Last 10 Event Log Errors ==========[/color]

[ Application Events ]
Error - 2010-08-12 09:36:59 | Computer Name = ADMIN | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd nksp.exe, wersja 0.0.0.0, moduł powodujący
błąd d3d8.dll, wersja 5.3.2600.5512, adres błędu 0x00034bed.

Error - 2010-08-12 11:25:06 | Computer Name = ADMIN | Source = Userenv | ID = 1090
Description = System Windows nie może zarejestrować stanu sesji RSoP (Resultant
Set of Policies - wynikowego zestawu zasad). Próba połączenia z WMI nie powiodła
się. Dlatego żadne następne rejestrowanie zasad RSoP dla tej aplikacji nie zostanie
wykonane.

Error - 2010-08-12 11:25:06 | Computer Name = ADMIN | Source = Userenv | ID = 1090
Description = System Windows nie może zarejestrować stanu sesji RSoP (Resultant
Set of Policies - wynikowego zestawu zasad). Próba połączenia z WMI nie powiodła
się. Dlatego żadne następne rejestrowanie zasad RSoP dla tej aplikacji nie zostanie
wykonane.

Error - 2010-08-12 13:05:06 | Computer Name = ADMIN | Source = Userenv | ID = 1090
Description = System Windows nie może zarejestrować stanu sesji RSoP (Resultant
Set of Policies - wynikowego zestawu zasad). Próba połączenia z WMI nie powiodła
się. Dlatego żadne następne rejestrowanie zasad RSoP dla tej aplikacji nie zostanie
wykonane.

Error - 2010-08-12 13:05:06 | Computer Name = ADMIN | Source = Userenv | ID = 1090
Description = System Windows nie może zarejestrować stanu sesji RSoP (Resultant
Set of Policies - wynikowego zestawu zasad). Próba połączenia z WMI nie powiodła
się. Dlatego żadne następne rejestrowanie zasad RSoP dla tej aplikacji nie zostanie
wykonane.

Error - 2010-08-12 13:49:57 | Computer Name = ADMIN | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd prism3d.exe, wersja 1.0.0.1, moduł powodujący
błąd game.dll, wersja 0.0.0.0, adres błędu 0x000a821e.

Error - 2010-08-12 15:00:06 | Computer Name = ADMIN | Source = Userenv | ID = 1090
Description = System Windows nie może zarejestrować stanu sesji RSoP (Resultant
Set of Policies - wynikowego zestawu zasad). Próba połączenia z WMI nie powiodła
się. Dlatego żadne następne rejestrowanie zasad RSoP dla tej aplikacji nie zostanie
wykonane.

Error - 2010-08-12 15:00:06 | Computer Name = ADMIN | Source = Userenv | ID = 1090
Description = System Windows nie może zarejestrować stanu sesji RSoP (Resultant
Set of Policies - wynikowego zestawu zasad). Próba połączenia z WMI nie powiodła
się. Dlatego żadne następne rejestrowanie zasad RSoP dla tej aplikacji nie zostanie
wykonane.

Error - 2010-08-12 16:42:06 | Computer Name = ADMIN | Source = Userenv | ID = 1090
Description = System Windows nie może zarejestrować stanu sesji RSoP (Resultant
Set of Policies - wynikowego zestawu zasad). Próba połączenia z WMI nie powiodła
się. Dlatego żadne następne rejestrowanie zasad RSoP dla tej aplikacji nie zostanie
wykonane.

Error - 2010-08-12 16:56:06 | Computer Name = ADMIN | Source = Userenv | ID = 1090
Description = System Windows nie może zarejestrować stanu sesji RSoP (Resultant
Set of Policies - wynikowego zestawu zasad). Próba połączenia z WMI nie powiodła
się. Dlatego żadne następne rejestrowanie zasad RSoP dla tej aplikacji nie zostanie
wykonane.

[ System Events ]
Error - 2010-08-09 18:23:25 | Computer Name = ADMIN | Source = Dhcp | ID = 1000
Description = Komputer utracił połączenie dla swojego adresu IP 192.168.1.101 na
karcie sieciowej o adresie sieciowym 0015AFD0B70C.

Error - 2010-08-10 18:23:26 | Computer Name = ADMIN | Source = Dhcp | ID = 1000
Description = Komputer utracił połączenie dla swojego adresu IP 192.168.1.101 na
karcie sieciowej o adresie sieciowym 0015AFD0B70C.

Error - 2010-08-12 18:53:19 | Computer Name = ADMIN | Source = Dhcp | ID = 1000
Description = Komputer utracił połączenie dla swojego adresu IP 192.168.1.101 na
karcie sieciowej o adresie sieciowym 0015AFD0B70C.

Error - 2010-08-13 18:53:20 | Computer Name = ADMIN | Source = Dhcp | ID = 1000
Description = Komputer utracił połączenie dla swojego adresu IP 192.168.1.101 na
karcie sieciowej o adresie sieciowym 0015AFD0B70C.

Error - 2010-08-14 18:53:21 | Computer Name = ADMIN | Source = Dhcp | ID = 1000
Description = Komputer utracił połączenie dla swojego adresu IP 192.168.1.101 na
karcie sieciowej o adresie sieciowym 0015AFD0B70C.

Error - 2010-08-15 16:56:15 | Computer Name = ADMIN | Source = Service Control Manager | ID = 7023
Description = Usługa Karta wydajności WMI zakończyła działanie; wystąpił następujący
błąd: %%2147500037

Error - 2010-08-16 05:18:45 | Computer Name = ADMIN | Source = Dhcp | ID = 1002
Description = Adres IP połączenia 192.168.1.101 dla karty sieciowej o adresie 0015AFD0B70C
został zabroniony przez serwer DHCP 192.168.1.100 (Serwer DHCP wysłał komunikat
DHCPNACK).

Error - 2010-08-23 13:27:07 | Computer Name = ADMIN | Source = Dhcp | ID = 1000
Description = Komputer utracił połączenie dla swojego adresu IP 192.168.1.101 na
karcie sieciowej o adresie sieciowym 0015AFD0B70C.

Error - 2010-08-24 17:02:33 | Computer Name = ADMIN | Source = Dhcp | ID = 1000
Description = Komputer utracił połączenie dla swojego adresu IP 192.168.1.101 na
karcie sieciowej o adresie sieciowym 0015AFD0B70C.

Error - 2010-08-26 09:42:14 | Computer Name = ADMIN | Source = Service Control Manager | ID = 7023
Description = Usługa HID Input Service zakończyła działanie; wystąpił następujący
błąd: %%126


< End of report >

[/log]

ComboFix:
[log]
ComboFix 10-08-25.01 - ADMIN 2010-08-26 15:44:11.1.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1250.48.1045.18.3071.2750 [GMT 2:00]
Uruchomiony z: c:\documents and settings\ADMIN\Pulpit\ComboFix.exe
* Utworzono nowy punkt przywracania

UWAGA - TEN KOMPUTER NIE MA ZAINSTALOWANEJ KONSOLI ODZYSKIWANIA !!
.

((((((((((((((((((((((((((((((((((((((( Usunięto )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\linkinfo.dll
c:\windows\My.ini
c:\windows\olinkinfo.dll
c:\windows\SFDLL.DLL
c:\windows\svchost.exe

.
((((((((((((((((((((((((( Pliki utworzone od 2010-07-26 do 2010-08-26 )))))))))))))))))))))))))))))))
.

2010-08-25 20:31 . 2010-08-25 20:31 107888 ----a-w- c:\windows\system32\CmdLineExt.dll
2010-08-24 18:49 . 2010-08-24 19:01 -------- d-----w- C:\sprzedaz
2010-08-24 17:39 . 2010-08-24 17:39 -------- d-----w- c:\documents and settings\ADMIN\Dane aplikacji\Artisteer
2010-08-24 17:38 . 2010-08-24 17:39 -------- d-----w- c:\program files\Artisteer 2
2010-08-24 16:46 . 2010-08-24 16:47 -------- d-----w- c:\program files\Spritefixer
2010-08-24 16:46 . 2010-08-24 16:46 49152 ----a-w- c:\windows\UNINS.EXE
2010-08-24 16:46 . 2010-08-24 16:46 28672 ----a-w- c:\windows\system32\shelllnk.dll
2010-08-24 16:46 . 2010-08-24 16:46 53760 ----a-w- c:\windows\system32\zlib.dll
2010-08-24 16:46 . 2010-08-24 17:01 -------- d-----w- C:\sprite
2010-08-22 15:22 . 2004-08-18 09:34 442368 ----a-r- c:\windows\system32\vp6vfw.dll
2010-08-21 19:30 . 2006-06-26 00:49 1867776 ----a-w- c:\windows\system32\python24.dll
2010-08-21 19:28 . 2010-08-21 19:28 -------- d-----w- C:\Python27
2010-08-21 19:27 . 2010-08-21 19:36 -------- d-----w- c:\program files\Tibia Auto
2010-08-21 18:20 . 2010-08-21 18:21 -------- d-----w- c:\documents and settings\ADMIN\Dane aplikacji\Tibia
2010-08-21 18:00 . 2010-08-24 18:39 -------- d-----w- c:\program files\Tibia
2010-08-20 17:57 . 2010-08-26 13:37 -------- d-----w- c:\documents and settings\ADMIN\Dane aplikacji\ipla
2010-08-20 17:57 . 2010-08-20 17:57 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\ipla
2010-08-20 17:57 . 2010-08-20 17:57 -------- d-----w- c:\program files\ipla
2010-08-20 17:57 . 2010-08-20 17:57 1700352 ----a-w- c:\windows\system32\gdiplus.dll
2010-08-20 17:57 . 2010-08-20 17:57 1060864 ----a-w- c:\windows\system32\mfc71.dll
2010-08-17 09:43 . 2010-08-17 09:43 -------- d-----w- c:\documents and settings\ADMIN\Dane aplikacji\Media Player Classic
2010-08-17 09:06 . 2010-08-25 20:29 -------- d-----w- c:\program files\EA GAMES
2010-08-16 15:38 . 2010-08-16 15:38 -------- d-----w- c:\program files\CCleaner
2010-08-14 23:31 . 2010-08-14 23:31 -------- d--h--w- c:\windows\PIF
2010-08-09 22:37 . 2010-08-09 22:48 -------- d-----w- c:\documents and settings\ADMIN\Ustawienia lokalne\Dane aplikacji\DC++
2010-08-09 22:37 . 2010-08-09 22:48 -------- d-----w- c:\documents and settings\ADMIN\Dane aplikacji\DC++
2010-08-09 22:37 . 2010-08-09 22:37 -------- d-----w- c:\program files\DC++
2010-08-09 16:23 . 2010-08-24 00:03 -------- d-----w- c:\program files\EVGA Precision
2010-08-03 22:00 . 2010-08-24 00:15 -------- d-----w- c:\documents and settings\ADMIN\Dane aplikacji\HLSW
2010-08-03 22:00 . 2010-08-03 22:00 -------- d-s---w- c:\program files\HLSW
2010-08-02 18:25 . 2010-08-02 18:25 -------- d-----w- C:\GAMIGO
2010-08-01 19:28 . 2010-08-01 19:29 -------- d-----w- c:\program files\18 Wheels of Steel Haulin
2010-08-01 16:44 . 2010-08-01 16:44 -------- d-----w- c:\program files\Robster Productions
2010-08-01 14:34 . 2010-08-01 14:34 -------- d-----w- c:\program files\Common Files\DirectX
2010-08-01 14:34 . 2001-05-16 14:54 309616 ----a-w- c:\windows\system32\wmv8dmod.dll
2010-08-01 14:34 . 2001-05-11 10:18 420240 ----a-w- c:\windows\system32\mpg4c32.dll
2010-08-01 14:34 . 2010-08-01 14:34 -------- d-----w- c:\program files\Buka
2010-08-01 11:56 . 2010-08-01 11:56 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\FLEXnet
2010-08-01 11:53 . 2010-08-01 11:53 -------- d-----w- c:\program files\Adobe Media Player
2010-08-01 11:51 . 2010-08-01 11:51 -------- d-----w- c:\program files\Common Files\Adobe AIR
2010-08-01 11:47 . 2010-08-01 11:47 -------- d-----w- c:\program files\Common Files\Macrovision Shared
2010-07-31 17:08 . 2009-11-03 12:07 679936 ----a-w- c:\windows\system32\D3DX81ab.dll
2010-07-31 17:08 . 2009-11-03 12:07 1970176 ----a-w- c:\windows\system32\d3dx9.dll
2010-07-31 17:08 . 2010-08-12 21:54 -------- d-----w- c:\program files\Cheat Engine
2010-07-29 17:50 . 2010-07-29 17:50 -------- d-----w- c:\documents and settings\ADMIN\Ustawienia lokalne\Dane aplikacji\Identities
2010-07-27 22:14 . 2010-07-27 22:14 -------- d-----w- c:\program files\Lavalys

.
(((((((((((((((((((((((((((((((((((((((( Sekcja Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-08-26 13:38 . 2010-07-22 10:16 -------- d-----w- c:\program files\Steam
2010-08-26 00:03 . 2010-07-22 14:12 -------- d-----w- c:\documents and settings\ADMIN\Dane aplikacji\Skype
2010-08-25 19:27 . 2010-07-22 14:13 -------- d-----w- c:\documents and settings\ADMIN\Dane aplikacji\skypePM
2010-08-25 16:40 . 2010-07-22 14:00 -------- d-----w- c:\documents and settings\ADMIN\Dane aplikacji\FileZilla
2010-08-25 13:34 . 2010-07-26 17:27 -------- d-----w- c:\program files\JDownloader
2010-08-24 17:38 . 2009-07-16 21:33 74428 ----a-w- c:\windows\system32\perfc015.dat
2010-08-24 17:38 . 2009-07-16 21:33 448242 ----a-w- c:\windows\system32\perfh015.dat
2010-08-12 21:31 . 2010-07-22 10:13 -------- d-----w- c:\program files\Opera
2010-08-11 20:42 . 2010-07-25 13:45 -------- d-----w- c:\documents and settings\ADMIN\Dane aplikacji\TeamViewer
2010-08-02 18:25 . 2010-07-22 10:08 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-08-01 12:42 . 2010-07-22 10:08 20096 ----a-w- c:\documents and settings\ADMIN\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
2010-08-01 11:54 . 2010-07-24 10:08 -------- d-----w- c:\program files\Common Files\Adobe
2010-07-31 20:26 . 2010-07-22 10:08 -------- d-----w- c:\program files\Atheros
2010-07-27 07:12 . 2010-07-27 07:12 -------- d-----w- c:\program files\K-Lite Codec Pack
2010-07-27 07:09 . 2010-07-27 07:09 -------- d-----w- c:\program files\InterActual
2010-07-27 07:09 . 2010-07-27 07:09 -------- d-----w- c:\program files\Real Alternative
2010-07-26 18:19 . 2010-07-26 18:19 -------- d-----w- c:\program files\Theme Park World Fix
2010-07-26 18:18 . 2010-07-26 18:18 -------- d-----w- c:\program files\Bullfrog
2010-07-26 18:18 . 2010-07-26 18:15 -------- d-----w- c:\documents and settings\ADMIN\Dane aplikacji\DAEMON Tools Lite
2010-07-26 18:17 . 2010-07-26 18:15 -------- d-----w- c:\program files\DAEMON Tools Lite
2010-07-26 18:15 . 2010-07-26 18:15 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-07-26 18:15 . 2010-07-26 18:15 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\DAEMON Tools Lite
2010-07-26 17:27 . 2010-07-26 17:27 411368 ----a-w- c:\windows\system32\deploytk.dll
2010-07-26 17:27 . 2010-07-26 17:27 -------- d-----w- c:\program files\Java
2010-07-26 17:27 . 2010-07-26 17:27 152576 ----a-w- c:\documents and settings\ADMIN\Dane aplikacji\Sun\Java\jre1.6.0_17\lzma.dll
2010-07-26 17:26 . 2010-07-26 17:26 79488 ----a-w- c:\documents and settings\ADMIN\Dane aplikacji\Sun\Java\jre1.6.0_17\gtapi.dll
2010-07-26 11:07 . 2010-07-26 11:07 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Hagel Technologies
2010-07-26 11:07 . 2010-07-26 11:07 -------- d-----w- c:\program files\DU Meter
2010-07-25 13:45 . 2010-07-25 13:45 -------- d-----w- c:\program files\TeamViewer
2010-07-23 13:43 . 2010-07-22 09:59 86327 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2010-07-22 18:16 . 2010-07-22 18:16 -------- d-----w- c:\program files\WebServ
2010-07-22 14:13 . 2010-07-22 14:13 56 ---ha-w- c:\windows\system32\ezsidmv.dat
2010-07-22 14:12 . 2010-07-22 14:12 -------- d-----r- c:\program files\Skype
2010-07-22 14:12 . 2010-07-22 14:12 -------- d-----w- c:\program files\Common Files\Skype
2010-07-22 14:12 . 2010-07-22 14:12 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Skype
2010-07-22 14:01 . 2010-07-22 14:01 -------- d-----w- c:\documents and settings\ADMIN\Dane aplikacji\Notepad++
2010-07-22 14:01 . 2010-07-22 14:01 -------- d-----w- c:\program files\Notepad++
2010-07-22 13:55 . 2010-07-22 13:55 -------- d-----w- c:\program files\FileZilla FTP Client
2010-07-22 13:18 . 2010-07-22 13:18 -------- d-----w- c:\program files\WapSter
2010-07-22 10:10 . 2010-07-22 10:10 -------- d-----w- c:\program files\Realtek
2010-07-22 10:10 . 2010-07-22 10:10 319488 ----a-w- c:\windows\HideWin.exe
2010-07-22 10:10 . 2010-07-22 10:10 -------- d-----w- c:\program files\Common Files\InstallShield
2010-07-22 10:08 . 2010-07-22 10:08 -------- d-----w- c:\documents and settings\All Users\Dane aplikacji\Atheros
2010-07-22 10:08 . 2010-07-22 10:08 -------- d-----w- c:\documents and settings\ADMIN\Dane aplikacji\InstallShield
2010-07-22 10:01 . 2010-07-22 10:01 -------- d-----w- c:\program files\microsoft frontpage
2010-07-22 09:59 . 2010-07-22 09:59 -------- d-----w- c:\program files\Usługi online
2010-07-22 09:57 . 2010-07-22 09:57 21856 ----a-w- c:\windows\system32\emptyregdb.dat
2010-07-22 09:57 . 2010-07-22 09:57 -------- d-----w- c:\program files\Windows Media Connect 2
2010-07-04 07:03 . 2010-07-04 07:03 2286080 ----a-w- c:\windows\system32\python27.dll
2010-06-28 08:00 . 2010-07-27 07:12 108032 ----a-w- c:\windows\system32\ff_vfw.dll
2010-06-08 16:10 . 2010-07-27 07:12 790528 ----a-w- c:\windows\system32\xvidcore.dll
2010-06-08 16:10 . 2010-07-27 07:12 134144 ----a-w- c:\windows\system32\xvidvfw.dll
.

------- Sigcheck -------

[-] 2009-07-16 . C8BDAD4065118558B3DC360FC96D81DB . 1571840 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
.
((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AQQ"="c:\progra~1\WapSter\WAPSTE~1\AQQ.exe" [2010-07-14 7654400]
"DU Meter"="c:\program files\DU Meter\DUMeter.exe" [2009-09-04 2749984]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]
"IPLA!"="c:\program files\ipla\ipla.exe" [2010-07-07 16222208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-10-30 13553664]
"nwiz"="nwiz.exe" [2008-10-30 1630208]
"RTHDCPL"="RTHDCPL.EXE" [2008-08-19 16850944]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-06-20 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-06-09 976832]
"AdobeCS4ServiceManager"="c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2009-07-16 15360]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"c:\\Program Files\\Steam\\Steam.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\WebServ\\mysql\\bin\\WebServ(mysqld).exe"=
"c:\\Program Files\\WebServ\\apache2\\bin\\WebServ(apache).exe"=
"c:\\Program Files\\TeamViewer\\Version5\\TeamViewer.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=
"c:\\Program Files\\Common Files\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe"=
"c:\\Program Files\\Buka\\Hard Truck Tycoon\\HTT.exe"=
"c:\\Program Files\\Steam\\steamapps\\wounky\\dedicated server\\hlds.exe"=
"c:\\Program Files\\HLSW\\hlsw.exe"=
"c:\\Program Files\\DC++\\DCPlusPlus.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Steam\\steamapps\\wounky\\counter-strike\\hl.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5353:TCP"= 5353:TCP:Adobe CSI CS4

R0 Si3124;Si3124;c:\windows\system32\drivers\si3124.sys [2009-07-16 69248]
R0 Si3531;Si3531;c:\windows\system32\drivers\Si3531.sys [2009-07-16 212520]
R0 ulsata2;ulsata2;c:\windows\system32\drivers\ulsata2.sys [2009-07-16 125952]
R2 DUMeterSvc;DU Meter Service;c:\program files\DU Meter\DUMeterSvc.exe [2010-07-26 1391136]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [2010-07-26 691696]
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-08-26 15:48
Windows 5.1.2600 Dodatek Service Pack 3 NTFS

skanowanie ukrytych procesów ...

skanowanie ukrytych wpisów autostartu ...

skanowanie ukrytych plików ...

skanowanie pomyślnie ukończone
ukryte pliki: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\DUMeterSvc]
"ImagePath"="c:\program files\DU Meter\DUMeterSvc.exe /startedbyscm:E1F6D4BE-40E33354-DUMeterService"
.
--------------------- ZABLOKOWANE KLUCZE REJESTRU ---------------------

[HKEY_USERS\S-1-5-21-2025429265-1580818891-1417001333-500\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (Administrator)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,45,34,10,3b,a6,c9,ff,43,af,92,3c,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,45,34,10,3b,a6,c9,ff,43,af,92,3c,\
.
Czas ukończenia: 2010-08-26 15:49:10
ComboFix-quarantined-files.txt 2010-08-26 13:49

Przed: 4 721 528 832 bajtów wolnych
Po: 4 725 313 536 bajtów wolnych

- - End Of File - - CB122A36C2EAC61CFC3BE93414B056BE

[/log]

Proszę o sprawdzenie logów i powiedzenie czy już jest ok, bądź co czynić dalej ;)

Pozdrawiam,
EnergyShot

Tomek01
komentarz
komentarz

Combofix'a używamy w ostateczności i tylko gdy prowadzący to zaleci. Można sobie narobić szkód.
Usunięty został między innymi wirus svchost. To dobrze choć można to było zrobić ręcznie.

Jeżeli chodzi o otwieranie się stron to możesz je zablokować za pomocą Adblock Plus.

Użyj [url="http://www.dobreprogramy.pl/Windows-Worms-Doors-Cleaner,Program,Windows,11744.html"]WWDC[/url], tak poklikaj znaczki by wszystkie paliły się na zielono.
Wg mnie jest ok.

Proszę jednak o log RSIT.

Wykonaj również dla pewności pełny skan [url=http://www.instalki.pl/programy/download_c/14/155.html][color=#0000CD][b]DrWebCureIt[/b][/color][/url] oraz [url=http://www.instalki.pl/programy/download_c/13/96.html][color=#0000CD][b]Malwarebytes Anti-Malware[/b][/color][/url] i wyniki podaj na forum.

  • Dobra wypowiedź 1
EnergyShot
komentarz
komentarz

Przepraszam za kłopot, po tym jak zaczęły mi znikać procesy sformatowałem komputer.

Leci + za odzew

Dziękuje i przepraszam


[color="#FF0000"]//W takim razie zamykam.
//Tom01[/color]

Gość
Ten temat został zamknięty. Brak możliwości dodania odpowiedzi.
Zarejestruj się lub zaloguj, aby dodać nowy temat albo zadaj pytanie bez logowania
×
×
  • Dodaj nową pozycję...

Powiadomienie o plikach cookie

Strona wykorzystuje pliki cookies w celu prawidłowego świadczenia usług i wygody użytkowników. Warunki przechowywania i dostępu do plików cookies możesz zmienić w ustawieniach przeglądarki.