kobra518 utworzono 6 grudnia 2010 utworzono 6 grudnia 2010 (edytowane) Witam mam problem z komputerem najwidoczniej jakiś Virus ale niejestem pewien logi OTS [log]OTL logfile created on: 2010-12-06 19:17:45 - Run 1 OTL by OldTimer - Version 3.2.17.3 Folder = C:\Users\Ryszard\Downloads 64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 60,00% Memory free 6,00 Gb Paging File | 5,00 Gb Available in Paging File | 78,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 77,53 Gb Total Space | 9,73 Gb Free Space | 12,55% Space Free | Partition Type: NTFS Drive D: | 77,63 Gb Total Space | 12,32 Gb Free Space | 15,87% Space Free | Partition Type: NTFS Drive E: | 77,63 Gb Total Space | 6,63 Gb Free Space | 8,54% Space Free | Partition Type: NTFS Drive F: | 37,26 Gb Total Space | 8,44 Gb Free Space | 22,66% Space Free | Partition Type: NTFS Drive H: | 37,26 Gb Total Space | 6,33 Gb Free Space | 16,98% Space Free | Partition Type: NTFS Drive I: | 37,26 Gb Total Space | 4,48 Gb Free Space | 12,01% Space Free | Partition Type: NTFS Drive J: | 37,26 Gb Total Space | 1,83 Gb Free Space | 4,92% Space Free | Partition Type: NTFS Computer Name: RYSIUL | User Name: Ryszard | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 60 Days [color=#E56717]========== Processes (All) ==========[/color] PRC - [2010-12-06 19:16:22 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Ryszard\Downloads\OTL.exe PRC - [2010-10-27 07:21:28 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2010-10-16 01:31:46 | 000,949,376 | ---- | M] (Eset ) -- C:\Program Files (x86)\Eset\nod32kui.exe PRC - [2010-10-16 01:31:46 | 000,552,064 | ---- | M] (Eset ) -- C:\Program Files (x86)\Eset\nod32krn.exe PRC - [2010-10-07 09:04:26 | 012,661,344 | ---- | M] (GG Network S.A.) -- C:\Program Files (x86)\Gadu-Gadu 10\gg.exe PRC - [2010-07-09 15:09:52 | 000,248,936 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe PRC - [2010-05-14 11:44:46 | 000,248,552 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe PRC - [2010-02-06 21:12:48 | 000,053,760 | ---- | M] () -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\Plugins\Helper\AlSrvN.exe PRC - [2007-10-23 13:19:06 | 001,410,344 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe PRC - [2007-10-23 13:19:06 | 000,382,248 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe PRC - [2007-10-23 13:18:46 | 000,202,024 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Common Files\Nero\Lib\NMBgMonitor.exe PRC - [2007-09-20 07:51:46 | 000,853,288 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe PRC - [2007-09-02 12:58:52 | 000,495,616 | ---- | M] () -- C:\Program Files (x86)\RocketDock\RocketDock.exe PRC - [2007-07-24 10:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) -- C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [color=#E56717]========== Modules (All) ==========[/color] MOD - [2010-12-06 19:16:22 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Ryszard\Downloads\OTL.exe MOD - [2010-10-23 04:49:36 | 000,245,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\uxtheme.dll MOD - [2009-07-14 02:17:51 | 001,289,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntdll.dll MOD - [2009-07-14 02:16:19 | 000,268,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\Wldap32.dll MOD - [2009-07-14 02:16:17 | 001,123,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vssapi.dll MOD - [2009-07-14 02:16:17 | 000,627,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\usp10.dll MOD - [2009-07-14 02:16:17 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vsstrace.dll MOD - [2009-07-14 02:16:17 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\version.dll MOD - [2009-07-14 02:16:15 | 000,171,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\spp.dll MOD - [2009-07-14 02:16:15 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\srclient.dll MOD - [2009-07-14 02:16:14 | 012,866,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shell32.dll MOD - [2009-07-14 02:16:14 | 001,668,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\setupapi.dll MOD - [2009-07-14 02:16:14 | 000,350,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shlwapi.dll MOD - [2009-07-14 02:16:14 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shdocvw.dll MOD - [2009-07-14 02:16:13 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sechost.dll MOD - [2009-07-14 02:16:13 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samlib.dll MOD - [2009-07-14 02:16:13 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samcli.dll MOD - [2009-07-14 02:16:13 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\secur32.dll MOD - [2009-07-14 02:16:12 | 001,412,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ole32.dll MOD - [2009-07-14 02:16:12 | 000,988,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\propsys.dll MOD - [2009-07-14 02:16:12 | 000,571,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\oleaut32.dll MOD - [2009-07-14 02:16:12 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\olepro32.dll MOD - [2009-07-14 02:16:12 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\profapi.dll MOD - [2009-07-14 02:16:12 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\psapi.dll MOD - [2009-07-14 02:16:11 | 000,121,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntmarta.dll MOD - [2009-07-14 02:16:03 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\netutils.dll MOD - [2009-07-14 02:15:50 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msvcrt.dll MOD - [2009-07-14 02:15:43 | 000,828,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msctf.dll MOD - [2009-07-14 02:15:13 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dwmapi.dll MOD - [2009-07-14 02:15:11 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\devobj.dll MOD - [2009-07-14 02:15:07 | 000,486,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\comdlg32.dll MOD - [2009-07-14 02:15:07 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cryptbase.dll MOD - [2009-07-14 02:15:03 | 000,522,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\clbcatq.dll MOD - [2009-07-14 02:15:02 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cfgmgr32.dll MOD - [2009-07-14 02:14:57 | 000,070,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\atl.dll MOD - [2009-07-14 02:14:53 | 000,640,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\advapi32.dll MOD - [2009-07-14 02:14:53 | 000,292,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\apphelp.dll MOD - [2009-07-14 02:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx MOD - [2009-07-14 02:14:08 | 000,319,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winspool.drv MOD - [2009-07-14 02:11:24 | 000,833,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\user32.dll MOD - [2009-07-14 02:11:24 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sspicli.dll MOD - [2009-07-14 02:11:23 | 000,836,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\kernel32.dll MOD - [2009-07-14 02:11:23 | 000,662,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rpcrt4.dll MOD - [2009-07-14 02:11:23 | 000,269,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\KernelBase.dll MOD - [2009-07-14 02:11:23 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\lpk.dll MOD - [2009-07-14 02:11:21 | 000,310,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\gdi32.dll MOD - [2009-07-14 02:11:21 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\imm32.dll MOD - [2009-07-14 02:03:50 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2009-07-14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2009-07-14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV - [2010-10-16 01:31:46 | 000,552,064 | ---- | M] (Eset ) [Auto | Running] -- C:\Program Files (x86)\Eset\nod32krn.exe -- (NOD32krn) SRV - [2010-07-09 15:09:52 | 000,248,936 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service) SRV - [2009-12-23 22:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto | Stopped] -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE) SRV - [2009-06-10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2007-07-24 10:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2) SRV - [2007-02-08 15:13:46 | 000,212,480 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2010-10-20 19:15:29 | 000,082,816 | ---- | M] (VSO Software) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\pcouffin.sys -- (pcouffin) DRV:[b]64bit:[/b] - [2010-10-20 18:58:55 | 000,503,352 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2010-10-19 19:31:17 | 000,314,016 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt) DRV:[b]64bit:[/b] - [2010-10-19 19:31:17 | 000,043,680 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt) DRV:[b]64bit:[/b] - [2010-10-16 01:31:46 | 000,146,704 | ---- | M] (Eset ) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\amon.sys -- (AMON) DRV:[b]64bit:[/b] - [2009-07-14 02:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2009-07-14 02:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2009-07-14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 02:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-06-10 21:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs) DRV:[b]64bit:[/b] - [2009-06-10 21:35:42 | 000,187,392 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:[b]64bit:[/b] - [2009-06-10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2008-08-01 14:27:42 | 000,113,088 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AnyDVD.sys -- (AnyDVD) DRV:[b]64bit:[/b] - [2008-07-21 13:11:56 | 000,032,200 | ---- | M] (Elaborate Bytes AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ElbyCDIO.sys -- (ElbyCDIO) DRV:[b]64bit:[/b] - [2007-02-22 09:19:08 | 000,173,056 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nmwcdx64.sys -- (nmwcdx64) DRV:[b]64bit:[/b] - [2007-02-22 09:18:14 | 000,017,408 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nmwcdcmx64.sys -- (nmwcdcmx64) DRV:[b]64bit:[/b] - [2007-02-22 09:18:14 | 000,017,408 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nmwcdcjx64.sys -- (nmwcdcjx64) DRV:[b]64bit:[/b] - [2007-02-22 09:18:14 | 000,012,288 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nmwcdcx64.sys -- (nmwcdcx64) DRV:[b]64bit:[/b] - [2007-01-15 13:36:18 | 000,014,112 | ---- | M] (InterVideo) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\regi.sys -- (regi) DRV:[b]64bit:[/b] - [2006-01-19 16:33:26 | 000,493,440 | ---- | M] (ZyDAS Technology Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WlanBZ64.sys -- (SG762_64) DRV - [2010-10-16 01:12:39 | 000,020,544 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\gdrv.sys -- (gdrv) DRV - [2008-08-01 14:27:42 | 000,113,088 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\drivers\AnyDVD.sys -- (AnyDVD) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.qooqlle.com/ IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.qooqlle.com/" FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {888d99e7-e8b5-46a3-851e-1ec45da1e644}:4.0.0 FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2.2 FF - prefs.js..extensions.enabledItems: cssreloader@kenneth.io:1.0.2 FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.8.20100408.6 FF - prefs.js..network.proxy.backup.ftp: "127.0.0.1" FF - prefs.js..network.proxy.backup.ftp_port: 9666 FF - prefs.js..network.proxy.backup.gopher: "127.0.0.1" FF - prefs.js..network.proxy.backup.gopher_port: 9666 FF - prefs.js..network.proxy.backup.socks: "127.0.0.1" FF - prefs.js..network.proxy.backup.socks_port: 9666 FF - prefs.js..network.proxy.backup.ssl: "127.0.0.1" FF - prefs.js..network.proxy.backup.ssl_port: 9666 FF - prefs.js..network.proxy.ftp: "127.0.0.1" FF - prefs.js..network.proxy.ftp_port: 9666 FF - prefs.js..network.proxy.gopher: "127.0.0.1" FF - prefs.js..network.proxy.gopher_port: 9666 FF - prefs.js..network.proxy.http: "127.0.0.1" FF - prefs.js..network.proxy.http_port: 9666 FF - prefs.js..network.proxy.share_proxy_settings: true FF - prefs.js..network.proxy.socks: "127.0.0.1" FF - prefs.js..network.proxy.socks_port: 9666 FF - prefs.js..network.proxy.ssl: "127.0.0.1" FF - prefs.js..network.proxy.ssl_port: 9666 FF - prefs.js..network.proxy.type: 0 FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010-12-06 12:50:00 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010-12-06 12:49:57 | 000,000,000 | ---D | M] [2010-12-06 12:50:11 | 000,000,000 | ---D | M] -- C:\Users\Ryszard\AppData\Roaming\mozilla\Extensions [2010-12-06 12:50:11 | 000,000,000 | ---D | M] -- C:\Users\Ryszard\AppData\Roaming\mozilla\Firefox\Profiles\g5rymnqg.default\extensions [2010-12-06 18:41:28 | 000,001,860 | ---- | M] () -- C:\Users\Ryszard\AppData\Roaming\Mozilla\FireFox\Profiles\g5rymnqg.default\searchplugins\search.xml [2010-12-06 12:49:57 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\mozilla firefox\extensions [2010-10-27 06:37:26 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml [2010-10-27 06:37:26 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml [2010-10-27 06:37:26 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml [2010-10-27 06:37:26 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml [2010-10-27 06:37:26 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml [2010-10-27 06:37:26 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2009-06-10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL (Microsoft Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Windows\RAVCpl64.exe (Realtek Semiconductor) O4:[b]64bit:[/b] - HKLM..\Run: [Skytel] C:\Windows\SkyTel.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [GProton] C:\ProgramData\GProton.exe () O4 - HKLM..\Run: [NBKeyScan] C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe (Nero AG) O4 - HKLM..\Run: [nod32kui] C:\Program Files (x86)\Eset\nod32kui.exe (Eset ) O4 - HKLM..\Run: [UpdateReminder] C:\Program Files (x86)\Eset\UpdateReminder.exe (ESET, spol. s r.o.) O4 - HKCU..\Run: [AlSrvN] C:\Program Files (x86)\Alcohol Soft\Alcohol 120\Plugins\Helper\AlSrvN.exe () O4 - HKCU..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files (x86)\Common Files\Nero\Lib\NMBgMonitor.exe (Nero AG) O4 - HKCU..\Run: [RocketDock] C:\Program Files (x86)\RocketDock\RocketDock.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\SysNative\imon.dll (Eset ) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\SysNative\imon.dll (Eset ) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\SysNative\imon.dll (Eset ) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\SysNative\imon.dll (Eset ) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\SysNative\imon.dll (Eset ) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\SysNative\imon.dll (Eset ) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\SysNative\imon.dll (Eset ) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\SysNative\imon.dll (Eset ) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\SysNative\imon.dll (Eset ) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\SysNative\imon.dll (Eset ) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\Windows\SysNative\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\SysWow64\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\SysWow64\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\SysWow64\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\SysWow64\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\SysWow64\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\SysWow64\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\SysWow64\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\SysWow64\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\SysWow64\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\SysWow64\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\Windows\SysWow64\imon.dll (Eset ) O13 - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.250 195.164.199.4 192.168.0.250 O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-06-01 10:08:47 | 000,000,000 | ---- | M] () - F:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{5c7f6882-d8fc-11df-8255-0019700a03ea}\Shell - "" = AutoRun O33 - MountPoints2\{5c7f6882-d8fc-11df-8255-0019700a03ea}\Shell\AutoRun\command - "" = K:\autorun.exe -- File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* NetSvcs:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] Base - Driver Group SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group SafeBootMin:[b]64bit:[/b] File system - Driver Group SafeBootMin:[b]64bit:[/b] Filter - Driver Group SafeBootMin:[b]64bit:[/b] HelpSvc - Service SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group SafeBootMin:[b]64bit:[/b] sacsvr - Service SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group SafeBootMin:[b]64bit:[/b] vmms - Service SafeBootMin:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: HelpSvc - Service SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PNP Filter - Driver Group SafeBootMin: Primary disk - Driver Group SafeBootMin: sacsvr - Service SafeBootMin: SCSI Class - Driver Group SafeBootMin: System Bus Extender - Driver Group SafeBootMin: vmms - Service SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] Base - Driver Group SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group SafeBootNet:[b]64bit:[/b] File system - Driver Group SafeBootNet:[b]64bit:[/b] Filter - Driver Group SafeBootNet:[b]64bit:[/b] HelpSvc - Service SafeBootNet:[b]64bit:[/b] Messenger - Service SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group SafeBootNet:[b]64bit:[/b] Network - Driver Group SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group SafeBootNet:[b]64bit:[/b] rdsessmgr - Service SafeBootNet:[b]64bit:[/b] sacsvr - Service SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group SafeBootNet:[b]64bit:[/b] TDI - Driver Group SafeBootNet:[b]64bit:[/b] vmms - Service SafeBootNet:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: HelpSvc - Service SafeBootNet: Messenger - Service SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Primary disk - Driver Group SafeBootNet: rdsessmgr - Service SafeBootNet: sacsvr - Service SafeBootNet: SCSI Class - Driver Group SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TDI - Driver Group SafeBootNet: vmms - Service SafeBootNet: WudfUsbccidDriver - Driver SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices [color=#E56717]========== Files/Folders - Created Within 60 Days ==========[/color] [2010-12-06 17:39:58 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys [2010-12-06 17:39:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware [2010-12-06 12:49:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox [2010-12-06 12:26:19 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\Malwarebytes [2010-12-06 12:26:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2010-12-06 12:26:08 | 000,024,152 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys [2010-12-02 21:58:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AWS [2010-12-02 21:58:29 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\Win7codecs [2010-11-29 08:38:59 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\Biblioteki [2010-11-17 06:37:16 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\Google [2010-11-17 06:37:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google [2010-11-17 06:36:55 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype [2010-11-17 06:36:54 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\Skype [2010-11-17 06:36:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype [2010-11-14 14:21:19 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\Documents\NHL09 [2010-11-11 14:12:53 | 000,000,000 | ---D | C] -- C:\Program Files\Przyspiesz Komputer [2010-11-11 14:12:36 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\OpenCandy [2010-11-11 14:12:34 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\OpenCandy [2010-11-11 14:12:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Veoh Networks [2010-11-07 20:13:02 | 001,196,544 | ---- | C] (MPC-HC Team) -- C:\Windows\SysWow64\VSFilter.dll [2010-11-07 08:16:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun [2010-11-07 08:16:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java [2010-11-07 08:16:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java [2010-11-07 07:03:12 | 000,000,000 | ---D | C] -- C:\ProgramData\eMule [2010-11-07 07:02:29 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\eMule [2010-11-07 07:02:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\eMule [2010-10-31 15:54:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Electronic Arts [2010-10-31 10:04:44 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\Documents\FIFA 11 [2010-10-31 10:00:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Electronic Arts [2010-10-31 10:00:10 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\Leadertech [2010-10-30 14:08:16 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\DAEMON Tools Images [2010-10-30 11:24:50 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\NSeries [2010-10-30 11:23:25 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\Documents\NokiaLifeblogData [2010-10-30 11:02:56 | 000,000,000 | ---D | C] -- C:\ProgramData\PC Suite [2010-10-30 11:02:40 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\Nokia [2010-10-30 11:01:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\PCSuite [2010-10-30 11:00:49 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\PC Suite [2010-10-30 11:00:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PC Connectivity Solution [2010-10-30 11:00:23 | 000,066,560 | ---- | C] (Nokia) -- C:\Windows\SysNative\nmwcdclsx64.dll [2010-10-30 11:00:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nokia [2010-10-29 19:34:20 | 000,000,000 | ---D | C] -- C:\ProgramData\OpenFM [2010-10-29 19:34:19 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\OpenFM [2010-10-23 04:48:02 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\Desktop\Nowy folder [2010-10-22 21:25:04 | 000,000,000 | ---D | C] -- C:\ProgramData\PopCap Games [2010-10-22 18:12:15 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\Adobe [2010-10-22 18:11:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe [2010-10-22 18:11:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe [2010-10-22 18:11:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe [2010-10-22 17:57:03 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\URSoft [2010-10-22 17:57:03 | 000,000,000 | ---D | C] -- C:\ProgramData\TEMP [2010-10-22 17:56:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Your Uninstaller 2010 [2010-10-21 22:16:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Gadu-Gadu 10 [2010-10-21 19:12:50 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\Softland [2010-10-21 19:12:45 | 000,000,000 | ---D | C] -- C:\Program Files\Softland [2010-10-21 18:34:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\GSC World Publishing [2010-10-20 20:42:10 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\Documents\My Games [2010-10-20 20:17:39 | 000,178,800 | ---- | C] (Sony DADC Austria AG.) -- C:\Windows\SysWow64\CmdLineExt_x64.dll [2010-10-20 20:13:28 | 000,000,000 | ---D | C] -- C:\GRY [2010-10-20 19:28:07 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\Documents\Alcohol 120% [2010-10-20 19:16:48 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\NVIDIA [2010-10-20 19:16:48 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\Documents\DVDFab [2010-10-20 19:15:29 | 000,082,816 | ---- | C] (VSO Software) -- C:\Windows\SysNative\drivers\pcouffin.sys [2010-10-20 19:15:29 | 000,082,816 | ---- | C] (VSO Software) -- C:\Users\Ryszard\AppData\Roaming\pcouffin.sys [2010-10-20 19:15:28 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\Vso [2010-10-20 19:15:28 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\Documents\PcSetup [2010-10-20 19:15:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DVDFab 8 [2010-10-20 19:02:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Alcohol Soft [2010-10-20 18:54:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\RocketDock [2010-10-19 19:31:40 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\Documents\The Witcher [2010-10-19 19:31:40 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\The Witcher [2010-10-18 19:43:42 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\Microsoft Games [2010-10-18 13:51:50 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\Diagnostics [2010-10-17 11:25:07 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\SKIDROW [2010-10-17 11:16:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SQUARE ENIX - Eidos Interactive [2010-10-17 04:36:12 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\NFS Underground 2 [2010-10-16 20:38:50 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\Midway [2010-10-16 20:07:39 | 000,000,000 | RH-D | C] -- C:\Users\Ryszard\AppData\Roaming\SecuROM [2010-10-16 19:44:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Midway Home Entertainment [2010-10-16 19:44:24 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information [2010-10-16 19:43:49 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\InstallShield [2010-10-16 18:00:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\KONAMI [2010-10-16 17:42:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Protexis [2010-10-16 17:42:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Corel [2010-10-16 17:42:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Corel [2010-10-16 17:35:10 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\appmgmt [2010-10-16 17:24:16 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\Corel [2010-10-16 17:24:12 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\Corel [2010-10-16 17:23:55 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\Apple Computer [2010-10-16 17:22:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Apple [2010-10-16 17:22:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QuickTime [2010-10-16 17:22:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer [2010-10-16 17:22:09 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\Apple [2010-10-16 17:22:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update [2010-10-16 17:22:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple [2010-10-16 17:21:44 | 000,014,112 | ---- | C] (InterVideo) -- C:\Windows\SysNative\drivers\regi.sys [2010-10-16 16:06:43 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\Nero [2010-10-16 15:29:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\K-Lite Codec Pack [2010-10-16 15:12:15 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\ACD Systems [2010-10-16 15:12:15 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\ACD Systems [2010-10-16 15:10:12 | 000,000,000 | ---D | C] -- C:\Program Files\ACD Systems [2010-10-16 15:08:41 | 000,000,000 | ---D | C] -- C:\ProgramData\ACD Systems [2010-10-16 15:08:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\ACD Systems [2010-10-16 15:08:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ACD Systems [2010-10-16 15:04:00 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\Downloaded Installations [2010-10-16 14:58:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Works [2010-10-16 14:58:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio [2010-10-16 14:58:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER [2010-10-16 14:58:13 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH [2010-10-16 14:58:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET [2010-10-16 14:56:40 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office [2010-10-16 14:56:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio 8 [2010-10-16 14:56:01 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\Microsoft Help [2010-10-16 14:55:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office [2010-10-16 14:55:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help [2010-10-16 14:55:19 | 000,000,000 | RH-D | C] -- C:\MSOCache [2010-10-16 11:18:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\jv16 PowerTools 2009 [2010-10-16 11:03:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ALLPlayer_Portable [2010-10-16 10:40:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Win7codecs [2010-10-16 10:40:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Win7codecs [2010-10-16 10:31:57 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\InterVideo [2010-10-16 10:31:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InterVideo [2010-10-16 10:31:07 | 000,000,000 | ---D | C] -- C:\Program Files\InterActual [2010-10-16 10:30:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Creative [2010-10-16 09:37:12 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\cache [2010-10-16 09:32:14 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\Ahead [2010-10-16 09:30:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Nero [2010-10-16 09:30:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nero [2010-10-16 09:30:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Nero [2010-10-16 09:18:40 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\WinRAR [2010-10-16 09:18:27 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR [2010-10-16 07:30:05 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\Documents\Webshots Data [2010-10-16 07:30:04 | 001,957,888 | ---- | C] (Webshots.com) -- C:\Windows\webshots.scr [2010-10-16 07:30:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Webshots [2010-10-16 07:07:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DAEMON Tools Lite [2010-10-16 07:06:37 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\DAEMON Tools Lite [2010-10-16 07:06:34 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite [2010-10-16 06:38:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation [2010-10-16 06:38:40 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation [2010-10-16 06:38:31 | 000,000,000 | ---D | C] -- C:\Program Files\NVIDIA Corporation [2010-10-16 06:37:51 | 000,065,128 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll [2010-10-16 06:37:51 | 000,056,936 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll [2010-10-16 06:37:41 | 000,000,000 | ---D | C] -- C:\NVIDIA [2010-10-16 06:13:37 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\Gadu-Gadu 10 [2010-10-16 06:13:34 | 000,000,000 | -HSD | C] -- C:\Windows\Installer [2010-10-16 06:13:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Gadu-Gadu 10 [2010-10-16 06:01:08 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\directx [2010-10-16 05:45:33 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\Documents\AnyDVDHD [2010-10-16 05:42:08 | 000,000,000 | ---D | C] -- C:\ProgramData\SlySoft [2010-10-16 05:40:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SlySoft [2010-10-16 05:38:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\7-Zip [2010-10-16 02:22:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\uTorrent [2010-10-16 02:21:37 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\uTorrent [2010-10-16 02:20:50 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\Macromedia [2010-10-16 02:20:50 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\Adobe [2010-10-16 02:20:36 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed [2010-10-16 01:56:08 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\ElevatedDiagnostics [2010-10-16 01:51:41 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\Apps [2010-10-16 01:44:08 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\Mozilla [2010-10-16 01:44:08 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\Mozilla [2010-10-16 01:32:42 | 000,467,512 | ---- | C] (Eset ) -- C:\Windows\SysNative\imon.dll [2010-10-16 01:32:42 | 000,298,104 | ---- | C] (Eset ) -- C:\Windows\SysWow64\imon.dll [2010-10-16 01:32:42 | 000,146,704 | ---- | C] (Eset ) -- C:\Windows\SysNative\drivers\amon.sys [2010-10-16 01:31:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Eset [2010-10-16 01:26:31 | 000,000,000 | ---D | C] -- C:\Program Files\DIFX [2010-10-16 01:25:29 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA [2010-10-16 01:11:21 | 000,000,000 | ---D | C] -- C:\Windows\Panther [2010-10-16 00:57:29 | 000,513,536 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSX64.dll [2010-10-16 00:57:29 | 000,211,376 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSH64.dll [2010-10-16 00:57:29 | 000,193,536 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSHP64.dll [2010-10-16 00:57:29 | 000,150,528 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSWOW64.dll [2010-10-16 00:57:25 | 006,430,208 | ---- | C] (Realtek Semiconductor) -- C:\Windows\RAVCpl64.exe [2010-10-16 00:57:25 | 000,245,248 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO20.dll [2010-10-16 00:57:25 | 000,160,768 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\Windows\SysNative\FMAPO64.dll [2010-10-16 00:57:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield [2010-10-16 00:44:34 | 000,493,440 | ---- | C] (ZyDAS Technology Corporation) -- C:\Windows\SysNative\drivers\WlanBZ64.sys [2010-10-16 00:20:32 | 000,000,000 | R--D | C] -- C:\Users\Ryszard\Searches [2010-10-16 00:20:23 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\Identities [2010-10-16 00:20:21 | 000,000,000 | R--D | C] -- C:\Users\Ryszard\Contacts [2010-10-16 00:20:19 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\VirtualStore [2010-10-16 00:19:59 | 000,000,000 | --SD | C] -- C:\Users\Ryszard\AppData\Roaming\Microsoft [2010-10-16 00:19:59 | 000,000,000 | R--D | C] -- C:\Users\Ryszard\Videos [2010-10-16 00:19:59 | 000,000,000 | R--D | C] -- C:\Users\Ryszard\Saved Games [2010-10-16 00:19:59 | 000,000,000 | R--D | C] -- C:\Users\Ryszard\Pictures [2010-10-16 00:19:59 | 000,000,000 | R--D | C] -- C:\Users\Ryszard\Music [2010-10-16 00:19:59 | 000,000,000 | R--D | C] -- C:\Users\Ryszard\Links [2010-10-16 00:19:59 | 000,000,000 | R--D | C] -- C:\Users\Ryszard\Favorites [2010-10-16 00:19:59 | 000,000,000 | R--D | C] -- C:\Users\Ryszard\Downloads [2010-10-16 00:19:59 | 000,000,000 | R--D | C] -- C:\Users\Ryszard\Documents [2010-10-16 00:19:59 | 000,000,000 | R--D | C] -- C:\Users\Ryszard\Desktop [2010-10-16 00:19:59 | 000,000,000 | -HSD | C] -- C:\Users\Ryszard\Ustawienia lokalne [2010-10-16 00:19:59 | 000,000,000 | -HSD | C] -- C:\Users\Ryszard\AppData\Local\Temporary Internet Files [2010-10-16 00:19:59 | 000,000,000 | -HSD | C] -- C:\Users\Ryszard\Szablony [2010-10-16 00:19:59 | 000,000,000 | -HSD | C] -- C:\Users\Ryszard\SendTo [2010-10-16 00:19:59 | 000,000,000 | -HSD | C] -- C:\Users\Ryszard\Recent [2010-10-16 00:19:59 | 000,000,000 | -HSD | C] -- C:\Users\Ryszard\PrintHood [2010-10-16 00:19:59 | 000,000,000 | -HSD | C] -- C:\Users\Ryszard\NetHood [2010-10-16 00:19:59 | 000,000,000 | -HSD | C] -- C:\Users\Ryszard\Documents\Moje wideo [2010-10-16 00:19:59 | 000,000,000 | -HSD | C] -- C:\Users\Ryszard\Documents\Moje obrazy [2010-10-16 00:19:59 | 000,000,000 | -HSD | C] -- C:\Users\Ryszard\Moje dokumenty [2010-10-16 00:19:59 | 000,000,000 | -HSD | C] -- C:\Users\Ryszard\Documents\Moja muzyka [2010-10-16 00:19:59 | 000,000,000 | -HSD | C] -- C:\Users\Ryszard\Menu Start [2010-10-16 00:19:59 | 000,000,000 | -HSD | C] -- C:\Users\Ryszard\AppData\Local\Historia [2010-10-16 00:19:59 | 000,000,000 | -HSD | C] -- C:\Users\Ryszard\Dane aplikacji [2010-10-16 00:19:59 | 000,000,000 | -HSD | C] -- C:\Users\Ryszard\AppData\Local\Dane aplikacji [2010-10-16 00:19:59 | 000,000,000 | -HSD | C] -- C:\Users\Ryszard\Cookies [2010-10-16 00:19:59 | 000,000,000 | -H-D | C] -- C:\Users\Ryszard\AppData [2010-10-16 00:19:59 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\Temp [2010-10-16 00:19:59 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\Microsoft [2010-10-16 00:19:59 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\Media Center Programs [2010-10-16 00:19:51 | 000,000,000 | -HSD | C] -- C:\Recovery [2010-10-16 00:19:50 | 000,000,000 | -HSD | C] -- C:\ProgramData\Ulubione [2010-10-16 00:19:50 | 000,000,000 | -HSD | C] -- C:\ProgramData\Szablony [2010-10-16 00:19:50 | 000,000,000 | -HSD | C] -- C:\ProgramData\Pulpit [2010-10-16 00:19:50 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moje wideo [2010-10-16 00:19:50 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moje obrazy [2010-10-16 00:19:50 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moja muzyka [2010-10-16 00:19:50 | 000,000,000 | -HSD | C] -- C:\ProgramData\Menu Start [2010-10-16 00:19:50 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumenty [2010-10-16 00:19:50 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dane aplikacji [2010-10-16 00:15:10 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution [2010-10-16 00:12:26 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch [2010-10-16 00:12:10 | 000,000,000 | -HSD | C] -- C:\System Volume Information [2010-02-03 23:00:00 | 000,139,264 | ---- | C] ( ) -- C:\Windows\sipr3260.dll [color=#E56717]========== Files - Modified Within 60 Days ==========[/color] [2010-12-06 18:49:20 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempzr3196.html [2010-12-06 18:49:20 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempFJ3196.html [2010-12-06 18:48:29 | 000,014,192 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2010-12-06 18:48:29 | 000,014,192 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2010-12-06 18:47:00 | 000,001,050 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2010-12-06 18:45:46 | 001,523,412 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2010-12-06 18:45:46 | 000,687,590 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2010-12-06 18:45:46 | 000,606,992 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2010-12-06 18:45:46 | 000,131,176 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2010-12-06 18:45:46 | 000,103,370 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2010-12-06 18:41:22 | 000,001,046 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2010-12-06 18:41:14 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010-12-06 18:41:09 | 2414,731,264 | -HS- | M] () -- C:\hiberfil.sys [2010-12-06 17:43:42 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TemphaS336.html [2010-12-06 17:43:42 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempfCv336.html [2010-12-06 17:39:58 | 000,001,113 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2010-12-06 12:50:00 | 000,001,943 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2010-12-06 12:16:44 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TemppI2012.html [2010-12-06 12:16:44 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempES2012.html [2010-12-05 21:24:19 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempfy4000.html [2010-12-05 21:24:19 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempdr4000.html [2010-12-05 20:19:31 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempGo3308.html [2010-12-05 20:19:31 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempph3308.html [2010-12-05 15:56:23 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempsf3868.html [2010-12-05 15:56:23 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempWe3868.html [2010-12-05 14:41:16 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TemprG3120.html [2010-12-05 14:41:16 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempQD3120.html [2010-12-05 11:19:46 | 000,007,602 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Resmon.ResmonCfg [2010-12-05 11:18:16 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempST3884.html [2010-12-05 10:45:53 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempev3844.html [2010-12-04 22:22:52 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempSk3812.html [2010-12-04 18:49:20 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Temppnr344.html [2010-12-03 23:25:10 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempUi2820.html [2010-12-03 19:18:06 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempvw2172.html [2010-12-02 20:03:10 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempgC1096.html [2010-12-02 14:35:01 | 007,793,152 | RHS- | M] () -- C:\ProgramData\GProton.exe [2010-12-02 13:49:16 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempdd4088.html [2010-12-02 05:53:34 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempTU3396.html [2010-12-01 17:59:20 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempEe3824.html [2010-11-30 15:38:30 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempcQ2816.html [2010-11-30 13:22:13 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempDTe440.html [2010-11-30 13:22:13 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempxBP440.html [2010-11-29 17:42:18 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys [2010-11-29 17:42:06 | 000,024,152 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys [2010-11-29 16:11:29 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempzd3056.html [2010-11-28 20:49:06 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempSW3804.html [2010-11-28 19:52:01 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempCpI340.html [2010-11-28 17:53:22 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempaH3628.html [2010-11-28 12:10:26 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempSZ1816.html [2010-11-28 12:10:26 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempwO1816.html [2010-11-27 19:55:27 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempPD2696.html [2010-11-27 16:32:53 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempor2716.html [2010-11-27 11:15:54 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempHp3200.html [2010-11-27 06:26:08 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempVS1968.html [2010-11-26 22:27:42 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempIM2504.html [2010-11-26 22:27:42 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempJu2504.html [2010-11-26 18:36:25 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TemprL3628.html [2010-11-26 18:36:25 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempsd3628.html [2010-11-26 16:27:20 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempra3256.html [2010-11-25 18:42:10 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempit1604.html [2010-11-24 19:21:03 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempye3512.html [2010-11-24 17:52:10 | 000,000,283 | ---- | M] () -- C:\Users\Ryszard\Documents\ax_files.xml [2010-11-23 19:11:53 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempHv1124.html [2010-11-22 21:03:29 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempZf4008.html [2010-11-22 16:55:10 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempUF3096.html [2010-11-22 14:19:28 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempKUo800.html [2010-11-21 17:29:28 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempxR3872.html [2010-11-21 17:29:28 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempww3872.html [2010-11-21 03:44:49 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempJp3168.html [2010-11-21 03:44:49 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempgI3168.html [2010-11-20 21:59:57 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempEE3756.html [2010-11-20 18:47:26 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempJp3844.html [2010-11-19 21:54:12 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempeO2632.html [2010-11-19 16:11:20 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempiT4084.html [2010-11-19 15:35:37 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempQU2268.html [2010-11-19 15:35:37 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempMP2268.html [2010-11-18 23:08:52 | 000,002,776 | -HS- | M] () -- C:\ProgramData\KGyGaAvL.sys [2010-11-18 22:59:17 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempiT3132.html [2010-11-17 16:58:16 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempac2268.html [2010-11-17 06:36:58 | 000,002,517 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk [2010-11-16 20:43:25 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempgN1036.html [2010-11-16 20:00:12 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempON3396.html [2010-11-16 18:14:56 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempHo3772.html [2010-11-16 15:06:40 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempex3764.html [2010-11-15 22:21:29 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempXz1908.html [2010-11-15 20:02:45 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempDku900.html [2010-11-15 17:18:58 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempqo2608.html [2010-11-15 17:18:58 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Temphz2608.html [2010-11-14 20:59:07 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempuT1608.html [2010-11-14 20:18:07 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempbR1204.html [2010-11-14 19:32:47 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempdo4040.html [2010-11-14 16:35:57 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempHC3412.html [2010-11-14 10:43:32 | 000,001,745 | ---- | M] () -- C:\Users\Public\Desktop\NHL® 09.lnk [2010-11-14 07:35:17 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempQC1004.html [2010-11-14 04:48:52 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempDs2052.html [2010-11-13 16:35:12 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempeA1044.html [2010-11-13 10:38:02 | 000,000,916 | ---- | M] () -- C:\Users\Ryszard\Desktop\BigRaceUSA — skrót.lnk [2010-11-12 17:14:24 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempMcb444.html [2010-11-12 13:43:16 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempOp3892.html [2010-11-12 13:43:16 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Temped3892.html [2010-11-11 22:00:20 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempurz780.html [2010-11-11 17:50:06 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempui3352.html [2010-11-11 14:51:04 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempit3916.html [2010-11-11 14:51:04 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempYQ3916.html [2010-11-11 13:31:35 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempCq3844.html [2010-11-11 13:11:59 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempLb3332.html [2010-11-11 11:11:03 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempqD3404.html [2010-11-11 11:11:03 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempUJ3404.html [2010-11-11 09:58:45 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempQD3348.html [2010-11-11 09:58:45 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempSM3348.html [2010-11-11 09:47:46 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempOO2276.html [2010-11-11 09:47:46 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempOq2276.html [2010-11-10 14:21:54 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempwA3704.html [2010-11-10 05:05:32 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempPo3020.html [2010-11-09 21:34:57 | 000,005,632 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-11-09 20:36:38 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempzs3392.html [2010-11-09 17:59:39 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempfCz312.html [2010-11-08 18:32:27 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempavw444.html [2010-11-08 16:48:27 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempOh3388.html [2010-11-08 05:13:55 | 000,054,551 | ---- | M] () -- C:\Users\Ryszard\Desktop\Naprawa komputerów.docx [2010-11-07 20:13:02 | 001,196,544 | ---- | M] (MPC-HC Team) -- C:\Windows\SysWow64\VSFilter.dll [2010-11-07 17:26:51 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempjY3424.html [2010-11-07 12:42:25 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempqq3368.html [2010-11-07 07:02:39 | 000,000,997 | ---- | M] () -- C:\Users\Public\Desktop\eMule.lnk [2010-11-06 21:19:55 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempIQ4068.html [2010-11-06 16:20:37 | 000,001,790 | ---- | M] () -- C:\Users\Public\Desktop\LMA Manager 2007.lnk [2010-11-06 12:11:18 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempIt1884.html [2010-11-06 07:21:31 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempie3432.html [2010-11-06 06:26:36 | 000,000,778 | ---- | M] () -- C:\Users\Public\Desktop\Zuma Deluxe.lnk [2010-11-06 00:16:32 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempoF2224.html [2010-11-05 19:27:59 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempJW3096.html [2010-11-04 23:04:32 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempvv3572.html [2010-11-04 21:31:39 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempWc3136.html [2010-11-04 18:21:30 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempOd1532.html [2010-11-04 17:40:19 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempnX1536.html [2010-11-04 17:28:45 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempKx2736.html [2010-11-04 17:28:45 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempkW2736.html [2010-11-03 22:01:42 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempQj3444.html [2010-11-03 18:47:21 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempyB4092.html [2010-11-03 15:38:34 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempsQ3180.html [2010-11-03 05:30:54 | 000,049,152 | ---- | M] () -- C:\Users\Ryszard\Desktop\Kopia CURRICULUM VITAE-Ryszard.doc [2010-11-02 19:30:10 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempQo2056.html [2010-11-02 16:33:11 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TemplL3716.html [2010-11-01 21:48:53 | 000,000,546 | ---- | M] () -- C:\Users\Ryszard\Documents\MyPlaylist_001.cplist [2010-11-01 11:47:24 | 000,000,780 | ---- | M] () -- C:\Users\Ryszard\Desktop\Far Cry® 2.lnk [2010-11-01 10:47:58 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempzy4036.html [2010-10-31 17:59:52 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempVz3504.html [2010-10-31 17:59:52 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempXT3504.html [2010-10-31 15:52:21 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempcz1780.html [2010-10-31 15:52:21 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempBT1780.html [2010-10-31 12:28:48 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempbo3724.html [2010-10-31 11:25:38 | 000,000,522 | ---- | M] () -- C:\Users\Ryszard\Desktop\FIFA 11 — skrót.lnk [2010-10-31 10:00:43 | 000,001,135 | ---- | M] () -- C:\Users\Public\Desktop\EA Download Manager.lnk [2010-10-30 18:31:28 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempDl1724.html [2010-10-30 12:54:44 | 000,043,520 | ---- | M] () -- C:\Windows\SysWow64\ff_acm.acm [2010-10-30 11:22:48 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_PCCSWpdDriver_01_05_00.Wdf [2010-10-30 11:16:50 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempoDf356.html [2010-10-30 11:16:50 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempTmo356.html [2010-10-30 05:59:57 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempTu3260.html [2010-10-29 22:56:51 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempVr3212.html [2010-10-29 19:35:43 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempEZ1552.html [2010-10-28 20:46:06 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempNO3196.html [2010-10-27 10:27:45 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempbo3756.html [2010-10-26 21:53:07 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempQr3924.html [2010-10-26 21:53:07 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempVq3924.html [2010-10-26 17:09:51 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempOs2728.html [2010-10-24 19:25:57 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempxh1392.html [2010-10-24 17:03:47 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempND3796.html [2010-10-24 16:59:17 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempdA4028.html [2010-10-24 16:59:17 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempgi4028.html [2010-10-24 10:37:37 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempTJw912.html [2010-10-23 20:07:21 | 000,001,416 | ---- | M] () -- C:\Users\Ryszard\Desktop\TLR — skrót.lnk [2010-10-23 19:47:23 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempxK3128.html [2010-10-23 10:41:36 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempTX4080.html [2010-10-22 21:25:07 | 000,001,001 | ---- | M] () -- C:\Users\Public\Desktop\Peggle Nights Deluxe.lnk [2010-10-22 19:42:42 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempPy1804.html [2010-10-22 17:57:02 | 000,001,090 | ---- | M] () -- C:\Users\Ryszard\Desktop\Your Unin-staller!.lnk [2010-10-21 22:17:33 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempbH2636.html [2010-10-20 20:17:39 | 000,178,800 | ---- | M] (Sony DADC Austria AG.) -- C:\Windows\SysWow64\CmdLineExt_x64.dll [2010-10-20 19:15:29 | 000,099,384 | ---- | M] () -- C:\Users\Ryszard\AppData\Roaming\inst.exe [2010-10-20 19:15:29 | 000,082,816 | ---- | M] (VSO Software) -- C:\Windows\SysNative\drivers\pcouffin.sys [2010-10-20 19:15:29 | 000,082,816 | ---- | M] (VSO Software) -- C:\Users\Ryszard\AppData\Roaming\pcouffin.sys [2010-10-20 19:15:29 | 000,007,859 | ---- | M] () -- C:\Users\Ryszard\AppData\Roaming\pcouffin.cat [2010-10-20 19:15:29 | 000,001,167 | ---- | M] () -- C:\Users\Ryszard\AppData\Roaming\pcouffin.inf [2010-10-20 18:58:55 | 000,503,352 | ---- | M] () -- C:\Windows\SysNative\drivers\sptd.sys [2010-10-19 19:31:17 | 000,314,016 | ---- | M] () -- C:\Windows\SysNative\drivers\atksgt.sys [2010-10-19 19:31:17 | 000,043,680 | ---- | M] () -- C:\Windows\SysNative\drivers\lirsgt.sys [2010-10-17 04:09:16 | 000,421,296 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2010-10-16 20:57:12 | 000,001,460 | ---- | M] () -- C:\Users\Ryszard\Desktop\BlackSite — skrót.lnk [2010-10-16 18:01:44 | 000,001,350 | ---- | M] () -- C:\Users\Ryszard\Desktop\yugo_pc — skrót.lnk [2010-10-16 17:43:35 | 000,000,088 | RHS- | M] () -- C:\ProgramData\72EF225DC8.sys [2010-10-16 17:43:23 | 000,000,842 | ---- | M] () -- C:\Users\Public\Desktop\Corel WinDVD 2010.lnk [2010-10-16 17:21:56 | 000,000,040 | -H-- | M] () -- C:\Windows\SysNative\ivireg.ivr [2010-10-16 11:18:57 | 000,000,023 | -HS- | M] () -- C:\Windows\SysNative\edacded0.dat [2010-10-16 11:18:57 | 000,000,023 | ---- | M] () -- C:\Windows\SysNative\bcdadac7.xml [2010-10-16 11:05:33 | 000,001,553 | ---- | M] () -- C:\Users\Ryszard\Desktop\ALLPlayer — skrót.lnk [2010-10-16 09:43:29 | 003,932,214 | ---- | M] () -- C:\Windows\Webshots for Ryszard.bmp [2010-10-16 09:31:16 | 000,000,026 | ---- | M] () -- C:\Windows\Irremote.ini [2010-10-16 06:13:59 | 000,001,032 | ---- | M] () -- C:\Users\Public\Desktop\OpenFM.lnk [2010-10-16 06:13:59 | 000,001,003 | ---- | M] () -- C:\Users\Public\Desktop\Gadu-Gadu 10.lnk [2010-10-16 05:45:50 | 000,000,040 | -HS- | M] () -- C:\ProgramData\.zreglib [2010-10-16 02:22:12 | 000,000,947 | ---- | M] () -- C:\Users\Public\Desktop\µTorrent.lnk [2010-10-16 01:31:46 | 000,467,512 | ---- | M] (Eset ) -- C:\Windows\SysNative\imon.dll [2010-10-16 01:31:46 | 000,298,104 | ---- | M] (Eset ) -- C:\Windows\SysWow64\imon.dll [2010-10-16 01:31:46 | 000,146,704 | ---- | M] (Eset ) -- C:\Windows\SysNative\drivers\amon.sys [2010-10-16 01:12:38 | 000,000,010 | ---- | M] () -- C:\Windows\GSetup.ini [2010-10-16 00:23:32 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf [2010-10-16 00:16:02 | 000,067,908 | ---- | M] () -- C:\Windows\SysWow64\license.rtf [2010-10-16 00:16:02 | 000,067,908 | ---- | M] () -- C:\Windows\SysNative\license.rtf [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010-12-06 18:49:20 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempzr3196.html [2010-12-06 18:49:20 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempFJ3196.html [2010-12-06 17:39:58 | 000,001,113 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2010-12-06 17:10:46 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TemphaS336.html [2010-12-06 17:10:46 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempfCv336.html [2010-12-06 12:50:00 | 000,001,943 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2010-12-06 11:36:31 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TemppI2012.html [2010-12-06 11:36:31 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempES2012.html [2010-12-05 21:15:52 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempfy4000.html [2010-12-05 21:15:52 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempdr4000.html [2010-12-05 20:11:06 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempGo3308.html [2010-12-05 20:11:06 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempph3308.html [2010-12-05 14:47:09 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempsf3868.html [2010-12-05 14:47:09 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempWe3868.html [2010-12-05 14:20:19 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TemprG3120.html [2010-12-05 14:20:19 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempQD3120.html [2010-12-05 11:19:46 | 000,007,602 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Resmon.ResmonCfg [2010-12-05 11:12:01 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempST3884.html [2010-12-05 10:36:07 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempev3844.html [2010-12-04 21:55:57 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempSk3812.html [2010-12-04 13:33:21 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Temppnr344.html [2010-12-03 22:28:21 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempUi2820.html [2010-12-03 18:28:10 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempvw2172.html [2010-12-02 16:00:07 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempgC1096.html [2010-12-02 14:35:05 | 007,793,152 | RHS- | C] () -- C:\ProgramData\GProton.exe [2010-12-02 13:37:23 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempdd4088.html [2010-12-01 23:15:48 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempTU3396.html [2010-12-01 13:43:13 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempEe3824.html [2010-11-30 15:31:52 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempcQ2816.html [2010-11-30 13:19:15 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempDTe440.html [2010-11-30 13:19:15 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempxBP440.html [2010-11-29 14:58:24 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempzd3056.html [2010-11-28 20:26:40 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempSW3804.html [2010-11-28 19:09:13 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempCpI340.html [2010-11-28 12:32:58 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempaH3628.html [2010-11-28 08:32:55 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempSZ1816.html [2010-11-28 08:32:55 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempwO1816.html [2010-11-27 17:54:21 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempPD2696.html [2010-11-27 13:30:41 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempor2716.html [2010-11-27 11:00:30 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempHp3200.html [2010-11-27 06:21:28 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempVS1968.html [2010-11-26 19:22:48 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempIM2504.html [2010-11-26 19:22:48 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempJu2504.html [2010-11-26 18:20:26 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TemprL3628.html [2010-11-26 18:20:26 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempsd3628.html [2010-11-26 16:23:09 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempra3256.html [2010-11-25 18:39:27 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempit1604.html [2010-11-24 19:11:34 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempye3512.html [2010-11-23 17:43:26 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempHv1124.html [2010-11-22 19:35:32 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempZf4008.html [2010-11-22 16:48:06 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempUF3096.html [2010-11-22 14:17:25 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempKUo800.html [2010-11-21 11:45:14 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempxR3872.html [2010-11-21 11:45:14 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempww3872.html [2010-11-20 23:20:13 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempJp3168.html [2010-11-20 23:20:13 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempgI3168.html [2010-11-20 21:49:05 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempEE3756.html [2010-11-20 15:45:07 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempJp3844.html [2010-11-19 18:10:16 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempeO2632.html [2010-11-19 15:40:45 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempiT4084.html [2010-11-19 15:29:34 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempQU2268.html [2010-11-19 15:29:34 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempMP2268.html [2010-11-18 22:58:55 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempiT3132.html [2010-11-17 16:19:49 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempac2268.html [2010-11-17 06:37:21 | 000,001,050 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2010-11-17 06:37:20 | 000,001,046 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2010-11-17 06:36:58 | 000,002,517 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk [2010-11-16 20:34:16 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempgN1036.html [2010-11-16 18:54:06 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempON3396.html [2010-11-16 16:13:10 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempHo3772.html [2010-11-16 14:56:53 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempex3764.html [2010-11-15 21:58:19 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempXz1908.html [2010-11-15 19:50:49 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempDku900.html [2010-11-15 16:23:20 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempqo2608.html [2010-11-15 16:23:20 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Temphz2608.html [2010-11-14 20:49:30 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempuT1608.html [2010-11-14 19:49:44 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempbR1204.html [2010-11-14 18:00:07 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempdo4040.html [2010-11-14 15:19:45 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempHC3412.html [2010-11-14 10:43:32 | 000,001,745 | ---- | C] () -- C:\Users\Public\Desktop\NHL® 09.lnk [2010-11-14 07:34:55 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempQC1004.html [2010-11-14 04:19:51 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempDs2052.html [2010-11-13 14:35:36 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempeA1044.html [2010-11-13 10:38:02 | 000,000,916 | ---- | C] () -- C:\Users\Ryszard\Desktop\BigRaceUSA — skrót.lnk [2010-11-12 16:24:50 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempMcb444.html [2010-11-12 13:34:18 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempOp3892.html [2010-11-12 13:34:18 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Temped3892.html [2010-11-11 21:06:12 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempurz780.html [2010-11-11 17:36:46 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempui3352.html [2010-11-11 14:06:31 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempit3916.html [2010-11-11 14:06:31 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempYQ3916.html [2010-11-11 13:24:42 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempCq3844.html [2010-11-11 12:06:33 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempLb3332.html [2010-11-11 10:01:19 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempqD3404.html [2010-11-11 10:01:19 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempUJ3404.html [2010-11-11 09:53:42 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempQD3348.html [2010-11-11 09:53:42 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempSM3348.html [2010-11-11 07:19:14 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempOO2276.html [2010-11-11 07:19:14 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempOq2276.html [2010-11-10 13:40:10 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempwA3704.html [2010-11-10 05:05:14 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempPo3020.html [2010-11-09 20:31:47 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempzs3392.html [2010-11-09 17:00:33 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempfCz312.html [2010-11-08 18:27:18 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempavw444.html [2010-11-08 15:35:13 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempOh3388.html [2010-11-07 17:26:16 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempjY3424.html [2010-11-07 12:36:11 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempqq3368.html [2010-11-07 07:02:39 | 000,000,997 | ---- | C] () -- C:\Users\Public\Desktop\eMule.lnk [2010-11-06 17:41:37 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempIQ4068.html [2010-11-06 16:20:37 | 000,001,790 | ---- | C] () -- C:\Users\Public\Desktop\LMA Manager 2007.lnk [2010-11-06 12:10:43 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempIt1884.html [2010-11-06 07:14:35 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempie3432.html [2010-11-06 06:26:36 | 000,000,778 | ---- | C] () -- C:\Users\Public\Desktop\Zuma Deluxe.lnk [2010-11-05 23:35:19 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempoF2224.html [2010-11-05 19:22:10 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempJW3096.html [2010-11-05 06:30:52 | 000,054,551 | ---- | C] () -- C:\Users\Ryszard\Desktop\Naprawa komputerów.docx [2010-11-04 22:27:56 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempvv3572.html [2010-11-04 21:24:24 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempWc3136.html [2010-11-04 17:58:14 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempOd1532.html [2010-11-04 17:31:07 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempnX1536.html [2010-11-04 17:16:43 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempKx2736.html [2010-11-04 17:16:43 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempkW2736.html [2010-11-03 19:47:36 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempQj3444.html [2010-11-03 18:40:59 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempyB4092.html [2010-11-03 15:12:25 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempsQ3180.html [2010-11-03 05:30:54 | 000,049,152 | ---- | C] () -- C:\Users\Ryszard\Desktop\Kopia CURRICULUM VITAE-Ryszard.doc [2010-11-02 19:29:01 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempQo2056.html [2010-11-02 15:55:42 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TemplL3716.html [2010-11-01 21:48:53 | 000,000,546 | ---- | C] () -- C:\Users\Ryszard\Documents\MyPlaylist_001.cplist [2010-11-01 11:47:24 | 000,000,780 | ---- | C] () -- C:\Users\Ryszard\Desktop\Far Cry® 2.lnk [2010-11-01 10:12:00 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempzy4036.html [2010-10-31 17:54:46 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempVz3504.html [2010-10-31 17:54:46 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempXT3504.html [2010-10-31 15:07:58 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempcz1780.html [2010-10-31 15:07:58 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempBT1780.html [2010-10-31 11:25:38 | 000,000,522 | ---- | C] () -- C:\Users\Ryszard\Desktop\FIFA 11 — skrót.lnk [2010-10-31 10:39:30 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempbo3724.html [2010-10-31 10:00:43 | 000,001,135 | ---- | C] () -- C:\Users\Public\Desktop\EA Download Manager.lnk [2010-10-30 14:21:12 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempDl1724.html [2010-10-30 12:54:44 | 000,043,520 | ---- | C] () -- C:\Windows\SysWow64\ff_acm.acm [2010-10-30 11:22:48 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_PCCSWpdDriver_01_05_00.Wdf [2010-10-30 09:52:50 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempoDf356.html [2010-10-30 09:52:50 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempTmo356.html [2010-10-30 05:11:03 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempTu3260.html [2010-10-29 22:33:53 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempVr3212.html [2010-10-29 19:23:34 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempEZ1552.html [2010-10-28 19:21:55 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempNO3196.html [2010-10-27 10:25:44 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempbo3756.html [2010-10-26 20:38:28 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempQr3924.html [2010-10-26 20:38:28 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempVq3924.html [2010-10-26 17:09:03 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempOs2728.html [2010-10-24 19:09:08 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempxh1392.html [2010-10-24 17:03:02 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempND3796.html [2010-10-24 16:59:17 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempdA4028.html [2010-10-24 16:59:17 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempgi4028.html [2010-10-24 10:29:22 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempTJw912.html [2010-10-23 20:07:21 | 000,001,416 | ---- | C] () -- C:\Users\Ryszard\Desktop\TLR — skrót.lnk [2010-10-23 19:41:53 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempxK3128.html [2010-10-23 08:00:59 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempTX4080.html [2010-10-22 21:25:07 | 000,001,001 | ---- | C] () -- C:\Users\Public\Desktop\Peggle Nights Deluxe.lnk [2010-10-22 19:08:25 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempPy1804.html [2010-10-22 17:57:02 | 000,001,090 | ---- | C] () -- C:\Users\Ryszard\Desktop\Your Unin-staller!.lnk [2010-10-21 22:16:24 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempbH2636.html [2010-10-20 19:15:58 | 000,000,034 | ---- | C] () -- C:\Users\Ryszard\AppData\Roaming\pcouffin.log [2010-10-20 19:15:29 | 000,099,384 | ---- | C] () -- C:\Users\Ryszard\AppData\Roaming\inst.exe [2010-10-20 19:15:29 | 000,007,859 | ---- | C] () -- C:\Users\Ryszard\AppData\Roaming\pcouffin.cat [2010-10-20 19:15:29 | 000,001,167 | ---- | C] () -- C:\Users\Ryszard\AppData\Roaming\pcouffin.inf [2010-10-20 19:12:33 | 000,000,283 | ---- | C] () -- C:\Users\Ryszard\Documents\ax_files.xml [2010-10-19 19:10:21 | 000,314,016 | ---- | C] () -- C:\Windows\SysNative\drivers\atksgt.sys [2010-10-19 19:10:20 | 000,043,680 | ---- | C] () -- C:\Windows\SysNative\drivers\lirsgt.sys [2010-10-16 20:57:12 | 000,001,460 | ---- | C] () -- C:\Users\Ryszard\Desktop\BlackSite — skrót.lnk [2010-10-16 18:01:44 | 000,001,350 | ---- | C] () -- C:\Users\Ryszard\Desktop\yugo_pc — skrót.lnk [2010-10-16 17:43:23 | 000,000,842 | ---- | C] () -- C:\Users\Public\Desktop\Corel WinDVD 2010.lnk [2010-10-16 17:24:15 | 000,000,088 | RHS- | C] () -- C:\ProgramData\72EF225DC8.sys [2010-10-16 17:24:14 | 000,002,776 | -HS- | C] () -- C:\ProgramData\KGyGaAvL.sys [2010-10-16 17:21:44 | 000,000,040 | -H-- | C] () -- C:\Windows\SysNative\ivireg.ivr [2010-10-16 15:12:43 | 000,005,632 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-10-16 11:18:57 | 000,000,023 | -HS- | C] () -- C:\Windows\SysNative\edacded0.dat [2010-10-16 11:18:57 | 000,000,023 | ---- | C] () -- C:\Windows\SysNative\bcdadac7.xml [2010-10-16 11:05:33 | 000,001,553 | ---- | C] () -- C:\Users\Ryszard\Desktop\ALLPlayer — skrót.lnk [2010-10-16 10:30:58 | 000,831,600 | ---- | C] () -- C:\Windows\SysWow64\Ctaa1.dat [2010-10-16 09:31:16 | 000,000,026 | ---- | C] () -- C:\Windows\Irremote.ini [2010-10-16 07:30:09 | 003,932,214 | ---- | C] () -- C:\Windows\Webshots for Ryszard.bmp [2010-10-16 07:30:04 | 000,032,768 | ---- | C] () -- C:\Windows\SysWow64\WSVersionATX.ocx [2010-10-16 07:07:30 | 000,503,352 | ---- | C] () -- C:\Windows\SysNative\drivers\sptd.sys [2010-10-16 06:37:51 | 000,012,264 | ---- | C] () -- C:\Windows\SysNative\nvinfo.pb [2010-10-16 06:13:59 | 000,001,032 | ---- | C] () -- C:\Users\Public\Desktop\OpenFM.lnk [2010-10-16 06:13:59 | 000,001,003 | ---- | C] () -- C:\Users\Public\Desktop\Gadu-Gadu 10.lnk [2010-10-16 05:42:08 | 000,000,040 | -HS- | C] () -- C:\ProgramData\.zreglib [2010-10-16 02:22:12 | 000,000,947 | ---- | C] () -- C:\Users\Public\Desktop\µTorrent.lnk [2010-10-16 01:19:20 | 000,008,750 | ---- | C] () -- C:\Windows\SysNative\nvdisp.nvu [2010-10-16 00:57:27 | 000,666,112 | ---- | C] () -- C:\Windows\SysNative\RTCOM64.dll [2010-10-16 00:46:26 | 000,000,010 | ---- | C] () -- C:\Windows\GSetup.ini [2010-10-16 00:23:32 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf [2010-10-16 00:12:10 | 2414,731,264 | -HS- | C] () -- C:\hiberfil.sys [2010-03-15 04:31:48 | 000,165,376 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll [2009-07-14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009-07-13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2005-12-07 11:31:00 | 000,202,752 | R--- | C] () -- C:\Windows\SysWow64\CddbCdda.dll [color=#E56717]========== LOP Check ==========[/color] [2010-10-16 15:12:15 | 000,000,000 | ---D | M] -- C:\Users\Ryszard\AppData\Roaming\ACD Systems [2010-10-16 09:09:54 | 000,000,000 | ---D | M] -- C:\Users\Ryszard\AppData\Roaming\DAEMON Tools Lite [2010-10-18 19:32:01 | 000,000,000 | ---D | M] -- C:\Users\Ryszard\AppData\Roaming\Gadu-Gadu 10 [2010-10-16 10:31:57 | 000,000,000 | ---D | M] -- C:\Users\Ryszard\AppData\Roaming\InterVideo [2010-10-31 10:00:10 | 000,000,000 | ---D | M] -- C:\Users\Ryszard\AppData\Roaming\Leadertech [2010-10-30 11:13:45 | 000,000,000 | ---D | M] -- C:\Users\Ryszard\AppData\Roaming\Nokia [2010-10-30 11:24:50 | 000,000,000 | ---D | M] -- C:\Users\Ryszard\AppData\Roaming\NSeries [2010-11-11 14:12:34 | 000,000,000 | ---D | M] -- C:\Users\Ryszard\AppData\Roaming\OpenCandy [2010-10-29 19:34:19 | 000,000,000 | ---D | M] -- C:\Users\Ryszard\AppData\Roaming\OpenFM [2010-10-30 11:03:00 | 000,000,000 | ---D | M] -- C:\Users\Ryszard\AppData\Roaming\PC Suite [2010-10-21 19:12:50 | 000,000,000 | ---D | M] -- C:\Users\Ryszard\AppData\Roaming\Softland [2010-10-22 17:57:03 | 000,000,000 | ---D | M] -- C:\Users\Ryszard\AppData\Roaming\URSoft [2010-12-06 06:07:29 | 000,000,000 | ---D | M] -- C:\Users\Ryszard\AppData\Roaming\uTorrent [2010-10-20 19:15:58 | 000,000,000 | ---D | M] -- C:\Users\Ryszard\AppData\Roaming\Vso [2010-12-02 21:58:29 | 000,000,000 | ---D | M] -- C:\Users\Ryszard\AppData\Roaming\Win7codecs [2010-12-06 16:29:28 | 000,032,608 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Custom Scans ==========[/color] [color=#A23BEC]< %systemdrive%\*.* >[/color] [2010-10-16 01:13:56 | 000,000,010 | ---- | M] () -- C:\csb.log [2010-12-06 18:41:09 | 2414,731,264 | -HS- | M] () -- C:\hiberfil.sys [2010-12-06 17:43:20 | 000,001,131 | ---- | M] () -- C:\mbam-log-2010-12-06 (17-43-01).txt [2010-12-06 18:41:12 | 3219,644,416 | -HS- | M] () -- C:\pagefile.sys [2010-10-16 01:02:39 | 000,000,773 | ---- | M] () -- C:\RHDSetup.log [color=#A23BEC]< MD5 for: AGP440.SYS >[/color] [2009-07-14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysWow64\DriverStore\FileRepository\machine.inf_amd64_neutral_9e6bb86c3b39a3e9\AGP440.sys [2009-07-14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys [color=#A23BEC]< MD5 for: ATAPI.SYS >[/color] [2009-07-14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysWow64\DriverStore\FileRepository\mshdc.inf_amd64_neutral_a69a58a4286f0b22\atapi.sys [2009-07-14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys [color=#A23BEC]< MD5 for: BEEP.SYS >[/color] [2009-07-14 01:00:13 | 000,006,656 | ---- | M] (Microsoft Corporation) MD5=16A47CE2DECC9B099349A5F840654746 -- C:\Windows\winsxs\amd64_microsoft-windows-beepsys_31bf3856ad364e35_6.1.7600.16385_none_201592fa214e4f02\beep.sys [color=#A23BEC]< MD5 for: CDROM.SYS >[/color] [2009-07-14 00:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\SysWow64\DriverStore\FileRepository\cdrom.inf_amd64_neutral_8363d00ecae4322d\cdrom.sys [2009-07-14 00:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys [color=#A23BEC]< MD5 for: NDIS.SYS >[/color] [2009-07-14 02:48:27 | 000,947,776 | ---- | M] (Microsoft Corporation) MD5=CAD515DBD07D082BB317D9928CE8962C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.16385_none_03bc1d6e35c013bf\ndis.sys [color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color] [2009-07-14 02:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 24 bytes -> C:\Windows:DF6F26DF1E58520F @Alternate Data Stream - 157 bytes -> C:\ProgramData\TEMP:1CE11B51 < End of report >[/log] System operacyjny Windows 7
Tomek01 komentarz 6 grudnia 2010 komentarz 6 grudnia 2010 Wrzuć jeszcze log RSIT oraz Gmer, odinstalowując jednostki emulujące napęd, np Alcohol, Deamon Tools oraz sterownik sptd.sys
Wciąż szukasz rozwiązania problemu? Napisz teraz na forum!
Możesz zadać pytanie bez konieczności rejestracji - wystarczy, że wypełnisz formularz.