x-kom hosting

Logi OTS proszę sprawdzić ( QooQlle)

kobra518
utworzono
utworzono (edytowane)

Witam mam problem z komputerem najwidoczniej jakiś Virus ale niejestem pewien logi OTS

[log]OTL logfile created on: 2010-12-06 19:17:45 - Run 1
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Users\Ryszard\Downloads
64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 60,00% Memory free
6,00 Gb Paging File | 5,00 Gb Available in Paging File | 78,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 77,53 Gb Total Space | 9,73 Gb Free Space | 12,55% Space Free | Partition Type: NTFS
Drive D: | 77,63 Gb Total Space | 12,32 Gb Free Space | 15,87% Space Free | Partition Type: NTFS
Drive E: | 77,63 Gb Total Space | 6,63 Gb Free Space | 8,54% Space Free | Partition Type: NTFS
Drive F: | 37,26 Gb Total Space | 8,44 Gb Free Space | 22,66% Space Free | Partition Type: NTFS
Drive H: | 37,26 Gb Total Space | 6,33 Gb Free Space | 16,98% Space Free | Partition Type: NTFS
Drive I: | 37,26 Gb Total Space | 4,48 Gb Free Space | 12,01% Space Free | Partition Type: NTFS
Drive J: | 37,26 Gb Total Space | 1,83 Gb Free Space | 4,92% Space Free | Partition Type: NTFS

Computer Name: RYSIUL | User Name: Ryszard | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 60 Days

[color=#E56717]========== Processes (All) ==========[/color]

PRC - [2010-12-06 19:16:22 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Ryszard\Downloads\OTL.exe
PRC - [2010-10-27 07:21:28 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2010-10-16 01:31:46 | 000,949,376 | ---- | M] (Eset ) -- C:\Program Files (x86)\Eset\nod32kui.exe
PRC - [2010-10-16 01:31:46 | 000,552,064 | ---- | M] (Eset ) -- C:\Program Files (x86)\Eset\nod32krn.exe
PRC - [2010-10-07 09:04:26 | 012,661,344 | ---- | M] (GG Network S.A.) -- C:\Program Files (x86)\Gadu-Gadu 10\gg.exe
PRC - [2010-07-09 15:09:52 | 000,248,936 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2010-05-14 11:44:46 | 000,248,552 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
PRC - [2010-02-06 21:12:48 | 000,053,760 | ---- | M] () -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\Plugins\Helper\AlSrvN.exe
PRC - [2007-10-23 13:19:06 | 001,410,344 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe
PRC - [2007-10-23 13:19:06 | 000,382,248 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe
PRC - [2007-10-23 13:18:46 | 000,202,024 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Common Files\Nero\Lib\NMBgMonitor.exe
PRC - [2007-09-20 07:51:46 | 000,853,288 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe
PRC - [2007-09-02 12:58:52 | 000,495,616 | ---- | M] () -- C:\Program Files (x86)\RocketDock\RocketDock.exe
PRC - [2007-07-24 10:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) -- C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe


[color=#E56717]========== Modules (All) ==========[/color]

MOD - [2010-12-06 19:16:22 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Ryszard\Downloads\OTL.exe
MOD - [2010-10-23 04:49:36 | 000,245,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\uxtheme.dll
MOD - [2009-07-14 02:17:51 | 001,289,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntdll.dll
MOD - [2009-07-14 02:16:19 | 000,268,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\Wldap32.dll
MOD - [2009-07-14 02:16:17 | 001,123,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vssapi.dll
MOD - [2009-07-14 02:16:17 | 000,627,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\usp10.dll
MOD - [2009-07-14 02:16:17 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vsstrace.dll
MOD - [2009-07-14 02:16:17 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\version.dll
MOD - [2009-07-14 02:16:15 | 000,171,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\spp.dll
MOD - [2009-07-14 02:16:15 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\srclient.dll
MOD - [2009-07-14 02:16:14 | 012,866,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shell32.dll
MOD - [2009-07-14 02:16:14 | 001,668,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\setupapi.dll
MOD - [2009-07-14 02:16:14 | 000,350,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shlwapi.dll
MOD - [2009-07-14 02:16:14 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shdocvw.dll
MOD - [2009-07-14 02:16:13 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sechost.dll
MOD - [2009-07-14 02:16:13 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samlib.dll
MOD - [2009-07-14 02:16:13 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samcli.dll
MOD - [2009-07-14 02:16:13 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\secur32.dll
MOD - [2009-07-14 02:16:12 | 001,412,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ole32.dll
MOD - [2009-07-14 02:16:12 | 000,988,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\propsys.dll
MOD - [2009-07-14 02:16:12 | 000,571,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\oleaut32.dll
MOD - [2009-07-14 02:16:12 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\olepro32.dll
MOD - [2009-07-14 02:16:12 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\profapi.dll
MOD - [2009-07-14 02:16:12 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\psapi.dll
MOD - [2009-07-14 02:16:11 | 000,121,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntmarta.dll
MOD - [2009-07-14 02:16:03 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\netutils.dll
MOD - [2009-07-14 02:15:50 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msvcrt.dll
MOD - [2009-07-14 02:15:43 | 000,828,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msctf.dll
MOD - [2009-07-14 02:15:13 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dwmapi.dll
MOD - [2009-07-14 02:15:11 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\devobj.dll
MOD - [2009-07-14 02:15:07 | 000,486,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\comdlg32.dll
MOD - [2009-07-14 02:15:07 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cryptbase.dll
MOD - [2009-07-14 02:15:03 | 000,522,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\clbcatq.dll
MOD - [2009-07-14 02:15:02 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cfgmgr32.dll
MOD - [2009-07-14 02:14:57 | 000,070,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\atl.dll
MOD - [2009-07-14 02:14:53 | 000,640,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\advapi32.dll
MOD - [2009-07-14 02:14:53 | 000,292,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\apphelp.dll
MOD - [2009-07-14 02:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx
MOD - [2009-07-14 02:14:08 | 000,319,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winspool.drv
MOD - [2009-07-14 02:11:24 | 000,833,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\user32.dll
MOD - [2009-07-14 02:11:24 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sspicli.dll
MOD - [2009-07-14 02:11:23 | 000,836,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\kernel32.dll
MOD - [2009-07-14 02:11:23 | 000,662,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rpcrt4.dll
MOD - [2009-07-14 02:11:23 | 000,269,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\KernelBase.dll
MOD - [2009-07-14 02:11:23 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\lpk.dll
MOD - [2009-07-14 02:11:21 | 000,310,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\gdi32.dll
MOD - [2009-07-14 02:11:21 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\imm32.dll
MOD - [2009-07-14 02:03:50 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll


[color=#E56717]========== Win32 Services (SafeList) ==========[/color]

SRV:[b]64bit:[/b] - [2009-07-14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:[b]64bit:[/b] - [2009-07-14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2010-10-16 01:31:46 | 000,552,064 | ---- | M] (Eset ) [Auto | Running] -- C:\Program Files (x86)\Eset\nod32krn.exe -- (NOD32krn)
SRV - [2010-07-09 15:09:52 | 000,248,936 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2009-12-23 22:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto | Stopped] -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE)
SRV - [2009-06-10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2007-07-24 10:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2)
SRV - [2007-02-08 15:13:46 | 000,212,480 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV:[b]64bit:[/b] - [2010-10-20 19:15:29 | 000,082,816 | ---- | M] (VSO Software) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\pcouffin.sys -- (pcouffin)
DRV:[b]64bit:[/b] - [2010-10-20 18:58:55 | 000,503,352 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:[b]64bit:[/b] - [2010-10-19 19:31:17 | 000,314,016 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt)
DRV:[b]64bit:[/b] - [2010-10-19 19:31:17 | 000,043,680 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt)
DRV:[b]64bit:[/b] - [2010-10-16 01:31:46 | 000,146,704 | ---- | M] (Eset ) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\amon.sys -- (AMON)
DRV:[b]64bit:[/b] - [2009-07-14 02:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2009-07-14 02:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2009-07-14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009-07-14 02:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009-06-10 21:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs)
DRV:[b]64bit:[/b] - [2009-06-10 21:35:42 | 000,187,392 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:[b]64bit:[/b] - [2009-06-10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009-06-10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009-06-10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009-06-10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:[b]64bit:[/b] - [2008-08-01 14:27:42 | 000,113,088 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AnyDVD.sys -- (AnyDVD)
DRV:[b]64bit:[/b] - [2008-07-21 13:11:56 | 000,032,200 | ---- | M] (Elaborate Bytes AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ElbyCDIO.sys -- (ElbyCDIO)
DRV:[b]64bit:[/b] - [2007-02-22 09:19:08 | 000,173,056 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nmwcdx64.sys -- (nmwcdx64)
DRV:[b]64bit:[/b] - [2007-02-22 09:18:14 | 000,017,408 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nmwcdcmx64.sys -- (nmwcdcmx64)
DRV:[b]64bit:[/b] - [2007-02-22 09:18:14 | 000,017,408 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nmwcdcjx64.sys -- (nmwcdcjx64)
DRV:[b]64bit:[/b] - [2007-02-22 09:18:14 | 000,012,288 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nmwcdcx64.sys -- (nmwcdcx64)
DRV:[b]64bit:[/b] - [2007-01-15 13:36:18 | 000,014,112 | ---- | M] (InterVideo) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\regi.sys -- (regi)
DRV:[b]64bit:[/b] - [2006-01-19 16:33:26 | 000,493,440 | ---- | M] (ZyDAS Technology Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WlanBZ64.sys -- (SG762_64)
DRV - [2010-10-16 01:12:39 | 000,020,544 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\gdrv.sys -- (gdrv)
DRV - [2008-08-01 14:27:42 | 000,113,088 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\drivers\AnyDVD.sys -- (AnyDVD)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.qooqlle.com/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.qooqlle.com/"
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {888d99e7-e8b5-46a3-851e-1ec45da1e644}:4.0.0
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2.2
FF - prefs.js..extensions.enabledItems: cssreloader@kenneth.io:1.0.2
FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.8.20100408.6
FF - prefs.js..network.proxy.backup.ftp: "127.0.0.1"
FF - prefs.js..network.proxy.backup.ftp_port: 9666
FF - prefs.js..network.proxy.backup.gopher: "127.0.0.1"
FF - prefs.js..network.proxy.backup.gopher_port: 9666
FF - prefs.js..network.proxy.backup.socks: "127.0.0.1"
FF - prefs.js..network.proxy.backup.socks_port: 9666
FF - prefs.js..network.proxy.backup.ssl: "127.0.0.1"
FF - prefs.js..network.proxy.backup.ssl_port: 9666
FF - prefs.js..network.proxy.ftp: "127.0.0.1"
FF - prefs.js..network.proxy.ftp_port: 9666
FF - prefs.js..network.proxy.gopher: "127.0.0.1"
FF - prefs.js..network.proxy.gopher_port: 9666
FF - prefs.js..network.proxy.http: "127.0.0.1"
FF - prefs.js..network.proxy.http_port: 9666
FF - prefs.js..network.proxy.share_proxy_settings: true
FF - prefs.js..network.proxy.socks: "127.0.0.1"
FF - prefs.js..network.proxy.socks_port: 9666
FF - prefs.js..network.proxy.ssl: "127.0.0.1"
FF - prefs.js..network.proxy.ssl_port: 9666
FF - prefs.js..network.proxy.type: 0

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010-12-06 12:50:00 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010-12-06 12:49:57 | 000,000,000 | ---D | M]

[2010-12-06 12:50:11 | 000,000,000 | ---D | M] -- C:\Users\Ryszard\AppData\Roaming\mozilla\Extensions
[2010-12-06 12:50:11 | 000,000,000 | ---D | M] -- C:\Users\Ryszard\AppData\Roaming\mozilla\Firefox\Profiles\g5rymnqg.default\extensions
[2010-12-06 18:41:28 | 000,001,860 | ---- | M] () -- C:\Users\Ryszard\AppData\Roaming\Mozilla\FireFox\Profiles\g5rymnqg.default\searchplugins\search.xml
[2010-12-06 12:49:57 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\mozilla firefox\extensions
[2010-10-27 06:37:26 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml
[2010-10-27 06:37:26 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml
[2010-10-27 06:37:26 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml
[2010-10-27 06:37:26 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml
[2010-10-27 06:37:26 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml
[2010-10-27 06:37:26 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml

O1 HOSTS File: ([2009-06-10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL (Microsoft Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Windows\RAVCpl64.exe (Realtek Semiconductor)
O4:[b]64bit:[/b] - HKLM..\Run: [Skytel] C:\Windows\SkyTel.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [GProton] C:\ProgramData\GProton.exe ()
O4 - HKLM..\Run: [NBKeyScan] C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe (Nero AG)
O4 - HKLM..\Run: [nod32kui] C:\Program Files (x86)\Eset\nod32kui.exe (Eset )
O4 - HKLM..\Run: [UpdateReminder] C:\Program Files (x86)\Eset\UpdateReminder.exe (ESET, spol. s r.o.)
O4 - HKCU..\Run: [AlSrvN] C:\Program Files (x86)\Alcohol Soft\Alcohol 120\Plugins\Helper\AlSrvN.exe ()
O4 - HKCU..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files (x86)\Common Files\Nero\Lib\NMBgMonitor.exe (Nero AG)
O4 - HKCU..\Run: [RocketDock] C:\Program Files (x86)\RocketDock\RocketDock.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\SysNative\imon.dll (Eset )
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\SysNative\imon.dll (Eset )
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\SysNative\imon.dll (Eset )
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\SysNative\imon.dll (Eset )
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\SysNative\imon.dll (Eset )
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\SysNative\imon.dll (Eset )
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\SysNative\imon.dll (Eset )
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\SysNative\imon.dll (Eset )
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\SysNative\imon.dll (Eset )
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\SysNative\imon.dll (Eset )
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\Windows\SysNative\imon.dll (Eset )
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\SysWow64\imon.dll (Eset )
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\SysWow64\imon.dll (Eset )
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\SysWow64\imon.dll (Eset )
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\SysWow64\imon.dll (Eset )
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\SysWow64\imon.dll (Eset )
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\SysWow64\imon.dll (Eset )
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\SysWow64\imon.dll (Eset )
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\SysWow64\imon.dll (Eset )
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\SysWow64\imon.dll (Eset )
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\SysWow64\imon.dll (Eset )
O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\Windows\SysWow64\imon.dll (Eset )
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.250 195.164.199.4 192.168.0.250
O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-06-01 10:08:47 | 000,000,000 | ---- | M] () - F:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{5c7f6882-d8fc-11df-8255-0019700a03ea}\Shell - "" = AutoRun
O33 - MountPoints2\{5c7f6882-d8fc-11df-8255-0019700a03ea}\Shell\AutoRun\command - "" = K:\autorun.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)


SafeBootMin:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] Base - Driver Group
SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group
SafeBootMin:[b]64bit:[/b] File system - Driver Group
SafeBootMin:[b]64bit:[/b] Filter - Driver Group
SafeBootMin:[b]64bit:[/b] HelpSvc - Service
SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group
SafeBootMin:[b]64bit:[/b] sacsvr - Service
SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] vmms - Service
SafeBootMin:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vmms - Service
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] Base - Driver Group
SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group
SafeBootNet:[b]64bit:[/b] File system - Driver Group
SafeBootNet:[b]64bit:[/b] Filter - Driver Group
SafeBootNet:[b]64bit:[/b] HelpSvc - Service
SafeBootNet:[b]64bit:[/b] Messenger - Service
SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group
SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group
SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group
SafeBootNet:[b]64bit:[/b] Network - Driver Group
SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group
SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group
SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group
SafeBootNet:[b]64bit:[/b] rdsessmgr - Service
SafeBootNet:[b]64bit:[/b] sacsvr - Service
SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group
SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] TDI - Driver Group
SafeBootNet:[b]64bit:[/b] vmms - Service
SafeBootNet:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver
SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vmms - Service
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

[color=#E56717]========== Files/Folders - Created Within 60 Days ==========[/color]

[2010-12-06 17:39:58 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2010-12-06 17:39:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2010-12-06 12:49:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2010-12-06 12:26:19 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\Malwarebytes
[2010-12-06 12:26:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2010-12-06 12:26:08 | 000,024,152 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2010-12-02 21:58:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AWS
[2010-12-02 21:58:29 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\Win7codecs
[2010-11-29 08:38:59 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\Biblioteki
[2010-11-17 06:37:16 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\Google
[2010-11-17 06:37:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
[2010-11-17 06:36:55 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype
[2010-11-17 06:36:54 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\Skype
[2010-11-17 06:36:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
[2010-11-14 14:21:19 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\Documents\NHL09
[2010-11-11 14:12:53 | 000,000,000 | ---D | C] -- C:\Program Files\Przyspiesz Komputer
[2010-11-11 14:12:36 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\OpenCandy
[2010-11-11 14:12:34 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\OpenCandy
[2010-11-11 14:12:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Veoh Networks
[2010-11-07 20:13:02 | 001,196,544 | ---- | C] (MPC-HC Team) -- C:\Windows\SysWow64\VSFilter.dll
[2010-11-07 08:16:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun
[2010-11-07 08:16:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2010-11-07 08:16:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java
[2010-11-07 07:03:12 | 000,000,000 | ---D | C] -- C:\ProgramData\eMule
[2010-11-07 07:02:29 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\eMule
[2010-11-07 07:02:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\eMule
[2010-10-31 15:54:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Electronic Arts
[2010-10-31 10:04:44 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\Documents\FIFA 11
[2010-10-31 10:00:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Electronic Arts
[2010-10-31 10:00:10 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\Leadertech
[2010-10-30 14:08:16 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\DAEMON Tools Images
[2010-10-30 11:24:50 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\NSeries
[2010-10-30 11:23:25 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\Documents\NokiaLifeblogData
[2010-10-30 11:02:56 | 000,000,000 | ---D | C] -- C:\ProgramData\PC Suite
[2010-10-30 11:02:40 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\Nokia
[2010-10-30 11:01:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\PCSuite
[2010-10-30 11:00:49 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\PC Suite
[2010-10-30 11:00:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PC Connectivity Solution
[2010-10-30 11:00:23 | 000,066,560 | ---- | C] (Nokia) -- C:\Windows\SysNative\nmwcdclsx64.dll
[2010-10-30 11:00:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nokia
[2010-10-29 19:34:20 | 000,000,000 | ---D | C] -- C:\ProgramData\OpenFM
[2010-10-29 19:34:19 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\OpenFM
[2010-10-23 04:48:02 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\Desktop\Nowy folder
[2010-10-22 21:25:04 | 000,000,000 | ---D | C] -- C:\ProgramData\PopCap Games
[2010-10-22 18:12:15 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\Adobe
[2010-10-22 18:11:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2010-10-22 18:11:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe
[2010-10-22 18:11:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe
[2010-10-22 17:57:03 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\URSoft
[2010-10-22 17:57:03 | 000,000,000 | ---D | C] -- C:\ProgramData\TEMP
[2010-10-22 17:56:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Your Uninstaller 2010
[2010-10-21 22:16:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Gadu-Gadu 10
[2010-10-21 19:12:50 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\Softland
[2010-10-21 19:12:45 | 000,000,000 | ---D | C] -- C:\Program Files\Softland
[2010-10-21 18:34:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\GSC World Publishing
[2010-10-20 20:42:10 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\Documents\My Games
[2010-10-20 20:17:39 | 000,178,800 | ---- | C] (Sony DADC Austria AG.) -- C:\Windows\SysWow64\CmdLineExt_x64.dll
[2010-10-20 20:13:28 | 000,000,000 | ---D | C] -- C:\GRY
[2010-10-20 19:28:07 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\Documents\Alcohol 120%
[2010-10-20 19:16:48 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\NVIDIA
[2010-10-20 19:16:48 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\Documents\DVDFab
[2010-10-20 19:15:29 | 000,082,816 | ---- | C] (VSO Software) -- C:\Windows\SysNative\drivers\pcouffin.sys
[2010-10-20 19:15:29 | 000,082,816 | ---- | C] (VSO Software) -- C:\Users\Ryszard\AppData\Roaming\pcouffin.sys
[2010-10-20 19:15:28 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\Vso
[2010-10-20 19:15:28 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\Documents\PcSetup
[2010-10-20 19:15:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DVDFab 8
[2010-10-20 19:02:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Alcohol Soft
[2010-10-20 18:54:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\RocketDock
[2010-10-19 19:31:40 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\Documents\The Witcher
[2010-10-19 19:31:40 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\The Witcher
[2010-10-18 19:43:42 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\Microsoft Games
[2010-10-18 13:51:50 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\Diagnostics
[2010-10-17 11:25:07 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\SKIDROW
[2010-10-17 11:16:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SQUARE ENIX - Eidos Interactive
[2010-10-17 04:36:12 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\NFS Underground 2
[2010-10-16 20:38:50 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\Midway
[2010-10-16 20:07:39 | 000,000,000 | RH-D | C] -- C:\Users\Ryszard\AppData\Roaming\SecuROM
[2010-10-16 19:44:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Midway Home Entertainment
[2010-10-16 19:44:24 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information
[2010-10-16 19:43:49 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\InstallShield
[2010-10-16 18:00:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\KONAMI
[2010-10-16 17:42:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Protexis
[2010-10-16 17:42:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Corel
[2010-10-16 17:42:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Corel
[2010-10-16 17:35:10 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\appmgmt
[2010-10-16 17:24:16 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\Corel
[2010-10-16 17:24:12 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\Corel
[2010-10-16 17:23:55 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\Apple Computer
[2010-10-16 17:22:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Apple
[2010-10-16 17:22:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QuickTime
[2010-10-16 17:22:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer
[2010-10-16 17:22:09 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\Apple
[2010-10-16 17:22:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update
[2010-10-16 17:22:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple
[2010-10-16 17:21:44 | 000,014,112 | ---- | C] (InterVideo) -- C:\Windows\SysNative\drivers\regi.sys
[2010-10-16 16:06:43 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\Nero
[2010-10-16 15:29:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\K-Lite Codec Pack
[2010-10-16 15:12:15 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\ACD Systems
[2010-10-16 15:12:15 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\ACD Systems
[2010-10-16 15:10:12 | 000,000,000 | ---D | C] -- C:\Program Files\ACD Systems
[2010-10-16 15:08:41 | 000,000,000 | ---D | C] -- C:\ProgramData\ACD Systems
[2010-10-16 15:08:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\ACD Systems
[2010-10-16 15:08:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ACD Systems
[2010-10-16 15:04:00 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\Downloaded Installations
[2010-10-16 14:58:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Works
[2010-10-16 14:58:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio
[2010-10-16 14:58:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER
[2010-10-16 14:58:13 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH
[2010-10-16 14:58:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET
[2010-10-16 14:56:40 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2010-10-16 14:56:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio 8
[2010-10-16 14:56:01 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\Microsoft Help
[2010-10-16 14:55:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office
[2010-10-16 14:55:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help
[2010-10-16 14:55:19 | 000,000,000 | RH-D | C] -- C:\MSOCache
[2010-10-16 11:18:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\jv16 PowerTools 2009
[2010-10-16 11:03:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ALLPlayer_Portable
[2010-10-16 10:40:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Win7codecs
[2010-10-16 10:40:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Win7codecs
[2010-10-16 10:31:57 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\InterVideo
[2010-10-16 10:31:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InterVideo
[2010-10-16 10:31:07 | 000,000,000 | ---D | C] -- C:\Program Files\InterActual
[2010-10-16 10:30:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Creative
[2010-10-16 09:37:12 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\cache
[2010-10-16 09:32:14 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\Ahead
[2010-10-16 09:30:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Nero
[2010-10-16 09:30:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nero
[2010-10-16 09:30:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Nero
[2010-10-16 09:18:40 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\WinRAR
[2010-10-16 09:18:27 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2010-10-16 07:30:05 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\Documents\Webshots Data
[2010-10-16 07:30:04 | 001,957,888 | ---- | C] (Webshots.com) -- C:\Windows\webshots.scr
[2010-10-16 07:30:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Webshots
[2010-10-16 07:07:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DAEMON Tools Lite
[2010-10-16 07:06:37 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\DAEMON Tools Lite
[2010-10-16 07:06:34 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite
[2010-10-16 06:38:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation
[2010-10-16 06:38:40 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation
[2010-10-16 06:38:31 | 000,000,000 | ---D | C] -- C:\Program Files\NVIDIA Corporation
[2010-10-16 06:37:51 | 000,065,128 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll
[2010-10-16 06:37:51 | 000,056,936 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll
[2010-10-16 06:37:41 | 000,000,000 | ---D | C] -- C:\NVIDIA
[2010-10-16 06:13:37 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\Gadu-Gadu 10
[2010-10-16 06:13:34 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2010-10-16 06:13:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Gadu-Gadu 10
[2010-10-16 06:01:08 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\directx
[2010-10-16 05:45:33 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\Documents\AnyDVDHD
[2010-10-16 05:42:08 | 000,000,000 | ---D | C] -- C:\ProgramData\SlySoft
[2010-10-16 05:40:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SlySoft
[2010-10-16 05:38:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\7-Zip
[2010-10-16 02:22:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\uTorrent
[2010-10-16 02:21:37 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\uTorrent
[2010-10-16 02:20:50 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\Macromedia
[2010-10-16 02:20:50 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\Adobe
[2010-10-16 02:20:36 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed
[2010-10-16 01:56:08 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\ElevatedDiagnostics
[2010-10-16 01:51:41 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\Apps
[2010-10-16 01:44:08 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\Mozilla
[2010-10-16 01:44:08 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\Mozilla
[2010-10-16 01:32:42 | 000,467,512 | ---- | C] (Eset ) -- C:\Windows\SysNative\imon.dll
[2010-10-16 01:32:42 | 000,298,104 | ---- | C] (Eset ) -- C:\Windows\SysWow64\imon.dll
[2010-10-16 01:32:42 | 000,146,704 | ---- | C] (Eset ) -- C:\Windows\SysNative\drivers\amon.sys
[2010-10-16 01:31:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Eset
[2010-10-16 01:26:31 | 000,000,000 | ---D | C] -- C:\Program Files\DIFX
[2010-10-16 01:25:29 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA
[2010-10-16 01:11:21 | 000,000,000 | ---D | C] -- C:\Windows\Panther
[2010-10-16 00:57:29 | 000,513,536 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSX64.dll
[2010-10-16 00:57:29 | 000,211,376 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSH64.dll
[2010-10-16 00:57:29 | 000,193,536 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSHP64.dll
[2010-10-16 00:57:29 | 000,150,528 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSWOW64.dll
[2010-10-16 00:57:25 | 006,430,208 | ---- | C] (Realtek Semiconductor) -- C:\Windows\RAVCpl64.exe
[2010-10-16 00:57:25 | 000,245,248 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO20.dll
[2010-10-16 00:57:25 | 000,160,768 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\Windows\SysNative\FMAPO64.dll
[2010-10-16 00:57:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield
[2010-10-16 00:44:34 | 000,493,440 | ---- | C] (ZyDAS Technology Corporation) -- C:\Windows\SysNative\drivers\WlanBZ64.sys
[2010-10-16 00:20:32 | 000,000,000 | R--D | C] -- C:\Users\Ryszard\Searches
[2010-10-16 00:20:23 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\Identities
[2010-10-16 00:20:21 | 000,000,000 | R--D | C] -- C:\Users\Ryszard\Contacts
[2010-10-16 00:20:19 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\VirtualStore
[2010-10-16 00:19:59 | 000,000,000 | --SD | C] -- C:\Users\Ryszard\AppData\Roaming\Microsoft
[2010-10-16 00:19:59 | 000,000,000 | R--D | C] -- C:\Users\Ryszard\Videos
[2010-10-16 00:19:59 | 000,000,000 | R--D | C] -- C:\Users\Ryszard\Saved Games
[2010-10-16 00:19:59 | 000,000,000 | R--D | C] -- C:\Users\Ryszard\Pictures
[2010-10-16 00:19:59 | 000,000,000 | R--D | C] -- C:\Users\Ryszard\Music
[2010-10-16 00:19:59 | 000,000,000 | R--D | C] -- C:\Users\Ryszard\Links
[2010-10-16 00:19:59 | 000,000,000 | R--D | C] -- C:\Users\Ryszard\Favorites
[2010-10-16 00:19:59 | 000,000,000 | R--D | C] -- C:\Users\Ryszard\Downloads
[2010-10-16 00:19:59 | 000,000,000 | R--D | C] -- C:\Users\Ryszard\Documents
[2010-10-16 00:19:59 | 000,000,000 | R--D | C] -- C:\Users\Ryszard\Desktop
[2010-10-16 00:19:59 | 000,000,000 | -HSD | C] -- C:\Users\Ryszard\Ustawienia lokalne
[2010-10-16 00:19:59 | 000,000,000 | -HSD | C] -- C:\Users\Ryszard\AppData\Local\Temporary Internet Files
[2010-10-16 00:19:59 | 000,000,000 | -HSD | C] -- C:\Users\Ryszard\Szablony
[2010-10-16 00:19:59 | 000,000,000 | -HSD | C] -- C:\Users\Ryszard\SendTo
[2010-10-16 00:19:59 | 000,000,000 | -HSD | C] -- C:\Users\Ryszard\Recent
[2010-10-16 00:19:59 | 000,000,000 | -HSD | C] -- C:\Users\Ryszard\PrintHood
[2010-10-16 00:19:59 | 000,000,000 | -HSD | C] -- C:\Users\Ryszard\NetHood
[2010-10-16 00:19:59 | 000,000,000 | -HSD | C] -- C:\Users\Ryszard\Documents\Moje wideo
[2010-10-16 00:19:59 | 000,000,000 | -HSD | C] -- C:\Users\Ryszard\Documents\Moje obrazy
[2010-10-16 00:19:59 | 000,000,000 | -HSD | C] -- C:\Users\Ryszard\Moje dokumenty
[2010-10-16 00:19:59 | 000,000,000 | -HSD | C] -- C:\Users\Ryszard\Documents\Moja muzyka
[2010-10-16 00:19:59 | 000,000,000 | -HSD | C] -- C:\Users\Ryszard\Menu Start
[2010-10-16 00:19:59 | 000,000,000 | -HSD | C] -- C:\Users\Ryszard\AppData\Local\Historia
[2010-10-16 00:19:59 | 000,000,000 | -HSD | C] -- C:\Users\Ryszard\Dane aplikacji
[2010-10-16 00:19:59 | 000,000,000 | -HSD | C] -- C:\Users\Ryszard\AppData\Local\Dane aplikacji
[2010-10-16 00:19:59 | 000,000,000 | -HSD | C] -- C:\Users\Ryszard\Cookies
[2010-10-16 00:19:59 | 000,000,000 | -H-D | C] -- C:\Users\Ryszard\AppData
[2010-10-16 00:19:59 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\Temp
[2010-10-16 00:19:59 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Local\Microsoft
[2010-10-16 00:19:59 | 000,000,000 | ---D | C] -- C:\Users\Ryszard\AppData\Roaming\Media Center Programs
[2010-10-16 00:19:51 | 000,000,000 | -HSD | C] -- C:\Recovery
[2010-10-16 00:19:50 | 000,000,000 | -HSD | C] -- C:\ProgramData\Ulubione
[2010-10-16 00:19:50 | 000,000,000 | -HSD | C] -- C:\ProgramData\Szablony
[2010-10-16 00:19:50 | 000,000,000 | -HSD | C] -- C:\ProgramData\Pulpit
[2010-10-16 00:19:50 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moje wideo
[2010-10-16 00:19:50 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moje obrazy
[2010-10-16 00:19:50 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moja muzyka
[2010-10-16 00:19:50 | 000,000,000 | -HSD | C] -- C:\ProgramData\Menu Start
[2010-10-16 00:19:50 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumenty
[2010-10-16 00:19:50 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dane aplikacji
[2010-10-16 00:15:10 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2010-10-16 00:12:26 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2010-10-16 00:12:10 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[2010-02-03 23:00:00 | 000,139,264 | ---- | C] ( ) -- C:\Windows\sipr3260.dll

[color=#E56717]========== Files - Modified Within 60 Days ==========[/color]

[2010-12-06 18:49:20 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempzr3196.html
[2010-12-06 18:49:20 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempFJ3196.html
[2010-12-06 18:48:29 | 000,014,192 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010-12-06 18:48:29 | 000,014,192 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010-12-06 18:47:00 | 000,001,050 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010-12-06 18:45:46 | 001,523,412 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2010-12-06 18:45:46 | 000,687,590 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
[2010-12-06 18:45:46 | 000,606,992 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2010-12-06 18:45:46 | 000,131,176 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
[2010-12-06 18:45:46 | 000,103,370 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2010-12-06 18:41:22 | 000,001,046 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010-12-06 18:41:14 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010-12-06 18:41:09 | 2414,731,264 | -HS- | M] () -- C:\hiberfil.sys
[2010-12-06 17:43:42 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TemphaS336.html
[2010-12-06 17:43:42 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempfCv336.html
[2010-12-06 17:39:58 | 000,001,113 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010-12-06 12:50:00 | 000,001,943 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2010-12-06 12:16:44 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TemppI2012.html
[2010-12-06 12:16:44 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempES2012.html
[2010-12-05 21:24:19 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempfy4000.html
[2010-12-05 21:24:19 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempdr4000.html
[2010-12-05 20:19:31 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempGo3308.html
[2010-12-05 20:19:31 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempph3308.html
[2010-12-05 15:56:23 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempsf3868.html
[2010-12-05 15:56:23 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempWe3868.html
[2010-12-05 14:41:16 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TemprG3120.html
[2010-12-05 14:41:16 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempQD3120.html
[2010-12-05 11:19:46 | 000,007,602 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Resmon.ResmonCfg
[2010-12-05 11:18:16 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempST3884.html
[2010-12-05 10:45:53 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempev3844.html
[2010-12-04 22:22:52 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempSk3812.html
[2010-12-04 18:49:20 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Temppnr344.html
[2010-12-03 23:25:10 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempUi2820.html
[2010-12-03 19:18:06 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempvw2172.html
[2010-12-02 20:03:10 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempgC1096.html
[2010-12-02 14:35:01 | 007,793,152 | RHS- | M] () -- C:\ProgramData\GProton.exe
[2010-12-02 13:49:16 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempdd4088.html
[2010-12-02 05:53:34 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempTU3396.html
[2010-12-01 17:59:20 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempEe3824.html
[2010-11-30 15:38:30 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempcQ2816.html
[2010-11-30 13:22:13 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempDTe440.html
[2010-11-30 13:22:13 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempxBP440.html
[2010-11-29 17:42:18 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2010-11-29 17:42:06 | 000,024,152 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2010-11-29 16:11:29 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempzd3056.html
[2010-11-28 20:49:06 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempSW3804.html
[2010-11-28 19:52:01 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempCpI340.html
[2010-11-28 17:53:22 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempaH3628.html
[2010-11-28 12:10:26 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempSZ1816.html
[2010-11-28 12:10:26 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempwO1816.html
[2010-11-27 19:55:27 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempPD2696.html
[2010-11-27 16:32:53 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempor2716.html
[2010-11-27 11:15:54 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempHp3200.html
[2010-11-27 06:26:08 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempVS1968.html
[2010-11-26 22:27:42 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempIM2504.html
[2010-11-26 22:27:42 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempJu2504.html
[2010-11-26 18:36:25 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TemprL3628.html
[2010-11-26 18:36:25 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempsd3628.html
[2010-11-26 16:27:20 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempra3256.html
[2010-11-25 18:42:10 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempit1604.html
[2010-11-24 19:21:03 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempye3512.html
[2010-11-24 17:52:10 | 000,000,283 | ---- | M] () -- C:\Users\Ryszard\Documents\ax_files.xml
[2010-11-23 19:11:53 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempHv1124.html
[2010-11-22 21:03:29 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempZf4008.html
[2010-11-22 16:55:10 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempUF3096.html
[2010-11-22 14:19:28 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempKUo800.html
[2010-11-21 17:29:28 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempxR3872.html
[2010-11-21 17:29:28 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempww3872.html
[2010-11-21 03:44:49 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempJp3168.html
[2010-11-21 03:44:49 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempgI3168.html
[2010-11-20 21:59:57 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempEE3756.html
[2010-11-20 18:47:26 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempJp3844.html
[2010-11-19 21:54:12 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempeO2632.html
[2010-11-19 16:11:20 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempiT4084.html
[2010-11-19 15:35:37 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempQU2268.html
[2010-11-19 15:35:37 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempMP2268.html
[2010-11-18 23:08:52 | 000,002,776 | -HS- | M] () -- C:\ProgramData\KGyGaAvL.sys
[2010-11-18 22:59:17 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempiT3132.html
[2010-11-17 16:58:16 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempac2268.html
[2010-11-17 06:36:58 | 000,002,517 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
[2010-11-16 20:43:25 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempgN1036.html
[2010-11-16 20:00:12 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempON3396.html
[2010-11-16 18:14:56 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempHo3772.html
[2010-11-16 15:06:40 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempex3764.html
[2010-11-15 22:21:29 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempXz1908.html
[2010-11-15 20:02:45 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempDku900.html
[2010-11-15 17:18:58 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempqo2608.html
[2010-11-15 17:18:58 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Temphz2608.html
[2010-11-14 20:59:07 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempuT1608.html
[2010-11-14 20:18:07 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempbR1204.html
[2010-11-14 19:32:47 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempdo4040.html
[2010-11-14 16:35:57 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempHC3412.html
[2010-11-14 10:43:32 | 000,001,745 | ---- | M] () -- C:\Users\Public\Desktop\NHL® 09.lnk
[2010-11-14 07:35:17 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempQC1004.html
[2010-11-14 04:48:52 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempDs2052.html
[2010-11-13 16:35:12 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempeA1044.html
[2010-11-13 10:38:02 | 000,000,916 | ---- | M] () -- C:\Users\Ryszard\Desktop\BigRaceUSA — skrót.lnk
[2010-11-12 17:14:24 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempMcb444.html
[2010-11-12 13:43:16 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempOp3892.html
[2010-11-12 13:43:16 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Temped3892.html
[2010-11-11 22:00:20 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempurz780.html
[2010-11-11 17:50:06 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempui3352.html
[2010-11-11 14:51:04 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempit3916.html
[2010-11-11 14:51:04 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempYQ3916.html
[2010-11-11 13:31:35 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempCq3844.html
[2010-11-11 13:11:59 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempLb3332.html
[2010-11-11 11:11:03 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempqD3404.html
[2010-11-11 11:11:03 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempUJ3404.html
[2010-11-11 09:58:45 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempQD3348.html
[2010-11-11 09:58:45 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempSM3348.html
[2010-11-11 09:47:46 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempOO2276.html
[2010-11-11 09:47:46 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempOq2276.html
[2010-11-10 14:21:54 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempwA3704.html
[2010-11-10 05:05:32 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempPo3020.html
[2010-11-09 21:34:57 | 000,005,632 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-11-09 20:36:38 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempzs3392.html
[2010-11-09 17:59:39 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempfCz312.html
[2010-11-08 18:32:27 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempavw444.html
[2010-11-08 16:48:27 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempOh3388.html
[2010-11-08 05:13:55 | 000,054,551 | ---- | M] () -- C:\Users\Ryszard\Desktop\Naprawa komputerów.docx
[2010-11-07 20:13:02 | 001,196,544 | ---- | M] (MPC-HC Team) -- C:\Windows\SysWow64\VSFilter.dll
[2010-11-07 17:26:51 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempjY3424.html
[2010-11-07 12:42:25 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempqq3368.html
[2010-11-07 07:02:39 | 000,000,997 | ---- | M] () -- C:\Users\Public\Desktop\eMule.lnk
[2010-11-06 21:19:55 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempIQ4068.html
[2010-11-06 16:20:37 | 000,001,790 | ---- | M] () -- C:\Users\Public\Desktop\LMA Manager 2007.lnk
[2010-11-06 12:11:18 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempIt1884.html
[2010-11-06 07:21:31 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempie3432.html
[2010-11-06 06:26:36 | 000,000,778 | ---- | M] () -- C:\Users\Public\Desktop\Zuma Deluxe.lnk
[2010-11-06 00:16:32 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempoF2224.html
[2010-11-05 19:27:59 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempJW3096.html
[2010-11-04 23:04:32 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempvv3572.html
[2010-11-04 21:31:39 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempWc3136.html
[2010-11-04 18:21:30 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempOd1532.html
[2010-11-04 17:40:19 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempnX1536.html
[2010-11-04 17:28:45 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempKx2736.html
[2010-11-04 17:28:45 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempkW2736.html
[2010-11-03 22:01:42 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempQj3444.html
[2010-11-03 18:47:21 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempyB4092.html
[2010-11-03 15:38:34 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempsQ3180.html
[2010-11-03 05:30:54 | 000,049,152 | ---- | M] () -- C:\Users\Ryszard\Desktop\Kopia CURRICULUM VITAE-Ryszard.doc
[2010-11-02 19:30:10 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempQo2056.html
[2010-11-02 16:33:11 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TemplL3716.html
[2010-11-01 21:48:53 | 000,000,546 | ---- | M] () -- C:\Users\Ryszard\Documents\MyPlaylist_001.cplist
[2010-11-01 11:47:24 | 000,000,780 | ---- | M] () -- C:\Users\Ryszard\Desktop\Far Cry® 2.lnk
[2010-11-01 10:47:58 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempzy4036.html
[2010-10-31 17:59:52 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempVz3504.html
[2010-10-31 17:59:52 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempXT3504.html
[2010-10-31 15:52:21 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempcz1780.html
[2010-10-31 15:52:21 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempBT1780.html
[2010-10-31 12:28:48 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempbo3724.html
[2010-10-31 11:25:38 | 000,000,522 | ---- | M] () -- C:\Users\Ryszard\Desktop\FIFA 11 — skrót.lnk
[2010-10-31 10:00:43 | 000,001,135 | ---- | M] () -- C:\Users\Public\Desktop\EA Download Manager.lnk
[2010-10-30 18:31:28 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempDl1724.html
[2010-10-30 12:54:44 | 000,043,520 | ---- | M] () -- C:\Windows\SysWow64\ff_acm.acm
[2010-10-30 11:22:48 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_PCCSWpdDriver_01_05_00.Wdf
[2010-10-30 11:16:50 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempoDf356.html
[2010-10-30 11:16:50 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempTmo356.html
[2010-10-30 05:59:57 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempTu3260.html
[2010-10-29 22:56:51 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempVr3212.html
[2010-10-29 19:35:43 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempEZ1552.html
[2010-10-28 20:46:06 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempNO3196.html
[2010-10-27 10:27:45 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempbo3756.html
[2010-10-26 21:53:07 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempQr3924.html
[2010-10-26 21:53:07 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempVq3924.html
[2010-10-26 17:09:51 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempOs2728.html
[2010-10-24 19:25:57 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempxh1392.html
[2010-10-24 17:03:47 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempND3796.html
[2010-10-24 16:59:17 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempdA4028.html
[2010-10-24 16:59:17 | 000,002,089 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\Tempgi4028.html
[2010-10-24 10:37:37 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempTJw912.html
[2010-10-23 20:07:21 | 000,001,416 | ---- | M] () -- C:\Users\Ryszard\Desktop\TLR — skrót.lnk
[2010-10-23 19:47:23 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempxK3128.html
[2010-10-23 10:41:36 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempTX4080.html
[2010-10-22 21:25:07 | 000,001,001 | ---- | M] () -- C:\Users\Public\Desktop\Peggle Nights Deluxe.lnk
[2010-10-22 19:42:42 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempPy1804.html
[2010-10-22 17:57:02 | 000,001,090 | ---- | M] () -- C:\Users\Ryszard\Desktop\Your Unin-staller!.lnk
[2010-10-21 22:17:33 | 000,002,432 | ---- | M] () -- C:\Users\Ryszard\AppData\Local\TempbH2636.html
[2010-10-20 20:17:39 | 000,178,800 | ---- | M] (Sony DADC Austria AG.) -- C:\Windows\SysWow64\CmdLineExt_x64.dll
[2010-10-20 19:15:29 | 000,099,384 | ---- | M] () -- C:\Users\Ryszard\AppData\Roaming\inst.exe
[2010-10-20 19:15:29 | 000,082,816 | ---- | M] (VSO Software) -- C:\Windows\SysNative\drivers\pcouffin.sys
[2010-10-20 19:15:29 | 000,082,816 | ---- | M] (VSO Software) -- C:\Users\Ryszard\AppData\Roaming\pcouffin.sys
[2010-10-20 19:15:29 | 000,007,859 | ---- | M] () -- C:\Users\Ryszard\AppData\Roaming\pcouffin.cat
[2010-10-20 19:15:29 | 000,001,167 | ---- | M] () -- C:\Users\Ryszard\AppData\Roaming\pcouffin.inf
[2010-10-20 18:58:55 | 000,503,352 | ---- | M] () -- C:\Windows\SysNative\drivers\sptd.sys
[2010-10-19 19:31:17 | 000,314,016 | ---- | M] () -- C:\Windows\SysNative\drivers\atksgt.sys
[2010-10-19 19:31:17 | 000,043,680 | ---- | M] () -- C:\Windows\SysNative\drivers\lirsgt.sys
[2010-10-17 04:09:16 | 000,421,296 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2010-10-16 20:57:12 | 000,001,460 | ---- | M] () -- C:\Users\Ryszard\Desktop\BlackSite — skrót.lnk
[2010-10-16 18:01:44 | 000,001,350 | ---- | M] () -- C:\Users\Ryszard\Desktop\yugo_pc — skrót.lnk
[2010-10-16 17:43:35 | 000,000,088 | RHS- | M] () -- C:\ProgramData\72EF225DC8.sys
[2010-10-16 17:43:23 | 000,000,842 | ---- | M] () -- C:\Users\Public\Desktop\Corel WinDVD 2010.lnk
[2010-10-16 17:21:56 | 000,000,040 | -H-- | M] () -- C:\Windows\SysNative\ivireg.ivr
[2010-10-16 11:18:57 | 000,000,023 | -HS- | M] () -- C:\Windows\SysNative\edacded0.dat
[2010-10-16 11:18:57 | 000,000,023 | ---- | M] () -- C:\Windows\SysNative\bcdadac7.xml
[2010-10-16 11:05:33 | 000,001,553 | ---- | M] () -- C:\Users\Ryszard\Desktop\ALLPlayer — skrót.lnk
[2010-10-16 09:43:29 | 003,932,214 | ---- | M] () -- C:\Windows\Webshots for Ryszard.bmp
[2010-10-16 09:31:16 | 000,000,026 | ---- | M] () -- C:\Windows\Irremote.ini
[2010-10-16 06:13:59 | 000,001,032 | ---- | M] () -- C:\Users\Public\Desktop\OpenFM.lnk
[2010-10-16 06:13:59 | 000,001,003 | ---- | M] () -- C:\Users\Public\Desktop\Gadu-Gadu 10.lnk
[2010-10-16 05:45:50 | 000,000,040 | -HS- | M] () -- C:\ProgramData\.zreglib
[2010-10-16 02:22:12 | 000,000,947 | ---- | M] () -- C:\Users\Public\Desktop\µTorrent.lnk
[2010-10-16 01:31:46 | 000,467,512 | ---- | M] (Eset ) -- C:\Windows\SysNative\imon.dll
[2010-10-16 01:31:46 | 000,298,104 | ---- | M] (Eset ) -- C:\Windows\SysWow64\imon.dll
[2010-10-16 01:31:46 | 000,146,704 | ---- | M] (Eset ) -- C:\Windows\SysNative\drivers\amon.sys
[2010-10-16 01:12:38 | 000,000,010 | ---- | M] () -- C:\Windows\GSetup.ini
[2010-10-16 00:23:32 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2010-10-16 00:16:02 | 000,067,908 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
[2010-10-16 00:16:02 | 000,067,908 | ---- | M] () -- C:\Windows\SysNative\license.rtf

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2010-12-06 18:49:20 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempzr3196.html
[2010-12-06 18:49:20 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempFJ3196.html
[2010-12-06 17:39:58 | 000,001,113 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010-12-06 17:10:46 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TemphaS336.html
[2010-12-06 17:10:46 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempfCv336.html
[2010-12-06 12:50:00 | 000,001,943 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2010-12-06 11:36:31 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TemppI2012.html
[2010-12-06 11:36:31 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempES2012.html
[2010-12-05 21:15:52 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempfy4000.html
[2010-12-05 21:15:52 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempdr4000.html
[2010-12-05 20:11:06 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempGo3308.html
[2010-12-05 20:11:06 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempph3308.html
[2010-12-05 14:47:09 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempsf3868.html
[2010-12-05 14:47:09 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempWe3868.html
[2010-12-05 14:20:19 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TemprG3120.html
[2010-12-05 14:20:19 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempQD3120.html
[2010-12-05 11:19:46 | 000,007,602 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Resmon.ResmonCfg
[2010-12-05 11:12:01 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempST3884.html
[2010-12-05 10:36:07 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempev3844.html
[2010-12-04 21:55:57 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempSk3812.html
[2010-12-04 13:33:21 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Temppnr344.html
[2010-12-03 22:28:21 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempUi2820.html
[2010-12-03 18:28:10 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempvw2172.html
[2010-12-02 16:00:07 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempgC1096.html
[2010-12-02 14:35:05 | 007,793,152 | RHS- | C] () -- C:\ProgramData\GProton.exe
[2010-12-02 13:37:23 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempdd4088.html
[2010-12-01 23:15:48 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempTU3396.html
[2010-12-01 13:43:13 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempEe3824.html
[2010-11-30 15:31:52 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempcQ2816.html
[2010-11-30 13:19:15 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempDTe440.html
[2010-11-30 13:19:15 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempxBP440.html
[2010-11-29 14:58:24 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempzd3056.html
[2010-11-28 20:26:40 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempSW3804.html
[2010-11-28 19:09:13 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempCpI340.html
[2010-11-28 12:32:58 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempaH3628.html
[2010-11-28 08:32:55 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempSZ1816.html
[2010-11-28 08:32:55 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempwO1816.html
[2010-11-27 17:54:21 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempPD2696.html
[2010-11-27 13:30:41 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempor2716.html
[2010-11-27 11:00:30 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempHp3200.html
[2010-11-27 06:21:28 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempVS1968.html
[2010-11-26 19:22:48 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempIM2504.html
[2010-11-26 19:22:48 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempJu2504.html
[2010-11-26 18:20:26 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TemprL3628.html
[2010-11-26 18:20:26 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempsd3628.html
[2010-11-26 16:23:09 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempra3256.html
[2010-11-25 18:39:27 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempit1604.html
[2010-11-24 19:11:34 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempye3512.html
[2010-11-23 17:43:26 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempHv1124.html
[2010-11-22 19:35:32 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempZf4008.html
[2010-11-22 16:48:06 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempUF3096.html
[2010-11-22 14:17:25 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempKUo800.html
[2010-11-21 11:45:14 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempxR3872.html
[2010-11-21 11:45:14 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempww3872.html
[2010-11-20 23:20:13 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempJp3168.html
[2010-11-20 23:20:13 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempgI3168.html
[2010-11-20 21:49:05 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempEE3756.html
[2010-11-20 15:45:07 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempJp3844.html
[2010-11-19 18:10:16 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempeO2632.html
[2010-11-19 15:40:45 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempiT4084.html
[2010-11-19 15:29:34 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempQU2268.html
[2010-11-19 15:29:34 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempMP2268.html
[2010-11-18 22:58:55 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempiT3132.html
[2010-11-17 16:19:49 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempac2268.html
[2010-11-17 06:37:21 | 000,001,050 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010-11-17 06:37:20 | 000,001,046 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010-11-17 06:36:58 | 000,002,517 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk
[2010-11-16 20:34:16 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempgN1036.html
[2010-11-16 18:54:06 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempON3396.html
[2010-11-16 16:13:10 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempHo3772.html
[2010-11-16 14:56:53 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempex3764.html
[2010-11-15 21:58:19 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempXz1908.html
[2010-11-15 19:50:49 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempDku900.html
[2010-11-15 16:23:20 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempqo2608.html
[2010-11-15 16:23:20 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Temphz2608.html
[2010-11-14 20:49:30 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempuT1608.html
[2010-11-14 19:49:44 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempbR1204.html
[2010-11-14 18:00:07 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempdo4040.html
[2010-11-14 15:19:45 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempHC3412.html
[2010-11-14 10:43:32 | 000,001,745 | ---- | C] () -- C:\Users\Public\Desktop\NHL® 09.lnk
[2010-11-14 07:34:55 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempQC1004.html
[2010-11-14 04:19:51 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempDs2052.html
[2010-11-13 14:35:36 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempeA1044.html
[2010-11-13 10:38:02 | 000,000,916 | ---- | C] () -- C:\Users\Ryszard\Desktop\BigRaceUSA — skrót.lnk
[2010-11-12 16:24:50 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempMcb444.html
[2010-11-12 13:34:18 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempOp3892.html
[2010-11-12 13:34:18 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Temped3892.html
[2010-11-11 21:06:12 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempurz780.html
[2010-11-11 17:36:46 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempui3352.html
[2010-11-11 14:06:31 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempit3916.html
[2010-11-11 14:06:31 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempYQ3916.html
[2010-11-11 13:24:42 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempCq3844.html
[2010-11-11 12:06:33 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempLb3332.html
[2010-11-11 10:01:19 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempqD3404.html
[2010-11-11 10:01:19 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempUJ3404.html
[2010-11-11 09:53:42 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempQD3348.html
[2010-11-11 09:53:42 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempSM3348.html
[2010-11-11 07:19:14 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempOO2276.html
[2010-11-11 07:19:14 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempOq2276.html
[2010-11-10 13:40:10 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempwA3704.html
[2010-11-10 05:05:14 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempPo3020.html
[2010-11-09 20:31:47 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempzs3392.html
[2010-11-09 17:00:33 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempfCz312.html
[2010-11-08 18:27:18 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempavw444.html
[2010-11-08 15:35:13 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempOh3388.html
[2010-11-07 17:26:16 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempjY3424.html
[2010-11-07 12:36:11 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempqq3368.html
[2010-11-07 07:02:39 | 000,000,997 | ---- | C] () -- C:\Users\Public\Desktop\eMule.lnk
[2010-11-06 17:41:37 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempIQ4068.html
[2010-11-06 16:20:37 | 000,001,790 | ---- | C] () -- C:\Users\Public\Desktop\LMA Manager 2007.lnk
[2010-11-06 12:10:43 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempIt1884.html
[2010-11-06 07:14:35 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempie3432.html
[2010-11-06 06:26:36 | 000,000,778 | ---- | C] () -- C:\Users\Public\Desktop\Zuma Deluxe.lnk
[2010-11-05 23:35:19 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempoF2224.html
[2010-11-05 19:22:10 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempJW3096.html
[2010-11-05 06:30:52 | 000,054,551 | ---- | C] () -- C:\Users\Ryszard\Desktop\Naprawa komputerów.docx
[2010-11-04 22:27:56 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempvv3572.html
[2010-11-04 21:24:24 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempWc3136.html
[2010-11-04 17:58:14 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempOd1532.html
[2010-11-04 17:31:07 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempnX1536.html
[2010-11-04 17:16:43 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempKx2736.html
[2010-11-04 17:16:43 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempkW2736.html
[2010-11-03 19:47:36 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempQj3444.html
[2010-11-03 18:40:59 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempyB4092.html
[2010-11-03 15:12:25 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempsQ3180.html
[2010-11-03 05:30:54 | 000,049,152 | ---- | C] () -- C:\Users\Ryszard\Desktop\Kopia CURRICULUM VITAE-Ryszard.doc
[2010-11-02 19:29:01 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempQo2056.html
[2010-11-02 15:55:42 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TemplL3716.html
[2010-11-01 21:48:53 | 000,000,546 | ---- | C] () -- C:\Users\Ryszard\Documents\MyPlaylist_001.cplist
[2010-11-01 11:47:24 | 000,000,780 | ---- | C] () -- C:\Users\Ryszard\Desktop\Far Cry® 2.lnk
[2010-11-01 10:12:00 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempzy4036.html
[2010-10-31 17:54:46 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempVz3504.html
[2010-10-31 17:54:46 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempXT3504.html
[2010-10-31 15:07:58 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempcz1780.html
[2010-10-31 15:07:58 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempBT1780.html
[2010-10-31 11:25:38 | 000,000,522 | ---- | C] () -- C:\Users\Ryszard\Desktop\FIFA 11 — skrót.lnk
[2010-10-31 10:39:30 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempbo3724.html
[2010-10-31 10:00:43 | 000,001,135 | ---- | C] () -- C:\Users\Public\Desktop\EA Download Manager.lnk
[2010-10-30 14:21:12 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempDl1724.html
[2010-10-30 12:54:44 | 000,043,520 | ---- | C] () -- C:\Windows\SysWow64\ff_acm.acm
[2010-10-30 11:22:48 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_PCCSWpdDriver_01_05_00.Wdf
[2010-10-30 09:52:50 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempoDf356.html
[2010-10-30 09:52:50 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempTmo356.html
[2010-10-30 05:11:03 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempTu3260.html
[2010-10-29 22:33:53 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempVr3212.html
[2010-10-29 19:23:34 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempEZ1552.html
[2010-10-28 19:21:55 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempNO3196.html
[2010-10-27 10:25:44 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempbo3756.html
[2010-10-26 20:38:28 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempQr3924.html
[2010-10-26 20:38:28 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempVq3924.html
[2010-10-26 17:09:03 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempOs2728.html
[2010-10-24 19:09:08 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempxh1392.html
[2010-10-24 17:03:02 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempND3796.html
[2010-10-24 16:59:17 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempdA4028.html
[2010-10-24 16:59:17 | 000,002,089 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\Tempgi4028.html
[2010-10-24 10:29:22 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempTJw912.html
[2010-10-23 20:07:21 | 000,001,416 | ---- | C] () -- C:\Users\Ryszard\Desktop\TLR — skrót.lnk
[2010-10-23 19:41:53 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempxK3128.html
[2010-10-23 08:00:59 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempTX4080.html
[2010-10-22 21:25:07 | 000,001,001 | ---- | C] () -- C:\Users\Public\Desktop\Peggle Nights Deluxe.lnk
[2010-10-22 19:08:25 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempPy1804.html
[2010-10-22 17:57:02 | 000,001,090 | ---- | C] () -- C:\Users\Ryszard\Desktop\Your Unin-staller!.lnk
[2010-10-21 22:16:24 | 000,002,432 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\TempbH2636.html
[2010-10-20 19:15:58 | 000,000,034 | ---- | C] () -- C:\Users\Ryszard\AppData\Roaming\pcouffin.log
[2010-10-20 19:15:29 | 000,099,384 | ---- | C] () -- C:\Users\Ryszard\AppData\Roaming\inst.exe
[2010-10-20 19:15:29 | 000,007,859 | ---- | C] () -- C:\Users\Ryszard\AppData\Roaming\pcouffin.cat
[2010-10-20 19:15:29 | 000,001,167 | ---- | C] () -- C:\Users\Ryszard\AppData\Roaming\pcouffin.inf
[2010-10-20 19:12:33 | 000,000,283 | ---- | C] () -- C:\Users\Ryszard\Documents\ax_files.xml
[2010-10-19 19:10:21 | 000,314,016 | ---- | C] () -- C:\Windows\SysNative\drivers\atksgt.sys
[2010-10-19 19:10:20 | 000,043,680 | ---- | C] () -- C:\Windows\SysNative\drivers\lirsgt.sys
[2010-10-16 20:57:12 | 000,001,460 | ---- | C] () -- C:\Users\Ryszard\Desktop\BlackSite — skrót.lnk
[2010-10-16 18:01:44 | 000,001,350 | ---- | C] () -- C:\Users\Ryszard\Desktop\yugo_pc — skrót.lnk
[2010-10-16 17:43:23 | 000,000,842 | ---- | C] () -- C:\Users\Public\Desktop\Corel WinDVD 2010.lnk
[2010-10-16 17:24:15 | 000,000,088 | RHS- | C] () -- C:\ProgramData\72EF225DC8.sys
[2010-10-16 17:24:14 | 000,002,776 | -HS- | C] () -- C:\ProgramData\KGyGaAvL.sys
[2010-10-16 17:21:44 | 000,000,040 | -H-- | C] () -- C:\Windows\SysNative\ivireg.ivr
[2010-10-16 15:12:43 | 000,005,632 | ---- | C] () -- C:\Users\Ryszard\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-10-16 11:18:57 | 000,000,023 | -HS- | C] () -- C:\Windows\SysNative\edacded0.dat
[2010-10-16 11:18:57 | 000,000,023 | ---- | C] () -- C:\Windows\SysNative\bcdadac7.xml
[2010-10-16 11:05:33 | 000,001,553 | ---- | C] () -- C:\Users\Ryszard\Desktop\ALLPlayer — skrót.lnk
[2010-10-16 10:30:58 | 000,831,600 | ---- | C] () -- C:\Windows\SysWow64\Ctaa1.dat
[2010-10-16 09:31:16 | 000,000,026 | ---- | C] () -- C:\Windows\Irremote.ini
[2010-10-16 07:30:09 | 003,932,214 | ---- | C] () -- C:\Windows\Webshots for Ryszard.bmp
[2010-10-16 07:30:04 | 000,032,768 | ---- | C] () -- C:\Windows\SysWow64\WSVersionATX.ocx
[2010-10-16 07:07:30 | 000,503,352 | ---- | C] () -- C:\Windows\SysNative\drivers\sptd.sys
[2010-10-16 06:37:51 | 000,012,264 | ---- | C] () -- C:\Windows\SysNative\nvinfo.pb
[2010-10-16 06:13:59 | 000,001,032 | ---- | C] () -- C:\Users\Public\Desktop\OpenFM.lnk
[2010-10-16 06:13:59 | 000,001,003 | ---- | C] () -- C:\Users\Public\Desktop\Gadu-Gadu 10.lnk
[2010-10-16 05:42:08 | 000,000,040 | -HS- | C] () -- C:\ProgramData\.zreglib
[2010-10-16 02:22:12 | 000,000,947 | ---- | C] () -- C:\Users\Public\Desktop\µTorrent.lnk
[2010-10-16 01:19:20 | 000,008,750 | ---- | C] () -- C:\Windows\SysNative\nvdisp.nvu
[2010-10-16 00:57:27 | 000,666,112 | ---- | C] () -- C:\Windows\SysNative\RTCOM64.dll
[2010-10-16 00:46:26 | 000,000,010 | ---- | C] () -- C:\Windows\GSetup.ini
[2010-10-16 00:23:32 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2010-10-16 00:12:10 | 2414,731,264 | -HS- | C] () -- C:\hiberfil.sys
[2010-03-15 04:31:48 | 000,165,376 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2009-07-14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009-07-13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2005-12-07 11:31:00 | 000,202,752 | R--- | C] () -- C:\Windows\SysWow64\CddbCdda.dll

[color=#E56717]========== LOP Check ==========[/color]

[2010-10-16 15:12:15 | 000,000,000 | ---D | M] -- C:\Users\Ryszard\AppData\Roaming\ACD Systems
[2010-10-16 09:09:54 | 000,000,000 | ---D | M] -- C:\Users\Ryszard\AppData\Roaming\DAEMON Tools Lite
[2010-10-18 19:32:01 | 000,000,000 | ---D | M] -- C:\Users\Ryszard\AppData\Roaming\Gadu-Gadu 10
[2010-10-16 10:31:57 | 000,000,000 | ---D | M] -- C:\Users\Ryszard\AppData\Roaming\InterVideo
[2010-10-31 10:00:10 | 000,000,000 | ---D | M] -- C:\Users\Ryszard\AppData\Roaming\Leadertech
[2010-10-30 11:13:45 | 000,000,000 | ---D | M] -- C:\Users\Ryszard\AppData\Roaming\Nokia
[2010-10-30 11:24:50 | 000,000,000 | ---D | M] -- C:\Users\Ryszard\AppData\Roaming\NSeries
[2010-11-11 14:12:34 | 000,000,000 | ---D | M] -- C:\Users\Ryszard\AppData\Roaming\OpenCandy
[2010-10-29 19:34:19 | 000,000,000 | ---D | M] -- C:\Users\Ryszard\AppData\Roaming\OpenFM
[2010-10-30 11:03:00 | 000,000,000 | ---D | M] -- C:\Users\Ryszard\AppData\Roaming\PC Suite
[2010-10-21 19:12:50 | 000,000,000 | ---D | M] -- C:\Users\Ryszard\AppData\Roaming\Softland
[2010-10-22 17:57:03 | 000,000,000 | ---D | M] -- C:\Users\Ryszard\AppData\Roaming\URSoft
[2010-12-06 06:07:29 | 000,000,000 | ---D | M] -- C:\Users\Ryszard\AppData\Roaming\uTorrent
[2010-10-20 19:15:58 | 000,000,000 | ---D | M] -- C:\Users\Ryszard\AppData\Roaming\Vso
[2010-12-02 21:58:29 | 000,000,000 | ---D | M] -- C:\Users\Ryszard\AppData\Roaming\Win7codecs
[2010-12-06 16:29:28 | 000,032,608 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

[color=#E56717]========== Purity Check ==========[/color]



[color=#E56717]========== Custom Scans ==========[/color]


[color=#A23BEC]< %systemdrive%\*.* >[/color]
[2010-10-16 01:13:56 | 000,000,010 | ---- | M] () -- C:\csb.log
[2010-12-06 18:41:09 | 2414,731,264 | -HS- | M] () -- C:\hiberfil.sys
[2010-12-06 17:43:20 | 000,001,131 | ---- | M] () -- C:\mbam-log-2010-12-06 (17-43-01).txt
[2010-12-06 18:41:12 | 3219,644,416 | -HS- | M] () -- C:\pagefile.sys
[2010-10-16 01:02:39 | 000,000,773 | ---- | M] () -- C:\RHDSetup.log


[color=#A23BEC]< MD5 for: AGP440.SYS >[/color]
[2009-07-14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysWow64\DriverStore\FileRepository\machine.inf_amd64_neutral_9e6bb86c3b39a3e9\AGP440.sys
[2009-07-14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys

[color=#A23BEC]< MD5 for: ATAPI.SYS >[/color]
[2009-07-14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysWow64\DriverStore\FileRepository\mshdc.inf_amd64_neutral_a69a58a4286f0b22\atapi.sys
[2009-07-14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys

[color=#A23BEC]< MD5 for: BEEP.SYS >[/color]
[2009-07-14 01:00:13 | 000,006,656 | ---- | M] (Microsoft Corporation) MD5=16A47CE2DECC9B099349A5F840654746 -- C:\Windows\winsxs\amd64_microsoft-windows-beepsys_31bf3856ad364e35_6.1.7600.16385_none_201592fa214e4f02\beep.sys

[color=#A23BEC]< MD5 for: CDROM.SYS >[/color]
[2009-07-14 00:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\SysWow64\DriverStore\FileRepository\cdrom.inf_amd64_neutral_8363d00ecae4322d\cdrom.sys
[2009-07-14 00:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys

[color=#A23BEC]< MD5 for: NDIS.SYS >[/color]
[2009-07-14 02:48:27 | 000,947,776 | ---- | M] (Microsoft Corporation) MD5=CAD515DBD07D082BB317D9928CE8962C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.16385_none_03bc1d6e35c013bf\ndis.sys

[color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
[2009-07-14 02:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe

[color=#E56717]========== Alternate Data Streams ==========[/color]

@Alternate Data Stream - 24 bytes -> C:\Windows:DF6F26DF1E58520F
@Alternate Data Stream - 157 bytes -> C:\ProgramData\TEMP:1CE11B51

< End of report >[/log]

System operacyjny Windows 7

Tomek01
komentarz
komentarz

Wrzuć jeszcze log RSIT oraz Gmer, odinstalowując jednostki emulujące napęd, np Alcohol, Deamon Tools oraz sterownik sptd.sys

Wciąż szukasz rozwiązania problemu? Napisz teraz na forum!

Możesz zadać pytanie bez konieczności rejestracji - wystarczy, że wypełnisz formularz.

×
×
  • Dodaj nową pozycję...

Powiadomienie o plikach cookie

Strona wykorzystuje pliki cookies w celu prawidłowego świadczenia usług i wygody użytkowników. Warunki przechowywania i dostępu do plików cookies możesz zmienić w ustawieniach przeglądarki.