1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
11.
12.
13.
14.
15.
16.
17.
18.
19.
20.
21.
22.
23.
24.
25.
26.
27.
28.
29.
30.
31.
32.
33.
34.
35.
36.
37.
38.
39.
40.
41.
42.
43.
44.
45.
46.
47.
48.
49.
50.
51.
52.
53.
54.
55.
56.
57.
58.
59.
60.
61.
62.
63.
64.
65.
66.
67.
68.
69.
70.
71.
72.
73.
74.
75.
76.
77.
78.
79.
80.
81.
82.
83.
84.
85.
86.
87.
88.
89.
90.
91.
92.
93.
94.
95.
96.
97.
98.
99.
100.
101.
102.
103.
104.
105.
106.
107.
108.
109.
110.
111.
112.
113.
114.
115.
116.
117.
118.
119.
120.
121.
122.
123.
124.
125.
126.
127.
128.
129.
130.
131.
132.
133.
134.
135.
136.
137.
138.
139.
140.
141.
142.
143.
144.
145.
146.
147.
148.
149.
150.
151.
152.
153.
154.
155.
156.
157.
158.
159.
160.
161.
162.
163.
164.
165.
166.
167.
168.
169.
170.
171.
172.
173.
174.
175.
176.
177.
178.
179.
180.
181.
182.
183.
184.
185.
186.
187.
188.
189.
190.
191.
192.
193.
194.
195.
196.
197.
198.
199.
200.
201.
202.
203.
204.
205.
206.
207.
208.
209.
210.
211.
212.
213.
214.
215.
216.
217.
218.
219.
220.
221.
222.
223.
224.
225.
226.
227.
228.
229.
230.
231.
232.
233.
234.
235.
236.
237.
238.
239.
240.
241.
242.
243.
244.
245.
246.
247.
248.
249.
250.
251.
252.
253.
254.
255.
256.
257.
258.
259.
260.
261.
262.
263.
264.
265.
266.
267.
268.
269.
270.
271.
272.
273.
274.
275.
276.
277.
278.
279.
280.
281.
282.
283.
284.
285.
286.
287.
288.
289.
290.
291.
292.
293.
294.
295.
296.
297.
298.
299.
300.
301.
302.
303.
304.
305.
306.
307.
308.
309.
310.
311.
312.
313.
314.
315.
316.
317.
318.
319.
320.
321.
322.
323.
324.
325.
326.
327.
328.
329.
330.
331.
332.
333.
334.
335.
336.
337.
338.
339.
340.
341.
342.
343.
344.
345.
346.
347.
348.
349.
350.
351.
352.
353.
354.
355.
356.
357.
358.
359.
360.
361.
362.
363.
364.
365.
366.
367.
368.
369.
370.
371.
372.
373.
374. | OTL logfile created on: 2010-07-29 13:14:02 - Run 1
OTL by OldTimer - Version 3.2.9.1 Folder = C:\\Users\\Bula\\Downloads
Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 69,00% Memory free
6,00 Gb Paging File | 5,00 Gb Available in Paging File | 84,00% Paging File free
Paging file location(s): ?:\\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\\Windows | %ProgramFiles% = C:\\Program Files
Drive C: | 195,31 Gb Total Space | 96,23 Gb Free Space | 49,27% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
Drive E: | 205,54 Gb Total Space | 141,61 Gb Free Space | 68,89% Space Free | Partition Type: NTFS
F: Drive not present or media not loaded
Drive G: | 3,73 Gb Total Space | 0,05 Gb Free Space | 1,27% Space Free | Partition Type: FAT32
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: BULA-PC
Current User Name: Bula
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
[color=#E56717]========== Processes (SafeList) ==========[/color]
PRC - [2010-07-29 13:11:21 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\\Users\\Bula\\Downloads\\OTL.exe
PRC - [2010-07-24 23:12:00 | 000,910,296 | ---- | M] (Mozilla Corporation) -- C:\\Program Files\\Mozilla Firefox\\firefox.exe
PRC - [2010-07-24 23:12:00 | 000,014,808 | ---- | M] (Mozilla Corporation) -- C:\\Program Files\\Mozilla Firefox\\plugin-container.exe
PRC - [2009-11-24 11:32:22 | 000,234,792 | ---- | M] (Skype Technologies S.A.) -- C:\\Program Files\\Skype\\Toolbars\\Shared\\SkypeNames2.exe
PRC - [2009-10-31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) -- C:\\Windows\\explorer.exe
PRC - [2009-10-30 13:57:08 | 000,369,200 | ---- | M] (DT Soft Ltd) -- C:\\Program Files\\DAEMON Tools Lite\\DTLite.exe
PRC - [2009-10-20 19:39:28 | 000,340,456 | ---- | M] (Kaspersky Lab) -- C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2010\\avp.exe
PRC - [2009-10-20 19:34:38 | 000,207,376 | ---- | M] (Kaspersky Lab) -- C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2010\\klwtblfs.exe
PRC - [2009-08-18 03:36:36 | 000,348,160 | ---- | M] (AMD) -- C:\\Windows\\System32\\atieclxx.exe
PRC - [2009-08-18 03:36:08 | 000,176,128 | ---- | M] (AMD) -- C:\\Windows\\System32\\atiesrxx.exe
PRC - [2009-07-14 03:14:42 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\\Windows\\System32\\taskhost.exe
PRC - [2009-07-14 03:14:12 | 000,100,864 | ---- | M] (Microsoft Corporation) -- C:\\Windows\\System32\\audiodg.exe
[color=#E56717]========== Modules (SafeList) ==========[/color]
MOD - [2010-07-29 13:11:21 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\\Users\\Bula\\Downloads\\OTL.exe
MOD - [2009-07-14 03:16:15 | 000,099,840 | ---- | M] (Microsoft Corporation) -- C:\\Windows\\System32\\sspicli.dll
MOD - [2009-07-14 03:16:13 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\\Windows\\System32\\sechost.dll
MOD - [2009-07-14 03:16:13 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\\Windows\\System32\\samcli.dll
MOD - [2009-07-14 03:16:12 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\\Windows\\System32\\profapi.dll
MOD - [2009-07-14 03:16:03 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\\Windows\\System32\\netutils.dll
MOD - [2009-07-14 03:15:35 | 000,288,256 | ---- | M] (Microsoft Corporation) -- C:\\Windows\\System32\\KernelBase.dll
MOD - [2009-07-14 03:15:13 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\\Windows\\System32\\dwmapi.dll
MOD - [2009-07-14 03:15:11 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\\Windows\\System32\\devobj.dll
MOD - [2009-07-14 03:15:07 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\\Windows\\System32\\cryptbase.dll
MOD - [2009-07-14 03:15:02 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\\Windows\\System32\\cfgmgr32.dll
MOD - [2009-07-14 03:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\\Windows\\System32\\msscript.ocx
MOD - [2009-07-14 03:03:50 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\\comctl32.dll
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
SRV - [2010-06-03 09:10:58 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\\Program Files\\Common Files\\Macrovision Shared\\FLEXnet Publisher\\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010-06-01 14:49:52 | 001,343,400 | ---- | M] (Microsoft Corporation) [Unknown | Stopped] -- C:\\Windows\\System32\\Wat\\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2010-03-18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009-10-20 19:39:28 | 000,340,456 | ---- | M] (Kaspersky Lab) [Auto | Running] -- C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2010\\avp.exe -- (AVP)
SRV - [2009-08-18 03:36:08 | 000,176,128 | ---- | M] (AMD) [Auto | Running] -- C:\\Windows\\System32\\atiesrxx.exe -- (AMD External Events Utility)
SRV - [2009-07-14 03:16:21 | 000,185,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\\Windows\\System32\\wwansvc.dll -- (WwanSvc)
SRV - [2009-07-14 03:16:17 | 000,151,552 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\\Windows\\System32\\wbiosrvc.dll -- (WbioSrvc)
SRV - [2009-07-14 03:16:17 | 000,119,808 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\\Windows\\System32\\umpo.dll -- (Power)
SRV - [2009-07-14 03:16:16 | 000,037,376 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\\Windows\\System32\\themeservice.dll -- (Themes)
SRV - [2009-07-14 03:16:15 | 000,053,760 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\\Windows\\System32\\sppuinotify.dll -- (sppuinotify)
SRV - [2009-07-14 03:16:13 | 000,043,520 | ---- | M] (Microsoft Corporation) [Unknown | Running] -- C:\\Windows\\System32\\RpcEpMap.dll -- (RpcEptMapper)
SRV - [2009-07-14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\\Windows\\System32\\sensrsvc.dll -- (SensrSvc)
SRV - [2009-07-14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\\Windows\\System32\\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009-07-14 03:16:12 | 000,269,824 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\\Windows\\System32\\pnrpsvc.dll -- (PNRPsvc)
SRV - [2009-07-14 03:16:12 | 000,269,824 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\\Windows\\System32\\pnrpsvc.dll -- (p2pimsvc)
SRV - [2009-07-14 03:16:12 | 000,165,376 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\\Windows\\System32\\provsvc.dll -- (HomeGroupProvider)
SRV - [2009-07-14 03:16:12 | 000,020,480 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\\Windows\\System32\\pnrpauto.dll -- (PNRPAutoReg)
SRV - [2009-07-14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\\Program Files\\Windows Defender\\MpSvc.dll -- (WinDefend)
SRV - [2009-07-14 03:15:36 | 000,194,560 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\\Windows\\System32\\ListSvc.dll -- (HomeGroupListener)
SRV - [2009-07-14 03:15:21 | 000,797,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\\Windows\\System32\\FntCache.dll -- (FontCache)
SRV - [2009-07-14 03:15:11 | 000,253,440 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\\Windows\\System32\\dhcpcore.dll -- (Dhcp)
SRV - [2009-07-14 03:15:10 | 000,218,624 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\\Windows\\System32\\defragsvc.dll -- (defragsvc)
SRV - [2009-07-14 03:14:59 | 000,076,800 | ---- | M] (Microsoft Corporation) [Unknown | Stopped] -- C:\\Windows\\System32\\bdesvc.dll -- (BDESVC)
SRV - [2009-07-14 03:14:58 | 000,088,064 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\\Windows\\System32\\AxInstSv.dll -- (AxInstSV) Instalator formantów ActiveX (AxInstSV)
SRV - [2009-07-14 03:14:53 | 000,027,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\\Windows\\System32\\appidsvc.dll -- (AppIDSvc)
SRV - [2009-07-14 03:14:29 | 003,179,520 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\\Windows\\System32\\sppsvc.exe -- (sppsvc)
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
DRV - [2010-06-21 13:04:29 | 000,311,312 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\\Windows\\System32\\drivers\\klif.sys -- (KLIF)
DRV - [2010-04-07 12:16:16 | 000,376,160 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- C:\\Windows\\System32\\drivers\\netr61.sys -- (rt61x86)
DRV - [2010-03-21 23:25:42 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\\Windows\\System32\\Drivers\\sptd.sys -- (sptd)
DRV - [2010-01-27 17:22:46 | 001,254,912 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\\Windows\\System32\\drivers\\athr.sys -- (athr)
DRV - [2009-12-11 09:44:02 | 000,133,720 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\\Windows\\System32\\Drivers\\ksecpkg.sys -- (KSecPkg)
DRV - [2009-10-14 20:18:34 | 000,036,880 | ---- | M] (Kaspersky Lab) [Kernel | Boot | Running] -- C:\\Windows\\system32\\drivers\\klbg.sys -- (klbg)
DRV - [2009-10-02 18:39:36 | 000,019,472 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\\Windows\\System32\\drivers\\klmouflt.sys -- (klmouflt)
DRV - [2009-09-14 13:46:36 | 000,021,520 | ---- | M] (Kaspersky Lab) [Kernel | System | Running] -- C:\\Windows\\System32\\drivers\\klim6.sys -- (KLIM6)
DRV - [2009-09-01 14:29:50 | 000,128,016 | ---- | M] (Kaspersky Lab) [Kernel | System | Running] -- C:\\Windows\\System32\\drivers\\kl1.sys -- (kl1)
DRV - [2009-08-18 04:48:06 | 004,994,560 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\\Windows\\System32\\drivers\\atikmdag.sys -- (atikmdag)
DRV - [2009-07-14 03:26:21 | 000,015,952 | ---- | M] (CMD Technology, Inc.) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\cmdide.sys -- (cmdide)
DRV - [2009-07-14 03:26:17 | 000,297,552 | ---- | M] (Adaptec, Inc.) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\adpahci.sys -- (adpahci)
DRV - [2009-07-14 03:26:15 | 000,422,976 | ---- | M] (Adaptec, Inc.) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\adp94xx.sys -- (adp94xx)
DRV - [2009-07-14 03:26:15 | 000,159,312 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\amdsbs.sys -- (amdsbs)
DRV - [2009-07-14 03:26:15 | 000,146,512 | ---- | M] (Adaptec, Inc.) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\adpu320.sys -- (adpu320)
DRV - [2009-07-14 03:26:15 | 000,086,608 | ---- | M] (Adaptec, Inc.) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\arcsas.sys -- (arcsas)
DRV - [2009-07-14 03:26:15 | 000,079,952 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\amdsata.sys -- (amdsata)
DRV - [2009-07-14 03:26:15 | 000,076,368 | ---- | M] (Adaptec, Inc.) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\arc.sys -- (arc)
DRV - [2009-07-14 03:26:15 | 000,023,616 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\\Windows\\system32\\DRIVERS\\amdxata.sys -- (amdxata)
DRV - [2009-07-14 03:26:15 | 000,014,400 | ---- | M] (Acer Laboratories Inc.) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\aliide.sys -- (aliide)
DRV - [2009-07-14 03:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\nvstor.sys -- (nvstor)
DRV - [2009-07-14 03:20:44 | 000,117,312 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\nvraid.sys -- (nvraid)
DRV - [2009-07-14 03:20:44 | 000,044,624 | ---- | M] (IBM Corporation) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\nfrd960.sys -- (nfrd960)
DRV - [2009-07-14 03:20:37 | 000,089,168 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\lsi_sas.sys -- (LSI_SAS)
DRV - [2009-07-14 03:20:36 | 000,332,352 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\iaStorV.sys -- (iaStorV)
DRV - [2009-07-14 03:20:36 | 000,235,584 | ---- | M] (LSI Corporation, Inc.) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\MegaSR.sys -- (MegaSR)
DRV - [2009-07-14 03:20:36 | 000,096,848 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\lsi_scsi.sys -- (LSI_SCSI)
DRV - [2009-07-14 03:20:36 | 000,095,824 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\lsi_fc.sys -- (LSI_FC)
DRV - [2009-07-14 03:20:36 | 000,054,864 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\lsi_sas2.sys -- (LSI_SAS2)
DRV - [2009-07-14 03:20:36 | 000,041,040 | ---- | M] (Intel Corp./ICP vortex GmbH) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\iirsp.sys -- (iirsp)
DRV - [2009-07-14 03:20:36 | 000,030,800 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\megasas.sys -- (megasas)
DRV - [2009-07-14 03:20:36 | 000,013,904 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\\Windows\\System32\\drivers\\hwpolicy.sys -- (hwpolicy)
DRV - [2009-07-14 03:20:28 | 000,453,712 | ---- | M] (Emulex) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\elxstor.sys -- (elxstor)
DRV - [2009-07-14 03:20:28 | 000,070,720 | ---- | M] (Adaptec, Inc.) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\djsvs.sys -- (aic78xx)
DRV - [2009-07-14 03:20:28 | 000,067,152 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\HpSAMD.sys -- (HpSAMD)
DRV - [2009-07-14 03:20:28 | 000,046,160 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\\Windows\\System32\\drivers\\fsdepends.sys -- (FsDepends)
DRV - [2009-07-14 03:19:11 | 000,141,904 | ---- | M] (VIA Technologies Inc.,Ltd) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\vsmraid.sys -- (vsmraid)
DRV - [2009-07-14 03:19:10 | 000,175,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\vmbus.sys -- (vmbus)
DRV - [2009-07-14 03:19:10 | 000,159,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\vhdmp.sys -- (vhdmp)
DRV - [2009-07-14 03:19:10 | 000,040,896 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\\Windows\\system32\\DRIVERS\\vmstorfl.sys -- (storflt)
DRV - [2009-07-14 03:19:10 | 000,032,832 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\\Windows\\system32\\DRIVERS\\vdrvroot.sys -- (vdrvroot)
DRV - [2009-07-14 03:19:10 | 000,028,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\storvsc.sys -- (storvsc)
DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\\Windows\\System32\\drivers\\wimmount.sys -- (WIMMount)
DRV - [2009-07-14 03:19:10 | 000,016,976 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\viaide.sys -- (viaide)
DRV - [2009-07-14 03:19:04 | 001,383,488 | ---- | M] (QLogic Corporation) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\ql2300.sys -- (ql2300)
DRV - [2009-07-14 03:19:04 | 000,173,648 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\\Windows\\System32\\drivers\\rdyboost.sys -- (rdyboost)
DRV - [2009-07-14 03:19:04 | 000,106,064 | ---- | M] (QLogic Corporation) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\ql40xx.sys -- (ql40xx)
DRV - [2009-07-14 03:19:04 | 000,077,888 | ---- | M] (Silicon Integrated Systems) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\sisraid4.sys -- (SiSRaid4)
DRV - [2009-07-14 03:19:04 | 000,043,088 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\\Windows\\System32\\drivers\\pcw.sys -- (pcw)
DRV - [2009-07-14 03:19:04 | 000,040,016 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\SiSRaid2.sys -- (SiSRaid2)
DRV - [2009-07-14 03:19:04 | 000,021,072 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\stexstor.sys -- (stexstor)
DRV - [2009-07-14 03:17:54 | 000,369,568 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\\Windows\\System32\\Drivers\\cng.sys -- (CNG)
DRV - [2009-07-14 02:57:25 | 000,272,128 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\\Windows\\System32\\Drivers\\Brserid.sys -- (Brserid) Brother MFC Serial Port Interface Driver (WDM)
DRV - [2009-07-14 02:02:41 | 000,018,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\\Windows\\System32\\drivers\\rdpbus.sys -- (rdpbus)
DRV - [2009-07-14 02:01:41 | 000,007,168 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\\Windows\\System32\\drivers\\RDPREFMP.sys -- (RDPREFMP)
DRV - [2009-07-14 01:55:00 | 000,049,152 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\\Windows\\System32\\drivers\\agilevpn.sys -- (RasAgileVpn) WAN Miniport (IKEv2)
DRV - [2009-07-14 01:53:51 | 000,009,728 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\\Windows\\System32\\drivers\\wfplwf.sys -- (WfpLwf)
DRV - [2009-07-14 01:52:44 | 000,027,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\\Windows\\System32\\drivers\\ndiscap.sys -- (NdisCap)
DRV - [2009-07-14 01:52:10 | 000,014,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\\Windows\\System32\\drivers\\vwifimp.sys -- (vwifimp)
DRV - [2009-07-14 01:52:04 | 000,048,128 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\\Windows\\System32\\drivers\\vwififlt.sys -- (vwififlt)
DRV - [2009-07-14 01:52:02 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\\Windows\\System32\\drivers\\vwifibus.sys -- (vwifibus)
DRV - [2009-07-14 01:52:00 | 000,163,328 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\1394ohci.sys -- (1394ohci)
DRV - [2009-07-14 01:51:35 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\umpass.sys -- (UmPass)
DRV - [2009-07-14 01:51:23 | 000,080,640 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\\Windows\\System32\\drivers\\USBAUDIO.sys -- (usbaudio) USB Audio Driver (WDM)
DRV - [2009-07-14 01:51:08 | 000,004,096 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\\Windows\\System32\\drivers\\mshidkmdf.sys -- (mshidkmdf)
DRV - [2009-07-14 01:46:55 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\MTConfig.sys -- (MTConfig)
DRV - [2009-07-14 01:45:26 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\\Windows\\System32\\drivers\\CompositeBus.sys -- (CompositeBus)
DRV - [2009-07-14 01:36:52 | 000,050,176 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\drivers\\appid.sys -- (AppID)
DRV - [2009-07-14 01:33:50 | 000,026,624 | ---- | M] (Microsoft Corporation) [Kernel | Unknown | Stopped] -- C:\\Windows\\System32\\drivers\\scfilter.sys -- (scfilter)
DRV - [2009-07-14 01:28:47 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\vms3cap.sys -- (s3cap)
DRV - [2009-07-14 01:28:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\VMBusHID.sys -- (VMBusHID)
DRV - [2009-07-14 01:24:05 | 000,032,256 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\\Windows\\System32\\drivers\\discache.sys -- (discache)
DRV - [2009-07-14 01:19:21 | 000,021,504 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\HidBatt.sys -- (HidBatt)
DRV - [2009-07-14 01:16:36 | 000,009,728 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\acpipmi.sys -- (AcpiPmi)
DRV - [2009-07-14 01:11:04 | 000,052,736 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\amdppm.sys -- (AmdPPM)
DRV - [2009-07-14 00:54:14 | 000,026,624 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\drivers\\hcw85cir.sys -- (hcw85cir)
DRV - [2009-07-14 00:53:33 | 000,012,160 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\\Windows\\System32\\Drivers\\BrUsbMdm.sys -- (BrUsbMdm)
DRV - [2009-07-14 00:53:33 | 000,011,904 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\\Windows\\System32\\Drivers\\BrUsbSer.sys -- (BrUsbSer)
DRV - [2009-07-14 00:53:32 | 000,062,336 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\\Windows\\System32\\Drivers\\BrSerWdm.sys -- (BrSerWdm)
DRV - [2009-07-14 00:53:28 | 000,013,568 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\BrFiltLo.sys -- (BrFiltLo)
DRV - [2009-07-14 00:53:28 | 000,005,248 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\BrFiltUp.sys -- (BrFiltUp)
DRV - [2009-07-14 00:02:49 | 000,229,888 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\\Windows\\System32\\drivers\\b57nd60x.sys -- (b57nd60x)
DRV - [2009-07-14 00:02:48 | 003,100,160 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\evbdx.sys -- (ebdrv)
DRV - [2009-07-14 00:02:48 | 000,430,080 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\\Windows\\system32\\DRIVERS\\bxvbdx.sys -- (b06bdrv)
DRV - [2009-03-01 23:05:32 | 000,139,776 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\\Windows\\System32\\drivers\\Rt86win7.sys -- (RTL8167)
DRV - [2005-10-21 07:25:32 | 000,013,396 | ---- | M] () [Kernel | System | Running] -- C:\\Windows\\system32\\drivers\\MTictwl.sys -- (NCPro)
DRV - [2005-10-21 07:25:32 | 000,013,396 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\\Windows\\System32\\drivers\\MTictwl.sys -- (MagicTune)
DRV - [2004-03-19 17:11:22 | 000,090,968 | ---- | M] (VM) [Kernel | On_Demand | Stopped] -- C:\\Windows\\System32\\drivers\\usbVM31b.sys -- (ZSMC301b)
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
[color=#E56717]========== Internet Explorer ==========[/color]
IE - HKU\\.DEFAULT\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings: \"ProxyEnable\" = 0
IE - HKU\\S-1-5-18\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings: \"ProxyEnable\" = 0
IE - HKU\\S-1-5-21-1000485572-238966527-2242377345-1000\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings: \"ProxyEnable\" = 0
IE - HKU\\S-1-5-21-1000485572-238966527-2242377345-1000\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings: \"ProxyOverride\" = *.local
[color=#E56717]========== FireFox ==========[/color]
FF - prefs.js..extensions.enabledItems: linkfilter@kaspersky.ru:9.0.0.736
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198
FF - prefs.js..extensions.enabledItems: openmedspel@e-medtools.com:1.0.8
FF - HKLM\\software\\mozilla\\Mozilla Firefox 3.6.8\\extensions\\\\Components: C:\\Program Files\\Mozilla Firefox\\components [2010-07-24 23:12:01 | 000,000,000 | ---D | M]
FF - HKLM\\software\\mozilla\\Mozilla Firefox 3.6.8\\extensions\\\\Plugins: C:\\Program Files\\Mozilla Firefox\\plugins [2010-07-25 23:41:47 | 000,000,000 | ---D | M]
FF - HKLM\\software\\mozilla\\Thunderbird\\Extensions\\\\{eea12ec4-729d-4703-bc37-106ce9879ce2}: C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2010\\THBExt [2010-06-21 12:51:35 | 000,000,000 | ---D | M]
[2010-03-21 18:39:31 | 000,000,000 | ---D | M] -- C:\\Users\\Bula\\AppData\\Roaming\\mozilla\\Extensions
[2010-07-28 00:37:22 | 000,000,000 | ---D | M] -- C:\\Users\\Bula\\AppData\\Roaming\\mozilla\\Firefox\\Profiles\\6nblbknq.default\\extensions
[2010-04-21 20:47:49 | 000,000,000 | ---D | M] -- C:\\Users\\Bula\\AppData\\Roaming\\mozilla\\Firefox\\Profiles\\6nblbknq.default\\extensions\\openmedspel@e-medtools.com
[2010-04-12 20:52:30 | 000,000,000 | ---D | M] -- C:\\Program Files\\Mozilla Firefox\\extensions
[2010-04-12 20:52:30 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\\Program Files\\Mozilla Firefox\\extensions\\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2010-03-21 19:27:11 | 000,000,000 | ---D | M] -- C:\\Program Files\\Mozilla Firefox\\extensions\\linkfilter@kaspersky.ru
[2010-01-16 03:08:36 | 000,002,767 | ---- | M] () -- C:\\Program Files\\Mozilla Firefox\\searchplugins\\allegro-pl.xml
[2010-01-16 03:08:36 | 000,001,406 | ---- | M] () -- C:\\Program Files\\Mozilla Firefox\\searchplugins\\fbc-pl.xml
[2010-01-16 03:08:36 | 000,000,917 | ---- | M] () -- C:\\Program Files\\Mozilla Firefox\\searchplugins\\merlin-pl.xml
[2010-01-16 03:08:36 | 000,000,858 | ---- | M] () -- C:\\Program Files\\Mozilla Firefox\\searchplugins\\pwn-pl.xml
[2010-01-16 03:08:36 | 000,001,183 | ---- | M] () -- C:\\Program Files\\Mozilla Firefox\\searchplugins\\wikipedia-pl.xml
[2010-01-16 03:08:36 | 000,001,683 | ---- | M] () -- C:\\Program Files\\Mozilla Firefox\\searchplugins\\wp-pl.xml
O1 HOSTS File: ([2009-06-10 23:39:37 | 000,000,824 | ---- | M]) - C:\\Windows\\System32\\drivers\\etc\\hosts
O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2010\\ievkbd.dll (Kaspersky Lab)
O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2010\\klwtbbho.dll (Kaspersky Lab)
O4 - HKLM..\\Run: [AVP] C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2010\\avp.exe (Kaspersky Lab)
O4 - HKU\\S-1-5-21-1000485572-238966527-2242377345-1000..\\Run: [DAEMON Tools Lite] C:\\Program Files\\DAEMON Tools Lite\\DTLite.exe (DT Soft Ltd)
O4 - HKU\\S-1-5-19..\\RunOnce: [mctadmin] C:\\Windows\\System32\\mctadmin.exe (Microsoft Corporation)
O4 - HKU\\S-1-5-20..\\RunOnce: [mctadmin] C:\\Windows\\System32\\mctadmin.exe (Microsoft Corporation)
O6 - HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\policies\\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\policies\\System: ConsentPromptBehaviorUser = 3
O8 - Extra context menu item: Dodaj do blokowanych banerów - C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2010\\ie_banner_deny.htm ()
O9 - Extra Button: &Wirtualna klawiatura - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2010\\klwtbbho.dll (Kaspersky Lab)
O9 - Extra Button: &Sprawdzanie adresów - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2010\\klwtbbho.dll (Kaspersky Lab)
O10 - NameSpace_Catalog5\\Catalog_Entries\\000000000007 [] - C:\\Program Files\\Bonjour\\mdnsNSP.dll (Apple Computer, Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\\System\\CCS\\Services\\Tcpip\\Parameters: DhcpNameServer = 193.238.171.10 193.238.171.2
O18 - Protocol\\Handler\\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\\Program Files\\Common Files\\Skype\\Skype4COM.dll (Skype Technologies)
O20 - AppInit_DLLs: (C:\\PROGRA~1\\KASPER~1\\KASPER~1\\mzvkbd3.dll) - C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2010\\mzvkbd3.dll (Kaspersky Lab)
O20 - AppInit_DLLs: (C:\\PROGRA~1\\KASPER~1\\KASPER~1\\kloehk.dll) - C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2010\\kloehk.dll (Kaspersky Lab)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\\Windows\\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\\Windows\\System32\\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - Winlogon\\Notify\\klogon: DllName - C:\\Windows\\system32\\klogon.dll - C:\\Windows\\System32\\klogon.dll (Kaspersky Lab)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O30 - LSA: Security Packages - (pku2u) - C:\\Windows\\System32\\pku2u.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-06-10 23:42:20 | 000,000,024 | ---- | M] () - C:\\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\\{beec4459-359e-11df-9203-001fd09484e2}\\Shell - \"\" = AutoRun
O33 - MountPoints2\\{beec4459-359e-11df-9203-001fd09484e2}\\Shell\\AutoRun\\command - \"\" = K:\\AUTOPLAY.EXE -- File not found
O33 - MountPoints2\\{beec4459-359e-11df-9203-001fd09484e2}\\Shell\\verb1\\command - \"\" = K:\\setup.exe -- File not found
O33 - MountPoints2\\{beec4459-359e-11df-9203-001fd09484e2}\\Shell\\verb2\\command - \"\" = notepad.exe readme.txt
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\\..comfile [open] -- \"%1\" %*
O35 - HKLM\\..exefile [open] -- \"%1\" %*
O37 - HKLM\\...com [@ = comfile] -- \"%1\" %*
O37 - HKLM\\...exe [@ = exefile] -- \"%1\" %*
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
[2010-07-25 00:19:08 | 000,000,000 | ---D | C] -- C:\\Program Files\\URUSoft
[2010-07-23 20:31:27 | 000,000,000 | ---D | C] -- C:\\Users\\Bula\\Desktop\\mio
[2010-07-06 11:05:00 | 000,000,000 | ---D | C] -- C:\\Users\\Bula\\Documents\\SimCity Społeczności
[2010-07-06 11:05:00 | 000,000,000 | ---D | C] -- C:\\ProgramData\\SimCity Societies
[2010-07-06 11:02:48 | 000,000,000 | ---D | C] -- C:\\Users\\Bula\\Desktop\\Nowy folder (3)
[2010-07-06 10:54:09 | 001,932,288 | ---- | C] (Electronic Arts Inc.; Tilted Mill Entertainment, Inc.) -- C:\\Users\\Bula\\Desktop\\SimCitySocieties.exe
[2010-07-04 02:08:35 | 000,000,000 | ---D | C] -- C:\\Users\\Bula\\Desktop\\instrumentals
[2010-07-02 00:17:52 | 000,000,000 | ---D | C] -- C:\\Users\\Bula\\Desktop\\Nowy folder (2)
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
[2010-07-29 13:14:39 | 001,835,008 | -HS- | M] () -- C:\\Users\\Bula\\NTUSER.DAT
[2010-07-29 13:04:37 | 000,000,006 | -H-- | M] () -- C:\\Windows\\tasks\\SA.DAT
[2010-07-29 13:04:35 | 000,067,584 | --S- | M] () -- C:\\Windows\\bootstat.dat
[2010-07-29 13:04:32 | 2616,057,856 | -HS- | M] () -- C:\\hiberfil.sys
[2010-07-29 01:13:18 | 002,236,538 | -H-- | M] () -- C:\\Users\\Bula\\AppData\\Local\\IconCache.db
[2010-07-28 22:55:43 | 273,452,190 | ---- | M] () -- C:\\Windows\\MEMORY.DMP
[2010-07-27 13:51:32 | 000,014,416 | -H-- | M] () -- C:\\Windows\\System32\\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010-07-27 13:51:32 | 000,014,416 | -H-- | M] () -- C:\\Windows\\System32\\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010-07-26 23:46:24 | 001,549,696 | ---- | M] () -- C:\\Windows\\System32\\PerfStringBackup.INI
[2010-07-26 23:46:24 | 000,697,658 | ---- | M] () -- C:\\Windows\\System32\\perfh015.dat
[2010-07-26 23:46:24 | 000,615,810 | ---- | M] () -- C:\\Windows\\System32\\perfh009.dat
[2010-07-26 23:46:24 | 000,134,768 | ---- | M] () -- C:\\Windows\\System32\\perfc015.dat
[2010-07-26 23:46:24 | 000,106,190 | ---- | M] () -- C:\\Windows\\System32\\perfc009.dat
[2010-07-26 22:20:40 | 121,592,160 | ---- | M] () -- C:\\Users\\Bula\\Desktop\\Hot.Tub.Time.Machine.UNRATED.DVDRip.XviD-DiAMOND.part4(3).rar
[2010-07-25 00:19:08 | 000,002,142 | ---- | M] () -- C:\\Users\\Bula\\Application Data\\Microsoft\\Internet Explorer\\Quick Launch\\Subtitle Workshop.lnk
[2010-07-25 00:19:08 | 000,002,118 | ---- | M] () -- C:\\Users\\Bula\\Desktop\\Subtitle Workshop.lnk
[2010-07-21 15:15:44 | 000,005,334 | ---- | M] () -- C:\\Users\\Bula\\Documents\\cc_20100721_151541.reg
[2010-07-21 00:23:48 | 209,715,200 | ---- | M] () -- C:\\Users\\Bula\\Desktop\\Hot.Tub.Time.Machine.UNRATED.DVDRip.XviD-DiAMOND.part3.rar
[2010-07-20 19:25:43 | 000,002,300 | ---- | M] () -- C:\\Users\\Public\\Desktop\\Rock Raiders Standard.lnk
[2010-07-20 13:44:07 | 000,140,561 | ---- | M] () -- C:\\Users\\Bula\\Desktop\\Bez nazwy 2.jpg
[2010-07-19 23:59:04 | 000,064,337 | ---- | M] () -- C:\\Users\\Bula\\Desktop\\Bez nazwy 1.jpg
[2010-07-18 13:19:36 | 000,117,174 | ---- | M] () -- C:\\Users\\Bula\\Desktop\\nk.jpg
[2010-07-16 15:34:45 | 001,414,934 | ---- | M] () -- C:\\Users\\Bula\\Desktop\\justyna.jpg
[2010-07-13 23:22:07 | 000,408,428 | ---- | M] () -- C:\\Users\\Bula\\Desktop\\cdcollagemm4.gif
[2010-07-11 16:27:54 | 001,396,902 | ---- | M] () -- C:\\Users\\Bula\\Desktop\\11072010147.jpg
[2010-07-11 16:27:30 | 001,557,800 | ---- | M] () -- C:\\Users\\Bula\\Desktop\\11072010146.jpg
[2010-07-07 13:07:29 | 000,003,952 | ---- | M] () -- C:\\Users\\Bula\\Documents\\cc_20100707_130726.reg
[2010-07-05 09:16:03 | 209,715,200 | ---- | M] () -- C:\\Users\\Bula\\Desktop\\Hot.Tub.Time.Machine.UNRATED.DVDRip.XviD-DiAMOND.part2.rar
[2010-07-05 09:15:20 | 209,715,200 | ---- | M] () -- C:\\Users\\Bula\\Desktop\\Hot.Tub.Time.Machine.UNRATED.DVDRip.XviD-DiAMOND.part1.rar
[2010-07-03 23:51:03 | 000,229,494 | ---- | M] () -- C:\\Users\\Bula\\Desktop\\surviving-martial-law.pdf
[2010-07-01 16:08:56 | 006,468,366 | ---- | M] () -- C:\\Users\\Bula\\Desktop\\01072010008.mp4
[color=#E56717]========== Files Created - No Company Name ==========[/color]
[2010-07-28 11:16:23 | 273,452,190 | ---- | C] () -- C:\\Windows\\MEMORY.DMP
[2010-07-26 23:44:28 | 733,972,480 | ---- | C] () -- C:\\Users\\Bula\\Desktop\\dmd-httm.avi
[2010-07-26 23:44:15 | 1566,199,808 | ---- | C] () -- C:\\Users\\Bula\\Desktop\\Fight.Club.1999.PL.DVDrip.AC3.XviD.avi
[2010-07-26 21:53:59 | 121,592,160 | ---- | C] () -- C:\\Users\\Bula\\Desktop\\Hot.Tub.Time.Machine.UNRATED.DVDRip.XviD-DiAMOND.part4(3).rar
[2010-07-25 00:19:08 | 000,002,142 | ---- | C] () -- C:\\Users\\Bula\\Application Data\\Microsoft\\Internet Explorer\\Quick Launch\\Subtitle Workshop.lnk
[2010-07-25 00:19:08 | 000,002,118 | ---- | C] () -- C:\\Users\\Bula\\Desktop\\Subtitle Workshop.lnk
[2010-07-21 15:15:43 | 000,005,334 | ---- | C] () -- C:\\Users\\Bula\\Documents\\cc_20100721_151541.reg
[2010-07-20 23:44:45 | 209,715,200 | ---- | C] () -- C:\\Users\\Bula\\Desktop\\Hot.Tub.Time.Machine.UNRATED.DVDRip.XviD-DiAMOND.part3.rar
[2010-07-20 19:17:26 | 209,715,200 | ---- | C] () -- C:\\Users\\Bula\\Desktop\\Hot.Tub.Time.Machine.UNRATED.DVDRip.XviD-DiAMOND.part2.rar
[2010-07-20 19:17:12 | 209,715,200 | ---- | C] () -- C:\\Users\\Bula\\Desktop\\Hot.Tub.Time.Machine.UNRATED.DVDRip.XviD-DiAMOND.part1.rar
[2010-07-20 13:42:17 | 000,140,561 | ---- | C] () -- C:\\Users\\Bula\\Desktop\\Bez nazwy 2.jpg
[2010-07-19 23:59:02 | 000,064,337 | ---- | C] () -- C:\\Users\\Bula\\Desktop\\Bez nazwy 1.jpg
[2010-07-18 13:17:07 | 000,117,174 | ---- | C] () -- C:\\Users\\Bula\\Desktop\\nk.jpg
[2010-07-18 12:47:24 | 001,396,902 | ---- | C] () -- C:\\Users\\Bula\\Desktop\\11072010147.jpg
[2010-07-16 15:34:44 | 001,414,934 | ---- | C] () -- C:\\Users\\Bula\\Desktop\\justyna.jpg
[2010-07-16 13:23:52 | 001,557,800 | ---- | C] () -- C:\\Users\\Bula\\Desktop\\11072010146.jpg
[2010-07-13 23:22:05 | 000,408,428 | ---- | C] () -- C:\\Users\\Bula\\Desktop\\cdcollagemm4.gif
[2010-07-07 13:07:28 | 000,003,952 | ---- | C] () -- C:\\Users\\Bula\\Documents\\cc_20100707_130726.reg
[2010-07-06 10:55:25 | 1788,346,368 | ---- | C] () -- C:\\Users\\Bula\\Desktop\\SCS.mdf
[2010-07-06 10:55:25 | 000,005,704 | ---- | C] () -- C:\\Users\\Bula\\Desktop\\SCS.mds
[2010-07-06 10:55:14 | 000,144,962 | ---- | C] () -- C:\\Users\\Bula\\Desktop\\SCS.rar
[2010-07-03 23:50:58 | 000,229,494 | ---- | C] () -- C:\\Users\\Bula\\Desktop\\surviving-martial-law.pdf
[2010-07-01 23:14:56 | 006,468,366 | ---- | C] () -- C:\\Users\\Bula\\Desktop\\01072010008.mp4
[2010-06-20 12:53:35 | 000,000,419 | ---- | C] () -- C:\\Windows\\BRWMARK.INI
[2010-06-20 12:53:35 | 000,000,027 | ---- | C] () -- C:\\Windows\\BRPP2KA.INI
[2010-06-20 12:51:50 | 000,000,499 | ---- | C] () -- C:\\Windows\\SIERRA.INI
[2010-06-03 16:20:39 | 000,013,396 | ---- | C] () -- C:\\Windows\\System32\\drivers\\MTictwl.sys
[2010-05-31 10:47:51 | 000,003,972 | ---- | C] () -- C:\\Windows\\System32\\drivers\\PciBus.sys
[2010-03-21 23:25:42 | 000,691,696 | ---- | C] () -- C:\\Windows\\System32\\drivers\\sptd.sys
[2010-02-21 04:48:22 | 000,085,504 | ---- | C] () -- C:\\Windows\\System32\\ff_vfw.dll
[2009-08-16 10:08:36 | 000,178,176 | ---- | C] () -- C:\\Windows\\System32\\unrar.dll
[2009-07-14 01:51:43 | 000,073,728 | ---- | C] () -- C:\\Windows\\System32\\BthpanContextHandler.dll
[2009-07-14 01:42:10 | 000,064,000 | ---- | C] () -- C:\\Windows\\System32\\BWContextHandler.dll
[2009-06-19 20:06:22 | 000,197,912 | ---- | C] () -- C:\\Windows\\System32\\physxcudart_20.dll
[2009-06-19 20:06:22 | 000,058,648 | ---- | C] () -- C:\\Windows\\System32\\AgCPanelTraditionalChinese.dll
[2009-06-19 20:06:22 | 000,058,648 | ---- | C] () -- C:\\Windows\\System32\\AgCPanelSwedish.dll
[2009-06-19 20:06:22 | 000,058,648 | ---- | C] () -- C:\\Windows\\System32\\AgCPanelSpanish.dll
[2009-06-19 20:06:22 | 000,058,648 | ---- | C] () -- C:\\Windows\\System32\\AgCPanelSimplifiedChinese.dll
[2009-06-19 20:06:22 | 000,058,648 | ---- | C] () -- C:\\Windows\\System32\\AgCPanelPortugese.dll
[2009-06-19 20:06:22 | 000,058,648 | ---- | C] () -- C:\\Windows\\System32\\AgCPanelKorean.dll
[2009-06-19 20:06:22 | 000,058,648 | ---- | C] () -- C:\\Windows\\System32\\AgCPanelJapanese.dll
[2009-06-19 20:06:22 | 000,058,648 | ---- | C] () -- C:\\Windows\\System32\\AgCPanelGerman.dll
[2009-06-19 20:06:22 | 000,058,648 | ---- | C] () -- C:\\Windows\\System32\\AgCPanelFrench.dll
[2009-05-29 15:52:26 | 000,204,800 | ---- | C] () -- C:\\Windows\\System32\\xvidvfw.dll
[2009-05-29 15:47:06 | 000,881,664 | ---- | C] () -- C:\\Windows\\System32\\xvidcore.dll
[2007-02-05 20:05:26 | 000,000,038 | ---- | C] () -- C:\\Windows\\AviSplitter.INI
[color=#E56717]========== LOP Check ==========[/color]
[2010-06-23 23:12:48 | 000,000,000 | ---D | M] -- C:\\Users\\Bula\\AppData\\Roaming\\BESTplayer
[2010-04-03 12:42:13 | 000,000,000 | ---D | M] -- C:\\Users\\Bula\\AppData\\Roaming\\DAEMON Tools Lite
[2010-06-30 23:12:13 | 000,000,000 | ---D | M] -- C:\\Users\\Bula\\AppData\\Roaming\\EurekaLog
[2010-06-10 21:25:19 | 000,000,000 | ---D | M] -- C:\\Users\\Bula\\AppData\\Roaming\\RayV
[2010-03-21 23:26:48 | 000,000,000 | ---D | M] -- C:\\Users\\Bula\\AppData\\Roaming\\Soldat
[2010-07-13 01:13:42 | 000,000,000 | ---D | M] -- C:\\Users\\Bula\\AppData\\Roaming\\uTorrent
[2010-03-28 19:52:22 | 000,000,000 | ---D | M] -- C:\\Users\\Bula\\AppData\\Roaming\\Win7codecs
[2010-07-26 11:52:35 | 000,032,620 | ---- | M] () -- C:\\Windows\\Tasks\\SCHEDLGU.TXT
[color=#E56717]========== Purity Check ==========[/color]
< End of report >
|