Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Latest News: Microsoft Releases Two New Windows Updates Containing New Spectre 2 Mitigations

Featured Deal: Pay What You Want Complete Cyber Security Certification Bundle Deal

Infected with W32.sillyFDC

Started by Shagrak , Jul 08 2009 09:58 AM

This topic is locked

18 replies to this topic

#1 Shagrak

Members
10 posts
OFFLINE

Local time:10:11 AM

Posted 08 July 2009 - 09:58 AM

Hello,

NAV 2008 detected W32.sillyFDC on a removable drive, and deleted it. My computer has been infected with this threat before, and NAV stopped detecting it after a couple of days, as if it was relly gone, but after formatting and reinstalling Windows it appeared on a disk NAV said was clean (before reinstalling Windows).
After NAV detected it again, I disabled System Restore, because during former infection the option "Turn off System Restore" became greyed out and couldn't be used, and I've read that sillyFDC uses it to stay on computer and copy itself to USB drives, so I turned it off when I still could.
Now only System Volume Information folders are inaccesible, and when I try to open it, there's a pop-up window saying Acces denied. Windows Explorer shows 0 files in this folder, but scanning with NAV 2008 shows 3 files.

Help? Please?
- - -

This is the DDS report:

DDS (Ver_09-06-26.01) - NTFSx86
Run by â€”winka Morska at 16:44:15,54 on 2009-07-08
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Home Edition 5.1.2600.2.1250.48.1045.18.503.168 [GMT 2:00]

AV: Norton AntiVirus *On-access scanning enabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8}
FW: Norton AntiVirus *enabled* {990F9400-4CEE-43EA-A83A-D013ADD8EA6E}

============== Running Processes ===============

H:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
H:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
H:\WINDOWS\system32\ZoneLabs\vsmon.exe
H:\WINDOWS\Explorer.EXE
H:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
H:\WINDOWS\system32\spoolsv.exe
svchost.exe
H:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
H:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
H:\Program Files\Portrait Displays\forteManager\dtsrvc.exe
H:\WINDOWS\system32\igfxpers.exe
H:\WINDOWS\RTHDCPL.EXE
H:\Program Files\WinPortrait\wpctrl.exe
H:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
H:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
H:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
H:\WINDOWS\system32\ctfmon.exe
H:\Program Files\Gadu-Gadu\gg.exe
H:\Program Files\WinPortrait\floater.exe
H:\WINDOWS\system32\wuauclt.exe
H:\Program Files\Opera\opera.exe
H:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
H:\Documents and Settings\Åšwinka Morska\Pulpit\dds.scr

============== Pseudo HJT Report ===============

BHO: AskBar BHO: {201f27d4-3704-41d6-89c1-aa35e39143ed} - h:\program files\askbardis\bar\bin\askBar.dll
BHO: Symantec Intrusion Prevention: {6d53ec84-6aae-4787-aeee-f4628f01010c} - h:\progra~1\common~1\symant~1\ids\IPSBHO.dll
TB: Ask Toolbar: {3041d03e-fd4b-44e0-b742-2d9b88305f98} - h:\program files\askbardis\bar\bin\askBar.dll
uRun: [ctfmon.exe] h:\windows\system32\ctfmon.exe
mRun: [IgfxTray] h:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] h:\windows\system32\hkcmd.exe
mRun: [Persistence] h:\windows\system32\igfxpers.exe
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [Alcmtr] ALCMTR.EXE
mRun: [PivotSoftware] "h:\program files\winportrait\wpctrl.exe"
mRun: [SpeedTouch USB Diagnostics] "h:\program files\thomson\speedtouch usb\Dragdiag.exe" /icon
mRun: [ccApp] "h:\program files\common files\symantec shared\ccApp.exe"
mRun: [osCheck] "h:\program files\norton antivirus\osCheck.exe"
mRun: [ZoneAlarm Client] "h:\program files\zone labs\zonealarm\zlclient.exe"
dRun: [CTFMON.EXE] h:\windows\system32\CTFMON.EXE
dRunOnce: [<NO NAME>]
IE: E&ksport do programu Microsoft Excel - h:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - h:\program files\messenger\msmsgs.exe
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - h:\progra~1\micros~2\office11\REFIEBAR.DLL
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1246904572109
DPF: {C7DB51B4-BCF7-4923-8874-7F1A0DC92277} - hxxp://office.microsoft.com/officeupdate/content/opuc4.cab
Notify: igfxcui - igfxdev.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - h:\windows\system32\WPDShServiceObj.dll

============= SERVICES / DRIVERS ===============

R1 vsdatant;vsdatant;h:\windows\system32\vsdatant.sys [2009-7-6 353672]
R2 ccEvtMgr;Symantec Event Manager;h:\program files\common files\symantec shared\CCSVCHST.EXE [2007-8-24 149352]
R2 ccSetMgr;Symantec Settings Manager;h:\program files\common files\symantec shared\CCSVCHST.EXE [2007-8-24 149352]
R2 LiveUpdate Notice;LiveUpdate Notice;h:\program files\common files\symantec shared\CCSVCHST.EXE [2007-8-24 149352]
R2 PDIHWCTL;PDIHWCTL;h:\windows\system32\drivers\pdihwctl.sys [2003-1-29 14416]
R2 vsmon;TrueVector Internet Monitor;h:\windows\system32\zonelabs\vsmon.exe -service --> h:\windows\system32\zonelabs\vsmon.exe -service [?]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;h:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2009-7-6 101936]
R3 NAVENG;NAVENG;h:\progra~1\common~1\symant~1\virusd~1\20090707.003\NAVENG.SYS [2009-7-7 89104]
R3 NAVEX15;NAVEX15;h:\progra~1\common~1\symant~1\virusd~1\20090707.003\NAVEX15.SYS [2009-7-7 876144]
R3 Symantec Core LC;Symantec Core LC;h:\progra~1\common~1\symant~1\ccpd-lc\symlcsvc.exe [2009-7-6 1251720]
S3 COH_Mon;COH_Mon;h:\windows\system32\drivers\COH_Mon.sys [2007-5-29 23888]

=============== Created Last 30 ================

2009-07-07 21:30 <DIR> --d----- h:\docume~1\alluse~1\daneap~1\Gadu-Gadu
2009-07-07 21:28 <DIR> --d----- h:\documents and settings\Å›winka morska\Gadu-Gadu
2009-07-07 21:27 <DIR> --d----- h:\program files\Gadu-Gadu
2009-07-07 17:45 <DIR> --dsh--- h:\documents and settings\Å›winka morska\IETldCache
2009-07-07 17:31 102,912 -c------ h:\windows\system32\dllcache\iecompat.dll
2009-07-07 17:31 <DIR> --d----- h:\windows\ie8updates
2009-07-07 17:30 12,800 -c------ h:\windows\system32\dllcache\xpshims.dll
2009-07-07 17:30 11,064,832 -c------ h:\windows\system32\dllcache\ieframe.dll
2009-07-07 17:30 1,985,024 -c------ h:\windows\system32\dllcache\iertutil.dll
2009-07-07 17:30 246,272 -c------ h:\windows\system32\dllcache\ieproxy.dll
2009-07-07 17:29 <DIR> -cd-h--- h:\windows\ie8
2009-07-07 17:29 <DIR> --d----- h:\windows\system32\pl-PL
2009-07-07 17:04 <DIR> --d----- h:\program files\Security Task Manager
2009-07-07 17:03 <DIR> --d----- h:\windows\system32\CatRoot_bak
2009-07-07 16:58 273,024 -c------ h:\windows\system32\dllcache\bthport.sys
2009-07-07 16:58 273,024 -------- h:\windows\system32\drivers\bthport.sys
2009-07-07 16:55 2,059,008 -c------ h:\windows\system32\dllcache\ntkrnlpa.exe
2009-07-07 16:55 2,017,280 -c------ h:\windows\system32\dllcache\ntkrpamp.exe
2009-07-07 16:55 2,181,760 -c------ h:\windows\system32\dllcache\ntoskrnl.exe
2009-07-07 16:55 2,137,600 -c------ h:\windows\system32\dllcache\ntkrnlmp.exe
2009-07-07 16:51 453,632 -c------ h:\windows\system32\dllcache\mrxsmb.sys
2009-07-07 16:42 <DIR> --d----- h:\windows\system32\PreInstall
2009-07-07 16:42 <DIR> --d-h--- h:\windows\$hf_mig$
2009-07-07 16:36 268,648 a------- h:\windows\system32\mucltui.dll
2009-07-07 16:36 27,496 a------- h:\windows\system32\mucltui.dll.mui
2009-07-07 15:12 <DIR> --d----- h:\program files\Avanquest update
2009-07-07 15:12 <DIR> --d----- h:\program files\Sony Ericsson
2009-07-07 15:12 <DIR> --d----- h:\docume~1\alluse~1\daneap~1\Sony Ericsson
2009-07-07 15:10 131,072 a------- h:\windows\system32\dzip32.dll
2009-07-07 15:10 110,592 a------- h:\windows\system32\dunzip32.dll
2009-07-07 15:10 <DIR> --d----- h:\program files\Windows Media Bonus Pack for Windows XP
2009-07-07 15:09 <DIR> --d----- h:\program files\VideoLAN
2009-07-07 15:08 <DIR> --d----- h:\program files\Windows Media Connect 2
2009-07-07 15:06 <DIR> --d----- h:\windows\system32\LogFiles
2009-07-07 15:01 1,409 a------- h:\windows\QTFont.for
2009-07-07 15:01 54,156 a---h--- h:\windows\QTFont.qfn
2009-07-07 15:01 <DIR> --d----- h:\program files\iPod
2009-07-07 15:01 <DIR> --d----- h:\program files\iTunes
2009-07-07 14:59 30,336 a------- h:\windows\system32\drivers\usbaapl.sys
2009-07-07 14:30 935 a------- h:\windows\system32\PQ_BATCH.PQB
2009-07-07 14:03 1,357,372 -------- h:\windows\system32\XMNT2001.EXE
2009-07-07 14:03 3,360 -------- h:\windows\system32\drivers\PQNTDRV.SYS
2009-07-07 14:03 <DIR> --d----- h:\program files\PowerQuest
2009-07-07 14:01 806 a------- h:\windows\unins000.dat
2009-07-07 14:00 <DIR> --d----- h:\windows\pss
2009-07-06 21:07 421 a------- h:\windows\ODBC.INI
2009-07-06 21:07 28,040 a------- h:\windows\system32\mdimon.dll
2009-07-06 21:06 <DIR> --d----- h:\windows\SHELLNEW
2009-07-06 20:42 <DIR> --d----- h:\program files\AskBarDis
2009-07-06 20:41 1,221,512 a------- h:\windows\system32\zpeng25.dll
2009-07-06 20:41 <DIR> --d----- h:\windows\system32\ZoneLabs
2009-07-06 20:41 <DIR> --d----- h:\program files\Zone Labs
2009-07-06 20:41 350,192 a------- h:\windows\system32\vsconfig.xml
2009-07-06 20:20 <DIR> --ds---- h:\documents and settings\Å›winka morska\UserData
2009-07-06 19:07 3,072 a------- h:\windows\system32\drivers\audstub.sys
2009-07-06 19:07 58,624 a------- h:\windows\system32\drivers\redbook.sys
2009-07-06 19:06 6,400 a------- h:\windows\system32\drivers\enum1394.sys
2009-07-06 19:06 77,312 ac------ h:\windows\system32\dllcache\usbui.dll
2009-07-06 19:06 77,312 a------- h:\windows\system32\usbui.dll
2009-07-06 19:05 <DIR> --d----- h:\program files\common files\ODBC
2009-07-06 19:05 <DIR> --d----- h:\program files\common files\SpeechEngines
2009-07-06 19:05 <DIR> --d-h--- h:\documents and settings\all users\Szablony
2009-07-06 19:05 <DIR> --d--r-- h:\documents and settings\all users\Menu Start
2009-07-06 19:05 <DIR> --d--r-- h:\documents and settings\all users\Dokumenty
2009-07-06 19:05 <DIR> --d----- h:\documents and settings\all users\Ulubione
2009-07-06 19:05 <DIR> --d----- h:\documents and settings\all users\Pulpit
2009-07-06 19:04 1,896,400 ac------ h:\windows\system32\dllcache\NT5.CAT
2009-07-06 19:04 <DIR> --d-hr-- h:\documents and settings\all users\Dane aplikacji
2009-07-06 19:03 249 a------- h:\windows\system32\$winnt$.inf
2009-07-06 18:02 <DIR> --d----- h:\program files\Norton AntiVirus
2009-07-06 18:01 <DIR> --d----- h:\program files\Symantec
2009-07-06 18:01 <DIR> --d----- h:\docume~1\alluse~1\daneap~1\Symantec
2009-07-06 18:00 <DIR> --d----- h:\program files\common files\Symantec Shared
2009-07-06 17:46 <DIR> --d----- h:\program files\Thomson
2009-07-06 17:45 <DIR> --d----- h:\program files\Neostrada TP
2009-07-06 17:40 <DIR> --d----- h:\program files\WinPortrait
2009-07-06 17:40 <DIR> --d----- h:\program files\Portrait Displays
2009-07-06 17:35 <DIR> --d----- h:\program files\GIGABYTE
2009-07-06 17:34 <DIR> --d----- h:\program files\Marvell
2009-07-06 17:34 <DIR> --d----- h:\program files\Realtek
2009-07-06 17:22 <DIR> --dsh--- h:\documents and settings\Å›winka morska\Cookies
2009-07-06 17:22 <DIR> --d-hr-- h:\documents and settings\Å›winka morska\SendTo
2009-07-06 17:22 <DIR> --d-hr-- h:\documents and settings\Å›winka morska\Recent
2009-07-06 17:22 <DIR> --d-hr-- h:\documents and settings\Å›winka morska\Dane aplikacji
2009-07-06 17:22 <DIR> --d-h--- h:\documents and settings\Å›winka morska\Szablony
2009-07-06 17:22 <DIR> --d-h--- h:\documents and settings\Å›winka morska\PrintHood
2009-07-06 17:22 <DIR> --d-h--- h:\documents and settings\Å›winka morska\NetHood
2009-07-06 17:22 <DIR> --d--r-- h:\documents and settings\Å›winka morska\Ulubione
2009-07-06 17:22 <DIR> --d--r-- h:\documents and settings\Å›winka morska\Moje dokumenty
2009-07-06 17:22 <DIR> --d--r-- h:\documents and settings\Å›winka morska\Menu Start
2009-07-06 17:22 <DIR> --d----- h:\documents and settings\Å›winka morska\Pulpit
2009-07-06 17:22 1,572,864 a---h--- h:\documents and settings\Å›winka morska\NTUSER.DAT
2009-07-06 17:22 <DIR> --d-h--- h:\documents and settings\Å›winka morska\Ustawienia lokalne
2009-07-06 17:17 <DIR> --dsh--- h:\documents and settings\all users\DRM
2009-07-06 17:17 <DIR> --d-h--- h:\program files\WindowsUpdate
2009-07-06 17:17 <DIR> --d----- h:\program files\UsÅ‚ugi online
2009-07-06 17:16 <DIR> --d----- h:\program files\common files\MSSoap
2009-07-06 17:15 <DIR> --d----- h:\program files\Messenger
2009-07-06 17:15 <DIR> --d----- h:\program files\MSN Gaming Zone
2009-07-06 17:14 <DIR> --d----- h:\program files\Windows NT

==================== Find3M ====================

2009-07-08 16:35 355,486 a------- h:\windows\system32\perfh015.dat
2009-07-08 16:35 49,492 a------- h:\windows\system32\perfc015.dat
2009-07-07 15:41 76,487 a------- h:\windows\pchealth\helpctr\offlinecache\index.dat
2009-07-06 20:41 4,212 a---h--- h:\windows\system32\zllictbl.dat
2009-07-06 18:22 124,464 a------- h:\windows\system32\drivers\SYMEVENT.SYS
2009-07-06 18:22 60,808 a------- h:\windows\system32\S32EVNT1.DLL
2009-07-06 18:22 10,635 a------- h:\windows\system32\drivers\SYMEVENT.CAT
2009-07-06 18:22 806 a------- h:\windows\system32\drivers\SYMEVENT.INF
2009-07-06 17:40 59,944 a------- h:\windows\system32\wpfb_ialmrnt5.dll
2009-07-06 17:40 16,384 a------- h:\windows\system32\WINKRNME.DLL
2009-07-06 17:16 21,856 a------- h:\windows\system32\emptyregdb.dat
2009-06-15 15:15 524,288 a------- h:\windows\opuc.dll
2009-05-13 07:06 915,456 a------- h:\windows\system32\wininet.dll
2009-05-07 17:44 346,112 a------- h:\windows\system32\localspl.dll
2009-04-29 06:32 81,920 -------- h:\windows\system32\ieencode.dll
2009-04-19 22:11 1,846,912 a------- h:\windows\system32\win32k.sys
2009-04-15 17:18 584,192 a------- h:\windows\system32\rpcrt4.dll

============= FINISH: 16:44:43,18 ===============

Attached Files

Attach.txt 7.81KB 18 downloads

Edited by Shagrak, 08 July 2009 - 10:02 AM.

BC AdBot (Login to Remove)

BleepingComputer.com
Register to remove ads

#2 DocSatan

Bleepin' Wanna-Be

Members
2,156 posts
OFFLINE

Gender:Male
Location:Boston, Ma.
Local time:11:11 AM

Posted 17 July 2009 - 01:38 PM

Hello and welcome to Bleeping Computer

We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.

If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine.

If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.

Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.

If you have already posted a DDS log, please do so again, as your situation may have changed.
Use the 'Add Reply' and add the new log to this thread.

Thanks and again sorry for the delay.

We need to see some information about what is happening in your machine. Please perform the following scan:

Download DDS by sUBs from one of the following links. Save it to your desktop.
- DDS.scr
- DDS.pif
Double click on the DDS icon, allow it to run.
A small box will open, with an explaination about the tool. No input is needed, the scan is running.
Notepad will open with the results.
Follow the instructions that pop up for posting the results.
Close the program window, and delete the program from your desktop.

Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet.

Information on A/V control HERE

All Other Things Being Equal, The Simplest Solution Is The Best.
Anti-Spyware Scanners - Anti-Virus Scanners - Online Scanners - Firewalls
Protect Yourself and Surf More Secure

#3 Shagrak

Topic Starter

Members
10 posts
OFFLINE

Local time:10:11 AM

Posted 21 July 2009 - 03:07 PM

Sorry for the delay in reply...

DDS (Ver_09-06-26.01) - NTFSx86
Run by —winka Morska at 14:34:33,93 on 2009-07-21
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Home Edition 5.1.2600.2.1250.48.1045.18.503.152 [GMT 2:00]

AV: Norton AntiVirus *On-access scanning enabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8}
FW: Norton AntiVirus *enabled* {990F9400-4CEE-43EA-A83A-D013ADD8EA6E}

============== Running Processes ===============

H:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
H:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
H:\WINDOWS\system32\ZoneLabs\vsmon.exe
H:\WINDOWS\Explorer.EXE
H:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
H:\WINDOWS\system32\spoolsv.exe
H:\Program Files\Google\Update\GoogleUpdate.exe
svchost.exe
H:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
H:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
H:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
H:\Program Files\Portrait Displays\forteManager\dtsrvc.exe
H:\WINDOWS\system32\igfxpers.exe
H:\WINDOWS\RTHDCPL.EXE
H:\Program Files\WinPortrait\wpctrl.exe
H:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
H:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
H:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
H:\WINDOWS\system32\ctfmon.exe
H:\Program Files\WinPortrait\floater.exe
H:\WINDOWS\system32\wuauclt.exe
H:\Program Files\Opera\opera.exe
H:\Documents and Settings\Świnka Morska\Pulpit\dds.scr

============== Pseudo HJT Report ===============

uStart Page = about:blank
BHO: AskBar BHO: {201f27d4-3704-41d6-89c1-aa35e39143ed} - h:\program files\askbardis\bar\bin\askBar.dll
BHO: Symantec Intrusion Prevention: {6d53ec84-6aae-4787-aeee-f4628f01010c} - h:\progra~1\common~1\symant~1\ids\IPSBHO.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - h:\program files\google\googletoolbarnotifier\5.1.1309.3572\swg.dll
TB: Ask Toolbar: {3041d03e-fd4b-44e0-b742-2d9b88305f98} - h:\program files\askbardis\bar\bin\askBar.dll
uRun: [ctfmon.exe] h:\windows\system32\ctfmon.exe
uRun: [swg] h:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe
mRun: [IgfxTray] h:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] h:\windows\system32\hkcmd.exe
mRun: [Persistence] h:\windows\system32\igfxpers.exe
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [Alcmtr] ALCMTR.EXE
mRun: [PivotSoftware] "h:\program files\winportrait\wpctrl.exe"
mRun: [SpeedTouch USB Diagnostics] "h:\program files\thomson\speedtouch usb\Dragdiag.exe" /icon
mRun: [ccApp] "h:\program files\common files\symantec shared\ccApp.exe"
mRun: [osCheck] "h:\program files\norton antivirus\osCheck.exe"
mRun: [ZoneAlarm Client] "h:\program files\zone labs\zonealarm\zlclient.exe"
dRun: [CTFMON.EXE] h:\windows\system32\CTFMON.EXE
dRunOnce: [<NO NAME>]
IE: E&ksport do programu Microsoft Excel - h:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - h:\program files\messenger\msmsgs.exe
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - h:\progra~1\micros~2\office11\REFIEBAR.DLL
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1246904572109
DPF: {C7DB51B4-BCF7-4923-8874-7F1A0DC92277} - hxxp://office.microsoft.com/officeupdate/content/opuc4.cab
TCP: {112AE24E-6877-4A98-8BE0-5528D77975CF} = 83.238.255.76 213.241.79.37
Notify: igfxcui - igfxdev.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - h:\windows\system32\WPDShServiceObj.dll

============= SERVICES / DRIVERS ===============

R1 vsdatant;vsdatant;h:\windows\system32\vsdatant.sys [2009-7-6 353672]
R2 PDIHWCTL;PDIHWCTL;h:\windows\system32\drivers\pdihwctl.sys [2003-1-29 14416]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;h:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2009-7-6 101936]
R3 NAVENG;NAVENG;h:\progra~1\common~1\symant~1\virusd~1\20090719.004\NAVENG.SYS [2009-7-19 87888]
R3 NAVEX15;NAVEX15;h:\progra~1\common~1\symant~1\virusd~1\20090719.004\NAVEX15.SYS [2009-7-19 875728]
S3 COH_Mon;COH_Mon;h:\windows\system32\drivers\COH_Mon.sys [2007-5-29 23888]

=============== Created Last 30 ================

2009-07-19 18:03 <DIR> --d----- h:\program files\common files\DirectX
2009-07-19 17:59 <DIR> --d----- h:\program files\Enigma Software Productions
2009-07-18 10:50 2,297,552 a------- h:\windows\system32\d3dx9_26.dll
2009-07-18 10:50 <DIR> --d----- h:\windows\Logs
2009-07-18 10:48 <DIR> --d----- h:\windows\system32\XPSViewer
2009-07-18 10:47 14,048 -------- h:\windows\system32\spmsg2.dll
2009-07-18 10:45 <DIR> --d----- h:\program files\MSXML 6.0
2009-07-18 10:39 <DIR> --d----- h:\program files\Kalypso
2009-07-17 21:06 <DIR> --d----- h:\docume~1\winkam~1\daneap~1\Foxit
2009-07-17 21:06 <DIR> --d----- h:\program files\Foxit Software
2009-07-16 20:10 54,156 a---h--- h:\windows\QTFont.qfn
2009-07-16 20:10 1,409 a------- h:\windows\QTFont.for
2009-07-16 15:52 <DIR> --d----- H:\games
2009-07-12 09:08 <DIR> --dsh--- h:\documents and settings\świnka morska\PrivacIE
2009-07-10 21:22 <DIR> --d----- h:\program files\BrainBombers
2009-07-10 21:14 <DIR> --d----- H:\CATRAIN
2009-07-09 15:41 <DIR> --d----- h:\docume~1\winkam~1\daneap~1\Malwarebytes
2009-07-09 15:41 38,160 a------- h:\windows\system32\drivers\mbamswissarmy.sys
2009-07-09 15:41 19,096 a------- h:\windows\system32\drivers\mbam.sys
2009-07-09 15:41 <DIR> --d----- h:\program files\Malwarebytes' Anti-Malware
2009-07-09 15:41 <DIR> --d----- h:\docume~1\alluse~1\daneap~1\Malwarebytes
2009-07-07 21:30 <DIR> --d----- h:\docume~1\alluse~1\daneap~1\Gadu-Gadu
2009-07-07 21:28 <DIR> --d----- h:\documents and settings\świnka morska\Gadu-Gadu
2009-07-07 21:27 <DIR> --d----- h:\program files\Gadu-Gadu
2009-07-07 17:45 <DIR> --dsh--- h:\documents and settings\świnka morska\IETldCache
2009-07-07 17:31 102,912 -c------ h:\windows\system32\dllcache\iecompat.dll
2009-07-07 17:31 <DIR> --d----- h:\windows\ie8updates
2009-07-07 17:30 12,800 -c------ h:\windows\system32\dllcache\xpshims.dll
2009-07-07 17:30 11,064,832 -c------ h:\windows\system32\dllcache\ieframe.dll
2009-07-07 17:30 1,985,024 -c------ h:\windows\system32\dllcache\iertutil.dll
2009-07-07 17:30 246,272 -c------ h:\windows\system32\dllcache\ieproxy.dll
2009-07-07 17:29 <DIR> -cd-h--- h:\windows\ie8
2009-07-07 17:29 <DIR> --d----- h:\windows\system32\pl-PL
2009-07-07 17:04 <DIR> --d----- h:\program files\Security Task Manager
2009-07-07 17:03 <DIR> --d----- h:\windows\system32\CatRoot_bak
2009-07-07 16:58 273,024 -c------ h:\windows\system32\dllcache\bthport.sys
2009-07-07 16:58 273,024 -------- h:\windows\system32\drivers\bthport.sys
2009-07-07 16:55 2,059,008 -c------ h:\windows\system32\dllcache\ntkrnlpa.exe
2009-07-07 16:55 2,017,280 -c------ h:\windows\system32\dllcache\ntkrpamp.exe
2009-07-07 16:55 2,181,760 -c------ h:\windows\system32\dllcache\ntoskrnl.exe
2009-07-07 16:55 2,137,600 -c------ h:\windows\system32\dllcache\ntkrnlmp.exe
2009-07-07 16:51 453,632 -c------ h:\windows\system32\dllcache\mrxsmb.sys
2009-07-07 16:42 <DIR> --d----- h:\windows\system32\PreInstall
2009-07-07 16:42 <DIR> --d-h--- h:\windows\$hf_mig$
2009-07-07 16:36 268,648 a------- h:\windows\system32\mucltui.dll
2009-07-07 16:36 27,496 a------- h:\windows\system32\mucltui.dll.mui
2009-07-07 15:12 <DIR> --d----- h:\program files\Avanquest update
2009-07-07 15:12 <DIR> --d----- h:\program files\Sony Ericsson
2009-07-07 15:12 <DIR> --d----- h:\docume~1\alluse~1\daneap~1\Sony Ericsson
2009-07-07 15:10 131,072 a------- h:\windows\system32\dzip32.dll
2009-07-07 15:10 110,592 a------- h:\windows\system32\dunzip32.dll
2009-07-07 15:10 <DIR> --d----- h:\program files\Windows Media Bonus Pack for Windows XP
2009-07-07 15:09 <DIR> --d----- h:\program files\VideoLAN
2009-07-07 15:08 <DIR> --d----- h:\program files\Windows Media Connect 2
2009-07-07 15:06 <DIR> --d----- h:\windows\system32\LogFiles
2009-07-07 15:01 <DIR> --d----- h:\program files\iPod
2009-07-07 15:01 <DIR> --d----- h:\program files\iTunes
2009-07-07 14:59 30,336 a------- h:\windows\system32\drivers\usbaapl.sys
2009-07-07 14:30 935 a------- h:\windows\system32\PQ_BATCH.PQB
2009-07-07 14:03 1,357,372 -------- h:\windows\system32\XMNT2001.EXE
2009-07-07 14:03 3,360 -------- h:\windows\system32\drivers\PQNTDRV.SYS
2009-07-07 14:03 <DIR> --d----- h:\program files\PowerQuest
2009-07-07 14:01 806 a------- h:\windows\unins000.dat
2009-07-07 14:00 <DIR> --d----- h:\windows\pss
2009-07-06 21:07 421 a------- h:\windows\ODBC.INI
2009-07-06 21:07 28,040 a------- h:\windows\system32\mdimon.dll
2009-07-06 21:06 <DIR> --d----- h:\windows\SHELLNEW
2009-07-06 20:42 <DIR> --d----- h:\program files\AskBarDis
2009-07-06 20:41 1,221,512 a------- h:\windows\system32\zpeng25.dll
2009-07-06 20:41 <DIR> --d----- h:\windows\system32\ZoneLabs
2009-07-06 20:41 <DIR> --d----- h:\program files\Zone Labs
2009-07-06 20:41 350,192 a------- h:\windows\system32\vsconfig.xml
2009-07-06 20:20 <DIR> --ds---- h:\documents and settings\świnka morska\UserData
2009-07-06 19:07 3,072 a------- h:\windows\system32\drivers\audstub.sys
2009-07-06 19:07 58,624 a------- h:\windows\system32\drivers\redbook.sys
2009-07-06 19:06 6,400 a------- h:\windows\system32\drivers\enum1394.sys
2009-07-06 19:06 77,312 ac------ h:\windows\system32\dllcache\usbui.dll
2009-07-06 19:06 77,312 a------- h:\windows\system32\usbui.dll
2009-07-06 19:05 <DIR> --d----- h:\program files\common files\ODBC
2009-07-06 19:05 <DIR> --d----- h:\program files\common files\SpeechEngines
2009-07-06 19:05 <DIR> --d-h--- h:\documents and settings\all users\Szablony
2009-07-06 19:05 <DIR> --d--r-- h:\documents and settings\all users\Menu Start
2009-07-06 19:05 <DIR> --d--r-- h:\documents and settings\all users\Dokumenty
2009-07-06 19:05 <DIR> --d----- h:\documents and settings\all users\Ulubione
2009-07-06 19:05 <DIR> --d----- h:\documents and settings\all users\Pulpit
2009-07-06 19:04 1,896,400 ac------ h:\windows\system32\dllcache\NT5.CAT
2009-07-06 19:04 <DIR> --d-hr-- h:\documents and settings\all users\Dane aplikacji
2009-07-06 19:03 249 a------- h:\windows\system32\$winnt$.inf
2009-07-06 18:02 <DIR> --d----- h:\program files\Norton AntiVirus
2009-07-06 18:01 <DIR> --d----- h:\program files\Symantec
2009-07-06 18:01 <DIR> --d----- h:\docume~1\alluse~1\daneap~1\Symantec
2009-07-06 18:00 <DIR> --d----- h:\program files\common files\Symantec Shared
2009-07-06 17:46 <DIR> --d----- h:\program files\Thomson
2009-07-06 17:45 <DIR> --d----- h:\program files\Neostrada TP
2009-07-06 17:40 <DIR> --d----- h:\program files\WinPortrait
2009-07-06 17:40 <DIR> --d----- h:\program files\Portrait Displays
2009-07-06 17:35 <DIR> --d----- h:\program files\GIGABYTE
2009-07-06 17:34 <DIR> --d----- h:\program files\Marvell
2009-07-06 17:34 <DIR> --d----- h:\program files\Realtek
2009-07-06 17:22 <DIR> --dsh--- h:\documents and settings\świnka morska\Cookies
2009-07-06 17:22 <DIR> --d-hr-- h:\documents and settings\świnka morska\SendTo
2009-07-06 17:22 <DIR> --d-hr-- h:\documents and settings\świnka morska\Recent
2009-07-06 17:22 <DIR> --d-hr-- h:\documents and settings\świnka morska\Dane aplikacji
2009-07-06 17:22 <DIR> --d-h--- h:\documents and settings\świnka morska\Szablony
2009-07-06 17:22 <DIR> --d-h--- h:\documents and settings\świnka morska\PrintHood
2009-07-06 17:22 <DIR> --d-h--- h:\documents and settings\świnka morska\NetHood
2009-07-06 17:22 <DIR> --d--r-- h:\documents and settings\świnka morska\Ulubione
2009-07-06 17:22 <DIR> --d--r-- h:\documents and settings\świnka morska\Moje dokumenty
2009-07-06 17:22 <DIR> --d--r-- h:\documents and settings\świnka morska\Menu Start
2009-07-06 17:22 <DIR> --d----- h:\documents and settings\świnka morska\Pulpit
2009-07-06 17:22 2,621,440 a---h--- h:\documents and settings\świnka morska\NTUSER.DAT
2009-07-06 17:22 <DIR> --d-h--- h:\documents and settings\świnka morska\Ustawienia lokalne
2009-07-06 17:17 <DIR> --dsh--- h:\documents and settings\all users\DRM
2009-07-06 17:17 <DIR> --d-h--- h:\program files\WindowsUpdate
2009-07-06 17:17 <DIR> --d----- h:\program files\Usługi online
2009-07-06 17:16 <DIR> --d----- h:\program files\common files\MSSoap
2009-07-06 17:15 <DIR> --d----- h:\program files\Messenger
2009-07-06 17:15 <DIR> --d----- h:\program files\MSN Gaming Zone
2009-07-06 17:14 <DIR> --d----- h:\program files\Windows NT

==================== Find3M ====================

2009-07-21 14:33 490,808 a------- h:\windows\system32\perfh015.dat
2009-07-21 14:33 83,988 a------- h:\windows\system32\perfc015.dat
2009-07-07 15:41 76,487 a------- h:\windows\pchealth\helpctr\offlinecache\index.dat
2009-07-06 20:41 4,212 a---h--- h:\windows\system32\zllictbl.dat
2009-07-06 18:22 124,464 a------- h:\windows\system32\drivers\SYMEVENT.SYS
2009-07-06 18:22 60,808 a------- h:\windows\system32\S32EVNT1.DLL
2009-07-06 18:22 10,635 a------- h:\windows\system32\drivers\SYMEVENT.CAT
2009-07-06 18:22 806 a------- h:\windows\system32\drivers\SYMEVENT.INF
2009-07-06 17:40 59,944 a------- h:\windows\system32\wpfb_ialmrnt5.dll
2009-07-06 17:40 16,384 a------- h:\windows\system32\WINKRNME.DLL
2009-07-06 17:16 21,856 a------- h:\windows\system32\emptyregdb.dat
2009-06-16 16:55 119,808 a------- h:\windows\system32\t2embed.dll
2009-06-16 16:55 82,432 a------- h:\windows\system32\fontsub.dll
2009-06-15 15:15 524,288 a------- h:\windows\opuc.dll
2009-06-03 21:27 1,294,336 a------- h:\windows\system32\quartz.dll
2009-05-13 07:06 915,456 a------- h:\windows\system32\wininet.dll
2009-05-07 17:44 346,112 a------- h:\windows\system32\localspl.dll
2009-04-29 06:32 81,920 -------- h:\windows\system32\ieencode.dll

============= FINISH: 14:36:14,92 ===============

Attached Files

Attach.txt 6.69KB 2 downloads

#4 myrti

Sillyberry

Malware Study Hall Admin
33,766 posts
OFFLINE

Gender:Female
Location:At home
Local time:05:11 PM

Posted 23 July 2009 - 04:06 PM

Hello and welcome to the BleepingComputer.com! :thumbup2:

I will be helping you today.

If you still need help, please let me know by replying to this thread.

Could you please also translate the following messages for me, as I'm unable to do so myself:

2009-07-06 17:28:37, ostrze�enie: Windows File Protection [64008] - Chroniony plik systemowy h:\windows\system32\drivers\usbehci.sys nie mo�e by� zweryfikowany jako prawid�owy, poniewa� Ochrona plik�w systemu Windows ko�czy dzia�anie. U�yj narz�dzia SFC, aby p�niej sprawdzi� integralno�� tego pliku.
2009-07-06 17:28:15, informacje: Windows File Protection [64002] - Podj�to pr�b� zamiany chronionego pliku systemowego pci.sys. Dla zachowania stabilno�ci systemu zosta�a przywr�cona wersja oryginalna pliku. Wersja z�ego pliku: 5.1.2600.2180.

(In case the letters aren't rendered correclty you can also find these messages at the bottom of your fist attached file.)

In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.

After 5 days if a topic is not replied to we assume it has been abandoned and it is closed.

Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.

regards _temp_

is that a bird? a plane? nooo it's the flying blueberry!

If I have been helping you and haven't replied in 2 days, feel free to shoot me a PM! Please don't send help request via PM, unless I am already helping you. Use the forums!

Follow BleepingComputer on: Facebook | Twitter | Google+

#5 Shagrak

Topic Starter

Members
10 posts
OFFLINE

Local time:10:11 AM

Posted 24 July 2009 - 09:36 AM

Hello

Translation:
2009-07-06 17:28:37, warning: Windows File Protection [64008] - a protected file h:\windows\system32\drivers\usbehci.sys cannot be verified as correct, because Windows File Protection is closing. Use the SFC tool to check the integrity of this file.
2009-07-06 17:28:15, informarion: Windows File Protection [64002] - attempted to change a protected system file pci.sys. To ensure system stability, an original version of the file has been restored. The incorrect file version: 5.1.2600.2180.

Since lat DDS log, I've installed Service Pack 3 - do You want me to post new DDS log?

#6 myrti

Sillyberry

Malware Study Hall Admin
33,766 posts
OFFLINE

Gender:Female
Location:At home
Local time:05:11 PM

Posted 24 July 2009 - 10:14 AM

Hi,

thanks for the translation. :thumbup2:

I believe this problem might have been resolved when you installed SP3. But I think we should check this out more closely. Do you have a Windows CD of your OS at your disposal? We might need it.

My replies are based on an english operating system, I hope this won't pose to many problems. However, if, under any circumstances, you can not adapt the instructions to your OS or you do not understand what I am trying to say, please let me know and I will see what I can do.

Please go to Start > Control Panel > Add or Remove Programs.

Remove the following programs, if they are present.

Ask Toolbar

If you are unsure of how to use Add or Remove Programs, the please see this tutorial:
How To Remove An Installed Program From Your Computer

It seems like you were infected with an infection that spreads via flash drives, we are going to remove the remains of them using Flash_Disinfector:

Please download Flash_Disinfector.exe by sUBs and save it to your desktop.

Double-click Flash_Disinfector.exe to run it and follow any prompts that may appear.
The utility may ask you to insert your flash drive and/or other removable drives. Please do so and allow the utility to clean up those drives as well.
Hold down the Shift key when inserting the drive until Windows detects it to keep autorun.inf from executing if it is present.
Wait until it has finished scanning and then exit the program.
Reboot your computer when done.

Note: As part of its routine, Flash_Disinfector will create a hidden folder named autorun.inf in each partition and every USB drive that was plugged in when you ran it. Do not delete this folder...it will help protect your drives from future infection by keeping the autorun file from being installed on the root drive and running other malicious files.

Please create a new log with OTL instead of DDS:
We need to create an OTL Report

Please download OTL from one of the following mirrors:
- This is THE Mirror
Save it to your desktop.
Double click on the icon on your desktop.
Click the "Scan All Users" checkbox.
Push the button.
Two reports will open, copy and paste them in a reply here:
- OTListIt.txt <-- Will be opened
- Extra.txt <-- Will be minimized

Please also post back a description of the remaining problems you have with your PC.

regards _temp_

is that a bird? a plane? nooo it's the flying blueberry!

If I have been helping you and haven't replied in 2 days, feel free to shoot me a PM! Please don't send help request via PM, unless I am already helping you. Use the forums!

Follow BleepingComputer on: Facebook | Twitter | Google+

#7 Shagrak

Topic Starter

Members
10 posts
OFFLINE

Local time:10:11 AM

Posted 24 July 2009 - 01:31 PM

Hello,

1. uninstall Ask Toolbar -> uninstalled
2. Flash Disinfector -> I've run it on flash drives before I formatted HDD, so they are protected, the virus was on a removable drive I couldn't disinfect
3. OTL reports:

OTL.txt:

OTL logfile created on: 2009-07-24 20:05:34 - Run 1
OTL by OldTimer - Version 3.0.10.2 Folder = H:\Documents and Settings\Świnka Morska\Pulpit
Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

503,48 Mb Total Physical Memory | 153,03 Mb Available Physical Memory | 30,39% Memory free
1,20 Gb Paging File | 0,71 Gb Available in Paging File | 59,48% Paging File free
Paging file location(s): H:\pagefile.sys 756 1512 [binary data]

%SystemDrive% = H: | %SystemRoot% = H:\WINDOWS | %ProgramFiles% = H:\Program Files
C: Drive not present or media not loaded
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
Drive H: | 97,66 Gb Total Space | 72,43 Gb Free Space | 74,17% Space Free | Partition Type: NTFS
Drive I: | 51,39 Gb Total Space | 50,87 Gb Free Space | 99,00% Space Free | Partition Type: NTFS

Computer Name: PPTH
Current User Name: Świnka Morska
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Processes (SafeList) ==========

PRC - [2009-02-16 00:10:22 | 02,402,184 | ---- | M] (Check Point Software Technologies LTD) -- H:\WINDOWS\System32\ZoneLabs\vsmon.exe
PRC - [2008-10-17 15:52:10 | 00,149,352 | ---- | M] (Symantec Corporation) -- H:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
PRC - [2007-09-06 13:28:18 | 00,110,592 | ---- | M] (Apple, Inc.) -- H:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
PRC - [2007-08-23 14:35:32 | 00,243,064 | ---- | M] (Symantec Corporation) -- H:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
PRC - [2004-11-23 15:09:06 | 00,057,344 | ---- | M] () -- H:\Program Files\Portrait Displays\forteManager\dtsrvc.exe
PRC - [2009-07-08 17:36:55 | 00,133,104 | ---- | M] (Google Inc.) -- H:\Program Files\Google\Update\GoogleUpdate.exe
PRC - [2008-04-14 19:21:16 | 01,035,264 | ---- | M] (Microsoft Corporation) -- H:\WINDOWS\Explorer.EXE
PRC - [2005-04-05 08:19:18 | 00,077,824 | R--- | M] (Intel Corporation) -- H:\WINDOWS\System32\hkcmd.exe
PRC - [2005-04-05 08:23:14 | 00,114,688 | R--- | M] (Intel Corporation) -- H:\WINDOWS\System32\igfxpers.exe
PRC - [2005-05-04 11:28:46 | 14,396,416 | ---- | M] (Realtek Semiconductor Corp.) -- H:\WINDOWS\RTHDCPL.EXE
PRC - [2004-10-04 15:59:54 | 00,694,008 | ---- | M] () -- H:\Program Files\WinPortrait\wpctrl.exe
PRC - [2004-01-26 11:38:38 | 00,866,816 | ---- | M] (THOMSON Telecom Belgium) -- H:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
PRC - [2008-10-17 15:52:10 | 00,149,352 | ---- | M] (Symantec Corporation) -- H:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
PRC - [2009-02-16 00:10:22 | 00,981,384 | ---- | M] (Check Point Software Technologies LTD) -- H:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
PRC - [2007-10-14 21:17:32 | 00,049,152 | ---- | M] (Hewlett-Packard) -- H:\Program Files\HP\HP Software Update\HPWuSchd2.exe
PRC - [2004-10-04 16:00:00 | 00,747,256 | ---- | M] () -- H:\Program Files\WinPortrait\floater.exe
PRC - [2009-02-26 10:49:18 | 00,099,328 | ---- | M] (Opera Software) -- H:\Program Files\Opera\opera.exe
PRC - [2004-04-23 14:55:58 | 00,749,568 | ---- | M] (sms-express.com) -- H:\Program Files\Gadu-Gadu\Gadu-gadu.exe
PRC - [2009-07-24 20:04:51 | 00,514,048 | ---- | M] (OldTimer Tools) -- H:\Documents and Settings\Świnka Morska\Pulpit\OTL.exe

========== Win32 Services (SafeList) ==========

SRV - [2007-09-06 13:28:18 | 00,110,592 | ---- | M] (Apple, Inc.) -- H:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe -- (Apple Mobile Device [Auto | Running])
SRV - [2007-10-24 01:47:22 | 00,033,800 | ---- | M] (Microsoft Corporation) -- H:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state [On_Demand | Stopped])
SRV - [2007-08-23 14:35:32 | 00,243,064 | ---- | M] (Symantec Corporation) -- H:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe -- (Automatic LiveUpdate Scheduler [Auto | Running])
SRV - [2008-10-17 15:52:10 | 00,149,352 | ---- | M] (Symantec Corporation) -- H:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccEvtMgr [Auto | Running])
SRV - [2008-10-17 15:52:10 | 00,149,352 | ---- | M] (Symantec Corporation) -- H:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccSetMgr [Auto | Running])
SRV - [2007-10-24 01:47:40 | 00,070,144 | ---- | M] (Microsoft Corporation) -- H:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped])
SRV - [2008-10-17 15:52:10 | 00,149,352 | ---- | M] (Symantec Corporation) -- H:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (CLTNetCnService [Auto | Running])
SRV - [2004-11-23 15:09:06 | 00,057,344 | ---- | M] () -- H:\Program Files\Portrait Displays\forteManager\dtsrvc.exe -- (DTSRVC [Auto | Running])
SRV - [2007-10-09 12:58:12 | 00,036,864 | ---- | M] (Microsoft Corporation) -- H:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe -- (FontCache3.0.0.0 [On_Demand | Stopped])
SRV - [2009-07-08 17:36:55 | 00,133,104 | ---- | M] (Google Inc.) -- H:\Program Files\Google\Update\GoogleUpdate.exe -- (gupdate1c9ffe1f1e767ee [Auto | Stopped])
SRV - [2009-07-08 17:35:07 | 00,190,448 | ---- | M] (Google) -- H:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc [Auto | Stopped])
SRV - [2008-04-14 19:20:44 | 00,038,400 | ---- | M] (Microsoft Corporation) -- H:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running])
SRV - [2007-11-06 21:16:54 | 00,217,088 | ---- | M] (Hewlett-Packard Co.) -- H:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll -- (hpqcxs08 [On_Demand | Running])
SRV - [2007-11-06 21:16:54 | 00,139,264 | ---- | M] (Hewlett-Packard Co.) -- H:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll -- (hpqddsvc [Auto | Running])
SRV - [2007-10-11 09:55:10 | 00,864,256 | ---- | M] (Microsoft Corporation) -- H:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe -- (idsvc [Unknown | Stopped])
SRV - [2007-09-26 14:41:56 | 00,503,608 | ---- | M] (Apple Inc.) -- H:\Program Files\iPod\bin\iPodService.exe -- (iPod Service [On_Demand | Stopped])
SRV - [2007-08-23 14:35:24 | 03,192,184 | ---- | M] (Symantec Corporation) -- H:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE -- (LiveUpdate [On_Demand | Stopped])
SRV - [2008-10-17 15:52:10 | 00,149,352 | ---- | M] (Symantec Corporation) -- H:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (LiveUpdate Notice [Auto | Running])
SRV - [2008-01-16 19:14:18 | 00,043,520 | ---- | M] (Hewlett-Packard) -- H:\WINDOWS\System32\HPZinw12.dll -- (Net Driver HPZ12 [Auto | Stopped])
SRV - [2007-10-11 09:55:14 | 00,122,880 | ---- | M] (Microsoft Corporation) -- H:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing [Disabled | Stopped])
SRV - [2003-07-28 20:28:22 | 00,089,136 | ---- | M] (Microsoft Corporation) -- H:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose [On_Demand | Stopped])
SRV - [2008-01-16 19:14:20 | 00,053,760 | ---- | M] (Hewlett-Packard) -- H:\WINDOWS\System32\HPZipm12.dll -- (Pml Driver HPZ12 [Auto | Stopped])
SRV - [2009-07-06 18:16:43 | 01,251,720 | ---- | M] () -- H:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe -- (Symantec Core LC [On_Demand | Stopped])
SRV - [2009-02-16 00:10:22 | 02,402,184 | ---- | M] (Check Point Software Technologies LTD) -- H:\WINDOWS\System32\ZoneLabs\vsmon.exe -- (vsmon [Auto | Running])
SRV - [2006-10-18 20:05:24 | 00,913,408 | ---- | M] (Microsoft Corporation) -- H:\Program Files\Windows Media Player\WMPNetwk.exe -- (WMPNetworkSvc [On_Demand | Stopped])

========== Driver Services (SafeList) ==========

DRV - [2003-12-08 11:53:48 | 00,053,600 | ---- | M] (THOMSON) -- H:\WINDOWS\System32\DRIVERS\alcan5wn.sys -- (alcan5wn [On_Demand | Running])
DRV - [2003-12-08 11:53:46 | 00,070,688 | ---- | M] (THOMSON) -- H:\WINDOWS\System32\DRIVERS\alcaudsl.sys -- (alcaudsl [On_Demand | Running])
DRV - [2008-07-30 17:42:12 | 00,023,888 | ---- | M] (Symantec Corporation) -- H:\WINDOWS\System32\Drivers\COH_Mon.sys -- (COH_Mon [On_Demand | Stopped])
DRV - [2009-06-16 12:44:44 | 00,371,248 | ---- | M] (Symantec Corporation) -- H:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl [System | Running])
DRV - [2009-06-16 12:44:44 | 00,101,936 | ---- | M] (Symantec Corporation) -- H:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv [On_Demand | Running])
DRV - [2006-09-19 14:44:04 | 00,015,664 | ---- | M] (GEAR Software Inc.) -- H:\WINDOWS\System32\Drivers\GEARAspiWDM.sys -- (GEARAspiWDM [On_Demand | Running])
DRV - [2008-04-13 18:36:05 | 00,144,384 | ---- | M] (Windows ® Server 2003 DDK provider) -- H:\WINDOWS\System32\DRIVERS\HDAudBus.sys -- (HDAudBus [On_Demand | Running])
DRV - [2007-11-02 04:28:06 | 00,049,920 | ---- | M] (HP) -- H:\WINDOWS\System32\DRIVERS\HPZid412.sys -- (HPZid412 [On_Demand | Stopped])
DRV - [2007-11-02 04:28:06 | 00,016,496 | ---- | M] (HP) -- H:\WINDOWS\System32\DRIVERS\HPZipr12.sys -- (HPZipr12 [On_Demand | Stopped])
DRV - [2007-11-02 04:28:07 | 00,021,568 | ---- | M] (HP) -- H:\WINDOWS\System32\DRIVERS\HPZius12.sys -- (HPZius12 [On_Demand | Stopped])
DRV - [2005-04-05 08:46:28 | 00,830,684 | R--- | M] (Intel Corporation) -- H:\WINDOWS\System32\DRIVERS\ialmnt5.sys -- (ialm [On_Demand | Running])
DRV - [2005-05-04 11:18:26 | 02,951,680 | ---- | M] (Realtek Semiconductor Corp.) -- H:\WINDOWS\System32\drivers\RtkHDAud.sys -- (IntcAzAudAddService [On_Demand | Running])
DRV - [2009-07-14 10:00:00 | 00,087,888 | ---- | M] (Symantec Corporation) -- H:\Program Files\Common Files\Symantec Shared\VirusDefs\20090723.066\NAVENG.SYS -- (NAVENG [On_Demand | Running])
DRV - [2009-07-14 10:00:00 | 00,875,728 | ---- | M] (Symantec Corporation) -- H:\Program Files\Common Files\Symantec Shared\VirusDefs\20090723.066\NAVEX15.SYS -- (NAVEX15 [On_Demand | Running])
DRV - [2003-01-29 15:08:32 | 00,014,416 | ---- | M] (Portrait Displays, Inc.) -- H:\WINDOWS\System32\drivers\pdihwctl.sys -- (PDIHWCTL [Auto | Running])
DRV - [2004-10-04 15:59:04 | 00,015,913 | ---- | M] (Windows ® 2000 DDK provider) -- H:\WINDOWS\System32\drivers\pivot.sys -- (pivot [System | Running])
DRV - [2004-10-04 15:59:06 | 00,009,260 | ---- | M] (Windows ® 2000 DDK provider) -- H:\WINDOWS\System32\drivers\pivotmou.sys -- (pivotmou [On_Demand | Running])
DRV - [2001-12-04 07:01:00 | 00,003,360 | ---- | M] () -- H:\WINDOWS\System32\drivers\PQNTDRV.SYS -- (PQNTDrv [System | Running])
DRV - [2004-08-04 14:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- H:\WINDOWS\System32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running])
DRV - [2007-04-03 12:57:42 | 00,083,336 | ---- | M] (MCCI Corporation) -- H:\WINDOWS\System32\DRIVERS\s116bus.sys -- (s116bus [On_Demand | Stopped])
DRV - [2007-04-03 12:57:48 | 00,015,112 | ---- | M] (MCCI Corporation) -- H:\WINDOWS\System32\DRIVERS\s116mdfl.sys -- (s116mdfl [On_Demand | Stopped])
DRV - [2007-04-03 12:57:48 | 00,108,680 | ---- | M] (MCCI Corporation) -- H:\WINDOWS\System32\DRIVERS\s116mdm.sys -- (s116mdm [On_Demand | Stopped])
DRV - [2007-04-03 12:57:50 | 00,100,488 | ---- | M] (MCCI Corporation) -- H:\WINDOWS\System32\DRIVERS\s116mgmt.sys -- (s116mgmt [On_Demand | Stopped])
DRV - [2007-04-03 12:57:52 | 00,023,176 | ---- | M] (MCCI Corporation) -- H:\WINDOWS\System32\DRIVERS\s116nd5.sys -- (s116nd5 [On_Demand | Stopped])
DRV - [2007-04-03 12:57:52 | 00,098,696 | ---- | M] (MCCI Corporation) -- H:\WINDOWS\System32\DRIVERS\s116obex.sys -- (s116obex [On_Demand | Stopped])
DRV - [2007-04-03 12:57:54 | 00,099,080 | ---- | M] (MCCI Corporation) -- H:\WINDOWS\System32\DRIVERS\s116unic.sys -- (s116unic [On_Demand | Stopped])
DRV - [2008-04-13 18:39:16 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- H:\WINDOWS\System32\DRIVERS\secdrv.sys -- (Secdrv [On_Demand | Stopped])
DRV - [2009-03-17 12:56:58 | 00,447,024 | ---- | M] (Symantec Corporation) -- H:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys -- (SPBBCDrv [System | Running])
DRV - [2008-11-17 02:24:00 | 00,051,688 | ---- | M] (Check Point Software Technologies LTD) -- H:\WINDOWS\system32\ZoneLabs\srescan.sys -- (srescan [Boot | Running])
DRV - [2007-11-30 23:57:12 | 00,279,088 | ---- | M] (Symantec Corporation) -- H:\WINDOWS\System32\Drivers\SRTSP.SYS -- (SRTSP [System | Running])
DRV - [2007-11-30 23:57:12 | 00,317,616 | ---- | M] (Symantec Corporation) -- H:\WINDOWS\System32\Drivers\SRTSPL.SYS -- (SRTSPL [On_Demand | Stopped])
DRV - [2007-11-30 23:57:12 | 00,043,696 | ---- | M] (Symantec Corporation) -- H:\WINDOWS\System32\Drivers\SRTSPX.SYS -- (SRTSPX [System | Running])
DRV - [2009-02-19 13:31:16 | 00,013,616 | ---- | M] (Symantec Corporation) -- H:\WINDOWS\System32\Drivers\SYMDNS.SYS -- (SYMDNS [On_Demand | Running])
DRV - [2009-07-06 18:22:17 | 00,124,464 | ---- | M] (Symantec Corporation) -- H:\WINDOWS\System32\Drivers\SYMEVENT.SYS -- (SymEvent [On_Demand | Running])
DRV - [2009-02-19 13:31:16 | 00,096,560 | ---- | M] (Symantec Corporation) -- H:\WINDOWS\System32\Drivers\SYMFW.SYS -- (SYMFW [On_Demand | Running])
DRV - [2009-02-19 13:31:16 | 00,038,576 | ---- | M] (Symantec Corporation) -- H:\WINDOWS\System32\Drivers\SYMIDS.SYS -- (SYMIDS [On_Demand | Running])
DRV - [2009-06-25 01:50:08 | 00,251,768 | ---- | M] (Symantec Corporation) -- H:\Program Files\Common Files\Symantec Shared\SymcData\ipsdefs\20090715.003\SymIDSCo.sys -- (SYMIDSCO [On_Demand | Running])
DRV - [2009-02-19 13:31:42 | 00,031,280 | ---- | M] (Symantec Corporation) -- H:\WINDOWS\System32\DRIVERS\SymIM.sys -- (SymIM [On_Demand | Stopped])
DRV - [2009-02-19 13:31:42 | 00,031,280 | ---- | M] (Symantec Corporation) -- H:\WINDOWS\System32\DRIVERS\SymIM.sys -- (SymIMMP [On_Demand | Running])
DRV - [2009-02-19 13:31:16 | 00,037,424 | ---- | M] (Symantec Corporation) -- H:\WINDOWS\System32\Drivers\SYMNDIS.SYS -- (SYMNDIS [On_Demand | Running])
DRV - [2009-02-19 13:31:16 | 00,022,320 | ---- | M] (Symantec Corporation) -- H:\WINDOWS\System32\Drivers\SYMREDRV.SYS -- (SYMREDRV [On_Demand | Running])
DRV - [2009-02-19 13:31:16 | 00,184,496 | ---- | M] (Symantec Corporation) -- H:\WINDOWS\System32\Drivers\SYMTDI.SYS -- (SYMTDI [System | Running])
DRV - [2007-09-06 13:28:16 | 00,030,336 | ---- | M] (Apple, Inc.) -- H:\WINDOWS\System32\Drivers\usbaapl.sys -- (USBAAPL [On_Demand | Stopped])
DRV - [2009-02-16 00:10:26 | 00,353,672 | ---- | M] (Check Point Software Technologies LTD) -- H:\WINDOWS\System32\vsdatant.sys -- (vsdatant [System | Running])
DRV - [2004-10-27 07:24:00 | 00,223,104 | ---- | M] (Marvell) -- H:\WINDOWS\System32\DRIVERS\yk51x86.sys -- (yukonwxp [On_Demand | Stopped])

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = H:\WINDOWS\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm

IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-1644491937-1425521274-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = H:\WINDOWS\system32\blank.htm
IE - HKU\S-1-5-21-1644491937-1425521274-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch
IE - HKU\S-1-5-21-1644491937-1425521274-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\S-1-5-21-1644491937-1425521274-725345543-1004\S-1-5-21-1644491937-1425521274-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

O1 HOSTS File: (742 bytes) - H:\WINDOWS\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - H:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - H:\Program Files\Common Files\Symantec Shared\IDS\IPSBHO.dll (Symantec Corporation)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - H:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll (Google Inc.)
O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - H:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O4 - HKLM..\Run: [Alcmtr] H:\WINDOWS\ALCMTR.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [ccApp] H:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
O4 - HKLM..\Run: [HotKeysCmds] H:\WINDOWS\System32\hkcmd.exe (Intel Corporation)
O4 - HKLM..\Run: [HP Software Update] H:\Program Files\HP\HP Software Update\HPWuSchd2.exe (Hewlett-Packard)
O4 - HKLM..\Run: [hpqSRMon] H:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe (Hewlett-Packard)
O4 - HKLM..\Run: [IgfxTray] H:\WINDOWS\System32\igfxtray.exe (Intel Corporation)
O4 - HKLM..\Run: [osCheck] H:\Program Files\Norton AntiVirus\osCheck.exe (Symantec Corporation)
O4 - HKLM..\Run: [Persistence] H:\WINDOWS\System32\igfxpers.exe (Intel Corporation)
O4 - HKLM..\Run: [PivotSoftware] H:\Program Files\WinPortrait\wpctrl.exe ()
O4 - HKLM..\Run: [RTHDCPL] H:\WINDOWS\RTHDCPL.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [SpeedTouch USB Diagnostics] H:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe (THOMSON Telecom Belgium)
O4 - HKLM..\Run: [ZoneAlarm Client] H:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe (Check Point Software Technologies LTD)
O4 - HKU\S-1-5-21-1644491937-1425521274-725345543-1004..\Run: [swg] H:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - HKU\.DEFAULT..\RunOnce: [] File not found
O4 - HKU\S-1-5-18..\RunOnce: [] File not found
O4 - HKU\S-1-5-19..\RunOnce: [] File not found
O4 - HKU\S-1-5-20..\RunOnce: [] File not found
O4 - Startup: H:\Documents and Settings\All Users\Menu Start\Programy\Autostart\HP Digital Imaging Monitor.lnk = H:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableStatusMessages = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 0
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 0
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 0
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 0
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 0
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O7 - HKU\S-1-5-21-1644491937-1425521274-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 36
O7 - HKU\S-1-5-21-1644491937-1425521274-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 0
O7 - HKU\S-1-5-21-1644491937-1425521274-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - H:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - H:\Program Files\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: Zaznaczanie HP Smart - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - H:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - H:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation)
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - H:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - H:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.microsoft.com/microsoftupdat...b?1246904572109 (MUWebControl Class)
O16 - DPF: {C7DB51B4-BCF7-4923-8874-7F1A0DC92277} http://office.microsoft.com/officeupdate/content/opuc4.cab (Office Update Installation Engine)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - H:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - H:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - H:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - H:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp - No CLSID value found
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - H:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - H:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - H:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - H:\Program Files\Common Files\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Filter: - text/xml - H:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - H:\WINDOWS\Explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - H:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 0
O34 - HKLM BootExecute: (autocheck) - File not found
O34 - HKLM BootExecute: (autochk) - H:\WINDOWS\System32\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) - File not found

========== Files/Folders - Created Within 30 Days ==========

[5 H:\WINDOWS\*.tmp files]
[2009-07-24 20:04:39 | 00,514,048 | ---- | C] (OldTimer Tools) -- H:\Documents and Settings\Świnka Morska\Pulpit\OTL.exe
[2009-07-24 16:27:52 | 00,218,624 | ---- | C] () -- H:\Documents and Settings\Świnka Morska\Pulpit\regulamin_konkursu_TdF_2009.doc
[2009-07-24 16:24:07 | 00,000,000 | ---D | C] -- H:\WINDOWS\Prefetch
[2009-07-24 16:16:55 | 00,000,000 | ---D | C] -- H:\WINDOWS\LastGood.Tmp
[2009-07-24 16:13:50 | 00,000,000 | ---D | C] -- H:\WINDOWS\l2schemas
[2009-07-24 16:13:49 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\pl
[2009-07-24 16:13:49 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\bits
[2009-07-24 16:11:01 | 00,000,000 | ---D | C] -- H:\WINDOWS\ServicePackFiles
[2009-07-24 16:09:22 | 00,000,000 | ---D | C] -- H:\WINDOWS\network diagnostic
[2009-07-24 16:05:42 | 00,000,000 | -H-D | C] -- H:\WINDOWS\$NtServicePackUninstall$
[2009-07-24 16:05:39 | 00,000,000 | ---D | C] -- H:\WINDOWS\EHome
[2009-07-23 16:34:06 | 00,662,560 | ---- | C] () -- H:\Documents and Settings\Świnka Morska\Pulpit\SA400311.JPG
[2009-07-23 16:34:03 | 00,614,472 | ---- | C] () -- H:\Documents and Settings\Świnka Morska\Pulpit\SA400307.JPG
[2009-07-23 16:33:59 | 00,663,398 | ---- | C] () -- H:\Documents and Settings\Świnka Morska\Pulpit\SA400312.JPG
[2009-07-23 16:33:56 | 00,345,977 | ---- | C] () -- H:\Documents and Settings\Świnka Morska\Pulpit\SA400302.JPG
[2009-07-21 16:34:16 | 00,001,858 | ---- | C] () -- H:\Documents and Settings\All Users\Pulpit\HP Photosmart Essential 2.5.lnk
[2009-07-21 16:32:49 | 00,001,808 | ---- | C] () -- H:\Documents and Settings\All Users\Menu Start\Programy\Autostart\HP Digital Imaging Monitor.lnk
[2009-07-21 16:32:14 | 00,000,862 | ---- | C] () -- H:\Documents and Settings\All Users\Pulpit\Centrum obsługi HP.lnk
[2009-07-21 16:32:01 | 00,000,000 | ---D | C] -- H:\Documents and Settings\All Users\Dane aplikacji\HP Product Assistant
[2009-07-21 16:31:29 | 00,000,000 | ---D | C] -- H:\Program Files\Hewlett-Packard
[2009-07-21 16:30:46 | 00,000,000 | ---D | C] -- H:\Program Files\Common Files\HP
[2009-07-21 16:30:02 | 00,970,752 | ---- | C] (Hewlett-Packard Co.) -- H:\WINDOWS\System32\hpotiop5.dll
[2009-07-21 16:30:02 | 00,729,088 | ---- | C] (Hewlett-Packard) -- H:\WINDOWS\System32\hpowiax5.dll
[2009-07-21 16:30:02 | 00,364,544 | ---- | C] (Hewlett-Packard) -- H:\WINDOWS\System32\hppldcoi.dll
[2009-07-21 16:30:02 | 00,309,760 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\difxapi.dll
[2009-07-21 16:30:02 | 00,303,104 | ---- | C] (Hewlett-Packard Co.) -- H:\WINDOWS\System32\hpovst12.dll
[2009-07-21 16:28:56 | 00,176,506 | ---- | C] () -- H:\WINDOWS\hpoins21.dat
[2009-07-21 16:28:56 | 00,007,262 | ---- | C] () -- H:\WINDOWS\hpomdl21.dat
[2009-07-21 15:59:40 | 20,851,7280 | ---- | C] () -- H:\Documents and Settings\Świnka Morska\Pulpit\100_235_PS_AIO_02_Full_NonNet_plkqqq.exe
[2009-07-21 15:58:17 | 00,000,000 | ---D | C] -- H:\Documents and Settings\Świnka Morska\Dane aplikacji\HP
[2009-07-21 15:58:00 | 00,000,000 | ---D | C] -- H:\Documents and Settings\Świnka Morska\Ustawienia lokalne\Dane aplikacji\HP
[2009-07-21 15:43:47 | 00,000,000 | ---D | C] -- H:\Documents and Settings\All Users\Dane aplikacji\Hewlett-Packard
[2009-07-21 15:43:28 | 00,118,272 | ---- | C] (Hewlett-Packard Company) -- H:\WINDOWS\System32\hpz3l5ha.dll
[2009-07-21 15:43:07 | 00,015,104 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\drivers\usbscan.sys
[2009-07-21 15:41:09 | 00,001,958 | ---- | C] () -- H:\Documents and Settings\All Users\Pulpit\Shop for HP Supplies.lnk
[2009-07-21 15:39:00 | 00,000,000 | ---D | C] -- H:\Documents and Settings\All Users\Dane aplikacji\HP
[2009-07-21 15:38:29 | 00,000,000 | ---D | C] -- H:\Program Files\Common Files\Hewlett-Packard
[2009-07-21 15:37:12 | 00,021,568 | ---- | C] (HP) -- H:\WINDOWS\System32\drivers\HPZius12.sys
[2009-07-21 15:37:11 | 00,016,496 | ---- | C] (HP) -- H:\WINDOWS\System32\drivers\HPZipr12.sys
[2009-07-21 15:37:10 | 00,049,920 | ---- | C] (HP) -- H:\WINDOWS\System32\drivers\HPZid412.sys
[2009-07-21 15:37:08 | 00,271,704 | ---- | C] (Hewlett-Packard) -- H:\WINDOWS\System32\hpzids01.dll
[2009-07-21 15:36:53 | 00,000,000 | ---D | C] -- H:\Program Files\HP
[2009-07-21 15:36:47 | 00,025,856 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\drivers\usbprint.sys
[2009-07-21 15:36:43 | 00,032,128 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\drivers\usbccgp.sys
[2009-07-21 15:36:10 | 00,000,000 | -H-D | C] -- H:\Config.Msi
[2009-07-19 18:03:09 | 00,000,000 | ---D | C] -- H:\Program Files\Common Files\DirectX
[2009-07-19 18:01:56 | 00,001,920 | ---- | C] () -- H:\Documents and Settings\All Users\Pulpit\Angels vs Devils.lnk
[2009-07-19 17:59:02 | 00,000,000 | ---D | C] -- H:\Program Files\Enigma Software Productions
[2009-07-18 21:53:00 | 00,000,000 | ---D | C] -- H:\Documents and Settings\Świnka Morska\Pulpit\Czcionki
[2009-07-18 10:52:01 | 00,000,000 | ---D | C] -- H:\Documents and Settings\Świnka Morska\Moje dokumenty\Ceville
[2009-07-18 10:51:38 | 02,036,576 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\D3DCompiler_40.dll
[2009-07-18 10:51:38 | 00,452,440 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\d3dx10_40.dll
[2009-07-18 10:51:37 | 04,379,984 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\D3DX9_40.dll
[2009-07-18 10:51:36 | 00,514,384 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\XAudio2_3.dll
[2009-07-18 10:51:36 | 00,070,992 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\XAPOFX1_2.dll
[2009-07-18 10:51:35 | 00,235,856 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\xactengine3_3.dll
[2009-07-18 10:51:34 | 00,509,448 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\XAudio2_2.dll
[2009-07-18 10:51:34 | 00,068,616 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\XAPOFX1_1.dll
[2009-07-18 10:51:34 | 00,023,376 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\X3DAudio1_5.dll
[2009-07-18 10:51:33 | 00,238,088 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\xactengine3_2.dll
[2009-07-18 10:51:32 | 03,851,784 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\D3DX9_39.dll
[2009-07-18 10:51:32 | 01,493,528 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\D3DCompiler_39.dll
[2009-07-18 10:51:32 | 00,467,984 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\d3dx10_39.dll
[2009-07-18 10:51:31 | 00,507,400 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\XAudio2_1.dll
[2009-07-18 10:51:31 | 00,065,032 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\XAPOFX1_0.dll
[2009-07-18 10:51:30 | 00,238,088 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\xactengine3_1.dll
[2009-07-18 10:51:30 | 00,025,608 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\X3DAudio1_4.dll
[2009-07-18 10:51:29 | 01,491,992 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\D3DCompiler_38.dll
[2009-07-18 10:51:29 | 00,467,984 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\d3dx10_38.dll
[2009-07-18 10:51:28 | 03,850,760 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\D3DX9_38.dll
[2009-07-18 10:51:27 | 00,479,752 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\XAudio2_0.dll
[2009-07-18 10:51:27 | 00,238,088 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\xactengine3_0.dll
[2009-07-18 10:51:26 | 01,420,824 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\D3DCompiler_37.dll
[2009-07-18 10:51:26 | 00,462,864 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\d3dx10_37.dll
[2009-07-18 10:51:26 | 00,025,608 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\X3DAudio1_3.dll
[2009-07-18 10:51:25 | 03,786,760 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\D3DX9_37.dll
[2009-07-18 10:51:24 | 00,267,272 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\xactengine2_10.dll
[2009-07-18 10:51:23 | 01,374,232 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\D3DCompiler_36.dll
[2009-07-18 10:51:23 | 00,444,776 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\d3dx10_36.dll
[2009-07-18 10:51:22 | 03,734,536 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\d3dx9_36.dll
[2009-07-18 10:51:21 | 00,267,112 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\xactengine2_9.dll
[2009-07-18 10:51:20 | 01,358,192 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\D3DCompiler_35.dll
[2009-07-18 10:51:20 | 00,444,776 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\d3dx10_35.dll
[2009-07-18 10:51:19 | 03,727,720 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\d3dx9_35.dll
[2009-07-18 10:51:18 | 00,266,088 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\xactengine2_8.dll
[2009-07-18 10:51:18 | 00,017,928 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\X3DAudio1_2.dll
[2009-07-18 10:51:17 | 01,124,720 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\D3DCompiler_34.dll
[2009-07-18 10:51:17 | 00,443,752 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\d3dx10_34.dll
[2009-07-18 10:51:16 | 03,497,832 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\d3dx9_34.dll
[2009-07-18 10:51:15 | 00,081,768 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\xinput1_3.dll
[2009-07-18 10:51:14 | 00,261,480 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\xactengine2_7.dll
[2009-07-18 10:51:12 | 01,123,696 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\D3DCompiler_33.dll
[2009-07-18 10:51:12 | 00,443,752 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\d3dx10_33.dll
[2009-07-18 10:51:09 | 03,495,784 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\d3dx9_33.dll
[2009-07-18 10:51:09 | 00,255,848 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\xactengine2_6.dll
[2009-07-18 10:51:08 | 00,251,672 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\xactengine2_5.dll
[2009-07-18 10:51:07 | 03,426,072 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\d3dx9_32.dll
[2009-07-18 10:51:06 | 02,414,360 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\d3dx9_31.dll
[2009-07-18 10:51:06 | 00,237,848 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\xactengine2_4.dll
[2009-07-18 10:51:06 | 00,015,128 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\x3daudio1_1.dll
[2009-07-18 10:51:05 | 00,236,824 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\xactengine2_3.dll
[2009-07-18 10:51:05 | 00,062,744 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\xinput1_2.dll
[2009-07-18 10:51:04 | 00,230,168 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\xactengine2_2.dll
[2009-07-18 10:51:04 | 00,062,672 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\xinput1_1.dll
[2009-07-18 10:51:03 | 00,229,584 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\xactengine2_1.dll
[2009-07-18 10:50:57 | 02,388,176 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\d3dx9_30.dll
[2009-07-18 10:50:56 | 02,332,368 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\d3dx9_29.dll
[2009-07-18 10:50:56 | 00,230,096 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\xactengine2_0.dll
[2009-07-18 10:50:56 | 00,014,032 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\x3daudio1_0.dll
[2009-07-18 10:50:55 | 02,323,664 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\d3dx9_28.dll
[2009-07-18 10:50:55 | 00,061,136 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\xinput9_1_0.dll
[2009-07-18 10:50:54 | 02,319,568 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\d3dx9_27.dll
[2009-07-18 10:50:54 | 02,297,552 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\d3dx9_26.dll
[2009-07-18 10:50:53 | 02,337,488 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\d3dx9_25.dll
[2009-07-18 10:50:52 | 02,222,800 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\d3dx9_24.dll
[2009-07-18 10:50:30 | 00,000,000 | ---D | C] -- H:\WINDOWS\Logs
[2009-07-18 10:48:33 | 00,000,000 | ---D | C] -- H:\Program Files\MSBuild
[2009-07-18 10:48:30 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\XPSViewer
[2009-07-18 10:48:26 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\en-us
[2009-07-18 10:48:26 | 00,000,000 | ---D | C] -- H:\Program Files\Reference Assemblies
[2009-07-18 10:47:55 | 00,014,048 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\spmsg2.dll
[2009-07-18 10:47:06 | 00,000,000 | R-SD | C] -- H:\WINDOWS\assembly
[2009-07-18 10:46:37 | 00,000,000 | ---D | C] -- H:\WINDOWS\Microsoft.NET
[2009-07-18 10:45:28 | 00,000,000 | ---D | C] -- H:\Program Files\MSXML 6.0
[2009-07-18 10:43:05 | 00,000,766 | ---- | C] () -- H:\Documents and Settings\Świnka Morska\Pulpit\Ceville.lnk
[2009-07-18 10:39:08 | 00,000,000 | ---D | C] -- H:\Program Files\Kalypso
[2009-07-17 21:06:26 | 00,000,883 | ---- | C] () -- H:\Documents and Settings\All Users\Pulpit\Foxit Reader.lnk
[2009-07-17 21:06:26 | 00,000,000 | ---D | C] -- H:\Documents and Settings\Świnka Morska\Dane aplikacji\Foxit
[2009-07-17 21:06:25 | 00,000,000 | ---D | C] -- H:\Program Files\Foxit Software
[2009-07-16 20:10:35 | 00,054,156 | -H-- | C] () -- H:\WINDOWS\QTFont.qfn
[2009-07-16 20:10:35 | 00,001,409 | ---- | C] () -- H:\WINDOWS\QTFont.for
[2009-07-16 15:52:04 | 00,000,000 | ---D | C] -- H:\games
[2009-07-16 15:49:51 | 03,237,376 | ---- | C] () -- H:\Documents and Settings\Świnka Morska\Pulpit\happyland_install.exe
[2009-07-11 21:28:59 | 00,000,000 | ---D | C] -- H:\Documents and Settings\Świnka Morska\Dane aplikacji\vlc
[2009-07-11 21:27:45 | 09,684,964 | ---- | C] () -- H:\Documents and Settings\Świnka Morska\Pulpit\opr005DL.flv
[2009-07-10 21:23:05 | 00,000,830 | ---- | C] () -- H:\Documents and Settings\Świnka Morska\Pulpit\Rule the Rail!.lnk
[2009-07-10 21:22:59 | 00,000,000 | ---D | C] -- H:\Program Files\BrainBombers
[2009-07-10 21:21:41 | 06,599,293 | ---- | C] (The BrainBombers Group ) -- H:\Documents and Settings\Świnka Morska\Pulpit\ruletherail_11.exe
[2009-07-10 21:14:12 | 00,000,000 | ---D | C] -- H:\CATRAIN
[2009-07-10 20:53:23 | 00,000,000 | ---D | C] -- H:\Documents and Settings\Świnka Morska\Pulpit\Zdjęcia
[2009-07-09 15:41:47 | 00,000,000 | ---D | C] -- H:\Documents and Settings\Świnka Morska\Dane aplikacji\Malwarebytes
[2009-07-09 15:41:44 | 00,000,696 | ---- | C] () -- H:\Documents and Settings\All Users\Pulpit\Malwarebytes' Anti-Malware.lnk
[2009-07-09 15:41:41 | 00,038,160 | ---- | C] (Malwarebytes Corporation) -- H:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2009-07-09 15:41:39 | 00,019,096 | ---- | C] (Malwarebytes Corporation) -- H:\WINDOWS\System32\drivers\mbam.sys
[2009-07-09 15:41:39 | 00,000,000 | ---D | C] -- H:\Program Files\Malwarebytes' Anti-Malware
[2009-07-09 15:41:39 | 00,000,000 | ---D | C] -- H:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes
[2009-07-08 17:38:29 | 00,000,000 | ---D | C] -- H:\Documents and Settings\Świnka Morska\Dane aplikacji\Google
[2009-07-08 17:37:57 | 00,001,836 | ---- | C] () -- H:\Documents and Settings\All Users\Pulpit\Google Earth.lnk
[2009-07-08 17:37:05 | 00,001,046 | ---- | C] () -- H:\WINDOWS\tasks\GoogleUpdateTaskMachine.job
[2009-07-08 17:36:56 | 00,000,000 | ---D | C] -- H:\Documents and Settings\Świnka Morska\Ustawienia lokalne\Dane aplikacji\Google
[2009-07-08 17:35:10 | 00,000,000 | ---D | C] -- H:\Documents and Settings\All Users\Dane aplikacji\Google Updater
[2009-07-08 17:35:09 | 00,000,972 | ---- | C] () -- H:\WINDOWS\tasks\Google Software Updater.job
[2009-07-08 17:35:07 | 00,000,000 | ---D | C] -- H:\Program Files\Google
[2009-07-08 16:36:32 | 00,000,000 | ---D | C] -- H:\Documents and Settings\Świnka Morska\Dane aplikacji\Macromedia
[2009-07-08 16:36:32 | 00,000,000 | ---D | C] -- H:\Documents and Settings\Świnka Morska\Dane aplikacji\Adobe
[2009-07-07 21:33:24 | 00,000,000 | ---D | C] -- H:\Documents and Settings\Świnka Morska\Pulpit\All But The Truth AGAIN!
[2009-07-07 21:30:56 | 00,000,000 | ---D | C] -- H:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu
[2009-07-07 21:27:40 | 00,000,000 | ---D | C] -- H:\Program Files\Gadu-Gadu
[2009-07-07 20:52:15 | 06,856,739 | ---- | C] () -- H:\Documents and Settings\Świnka Morska\Pulpit\Fear of the dark.mp3
[2009-07-07 20:50:45 | 00,597,112 | ---- | C] () -- H:\Documents and Settings\Świnka Morska\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
[2009-07-07 20:50:09 | 00,000,000 | R--D | C] -- H:\Documents and Settings\Świnka Morska\Moje dokumenty\Moje wideo
[2009-07-07 20:50:09 | 00,000,000 | R--D | C] -- H:\Documents and Settings\All Users\Dokumenty\Moje wideo
[2009-07-07 17:48:31 | 00,000,000 | ---D | C] -- H:\Documents and Settings\Świnka Morska\Ustawienia lokalne\Dane aplikacji\Sony Ericsson
[2009-07-07 17:36:33 | 00,812,344 | ---- | C] (Trend Micro Inc.) -- H:\Documents and Settings\Świnka Morska\Pulpit\HT.exe
[2009-07-07 17:31:21 | 00,102,912 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\iecompat.dll
[2009-07-07 17:31:08 | 00,000,000 | ---D | C] -- H:\WINDOWS\ie8updates
[2009-07-07 17:30:57 | 00,012,800 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\xpshims.dll
[2009-07-07 17:30:56 | 11,064,832 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\ieframe.dll
[2009-07-07 17:30:56 | 01,985,024 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\iertutil.dll
[2009-07-07 17:30:56 | 00,246,272 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\ieproxy.dll
[2009-07-07 17:30:24 | 00,000,000 | ---D | C] -- H:\WINDOWS\WBEM
[2009-07-07 17:29:23 | 00,000,000 | -H-D | C] -- H:\WINDOWS\ie8
[2009-07-07 17:29:23 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\pl-PL
[2009-07-07 17:24:24 | 24,539,592 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\MRT.exe
[2009-07-07 17:18:48 | 00,025,471 | ---- | C] (Intel® Corporation) -- H:\WINDOWS\System32\drivers\watv10nt.sys
[2009-07-07 17:18:48 | 00,022,271 | ---- | C] (Intel® Corporation) -- H:\WINDOWS\System32\drivers\watv06nt.sys
[2009-07-07 17:18:48 | 00,011,935 | ---- | C] (Intel® Corporation) -- H:\WINDOWS\System32\drivers\wadv11nt.sys
[2009-07-07 17:18:48 | 00,011,871 | ---- | C] (Intel® Corporation) -- H:\WINDOWS\System32\drivers\wadv09nt.sys
[2009-07-07 17:18:48 | 00,011,807 | ---- | C] (Intel® Corporation) -- H:\WINDOWS\System32\drivers\wadv07nt.sys
[2009-07-07 17:18:48 | 00,011,295 | ---- | C] (Intel® Corporation) -- H:\WINDOWS\System32\drivers\wadv08nt.sys
[2009-07-07 17:18:45 | 00,404,990 | ---- | C] (Smart Link) -- H:\WINDOWS\System32\drivers\slntamr.sys
[2009-07-07 17:18:45 | 00,166,912 | ---- | C] (S3 Graphics, Inc.) -- H:\WINDOWS\System32\drivers\s3gnbm.sys
[2009-07-07 17:18:45 | 00,129,535 | ---- | C] (Smart Link) -- H:\WINDOWS\System32\drivers\slnt7554.sys
[2009-07-07 17:18:45 | 00,095,424 | ---- | C] (Smart Link) -- H:\WINDOWS\System32\drivers\slnthal.sys
[2009-07-07 17:18:45 | 00,013,776 | ---- | C] (Smart Link) -- H:\WINDOWS\System32\drivers\recagent.sys
[2009-07-07 17:18:45 | 00,013,240 | ---- | C] (Smart Link) -- H:\WINDOWS\System32\drivers\slwdmsup.sys
[2009-07-07 17:18:43 | 01,897,408 | ---- | C] (NVIDIA Corporation) -- H:\WINDOWS\System32\drivers\nv4_mini.sys
[2009-07-07 17:18:43 | 01,309,184 | ---- | C] (Smart Link) -- H:\WINDOWS\System32\drivers\mtlstrm.sys
[2009-07-07 17:18:43 | 00,452,736 | ---- | C] (Matrox Graphics Inc.) -- H:\WINDOWS\System32\drivers\mtxparhm.sys
[2009-07-07 17:18:43 | 00,180,360 | ---- | C] (Smart Link) -- H:\WINDOWS\System32\drivers\ntmtlfax.sys
[2009-07-07 17:18:43 | 00,126,686 | ---- | C] (Smart Link) -- H:\WINDOWS\System32\drivers\mtlmnt5.sys
[2009-07-07 17:18:43 | 00,067,866 | ---- | C] () -- H:\WINDOWS\System32\drivers\netwlan5.img
[2009-07-07 17:18:42 | 00,011,868 | ---- | C] (Conexant) -- H:\WINDOWS\System32\drivers\mdmxsdk.sys
[2009-07-07 17:18:39 | 01,041,536 | ---- | C] (Conexant Systems, Inc.) -- H:\WINDOWS\System32\drivers\hsfdpsp2.sys
[2009-07-07 17:18:39 | 00,685,056 | ---- | C] (Conexant Systems, Inc.) -- H:\WINDOWS\System32\drivers\hsfcxts2.sys
[2009-07-07 17:18:38 | 00,220,032 | ---- | C] (Conexant Systems, Inc.) -- H:\WINDOWS\System32\drivers\hsfbs2s2.sys
[2009-07-07 17:18:35 | 00,129,045 | ---- | C] () -- H:\WINDOWS\System32\drivers\cxthsfs2.cty
[2009-07-07 17:17:39 | 00,104,960 | ---- | C] (ATI Technologies Inc.) -- H:\WINDOWS\System32\drivers\atinrvxx.sys
[2009-07-07 17:17:39 | 00,073,216 | ---- | C] (ATI Technologies Inc.) -- H:\WINDOWS\System32\drivers\atintuxx.sys
[2009-07-07 17:17:39 | 00,064,352 | ---- | C] () -- H:\WINDOWS\System32\drivers\ativmc20.cod
[2009-07-07 17:17:39 | 00,063,488 | ---- | C] (ATI Technologies Inc.) -- H:\WINDOWS\System32\drivers\atinxsxx.sys
[2009-07-07 17:17:39 | 00,052,224 | ---- | C] (ATI Technologies Inc.) -- H:\WINDOWS\System32\drivers\atinraxx.sys
[2009-07-07 17:17:39 | 00,031,744 | ---- | C] (ATI Technologies Inc.) -- H:\WINDOWS\System32\drivers\atinxbxx.sys
[2009-07-07 17:17:39 | 00,028,672 | ---- | C] (ATI Technologies Inc.) -- H:\WINDOWS\System32\drivers\atinsnxx.sys
[2009-07-07 17:17:39 | 00,014,336 | ---- | C] (ATI Technologies Inc.) -- H:\WINDOWS\System32\drivers\atinpdxx.sys
[2009-07-07 17:17:39 | 00,013,824 | ---- | C] (ATI Technologies Inc.) -- H:\WINDOWS\System32\drivers\atinttxx.sys
[2009-07-07 17:17:38 | 00,701,440 | ---- | C] (ATI Technologies Inc.) -- H:\WINDOWS\System32\drivers\ati2mtag.sys
[2009-07-07 17:17:38 | 00,327,040 | ---- | C] (ATI Technologies Inc.) -- H:\WINDOWS\System32\drivers\ati2mtaa.sys
[2009-07-07 17:17:38 | 00,063,663 | ---- | C] (ATI Technologies Inc.) -- H:\WINDOWS\System32\drivers\ati1rvxx.sys
[2009-07-07 17:17:38 | 00,057,856 | ---- | C] (ATI Technologies Inc.) -- H:\WINDOWS\System32\drivers\atinbtxx.sys
[2009-07-07 17:17:38 | 00,056,623 | ---- | C] (ATI Technologies Inc.) -- H:\WINDOWS\System32\drivers\ati1btxx.sys
[2009-07-07 17:17:38 | 00,036,463 | ---- | C] (ATI Technologies Inc.) -- H:\WINDOWS\System32\drivers\ati1tuxx.sys
[2009-07-07 17:17:38 | 00,034,735 | ---- | C] (ATI Technologies Inc.) -- H:\WINDOWS\System32\drivers\ati1xsxx.sys
[2009-07-07 17:17:38 | 00,030,671 | ---- | C] (ATI Technologies Inc.) -- H:\WINDOWS\System32\drivers\ati1raxx.sys
[2009-07-07 17:17:38 | 00,029,455 | ---- | C] (ATI Technologies Inc.) -- H:\WINDOWS\System32\drivers\ati1xbxx.sys
[2009-07-07 17:17:38 | 00,026,367 | ---- | C] (ATI Technologies Inc.) -- H:\WINDOWS\System32\drivers\ati1snxx.sys
[2009-07-07 17:17:38 | 00,021,343 | ---- | C] (ATI Technologies Inc.) -- H:\WINDOWS\System32\drivers\ati1ttxx.sys
[2009-07-07 17:17:38 | 00,013,824 | ---- | C] (ATI Technologies Inc.) -- H:\WINDOWS\System32\drivers\atinmdxx.sys
[2009-07-07 17:17:38 | 00,012,047 | ---- | C] (ATI Technologies Inc.) -- H:\WINDOWS\System32\drivers\ati1pdxx.sys
[2009-07-07 17:17:38 | 00,011,615 | ---- | C] (ATI Technologies Inc.) -- H:\WINDOWS\System32\drivers\ati1mdxx.sys
[2009-07-07 17:14:06 | 00,388,974 | ---- | C] () -- H:\Documents and Settings\Świnka Morska\Pulpit\USBVaccine.zip
[2009-07-07 17:04:30 | 00,000,000 | ---D | C] -- H:\Program Files\Security Task Manager
[2009-07-07 17:03:55 | 01,709,408 | ---- | C] () -- H:\Documents and Settings\Świnka Morska\Pulpit\taskmanager17.exe
[2009-07-07 16:58:02 | 00,273,024 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\bthport.sys
[2009-07-07 16:58:01 | 00,273,024 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\drivers\bthport.sys
[2009-07-07 16:55:55 | 00,227,840 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\wmiprvse.exe
[2009-07-07 16:55:53 | 02,190,336 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\ntoskrnl.exe
[2009-07-07 16:55:52 | 00,401,408 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\rpcss.dll
[2009-07-07 16:55:52 | 00,285,696 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\pdh.dll
[2009-07-07 16:55:52 | 00,111,104 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\services.exe
[2009-07-07 16:55:51 | 00,473,600 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\fastprox.dll
[2009-07-07 16:55:50 | 00,731,136 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\lsasrv.dll
[2009-07-07 16:55:50 | 00,686,592 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\advapi32.dll
[2009-07-07 16:55:50 | 00,453,120 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\wmiprvsd.dll
[2009-07-07 16:55:49 | 00,722,944 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\ntdll.dll
[2009-07-07 16:55:48 | 02,146,816 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\ntkrnlmp.exe
[2009-07-07 16:55:46 | 02,025,472 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\ntkrpamp.exe
[2009-07-07 16:51:23 | 00,203,136 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\rmcast.sys
[2009-07-07 16:51:19 | 00,455,296 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\mrxsmb.sys
[2009-07-07 16:51:12 | 00,333,952 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\srv.sys
[2009-07-07 16:50:38 | 00,691,712 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\inetcomm.dll
[2009-07-07 16:46:32 | 00,337,408 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\netapi32.dll
[2009-07-07 16:45:10 | 00,218,112 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\wordpad.exe
[2009-07-07 16:42:30 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\PreInstall
[2009-07-07 16:42:28 | 00,000,000 | -H-D | C] -- H:\WINDOWS\$hf_mig$
[2009-07-07 16:36:01 | 00,268,648 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\mucltui.dll
[2009-07-07 16:36:01 | 00,027,496 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\mucltui.dll.mui
[2009-07-07 15:12:53 | 00,000,000 | ---D | C] -- H:\Program Files\Avanquest update
[2009-07-07 15:12:52 | 00,000,000 | ---D | C] -- H:\Documents and Settings\All Users\Dane aplikacji\BVRP Software
[2009-07-07 15:12:25 | 00,100,488 | ---- | C] (MCCI Corporation) -- H:\WINDOWS\System32\drivers\s116mgmt.sys
[2009-07-07 15:12:25 | 00,099,080 | ---- | C] (MCCI Corporation) -- H:\WINDOWS\System32\drivers\s116unic.sys
[2009-07-07 15:12:25 | 00,011,016 | ---- | C] (MCCI Corporation) -- H:\WINDOWS\System32\drivers\s116cr.sys
[2009-07-07 15:12:24 | 00,108,680 | ---- | C] (MCCI Corporation) -- H:\WINDOWS\System32\drivers\s116mdm.sys
[2009-07-07 15:12:24 | 00,098,696 | ---- | C] (MCCI Corporation) -- H:\WINDOWS\System32\drivers\s116obex.sys
[2009-07-07 15:12:24 | 00,023,176 | ---- | C] (MCCI Corporation) -- H:\WINDOWS\System32\drivers\s116nd5.sys
[2009-07-07 15:12:24 | 00,015,112 | ---- | C] (MCCI Corporation) -- H:\WINDOWS\System32\drivers\s116mdfl.sys
[2009-07-07 15:12:24 | 00,012,424 | ---- | C] (MCCI Corporation) -- H:\WINDOWS\System32\drivers\s116cmnt.sys
[2009-07-07 15:12:24 | 00,012,424 | ---- | C] (MCCI Corporation) -- H:\WINDOWS\System32\drivers\s116cm.sys
[2009-07-07 15:12:23 | 00,083,336 | ---- | C] (MCCI Corporation) -- H:\WINDOWS\System32\drivers\s116bus.sys
[2009-07-07 15:12:23 | 00,012,424 | ---- | C] (MCCI Corporation) -- H:\WINDOWS\System32\drivers\s116whnt.sys
[2009-07-07 15:12:23 | 00,012,424 | ---- | C] (MCCI Corporation) -- H:\WINDOWS\System32\drivers\s116wh.sys
[2009-07-07 15:12:21 | 00,001,853 | ---- | C] () -- H:\Documents and Settings\All Users\Pulpit\Sony Ericsson PC Suite 3.1.lnk
[2009-07-07 15:12:08 | 00,000,000 | ---D | C] -- H:\Program Files\Sony Ericsson
[2009-07-07 15:12:08 | 00,000,000 | ---D | C] -- H:\Documents and Settings\All Users\Dane aplikacji\Sony Ericsson
[2009-07-07 15:11:56 | 00,000,000 | ---D | C] -- H:\Documents and Settings\Świnka Morska\Dane aplikacji\InstallShield
[2009-07-07 15:11:06 | 00,000,736 | ---- | C] () -- H:\Documents and Settings\All Users\Pulpit\WinZip.lnk
[2009-07-07 15:10:45 | 00,000,000 | ---D | C] -- H:\Program Files\WinZip
[2009-07-07 15:10:30 | 00,131,072 | ---- | C] (Inner Media, Inc.) -- H:\WINDOWS\System32\dzip32.dll
[2009-07-07 15:10:30 | 00,110,592 | ---- | C] (Inner Media, Inc.) -- H:\WINDOWS\System32\dunzip32.dll
[2009-07-07 15:10:27 | 00,000,000 | ---D | C] -- H:\Program Files\Windows Media Bonus Pack for Windows XP
[2009-07-07 15:09:54 | 00,000,719 | ---- | C] () -- H:\Documents and Settings\All Users\Pulpit\VLC media player.lnk
[2009-07-07 15:09:44 | 00,000,000 | ---D | C] -- H:\Program Files\VideoLAN
[2009-07-07 15:08:40 | 00,018,976 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\spmsg.dll
[2009-07-07 15:08:10 | 00,000,000 | ---D | C] -- H:\Program Files\Windows Media Connect 2
[2009-07-07 15:06:25 | 00,000,000 | -H-- | C] () -- H:\WINDOWS\System32\drivers\UMDF\MsftWdf_user_01_00_00.Wdf
[2009-07-07 15:06:22 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\LogFiles
[2009-07-07 15:06:22 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\drivers\UMDF
[2009-07-07 15:05:22 | 00,000,000 | ---D | C] -- H:\Documents and Settings\All Users\Dane aplikacji\Windows Genuine Advantage
[2009-07-07 15:01:27 | 00,000,000 | ---D | C] -- H:\Documents and Settings\Świnka Morska\Dane aplikacji\Apple Computer
[2009-07-07 15:01:19 | 00,002,137 | ---- | C] () -- H:\Documents and Settings\All Users\Pulpit\iTunes.lnk
[2009-07-07 15:01:11 | 00,000,000 | ---D | C] -- H:\Program Files\iPod
[2009-07-07 15:01:07 | 00,000,000 | ---D | C] -- H:\Program Files\iTunes
[2009-07-07 15:00:33 | 00,001,604 | ---- | C] () -- H:\Documents and Settings\All Users\Pulpit\QuickTime Player.lnk
[2009-07-07 15:00:16 | 00,000,000 | ---D | C] -- H:\Program Files\QuickTime
[2009-07-07 15:00:15 | 00,000,000 | ---D | C] -- H:\Documents and Settings\All Users\Dane aplikacji\Apple Computer
[2009-07-07 15:00:00 | 00,000,000 | ---D | C] -- H:\Documents and Settings\Świnka Morska\Ustawienia lokalne\Dane aplikacji\Apple
[2009-07-07 14:59:56 | 00,000,000 | ---D | C] -- H:\Program Files\Apple Software Update
[2009-07-07 14:59:49 | 00,030,336 | ---- | C] (Apple, Inc.) -- H:\WINDOWS\System32\drivers\usbaapl.sys
[2009-07-07 14:59:49 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\DRVSTORE
[2009-07-07 14:59:33 | 00,000,000 | ---D | C] -- H:\Program Files\Common Files\Apple
[2009-07-07 14:59:33 | 00,000,000 | ---D | C] -- H:\Documents and Settings\All Users\Dane aplikacji\Apple
[2009-07-07 14:58:52 | 00,000,000 | ---D | C] -- H:\Documents and Settings\Świnka Morska\Ustawienia lokalne\Dane aplikacji\Apple Computer
[2009-07-07 14:30:15 | 00,000,935 | ---- | C] () -- H:\WINDOWS\System32\PQ_BATCH.PQB
[2009-07-07 14:26:19 | 00,001,863 | ---- | C] () -- H:\Documents and Settings\Świnka Morska\Pulpit\PartitionMagic 7.0.lnk
[2009-07-07 14:03:49 | 01,357,372 | ---- | C] () -- H:\WINDOWS\System32\XMNT2001.EXE
[2009-07-07 14:03:49 | 00,003,360 | ---- | C] () -- H:\WINDOWS\System32\drivers\PQNTDRV.SYS
[2009-07-07 14:03:38 | 00,000,000 | ---D | C] -- H:\Program Files\PowerQuest
[2009-07-07 14:01:57 | 00,000,806 | ---- | C] () -- H:\WINDOWS\unins000.dat
[2009-07-07 14:00:49 | 00,000,000 | ---D | C] -- H:\WINDOWS\pss
[2009-07-06 21:42:35 | 00,003,584 | ---- | C] () -- H:\Documents and Settings\Świnka Morska\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009-07-06 21:10:51 | 00,000,000 | ---D | C] -- H:\Documents and Settings\Świnka Morska\Dane aplikacji\OfficeUpdate12
[2009-07-06 21:07:17 | 00,000,421 | ---- | C] () -- H:\WINDOWS\ODBC.INI
[2009-07-06 21:07:14 | 00,028,040 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\mdimon.dll
[2009-07-06 21:06:42 | 00,002,557 | ---- | C] () -- H:\Documents and Settings\Świnka Morska\Pulpit\Microsoft Office Excel 2003.lnk
[2009-07-06 21:06:42 | 00,002,539 | ---- | C] () -- H:\Documents and Settings\Świnka Morska\Pulpit\Microsoft Word.lnk
[2009-07-06 21:06:32 | 00,000,000 | ---D | C] -- H:\Program Files\Common Files\DESIGNER
[2009-07-06 21:06:16 | 00,000,000 | ---D | C] -- H:\WINDOWS\SHELLNEW
[2009-07-06 21:05:39 | 00,000,000 | ---D | C] -- H:\Program Files\Microsoft Office
[2009-07-06 21:04:08 | 00,000,000 | RH-D | C] -- H:\MSOCache
[2009-07-06 20:51:32 | 00,000,000 | ---D | C] -- H:\Documents and Settings\Świnka Morska\Ustawienia lokalne\Dane aplikacji\Opera
[2009-07-06 20:51:32 | 00,000,000 | ---D | C] -- H:\Documents and Settings\Świnka Morska\Dane aplikacji\Opera
[2009-07-06 20:51:26 | 00,000,592 | ---- | C] () -- H:\Documents and Settings\All Users\Pulpit\Opera.lnk
[2009-07-06 20:51:23 | 00,000,000 | ---D | C] -- H:\Program Files\Opera
[2009-07-06 20:50:37 | 07,562,568 | ---- | C] (Opera Software ASA) -- H:\Documents and Settings\Świnka Morska\Pulpit\Opera_964_int_Setup.exe
[2009-07-06 20:49:48 | 06,895,256 | ---- | C] (Opera Software ASA ) -- H:\Documents and Settings\Świnka Morska\Pulpit\Opera_1000_en_b1_Setup.exe
[2009-07-06 20:41:40 | 00,058,248 | ---- | C] (Check Point Software Technologies LTD) -- H:\WINDOWS\System32\vsregexp.dll
[2009-07-06 20:41:39 | 00,103,816 | ---- | C] (Check Point Software Technologies LTD) -- H:\WINDOWS\System32\zlcommdb.dll
[2009-07-06 20:41:39 | 00,069,000 | ---- | C] (Check Point Software Technologies LTD) -- H:\WINDOWS\System32\zlcomm.dll
[2009-07-06 20:41:35 | 00,035,208 | ---- | C] (Check Point Software Technologies LTD) -- H:\WINDOWS\System32\vswmi.dll
[2009-07-06 20:41:34 | 01,221,512 | ---- | C] (Check Point Software Technologies LTD) -- H:\WINDOWS\System32\zpeng25.dll
[2009-07-06 20:41:34 | 00,309,128 | ---- | C] (Check Point Software Technologies LTD) -- H:\WINDOWS\System32\vspubapi.dll
[2009-07-06 20:41:34 | 00,109,960 | ---- | C] (Check Point Software Technologies LTD) -- H:\WINDOWS\System32\vsxml.dll
[2009-07-06 20:41:34 | 00,107,912 | ---- | C] (Check Point Software Technologies LTD) -- H:\WINDOWS\System32\vsmonapi.dll
[2009-07-06 20:41:34 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\ZoneLabs
[2009-07-06 20:41:34 | 00,000,000 | ---D | C] -- H:\Program Files\Zone Labs
[2009-07-06 20:41:33 | 00,353,672 | ---- | C] (Check Point Software Technologies LTD) -- H:\WINDOWS\System32\vsdatant.sys
[2009-07-06 20:41:33 | 00,350,192 | ---- | C] () -- H:\WINDOWS\System32\vsconfig.xml
[2009-07-06 20:40:47 | 00,482,184 | ---- | C] (Check Point Software Technologies LTD) -- H:\WINDOWS\System32\vsutil.dll
[2009-07-06 20:40:47 | 00,229,256 | ---- | C] (Check Point Software Technologies LTD) -- H:\WINDOWS\System32\vsinit.dll
[2009-07-06 20:40:47 | 00,110,472 | ---- | C] (Check Point Software Technologies LTD) -- H:\WINDOWS\System32\vsdata.dll
[2009-07-06 20:35:53 | 33,952,648 | ---- | C] () -- H:\Documents and Settings\Świnka Morska\Pulpit\zaZA_Setup_en.exe
[2009-07-06 20:30:57 | 00,267,152 | ---- | C] () -- H:\Documents and Settings\Świnka Morska\Pulpit\zaSetup_en[1].exe
[2009-07-06 20:29:40 | 00,000,000 | -HSD | C] -- H:\RECYCLER
[2009-07-06 19:07:40 | 00,003,072 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\drivers\audstub.sys
[2009-07-06 19:07:04 | 00,058,880 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\drivers\redbook.sys
[2009-07-06 19:06:45 | 00,006,400 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\drivers\enum1394.sys
[2009-07-06 19:06:23 | 00,077,312 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\usbui.dll
[2009-07-06 19:05:30 | 00,000,000 | -HSD | C] -- H:\WINDOWS\Installer
[2009-07-06 19:05:29 | 00,000,000 | ---D | C] -- H:\Program Files\Common Files\ODBC
[2009-07-06 19:05:28 | 01,685,606 | ---- | C] () -- H:\WINDOWS\System32\dllcache\sam.spd
[2009-07-06 19:05:28 | 00,077,824 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\spcommon.dll
[2009-07-06 19:05:28 | 00,061,440 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\spcplui.dll
[2009-07-06 19:05:28 | 00,000,888 | ---- | C] () -- H:\WINDOWS\System32\dllcache\sam.sdf
[2009-07-06 19:05:27 | 00,774,144 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\spttseng.dll
[2009-07-06 19:05:27 | 00,643,717 | ---- | C] () -- H:\WINDOWS\System32\dllcache\ltts1033.lxa
[2009-07-06 19:05:27 | 00,605,050 | ---- | C] () -- H:\WINDOWS\System32\dllcache\r1033tts.lxa
[2009-07-06 19:05:27 | 00,036,864 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\sapisvr.exe
[2009-07-06 19:05:27 | 00,000,000 | ---D | C] -- H:\Program Files\Common Files\SpeechEngines
[2009-07-06 19:05:26 | 00,000,000 | R--D | C] -- H:\Program Files
[2009-07-06 19:05:26 | 00,000,000 | ---D | C] -- H:\Program Files\Common Files\Microsoft Shared
[2009-07-06 19:05:26 | 00,000,000 | ---D | C] -- H:\Program Files\Common Files
[2009-07-06 19:05:24 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_28603.nls
[2009-07-06 19:05:24 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\c_28603.nls
[2009-07-06 19:05:23 | 00,066,594 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_857.nls
[2009-07-06 19:05:23 | 00,066,594 | ---- | C] () -- H:\WINDOWS\System32\c_857.nls
[2009-07-06 19:05:23 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_28599.nls
[2009-07-06 19:05:23 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_10081.nls
[2009-07-06 19:05:23 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\c_28599.nls
[2009-07-06 19:05:23 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\c_10081.nls
[2009-07-06 19:05:23 | 00,006,144 | R--- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\kbdtuq.dll
[2009-07-06 19:05:23 | 00,006,144 | R--- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\kbdtuf.dll
[2009-07-06 19:05:23 | 00,006,144 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdtuq.dll
[2009-07-06 19:05:23 | 00,006,144 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdtuf.dll
[2009-07-06 19:05:23 | 00,005,632 | R--- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\kbdazel.dll
[2009-07-06 19:05:23 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdazel.dll
[2009-07-06 19:05:21 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_28595.nls
[2009-07-06 19:05:21 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_10017.nls
[2009-07-06 19:05:21 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_10007.nls
[2009-07-06 19:05:21 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\C_28595.NLS
[2009-07-06 19:05:21 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\c_10017.nls
[2009-07-06 19:05:21 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\c_10007.nls
[2009-07-06 19:05:21 | 00,005,632 | R--- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\kbdycc.dll
[2009-07-06 19:05:21 | 00,005,632 | R--- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\kbduzb.dll
[2009-07-06 19:05:21 | 00,005,632 | R--- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\kbdur.dll
[2009-07-06 19:05:21 | 00,005,632 | R--- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\kbdtat.dll
[2009-07-06 19:05:21 | 00,005,632 | R--- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\kbdru1.dll
[2009-07-06 19:05:21 | 00,005,632 | R--- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\kbdru.dll
[2009-07-06 19:05:21 | 00,005,632 | R--- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\kbdmon.dll
[2009-07-06 19:05:21 | 00,005,632 | R--- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\kbdkyr.dll
[2009-07-06 19:05:21 | 00,005,632 | R--- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\kbdkaz.dll
[2009-07-06 19:05:21 | 00,005,632 | R--- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\kbdbu.dll
[2009-07-06 19:05:21 | 00,005,632 | R--- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\kbdblr.dll
[2009-07-06 19:05:21 | 00,005,632 | R--- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\kbdaze.dll
[2009-07-06 19:05:21 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdycc.dll
[2009-07-06 19:05:21 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbduzb.dll
[2009-07-06 19:05:21 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdur.dll
[2009-07-06 19:05:21 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdtat.dll
[2009-07-06 19:05:21 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdru1.dll
[2009-07-06 19:05:21 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdru.dll
[2009-07-06 19:05:21 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdmon.dll
[2009-07-06 19:05:21 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdkyr.dll
[2009-07-06 19:05:21 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdkaz.dll
[2009-07-06 19:05:21 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdbu.dll
[2009-07-06 19:05:21 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdblr.dll
[2009-07-06 19:05:21 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdaze.dll
[2009-07-06 19:05:19 | 00,066,594 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_869.nls
[2009-07-06 19:05:19 | 00,066,594 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_737.nls
[2009-07-06 19:05:19 | 00,066,594 | ---- | C] () -- H:\WINDOWS\System32\c_869.nls
[2009-07-06 19:05:19 | 00,066,594 | ---- | C] () -- H:\WINDOWS\System32\c_737.nls
[2009-07-06 19:05:19 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_875.nls
[2009-07-06 19:05:19 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_28597.nls
[2009-07-06 19:05:19 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_10006.nls
[2009-07-06 19:05:19 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\c_875.nls
[2009-07-06 19:05:19 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\C_28597.NLS
[2009-07-06 19:05:19 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\c_10006.nls
[2009-07-06 19:05:19 | 00,008,192 | R--- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\kbdhept.dll
[2009-07-06 19:05:19 | 00,008,192 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdhept.dll
[2009-07-06 19:05:19 | 00,006,656 | R--- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\kbdhela3.dll
[2009-07-06 19:05:19 | 00,006,656 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdhela3.dll
[2009-07-06 19:05:19 | 00,006,144 | R--- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\kbdhela2.dll
[2009-07-06 19:05:19 | 00,006,144 | R--- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\kbdgkl.dll
[2009-07-06 19:05:19 | 00,006,144 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdhela2.dll
[2009-07-06 19:05:19 | 00,006,144 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdgkl.dll
[2009-07-06 19:05:19 | 00,005,632 | R--- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\kbdhe319.dll
[2009-07-06 19:05:19 | 00,005,632 | R--- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\kbdhe220.dll
[2009-07-06 19:05:19 | 00,005,632 | R--- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\kbdhe.dll
[2009-07-06 19:05:19 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdhe319.dll
[2009-07-06 19:05:19 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdhe220.dll
[2009-07-06 19:05:19 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdhe.dll
[2009-07-06 19:05:18 | 00,005,632 | R--- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\kbdlt1.dll
[2009-07-06 19:05:18 | 00,005,632 | R--- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\kbdlt.dll
[2009-07-06 19:05:18 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdlt1.dll
[2009-07-06 19:05:18 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdlt.dll
[2009-07-06 19:05:17 | 00,066,594 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_866.nls
[2009-07-06 19:05:17 | 00,066,594 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_855.nls
[2009-07-06 19:05:17 | 00,066,594 | ---- | C] () -- H:\WINDOWS\System32\c_866.nls
[2009-07-06 19:05:17 | 00,066,594 | ---- | C] () -- H:\WINDOWS\System32\c_855.nls
[2009-07-06 19:05:17 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_28594.nls
[2009-07-06 19:05:17 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\C_28594.NLS
[2009-07-06 19:05:17 | 00,006,144 | R--- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\kbdlv1.dll
[2009-07-06 19:05:17 | 00,006,144 | R--- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\kbdlv.dll
[2009-07-06 19:05:17 | 00,006,144 | R--- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\kbdest.dll
[2009-07-06 19:05:17 | 00,006,144 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdlv1.dll
[2009-07-06 19:05:17 | 00,006,144 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdlv.dll
[2009-07-06 19:05:17 | 00,006,144 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdest.dll
[2009-07-06 19:05:16 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_20127.nls
[2009-07-06 19:05:16 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\c_20127.nls
[2009-07-06 19:05:14 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_10082.nls
[2009-07-06 19:05:14 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_10029.nls
[2009-07-06 19:05:14 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_10010.nls
[2009-07-06 19:05:14 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\c_10082.nls
[2009-07-06 19:05:14 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\c_10029.nls
[2009-07-06 19:05:14 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\c_10010.nls
[2009-07-06 19:05:14 | 00,007,168 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\kbdcz.dll
[2009-07-06 19:05:14 | 00,007,168 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdcz.dll
[2009-07-06 19:05:14 | 00,006,656 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\kbdycl.dll
[2009-07-06 19:05:14 | 00,006,656 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\kbdsl1.dll
[2009-07-06 19:05:14 | 00,006,656 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\kbdsl.dll
[2009-07-06 19:05:14 | 00,006,656 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\kbdhu.dll
[2009-07-06 19:05:14 | 00,006,656 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\kbdcz2.dll
[2009-07-06 19:05:14 | 00,006,656 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\kbdcz1.dll
[2009-07-06 19:05:14 | 00,006,656 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\kbdcr.dll
[2009-07-06 19:05:14 | 00,006,656 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\KBDAL.DLL
[2009-07-06 19:05:14 | 00,006,656 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdycl.dll
[2009-07-06 19:05:14 | 00,006,656 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdsl1.dll
[2009-07-06 19:05:14 | 00,006,656 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdsl.dll
[2009-07-06 19:05:14 | 00,006,656 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdhu.dll
[2009-07-06 19:05:14 | 00,006,656 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdcz2.dll
[2009-07-06 19:05:14 | 00,006,656 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdcz1.dll
[2009-07-06 19:05:14 | 00,006,656 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdcr.dll
[2009-07-06 19:05:14 | 00,006,656 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdal.dll
[2009-07-06 19:05:14 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\kbdro.dll
[2009-07-06 19:05:14 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\kbdhu1.dll
[2009-07-06 19:05:14 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdro.dll
[2009-07-06 19:05:14 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdhu1.dll
[2009-07-06 19:05:13 | 00,176,157 | ---- | C] (Digi International, Inc.) -- H:\WINDOWS\System32\dllcache\dgrpsetu.dll
[2009-07-06 19:05:13 | 00,176,157 | ---- | C] (Digi International, Inc.) -- H:\WINDOWS\System32\dgrpsetu.dll
[2009-07-06 19:05:13 | 00,085,532 | ---- | C] (Digi International) -- H:\WINDOWS\System32\dllcache\dgsetup.dll
[2009-07-06 19:05:13 | 00,085,532 | ---- | C] (Digi International) -- H:\WINDOWS\System32\dgsetup.dll
[2009-07-06 19:05:13 | 00,024,661 | ---- | C] (Perle Systems Ltd.) -- H:\WINDOWS\System32\spxcoins.dll
[2009-07-06 19:05:13 | 00,024,661 | ---- | C] (Perle Systems Ltd.) -- H:\WINDOWS\System32\dllcache\spxcoins.dll
[2009-07-06 19:05:13 | 00,013,312 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\irclass.dll
[2009-07-06 19:05:13 | 00,013,312 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\irclass.dll
[2009-07-06 19:05:12 | 00,127,008 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System\MSVIDEO.DLL
[2009-07-06 19:05:12 | 00,103,424 | ---- | C] (Equinox Systems Inc.) -- H:\WINDOWS\System32\EqnClass.Dll
[2009-07-06 19:05:12 | 00,103,424 | ---- | C] (Equinox Systems Inc.) -- H:\WINDOWS\System32\dllcache\eqnclass.dll
[2009-07-06 19:05:12 | 00,083,456 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System\OLECLI.DLL
[2009-07-06 19:05:12 | 00,024,064 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System\OLESVR.DLL
[2009-07-06 19:05:12 | 00,019,200 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System\TAPI.DLL
[2009-07-06 19:05:12 | 00,013,600 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System\WFWNET.DRV
[2009-07-06 19:05:12 | 00,009,168 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System\VER.DLL
[2009-07-06 19:05:12 | 00,005,120 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System\SHELL.DLL
[2009-07-06 19:05:12 | 00,004,096 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System\TIMER.DRV
[2009-07-06 19:05:12 | 00,003,360 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System\SYSTEM.DRV
[2009-07-06 19:05:12 | 00,002,176 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System\VGA.DRV
[2009-07-06 19:05:12 | 00,001,744 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System\SOUND.DRV
[2009-07-06 19:05:11 | 00,109,488 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System\AVIFILE.DLL
[2009-07-06 19:05:11 | 00,073,616 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System\MCIAVI.DRV
[2009-07-06 19:05:11 | 00,070,096 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System\AVICAP.DLL
[2009-07-06 19:05:11 | 00,033,376 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System\COMMDLG.DLL
[2009-07-06 19:05:11 | 00,028,160 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System\MCIWAVE.DRV
[2009-07-06 19:05:11 | 00,025,296 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System\MCISEQ.DRV
[2009-07-06 19:05:11 | 00,009,936 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System\LZEXPAND.DLL
[2009-07-06 19:05:11 | 00,002,032 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System\MOUSE.DRV
[2009-07-06 19:05:11 | 00,002,000 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System\KEYBOARD.DRV
[2009-07-06 19:05:11 | 00,001,152 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System\MMTASK.TSK
[2009-07-06 19:05:10 | 00,146,432 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System\winspool.drv
[2009-07-06 19:05:10 | 00,015,360 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\TASKMAN.EXE
[2009-07-06 19:05:10 | 00,015,360 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\taskman.exe
[2009-07-06 19:05:10 | 00,011,264 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\drivers\irenum.sys
[2009-07-06 19:05:10 | 00,008,704 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\batt.dll
[2009-07-06 19:05:10 | 00,002,596 | ---- | C] () -- H:\WINDOWS\System32\CONFIG.NT
[2009-07-06 19:05:10 | 00,001,734 | ---- | C] () -- H:\WINDOWS\System32\AUTOEXEC.NT
[2009-07-06 19:05:09 | 00,070,144 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\notepad.exe
[2009-07-06 19:05:09 | 00,069,552 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System\MMSYSTEM.DLL
[2009-07-06 19:05:08 | 00,075,776 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\storprop.dll
[2009-07-06 19:05:00 | 01,014,483 | ---- | C] () -- H:\WINDOWS\System32\dllcache\SP2.CAT
[2009-07-06 19:05:00 | 00,808,524 | ---- | C] () -- H:\WINDOWS\System32\dllcache\NT5IIS.CAT
[2009-07-06 19:05:00 | 00,399,670 | ---- | C] () -- H:\WINDOWS\System32\dllcache\MAPIMIG.CAT
[2009-07-06 19:05:00 | 00,037,509 | ---- | C] () -- H:\WINDOWS\System32\dllcache\MW770.CAT
[2009-07-06 19:05:00 | 00,013,497 | ---- | C] () -- H:\WINDOWS\System32\dllcache\HPCRDP.CAT
[2009-07-06 19:05:00 | 00,008,599 | ---- | C] () -- H:\WINDOWS\System32\dllcache\IASNT4.CAT
[2009-07-06 19:05:00 | 00,007,334 | ---- | C] () -- H:\WINDOWS\System32\dllcache\wmerrenu.cat
[2009-07-06 19:05:00 | 00,007,029 | ---- | C] () -- H:\WINDOWS\System32\dllcache\OEMBIOS.CAT
[2009-07-06 19:04:51 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\CatRoot2
[2009-07-06 19:04:51 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\CatRoot
[2009-07-06 19:04:45 | 00,000,000 | --SD | C] -- H:\Documents and Settings\All Users\Dane aplikacji\Microsoft
[2009-07-06 19:04:27 | 00,000,000 | -HSD | C] -- H:\System Volume Information
[2009-07-06 19:04:27 | 00,000,000 | ---D | C] -- H:\Documents and Settings
[2009-07-06 19:04:26 | 01,370,264 | ---- | C] () -- H:\WINDOWS\System32\FNTCACHE.DAT
[2009-07-06 19:03:37 | 00,000,210 | -HS- | C] () -- H:\boot.ini
[2009-07-06 19:03:34 | 00,000,249 | ---- | C] () -- H:\WINDOWS\System32\$winnt$.inf
[2009-07-06 18:58:12 | 00,000,000 | R-SD | C] -- H:\WINDOWS\Fonts
[2009-07-06 18:58:12 | 00,000,000 | RHSD | C] -- H:\WINDOWS\System32\dllcache
[2009-07-06 18:58:12 | 00,000,000 | R--D | C] -- H:\WINDOWS\Web
[2009-07-06 18:58:12 | 00,000,000 | -H-D | C] -- H:\WINDOWS\inf
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\WinSxS
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\twain_32
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\Temp
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\wins
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\wbem
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\usmt
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\spool
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\ShellExt
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\Setup
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\ras
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\oobe
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\npp
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\mui
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\inetsrv
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\IME
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\icsxml
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\ias
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\export
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\drivers\etc
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\drivers\disdn
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\drivers
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\dhcp
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\config
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\3com_dmi
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\3076
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\2052
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\1054
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\1045
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\1042
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\1041
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\1037
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\1033
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\1031
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\1028
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\1025
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\system32
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\system
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\security
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\Resources
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\repair
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\Provisioning
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\PeerNet
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\pchealth
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\mui
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\msapps
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\msagent
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\Media
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\java
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\ime
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\Help
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\Driver Cache
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\Debug
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\Cursors
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\Connection Wizard
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\Config
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\AppPatch
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS\addins
[2009-07-06 18:58:12 | 00,000,000 | ---D | C] -- H:\WINDOWS
[2009-07-06 18:05:51 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\SoftwareDistribution
[2009-07-06 18:05:47 | 00,000,602 | ---- | C] () -- H:\WINDOWS\tasks\Norton AntiVirus - Uruchom pełne skanowanie systemu - Świnka Morska.job
[2009-07-06 18:04:38 | 00,001,981 | ---- | C] () -- H:\Documents and Settings\All Users\Pulpit\Norton AntiVirus.lnk
[2009-07-06 18:02:37 | 00,000,000 | ---D | C] -- H:\Program Files\Windows Sidebar
[2009-07-06 18:02:35 | 00,000,000 | ---D | C] -- H:\Program Files\Norton AntiVirus
[2009-07-06 18:02:08 | 00,124,464 | ---- | C] (Symantec Corporation) -- H:\WINDOWS\System32\drivers\SYMEVENT.SYS
[2009-07-06 18:02:08 | 00,060,808 | ---- | C] (Symantec Corporation) -- H:\WINDOWS\System32\S32EVNT1.DLL
[2009-07-06 18:02:08 | 00,010,635 | ---- | C] () -- H:\WINDOWS\System32\drivers\SYMEVENT.CAT
[2009-07-06 18:02:08 | 00,000,806 | ---- | C] () -- H:\WINDOWS\System32\drivers\SYMEVENT.INF
[2009-07-06 18:01:57 | 00,000,000 | ---D | C] -- H:\Program Files\Symantec
[2009-07-06 18:01:57 | 00,000,000 | ---D | C] -- H:\Documents and Settings\All Users\Dane aplikacji\Symantec
[2009-07-06 18:00:31 | 00,000,000 | ---D | C] -- H:\Program Files\Common Files\Symantec Shared
[2009-07-06 17:59:04 | 00,000,000 | -H-D | C] -- H:\WINDOWS\$MSI31Uninstall_KB893803v2$
[2009-07-06 17:55:14 | 00,004,212 | -H-- | C] () -- H:\WINDOWS\System32\zllictbl.dat
[2009-07-06 17:54:23 | 00,000,000 | ---D | C] -- H:\WINDOWS\Internet Logs
[2009-07-06 17:46:28 | 00,070,688 | ---- | C] (THOMSON) -- H:\WINDOWS\System32\drivers\alcaudsl.sys
[2009-07-06 17:46:28 | 00,053,600 | ---- | C] (THOMSON) -- H:\WINDOWS\System32\drivers\alcan5wn.sys
[2009-07-06 17:46:28 | 00,005,606 | ---- | C] () -- H:\WINDOWS\System32\stci.dll
[2009-07-06 17:46:28 | 00,005,280 | ---- | C] (THOMSON) -- H:\WINDOWS\System32\drivers\alcawh.sys
[2009-07-06 17:46:28 | 00,003,968 | ---- | C] (THOMSON) -- H:\WINDOWS\System32\drivers\alcacr.sys
[2009-07-06 17:46:27 | 00,000,000 | ---D | C] -- H:\Program Files\Thomson
[2009-07-06 17:46:01 | 00,000,021 | ---- | C] () -- H:\WINDOWS\kit.ini
[2009-07-06 17:45:41 | 00,000,000 | ---D | C] -- H:\Program Files\Neostrada TP
[2009-07-06 17:41:39 | 00,000,000 | ---D | C] -- H:\Documents and Settings\Świnka Morska\Moje dokumenty\Profiles
[2009-07-06 17:40:35 | 00,059,944 | ---- | C] (Windows ® 2000 DDK provider) -- H:\WINDOWS\System32\wpfb_ialmrnt5.dll
[2009-07-06 17:40:27 | 00,000,000 | ---D | C] -- H:\Program Files\WinPortrait
[2009-07-06 17:40:26 | 00,016,384 | ---- | C] () -- H:\WINDOWS\System32\WINKRNME.DLL
[2009-07-06 17:40:00 | 00,000,000 | ---D | C] -- H:\Program Files\Portrait Displays
[2009-07-06 17:36:01 | 00,940,794 | ---- | C] () -- H:\WINDOWS\System32\LoopyMusic.wav
[2009-07-06 17:36:01 | 00,146,650 | ---- | C] () -- H:\WINDOWS\System32\BuzzingBee.wav
[2009-07-06 17:36:01 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\Lang
[2009-07-06 17:35:55 | 00,143,360 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxres.dll
[2009-07-06 17:35:55 | 00,000,000 | ---D | C] -- H:\Intel
[2009-07-06 17:35:12 | 00,000,000 | ---D | C] -- H:\Program Files\GIGABYTE
[2009-07-06 17:35:10 | 00,306,688 | ---- | C] (InstallShield Software Corporation) -- H:\WINDOWS\IsUninst.exe
[2009-07-06 17:34:59 | 00,000,000 | ---D | C] -- H:\Program Files\Marvell
[2009-07-06 17:34:43 | 00,006,272 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\drivers\splitter.sys
[2009-07-06 17:34:42 | 00,083,072 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\drivers\wdmaud.sys
[2009-07-06 17:34:41 | 00,052,864 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\drivers\dmusic.sys
[2009-07-06 17:34:38 | 00,056,576 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\drivers\swmidi.sys
[2009-07-06 17:34:37 | 00,142,592 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\drivers\aec.sys
[2009-07-06 17:34:36 | 00,172,416 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\drivers\kmixer.sys
[2009-07-06 17:34:36 | 00,002,944 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\drivers\drmkaud.sys
[2009-07-06 17:34:35 | 00,060,800 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\drivers\sysaudio.sys
[2009-07-06 17:34:34 | 00,007,552 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\drivers\mskssrv.sys
[2009-07-06 17:34:33 | 00,004,992 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\drivers\mspqm.sys
[2009-07-06 17:34:32 | 00,005,376 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\drivers\mspclock.sys
[2009-07-06 17:34:25 | 00,004,096 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\ksuser.dll
[2009-07-06 17:34:24 | 00,129,536 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\ksproxy.ax
[2009-07-06 17:34:24 | 00,060,160 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\drivers\drmk.sys
[2009-07-06 17:34:21 | 02,805,248 | ---- | C] (RealTek Semicoductor Corp.) -- H:\WINDOWS\ALCWZRD.EXE
[2009-07-06 17:34:21 | 00,069,632 | ---- | C] (Realtek Semiconductor Corp.) -- H:\WINDOWS\ALCMTR.EXE
[2009-07-06 17:34:20 | 14,396,416 | ---- | C] (Realtek Semiconductor Corp.) -- H:\WINDOWS\RTHDCPL.EXE
[2009-07-06 17:34:20 | 00,090,112 | ---- | C] (Realtek Semiconductor Corp.) -- H:\WINDOWS\SOUNDMAN.EXE
[2009-07-06 17:34:19 | 09,697,280 | ---- | C] (Realtek Semiconductor Corp.) -- H:\WINDOWS\RTLCPL.EXE
[2009-07-06 17:34:19 | 02,951,680 | ---- | C] (Realtek Semiconductor Corp.) -- H:\WINDOWS\System32\drivers\RtkHDAud.sys
[2009-07-06 17:34:19 | 00,294,912 | ---- | C] (Realtek Semiconductor Corp.) -- H:\WINDOWS\System32\ALSNDMGR.CPL
[2009-07-06 17:34:19 | 00,262,144 | ---- | C] (Realtek Semiconductor Corp.) -- H:\WINDOWS\System32\RTSndMgr.CPL
[2009-07-06 17:34:19 | 00,156,672 | ---- | C] () -- H:\WINDOWS\System32\RTLCPAPI.dll
[2009-07-06 17:34:19 | 00,040,960 | ---- | C] () -- H:\WINDOWS\System32\ChCfg.exe
[2009-07-06 17:34:19 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\RTCOM
[2009-07-06 17:34:05 | 00,000,000 | -H-D | C] -- H:\Program Files\InstallShield Installation Information
[2009-07-06 17:34:05 | 00,000,000 | ---D | C] -- H:\Program Files\Realtek
[2009-07-06 17:34:04 | 00,487,424 | ---- | C] (Realtek Semiconductor Corp.) -- H:\WINDOWS\RtlExUpd.dll
[2009-07-06 17:34:03 | 00,000,000 | ---D | C] -- H:\Program Files\Common Files\InstallShield
[2009-07-06 17:33:50 | 00,026,144 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\spupdsvc.exe
[2009-07-06 17:33:37 | 00,061,440 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\iAlmCoIn_v4299.dll
[2009-07-06 17:33:36 | 00,512,000 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\ialmgdev.dll
[2009-07-06 17:33:35 | 02,289,664 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\ialmgicd.dll
[2009-07-06 17:33:35 | 00,155,648 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxrell.lrc
[2009-07-06 17:33:35 | 00,147,456 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxrhun.lrc
[2009-07-06 17:33:35 | 00,143,360 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxrrus.lrc
[2009-07-06 17:33:35 | 00,143,360 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxrptg.lrc
[2009-07-06 17:33:35 | 00,143,360 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxrptb.lrc
[2009-07-06 17:33:35 | 00,143,360 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxrplk.lrc
[2009-07-06 17:33:35 | 00,139,264 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxrsve.lrc
[2009-07-06 17:33:35 | 00,139,264 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxrcsy.lrc
[2009-07-06 17:33:35 | 00,135,168 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxrtrk.lrc
[2009-07-06 17:33:35 | 00,126,976 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxrtha.lrc
[2009-07-06 17:33:35 | 00,086,016 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxext.exe
[2009-07-06 17:33:35 | 00,049,152 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\ialmrem.dll
[2009-07-06 17:33:35 | 00,036,864 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxexps.dll
[2009-07-06 17:33:34 | 00,155,648 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxrdeu.lrc
[2009-07-06 17:33:34 | 00,151,552 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxrnld.lrc
[2009-07-06 17:33:34 | 00,151,552 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxrita.lrc
[2009-07-06 17:33:34 | 00,151,552 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxresp.lrc
[2009-07-06 17:33:34 | 00,147,456 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxrfra.lrc
[2009-07-06 17:33:34 | 00,139,264 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxrnor.lrc
[2009-07-06 17:33:34 | 00,139,264 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxrfin.lrc
[2009-07-06 17:33:34 | 00,139,264 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxrdan.lrc
[2009-07-06 17:33:34 | 00,135,168 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxrenu.lrc
[2009-07-06 17:33:34 | 00,122,880 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxrheb.lrc
[2009-07-06 17:33:34 | 00,122,880 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxrara.lrc
[2009-07-06 17:33:34 | 00,114,688 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxpers.exe
[2009-07-06 17:33:34 | 00,098,304 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxrkor.lrc
[2009-07-06 17:33:34 | 00,098,304 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxrjpn.lrc
[2009-07-06 17:33:34 | 00,081,920 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxrcht.lrc
[2009-07-06 17:33:34 | 00,081,920 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxrchs.lrc
[2009-07-06 17:33:33 | 01,503,232 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxress.dll
[2009-07-06 17:33:33 | 00,434,176 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxcfg.exe
[2009-07-06 17:33:33 | 00,155,648 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxsrvc.exe
[2009-07-06 17:33:33 | 00,143,360 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxpph.dll
[2009-07-06 17:33:33 | 00,131,072 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxdev.dll
[2009-07-06 17:33:33 | 00,114,688 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxzoom.exe
[2009-07-06 17:33:33 | 00,094,208 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxtray.exe
[2009-07-06 17:33:33 | 00,086,016 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxdo.dll
[2009-07-06 17:33:33 | 00,077,824 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxcpl.cpl
[2009-07-06 17:33:33 | 00,077,824 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\hkcmd.exe
[2009-07-06 17:33:33 | 00,073,728 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\hccutils.dll
[2009-07-06 17:33:33 | 00,057,344 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\igfxsrvc.dll
[2009-07-06 17:33:32 | 00,876,666 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\ialmdd5.dll
[2009-07-06 17:33:32 | 00,830,684 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\drivers\ialmnt5.sys
[2009-07-06 17:33:32 | 00,194,298 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\ialmdev5.dll
[2009-07-06 17:33:32 | 00,110,203 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\ialmdnt5.dll
[2009-07-06 17:33:32 | 00,038,014 | R--- | C] (Intel Corporation) -- H:\WINDOWS\System32\ialmrnt5.dll
[2009-07-06 17:28:35 | 06,928,768 | -H-- | C] () -- H:\Documents and Settings\Świnka Morska\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2009-07-06 17:28:04 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\ReinstallBackups
[2009-07-06 17:28:03 | 00,000,000 | ---D | C] -- H:\Program Files\Intel
[2009-07-06 17:24:22 | 00,000,000 | ---D | C] -- H:\Program Files\Common Files\Adobe
[2009-07-06 17:22:27 | 00,000,000 | ---D | C] -- H:\Documents and Settings\Świnka Morska\Dane aplikacji\Identities
[2009-07-06 17:22:25 | 00,000,000 | -H-D | C] -- H:\Program Files\Uninstall Information
[2009-07-06 17:22:24 | 00,000,000 | R--D | C] -- H:\Documents and Settings\Świnka Morska\Moje dokumenty\Moja muzyka
[2009-07-06 17:22:23 | 00,000,000 | R--D | C] -- H:\Documents and Settings\Świnka Morska\Moje dokumenty\Moje obrazy
[2009-07-06 17:22:20 | 00,000,000 | --SD | C] -- H:\Documents and Settings\Świnka Morska\Dane aplikacji\Microsoft
[2009-07-06 17:22:20 | 00,000,000 | ---D | C] -- H:\Documents and Settings\Świnka Morska\Ustawienia lokalne\Dane aplikacji\Microsoft
[2009-07-06 17:21:21 | 00,000,000 | ---D | C] -- H:\WINDOWS\SoftwareDistribution
[2009-07-06 17:21:19 | 00,000,006 | -H-- | C] () -- H:\WINDOWS\tasks\SA.DAT
[2009-07-06 17:21:19 | 00,000,000 | --SD | C] -- H:\WINDOWS\System32\Microsoft
[2009-07-06 17:21:06 | 00,008,192 | ---- | C] () -- H:\WINDOWS\REGLOCS.OLD
[2009-07-06 17:20:23 | 00,002,048 | --S- | C] () -- H:\WINDOWS\bootstat.dat
[2009-07-06 17:20:17 | 00,028,288 | ---- | C] () -- H:\WINDOWS\System32\dllcache\xjis.nls
[2009-07-06 17:20:14 | 00,156,672 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\winzm.ime
[2009-07-06 17:20:14 | 00,156,672 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\winsp.ime
[2009-07-06 17:20:13 | 00,156,672 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\winpy.ime
[2009-07-06 17:20:13 | 00,079,360 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\winar30.ime
[2009-07-06 17:20:13 | 00,072,704 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\wingb.ime
[2009-07-06 17:20:13 | 00,065,536 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\winime.ime
[2009-07-06 17:20:12 | 00,041,600 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\weitekp9.dll
[2009-07-06 17:20:12 | 00,031,360 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\weitekp9.sys
[2009-07-06 17:20:11 | 00,426,041 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\voicepad.dll
[2009-07-06 17:20:11 | 00,086,073 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\voicesub.dll
[2009-07-06 17:20:11 | 00,048,256 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\w32.dll
[2009-07-06 17:20:09 | 00,076,288 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\uniime.dll
[2009-07-06 17:20:09 | 00,065,024 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\unicdime.ime
[2009-07-06 17:20:09 | 00,014,336 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\tsprof.exe
[2009-07-06 17:20:08 | 00,571,392 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\tintlgnt.ime
[2009-07-06 17:20:08 | 00,455,168 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\tintsetp.exe
[2009-07-06 17:20:08 | 00,044,032 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\tintlphr.exe
[2009-07-06 17:20:08 | 00,010,240 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\tmigrate.dll
[2009-07-06 17:20:07 | 00,185,344 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\thawbrkr.dll
[2009-07-06 17:20:07 | 00,021,896 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\tdipx.sys
[2009-07-06 17:20:07 | 00,019,464 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\tdspx.sys
[2009-07-06 17:20:07 | 00,013,192 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\tdasync.sys
[2009-07-06 17:20:05 | 00,143,422 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\softkey.dll
[2009-07-06 17:20:05 | 00,101,376 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\srusbusd.dll
[2009-07-06 17:20:04 | 00,010,240 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\snmpstup.dll
[2009-07-06 17:20:04 | 00,007,168 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\EXCH_snprfdll.dll
[2009-07-06 17:20:03 | 00,012,800 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\EXCH_smtpctrs.dll
[2009-07-06 17:20:02 | 00,038,912 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\sm9aw.dll
[2009-07-06 17:20:02 | 00,031,744 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\smb6w.dll
[2009-07-06 17:20:02 | 00,031,744 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\sma3w.dll
[2009-07-06 17:20:02 | 00,026,624 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\sm93w.dll
[2009-07-06 17:20:02 | 00,026,624 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\sm92w.dll
[2009-07-06 17:20:02 | 00,026,112 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\sm90w.dll
[2009-07-06 17:20:02 | 00,026,112 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\sm8dw.dll
[2009-07-06 17:20:02 | 00,015,872 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\smierrsm.dll
[2009-07-06 17:20:02 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\smimsgif.dll
[2009-07-06 17:20:02 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\smierrsy.dll
[2009-07-06 17:20:01 | 00,030,208 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\sm87w.dll
[2009-07-06 17:20:01 | 00,030,208 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\sm81w.dll
[2009-07-06 17:20:01 | 00,029,184 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\sm8cw.dll
[2009-07-06 17:20:01 | 00,026,112 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\sm8aw.dll
[2009-07-06 17:20:01 | 00,026,112 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\sm89w.dll
[2009-07-06 17:20:01 | 00,025,088 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\sm59w.dll
[2009-07-06 17:20:01 | 00,018,944 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\simptcp.dll
[2009-07-06 17:19:59 | 00,057,856 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\EXCH_scripto.dll
[2009-07-06 17:19:59 | 00,026,112 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\EXCH_seos.dll
[2009-07-06 17:19:58 | 00,080,384 | ---- | C] (Ricoh Co., Ltd.) -- H:\WINDOWS\System32\dllcache\rwia330.dll
[2009-07-06 17:19:58 | 00,080,384 | ---- | C] (Ricoh Co., Ltd.) -- H:\WINDOWS\System32\dllcache\rwia001.dll
[2009-07-06 17:19:57 | 00,026,112 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\romanime.ime
[2009-07-06 17:19:56 | 00,023,040 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\EXCH_regtrace.exe
[2009-07-06 17:19:56 | 00,014,848 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\register.exe
[2009-07-06 17:19:55 | 00,077,824 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\quick.ime
[2009-07-06 17:19:55 | 00,016,896 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\quser.exe
[2009-07-06 17:19:55 | 00,009,728 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\query.exe
[2009-07-06 17:19:54 | 00,083,748 | ---- | C] () -- H:\WINDOWS\System32\dllcache\prcp.nls
[2009-07-06 17:19:54 | 00,083,748 | ---- | C] () -- H:\WINDOWS\System32\dllcache\prc.nls
[2009-07-06 17:19:53 | 00,482,304 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\pintlgnt.ime
[2009-07-06 17:19:53 | 00,175,104 | ---- | C] () -- H:\WINDOWS\System32\dllcache\pintlcsa.dll
[2009-07-06 17:19:53 | 00,131,584 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\pmxviceo.dll
[2009-07-06 17:19:53 | 00,070,144 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\pintlphr.exe
[2009-07-06 17:19:53 | 00,067,584 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\pmigrate.dll
[2009-07-06 17:19:53 | 00,053,760 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\pintlcsd.dll
[2009-07-06 17:19:53 | 00,011,264 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\pmxmcro.dll
[2009-07-06 17:19:53 | 00,006,144 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\pmxgl.dll
[2009-07-06 17:19:52 | 00,079,360 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\phon.ime
[2009-07-06 17:19:52 | 00,036,927 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\padrs411.dll
[2009-07-06 17:19:52 | 00,015,872 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\padrs404.dll
[2009-07-06 17:19:52 | 00,015,360 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\padrs804.dll
[2009-07-06 17:19:52 | 00,014,336 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\padrs412.dll
[2009-07-06 17:19:51 | 00,038,912 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\EXCH_ntfsdrv.dll
[2009-07-06 17:19:49 | 00,229,439 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\multibox.dll
[2009-07-06 17:19:46 | 01,875,968 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\msir3jp.lex
[2009-07-06 17:19:46 | 00,098,304 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\msir3jp.dll
[2009-07-06 17:19:42 | 00,092,416 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\mga.sys
[2009-07-06 17:19:42 | 00,092,032 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\mga.dll
[2009-07-06 17:19:41 | 00,065,536 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\EXCH_mailmsg.dll
[2009-07-06 17:19:39 | 01,158,818 | ---- | C] () -- H:\WINDOWS\System32\dllcache\korwbrkr.lex
[2009-07-06 17:19:39 | 00,070,656 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\korwbrkr.dll
[2009-07-06 17:19:39 | 00,047,066 | ---- | C] () -- H:\WINDOWS\System32\dllcache\ksc.nls
[2009-07-06 17:19:38 | 00,009,216 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdnecat.dll
[2009-07-06 17:19:38 | 00,007,680 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdnecnt.dll
[2009-07-06 17:19:38 | 00,006,144 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdth3.dll
[2009-07-06 17:19:38 | 00,006,144 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdth2.dll
[2009-07-06 17:19:38 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdvntc.dll
[2009-07-06 17:19:38 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdusa.dll
[2009-07-06 17:19:38 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdurdu.dll
[2009-07-06 17:19:38 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdth1.dll
[2009-07-06 17:19:38 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdth0.dll
[2009-07-06 17:19:38 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdsyr2.dll
[2009-07-06 17:19:38 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdsyr1.dll
[2009-07-06 17:19:37 | 00,007,168 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdnec95.dll
[2009-07-06 17:19:37 | 00,006,144 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdinpun.dll
[2009-07-06 17:19:37 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdintel.dll
[2009-07-06 17:19:37 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdintam.dll
[2009-07-06 17:19:37 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdinmar.dll
[2009-07-06 17:19:37 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdinkan.dll
[2009-07-06 17:19:37 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdinhin.dll
[2009-07-06 17:19:37 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdinguj.dll
[2009-07-06 17:19:37 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdindev.dll
[2009-07-06 17:19:36 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdheb.dll
[2009-07-06 17:19:36 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdfa.dll
[2009-07-06 17:19:36 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbddiv2.dll
[2009-07-06 17:19:36 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbddiv1.dll
[2009-07-06 17:19:36 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbda3.dll
[2009-07-06 17:19:36 | 00,005,120 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdgeo.dll
[2009-07-06 17:19:36 | 00,005,120 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdarmw.dll
[2009-07-06 17:19:36 | 00,005,120 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbdarme.dll
[2009-07-06 17:19:35 | 00,018,432 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\jupiw.dll
[2009-07-06 17:19:35 | 00,006,144 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbd101a.dll
[2009-07-06 17:19:35 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbda2.dll
[2009-07-06 17:19:35 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\kbda1.dll
[2009-07-06 17:19:34 | 00,471,102 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\imskdic.dll
[2009-07-06 17:19:34 | 00,315,455 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\imskf.dll
[2009-07-06 17:19:33 | 00,274,489 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\imjputyc.dll
[2009-07-06 17:19:33 | 00,262,200 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\imjputy.exe
[2009-07-06 17:19:33 | 00,233,527 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\imjprw.exe
[2009-07-06 17:19:33 | 00,208,952 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\imjpmig.exe
[2009-07-06 17:19:33 | 00,196,665 | ---- | C] () -- H:\WINDOWS\System32\dllcache\imjpinst.exe
[2009-07-06 17:19:33 | 00,155,705 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\imjpdsvr.exe
[2009-07-06 17:19:33 | 00,102,456 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\imlang.dll
[2009-07-06 17:19:33 | 00,059,904 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\imkrinst.exe
[2009-07-06 17:19:33 | 00,059,392 | ---- | C] () -- H:\WINDOWS\System32\dllcache\imscinst.exe
[2009-07-06 17:19:33 | 00,045,109 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\imjpuex.exe
[2009-07-06 17:19:32 | 00,811,064 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\imjp81k.dll
[2009-07-06 17:19:32 | 00,716,856 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\imjpcus.dll
[2009-07-06 17:19:32 | 00,368,696 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\imjpcic.dll
[2009-07-06 17:19:32 | 00,340,023 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\imjp81.ime
[2009-07-06 17:19:32 | 00,311,359 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\imepadsv.exe
[2009-07-06 17:19:32 | 00,307,257 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\imjpdct.exe
[2009-07-06 17:19:32 | 00,081,976 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\imjpdct.dll
[2009-07-06 17:19:32 | 00,057,398 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\imjpdadm.exe
[2009-07-06 17:19:31 | 00,134,339 | ---- | C] () -- H:\WINDOWS\System32\dllcache\imekr.lex
[2009-07-06 17:19:31 | 00,106,496 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\imekrcic.dll
[2009-07-06 17:19:31 | 00,102,463 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\imepadsm.dll
[2009-07-06 17:19:31 | 00,094,720 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\imekr61.ime
[2009-07-06 17:19:31 | 00,086,016 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\imekrmbx.dll
[2009-07-06 17:19:31 | 00,044,032 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\imekrmig.exe
[2009-07-06 17:19:27 | 10,129,408 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\hwxkor.dll
[2009-07-06 17:19:23 | 13,463,552 | ---- | C] () -- H:\WINDOWS\System32\dllcache\hwxjpn.dll
[2009-07-06 17:19:20 | 10,096,640 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\hwxcht.dll
[2009-07-06 17:19:19 | 00,108,827 | ---- | C] () -- H:\WINDOWS\System32\dllcache\hanja.lex
[2009-07-06 17:19:19 | 00,036,864 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\hanjadic.dll
[2009-07-06 17:19:17 | 00,031,744 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\fxsroute.dll
[2009-07-06 17:19:17 | 00,011,264 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\fxssend.exe
[2009-07-06 17:19:16 | 00,137,728 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\fxsclntr.dll
[2009-07-06 17:19:16 | 00,112,128 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\fxscfgwz.dll
[2009-07-06 17:19:16 | 00,006,144 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\ftlx041e.dll
[2009-07-06 17:19:15 | 00,043,520 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\EXCH_fcachdll.dll
[2009-07-06 17:19:15 | 00,014,848 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\flattemp.exe
[2009-07-06 17:19:14 | 00,057,856 | ---- | C] (SEIKO EPSON CORP.) -- H:\WINDOWS\System32\dllcache\esuimgd.dll
[2009-07-06 17:19:14 | 00,045,056 | ---- | C] (SEIKO EPSON CORP.) -- H:\WINDOWS\System32\dllcache\esunid.dll
[2009-07-06 17:19:14 | 00,031,744 | ---- | C] (SEIKO EPSON CORP.) -- H:\WINDOWS\System32\dllcache\esucmd.dll
[2009-07-06 17:19:14 | 00,025,856 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\et4000.sys
[2009-07-06 17:19:13 | 00,514,587 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\edb500.dll
[2009-07-06 17:19:10 | 00,078,848 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\dayi.ime
[2009-07-06 17:19:09 | 00,057,399 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\cplexe.exe
[2009-07-06 17:19:09 | 00,019,456 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\cprofile.exe
[2009-07-06 17:19:08 | 00,480,256 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\cintsetp.exe
[2009-07-06 17:19:07 | 00,838,144 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\chtbrkr.dll
[2009-07-06 17:19:07 | 00,198,656 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\cintime.dll
[2009-07-06 17:19:07 | 00,173,568 | ---- | C] () -- H:\WINDOWS\System32\dllcache\chtskf.dll
[2009-07-06 17:19:07 | 00,097,792 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\chtmbx.dll
[2009-07-06 17:19:07 | 00,056,320 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\chtskdic.dll
[2009-07-06 17:19:07 | 00,021,504 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\cintlgnt.ime
[2009-07-06 17:19:06 | 01,677,824 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\chsbrkr.dll
[2009-07-06 17:19:06 | 00,078,336 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\chajei.ime
[2009-07-06 17:19:06 | 00,015,872 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\chgport.exe
[2009-07-06 17:19:06 | 00,014,848 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\chgusr.exe
[2009-07-06 17:19:06 | 00,013,824 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\chglogon.exe
[2009-07-06 17:19:06 | 00,009,728 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\change.exe
[2009-07-06 17:19:05 | 00,054,528 | ---- | C] (Philips Semiconductors GmbH) -- H:\WINDOWS\System32\dllcache\cap7146.sys
[2009-07-06 17:19:05 | 00,010,752 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\c_iscii.dll
[2009-07-06 17:19:05 | 00,006,656 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\c_is2022.dll
[2009-07-06 17:19:04 | 00,066,594 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_864.nls
[2009-07-06 17:19:04 | 00,066,594 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_862.nls
[2009-07-06 17:19:04 | 00,066,594 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_858.nls
[2009-07-06 17:19:04 | 00,066,594 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_720.nls
[2009-07-06 17:19:04 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_870.nls
[2009-07-06 17:19:04 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_708.nls
[2009-07-06 17:19:04 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_28596.nls
[2009-07-06 17:19:03 | 00,180,770 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_20932.nls
[2009-07-06 17:19:03 | 00,177,698 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_20949.nls
[2009-07-06 17:19:03 | 00,173,602 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_20936.nls
[2009-07-06 17:19:03 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_21027.nls
[2009-07-06 17:19:03 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_21025.nls
[2009-07-06 17:19:03 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_20924.nls
[2009-07-06 17:19:03 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_20880.nls
[2009-07-06 17:19:03 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_20871.nls
[2009-07-06 17:19:03 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_20838.nls
[2009-07-06 17:19:03 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_20833.nls
[2009-07-06 17:19:03 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_20424.nls
[2009-07-06 17:19:03 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_20423.nls
[2009-07-06 17:19:03 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_20420.nls
[2009-07-06 17:19:03 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_20297.nls
[2009-07-06 17:19:02 | 00,187,938 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_20005.nls
[2009-07-06 17:19:02 | 00,180,258 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_20004.nls
[2009-07-06 17:19:02 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_20290.nls
[2009-07-06 17:19:02 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_20285.nls
[2009-07-06 17:19:02 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_20284.nls
[2009-07-06 17:19:02 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_20280.nls
[2009-07-06 17:19:02 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_20278.nls
[2009-07-06 17:19:02 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_20277.nls
[2009-07-06 17:19:02 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_20273.nls
[2009-07-06 17:19:02 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_20269.nls
[2009-07-06 17:19:02 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_20108.nls
[2009-07-06 17:19:02 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_20107.nls
[2009-07-06 17:19:02 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_20106.nls
[2009-07-06 17:19:02 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_20105.nls
[2009-07-06 17:19:01 | 00,189,986 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_1361.nls
[2009-07-06 17:19:01 | 00,186,402 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_20001.nls
[2009-07-06 17:19:01 | 00,185,378 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_20003.nls
[2009-07-06 17:19:01 | 00,180,258 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_20000.nls
[2009-07-06 17:19:01 | 00,173,602 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_20002.nls
[2009-07-06 17:19:01 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_1149.nls
[2009-07-06 17:19:01 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_1148.nls
[2009-07-06 17:19:01 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_1147.nls
[2009-07-06 17:19:01 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_1146.nls
[2009-07-06 17:19:01 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_1145.nls
[2009-07-06 17:19:01 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_1144.nls
[2009-07-06 17:19:00 | 00,195,618 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_10002.nls
[2009-07-06 17:19:00 | 00,177,698 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_10003.nls
[2009-07-06 17:19:00 | 00,173,602 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_10008.nls
[2009-07-06 17:19:00 | 00,162,850 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_10001.nls
[2009-07-06 17:19:00 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_1143.nls
[2009-07-06 17:19:00 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_1142.nls
[2009-07-06 17:19:00 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_1141.nls
[2009-07-06 17:19:00 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_1140.nls
[2009-07-06 17:19:00 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_1047.nls
[2009-07-06 17:19:00 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_10021.nls
[2009-07-06 17:19:00 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_10005.nls
[2009-07-06 17:19:00 | 00,066,082 | ---- | C] () -- H:\WINDOWS\System32\dllcache\c_10004.nls
[2009-07-06 17:18:59 | 00,082,172 | ---- | C] () -- H:\WINDOWS\System32\dllcache\bopomofo.nls
[2009-07-06 17:18:59 | 00,066,728 | ---- | C] () -- H:\WINDOWS\System32\dllcache\big5.nls
[2009-07-06 17:18:58 | 00,045,056 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\EXCH_aqadmin.dll
[2009-07-06 17:18:57 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\EXCH_adsiisex.dll
[2009-07-06 17:18:54 | 00,016,384 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\tcptsat.dll
[2009-07-06 17:18:51 | 00,212,992 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\fpmmcsat.dll
[2009-07-06 17:18:45 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\xircom
[2009-07-06 17:18:45 | 00,000,000 | ---D | C] -- H:\Program Files\xerox
[2009-07-06 17:18:45 | 00,000,000 | ---D | C] -- H:\Program Files\microsoft frontpage
[2009-07-06 17:18:31 | 00,023,392 | ---- | C] () -- H:\WINDOWS\System32\nscompat.tlb
[2009-07-06 17:18:31 | 00,016,832 | ---- | C] () -- H:\WINDOWS\System32\amcompat.tlb
[2009-07-06 17:18:30 | 00,316,640 | ---- | C] () -- H:\WINDOWS\WMSysPr9.prx
[2009-07-06 17:18:23 | 00,112,128 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\mapi32.dll
[2009-07-06 17:17:41 | 00,000,488 | RH-- | C] () -- H:\WINDOWS\System32\WindowsLogon.manifest
[2009-07-06 17:17:41 | 00,000,488 | RH-- | C] () -- H:\WINDOWS\System32\logonui.exe.manifest
[2009-07-06 17:17:41 | 00,000,000 | --SD | C] -- H:\WINDOWS\Downloaded Program Files
[2009-07-06 17:17:41 | 00,000,000 | R--D | C] -- H:\WINDOWS\Offline Web Pages
[2009-07-06 17:17:35 | 00,000,749 | RH-- | C] () -- H:\WINDOWS\WindowsShell.Manifest
[2009-07-06 17:17:35 | 00,000,749 | RH-- | C] () -- H:\WINDOWS\System32\wuaucpl.cpl.manifest
[2009-07-06 17:17:35 | 00,000,749 | RH-- | C] () -- H:\WINDOWS\System32\sapi.cpl.manifest
[2009-07-06 17:17:35 | 00,000,749 | RH-- | C] () -- H:\WINDOWS\System32\nwc.cpl.manifest
[2009-07-06 17:17:35 | 00,000,749 | RH-- | C] () -- H:\WINDOWS\System32\ncpa.cpl.manifest
[2009-07-06 17:17:35 | 00,000,749 | RH-- | C] () -- H:\WINDOWS\System32\cdplayer.exe.manifest
[2009-07-06 17:17:32 | 00,000,000 | -H-D | C] -- H:\Program Files\WindowsUpdate
[2009-07-06 17:17:29 | 00,000,000 | ---D | C] -- H:\Program Files\Usługi online
[2009-07-06 17:17:21 | 04,399,505 | ---- | C] () -- H:\WINDOWS\System32\dllcache\nls302en.lex
[2009-07-06 17:17:15 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\DirectX
[2009-07-06 17:16:57 | 00,011,264 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\atrace.dll
[2009-07-06 17:16:57 | 00,011,264 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\atrace.dll
[2009-07-06 17:16:56 | 00,099,840 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\helphost.exe
[2009-07-06 17:16:56 | 00,035,328 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\notiflag.exe
[2009-07-06 17:16:56 | 00,021,504 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\brpinfo.dll
[2009-07-06 17:16:56 | 00,007,680 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\hcappres.dll
[2009-07-06 17:16:54 | 00,048,680 | -HS- | C] () -- H:\WINDOWS\winnt256.bmp
[2009-07-06 17:16:54 | 00,048,680 | -HS- | C] () -- H:\WINDOWS\winnt.bmp
[2009-07-06 17:16:48 | 00,047,104 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\srdiag.exe
[2009-07-06 17:16:47 | 00,118,784 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\msg723.acm
[2009-07-06 17:16:47 | 00,012,288 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\nmevtmsg.dll
[2009-07-06 17:16:47 | 00,012,288 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\nmevtmsg.dll
[2009-07-06 17:16:47 | 00,000,984 | ---- | C] () -- H:\WINDOWS\System32\dllcache\srframe.mmf
[2009-07-06 17:16:46 | 00,067,584 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\acctres.dll
[2009-07-06 17:16:46 | 00,067,584 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\acctres.dll
[2009-07-06 17:16:46 | 00,040,448 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\msinfo32.exe
[2009-07-06 17:16:46 | 00,012,288 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\wb32.exe
[2009-07-06 17:16:46 | 00,012,288 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\cb32.exe
[2009-07-06 17:16:45 | 00,000,000 | ---D | C] -- H:\Program Files\Common Files\Services
[2009-07-06 17:16:43 | 00,016,384 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\icfgnt5.dll
[2009-07-06 17:16:43 | 00,016,384 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\icfgnt5.dll
[2009-07-06 17:16:43 | 00,000,000 | --SD | C] -- H:\WINDOWS\Tasks
[2009-07-06 17:16:42 | 00,235,520 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\mssoap1.dll
[2009-07-06 17:16:42 | 00,073,728 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\icwtutor.exe
[2009-07-06 17:16:42 | 00,065,536 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\icwres.dll
[2009-07-06 17:16:42 | 00,040,960 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\trialoc.dll
[2009-07-06 17:16:42 | 00,025,088 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\wisc10.dll
[2009-07-06 17:16:42 | 00,023,552 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\mssoapr.dll
[2009-07-06 17:16:42 | 00,016,384 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\isignup.exe
[2009-07-06 17:16:41 | 00,094,208 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\ieinfo5.ocx
[2009-07-06 17:16:41 | 00,000,000 | ---D | C] -- H:\Program Files\Common Files\MSSoap
[2009-07-06 17:16:38 | 00,759,296 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\VGX.dll
[2009-07-06 17:16:38 | 00,000,000 | ---D | C] -- H:\WINDOWS\srchasst
[2009-07-06 17:16:37 | 01,669,120 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\setup_wm.exe
[2009-07-06 17:16:37 | 00,243,712 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\mpvis.dll
[2009-07-06 17:16:37 | 00,096,256 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\wmpband.dll
[2009-07-06 17:16:37 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\Macromed
[2009-07-06 17:16:36 | 00,786,432 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\migrate.exe
[2009-07-06 17:16:36 | 00,364,544 | ---- | C] (Microsoft Corporation (written by Digital Renaissance Inc.)) -- H:\WINDOWS\System32\dllcache\npdsplay.dll
[2009-07-06 17:16:36 | 00,226,816 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\npdrmv2.dll
[2009-07-06 17:16:36 | 00,221,184 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\wmpns.dll
[2009-07-06 17:16:36 | 00,064,000 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\wmplayer.exe
[2009-07-06 17:16:36 | 00,028,672 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\custsat.dll
[2009-07-06 17:16:36 | 00,010,240 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\npwmsdrm.dll
[2009-07-06 17:16:35 | 00,323,608 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\wucltui.dll
[2009-07-06 17:16:35 | 00,323,608 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\wucltui.dll
[2009-07-06 17:16:35 | 00,202,776 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\wuweb.dll
[2009-07-06 17:16:35 | 00,202,776 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\wuweb.dll
[2009-07-06 17:16:35 | 00,184,320 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\wuaueng1.dll
[2009-07-06 17:16:35 | 00,006,656 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\wuauserv.dll
[2009-07-06 17:16:35 | 00,004,639 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\mplayer2.exe
[2009-07-06 17:16:34 | 01,809,944 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\wuaueng.dll
[2009-07-06 17:16:34 | 01,809,944 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\wuaueng.dll
[2009-07-06 17:16:34 | 00,561,688 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\wuapi.dll
[2009-07-06 17:16:34 | 00,561,688 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\wuapi.dll
[2009-07-06 17:16:34 | 00,409,088 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\qmgr.dll
[2009-07-06 17:16:34 | 00,213,528 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\wuaucpl.cpl
[2009-07-06 17:16:34 | 00,213,528 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\wuaucpl.cpl
[2009-07-06 17:16:34 | 00,168,960 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\wuauclt1.exe
[2009-07-06 17:16:34 | 00,051,224 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\wuauclt.exe
[2009-07-06 17:16:34 | 00,051,224 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\wuauclt.exe
[2009-07-06 17:16:34 | 00,034,328 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\wups.dll
[2009-07-06 17:16:34 | 00,034,328 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\wups.dll
[2009-07-06 17:16:34 | 00,018,944 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\qmgrprxy.dll
[2009-07-06 17:16:34 | 00,008,192 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\bitsprx2.dll
[2009-07-06 17:16:34 | 00,007,168 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\bitsprx3.dll
[2009-07-06 17:16:30 | 00,000,000 | ---D | C] -- H:\Program Files\Movie Maker
[2009-07-06 17:16:26 | 00,045,568 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\safrslv.dll
[2009-07-06 17:16:26 | 00,043,520 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\safrcdlg.dll
[2009-07-06 17:16:26 | 00,043,520 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\racpldlg.dll
[2009-07-06 17:16:26 | 00,029,696 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\safrdm.dll
[2009-07-06 17:16:23 | 00,240,128 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\srrstr.dll
[2009-07-06 17:16:23 | 00,129,792 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\drivers\fltmgr.sys
[2009-07-06 17:16:23 | 00,023,040 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\fltmc.exe
[2009-07-06 17:16:23 | 00,016,896 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\fltlib.dll
[2009-07-06 17:16:23 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\Restore
[2009-07-06 17:16:22 | 00,188,416 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\msh261.drv
[2009-07-06 17:16:22 | 00,171,520 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\srsvc.dll
[2009-07-06 17:16:22 | 00,081,920 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\ils.dll
[2009-07-06 17:16:22 | 00,073,472 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\drivers\sr.sys
[2009-07-06 17:16:22 | 00,067,584 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\srclient.dll
[2009-07-06 17:16:22 | 00,034,560 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\mnmdd.dll
[2009-07-06 17:16:22 | 00,032,768 | ---- | C] (Intel Corporation) -- H:\WINDOWS\System32\isrdbg32.dll
[2009-07-06 17:16:21 | 00,069,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\msconf.dll
[2009-07-06 17:16:21 | 00,032,768 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\mnmsrvc.exe
[2009-07-06 17:16:21 | 00,028,672 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\nmmkcert.dll
[2009-07-06 17:16:18 | 00,252,928 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\msoeacct.dll
[2009-07-06 17:16:18 | 00,105,984 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\msoert2.dll
[2009-07-06 17:16:18 | 00,000,000 | ---D | C] -- H:\Program Files\NetMeeting
[2009-07-06 17:16:17 | 00,691,712 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\inetcomm.dll
[2009-07-06 17:16:17 | 00,049,664 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\inetres.dll
[2009-07-06 17:16:16 | 00,278,528 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\mstask.dll
[2009-07-06 17:16:16 | 00,193,536 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\schedsvc.dll
[2009-07-06 17:16:16 | 00,012,288 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\mstinit.exe
[2009-07-06 17:16:16 | 00,000,000 | ---D | C] -- H:\Program Files\Outlook Express
[2009-07-06 17:16:15 | 00,278,528 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\inetcfg.dll
[2009-07-06 17:16:15 | 00,086,016 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\isign32.dll
[2009-07-06 17:16:15 | 00,073,728 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\icwdial.dll
[2009-07-06 17:16:15 | 00,065,536 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\icwphbk.dll
[2009-07-06 17:16:10 | 00,331,776 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\msadce.dll
[2009-07-06 17:16:10 | 00,000,000 | ---D | C] -- H:\Program Files\Common Files\System
[2009-07-06 17:16:09 | 00,638,816 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\iexplore.exe
[2009-07-06 17:16:09 | 00,068,608 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\hmmapi.dll
[2009-07-06 17:16:08 | 00,000,000 | ---D | C] -- H:\Program Files\Internet Explorer
[2009-07-06 17:16:06 | 00,000,000 | R--D | C] -- H:\Documents and Settings\All Users\Dokumenty\Moje obrazy
[2009-07-06 17:16:05 | 00,021,856 | ---- | C] () -- H:\WINDOWS\System32\emptyregdb.dat
[2009-07-06 17:15:57 | 00,000,000 | ---D | C] -- H:\Program Files\ComPlus Applications
[2009-07-06 17:15:52 | 00,000,000 | ---D | C] -- H:\WINDOWS\Registration
[2009-07-06 17:15:26 | 00,000,000 | R--D | C] -- H:\Documents and Settings\All Users\Dokumenty\Moja muzyka
[2009-07-06 17:15:26 | 00,000,000 | ---D | C] -- H:\Program Files\Windows Media Player
[2009-07-06 17:15:22 | 00,000,000 | ---D | C] -- H:\Program Files\Messenger
[2009-07-06 17:15:21 | 01,817,687 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\bckgres.dll
[2009-07-06 17:15:21 | 00,082,501 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\bckg.dll
[2009-07-06 17:15:21 | 00,042,577 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\bckgzm.exe
[2009-07-06 17:15:20 | 02,178,131 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\shvlres.dll
[2009-07-06 17:15:20 | 01,175,635 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\hrtzres.dll
[2009-07-06 17:15:20 | 00,781,397 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\chkrres.dll
[2009-07-06 17:15:20 | 00,753,236 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\rvseres.dll
[2009-07-06 17:15:20 | 00,066,113 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\shvl.dll
[2009-07-06 17:15:20 | 00,048,706 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\rvse.dll
[2009-07-06 17:15:20 | 00,042,575 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\chkrzm.exe
[2009-07-06 17:15:20 | 00,042,574 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\rvsezm.exe
[2009-07-06 17:15:20 | 00,042,573 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\shvlzm.exe
[2009-07-06 17:15:20 | 00,042,573 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\hrtzzm.exe
[2009-07-06 17:15:20 | 00,040,515 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\chkr.dll
[2009-07-06 17:15:19 | 01,041,491 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\cmnresm.dll
[2009-07-06 17:15:19 | 00,057,409 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\hrtz.dll
[2009-07-06 17:15:19 | 00,041,029 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\zcorem.dll
[2009-07-06 17:15:19 | 00,032,339 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\uniansi.dll
[2009-07-06 17:15:19 | 00,013,894 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\zonelibm.dll
[2009-07-06 17:15:19 | 00,004,677 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\zeeverm.dll
[2009-07-06 17:15:18 | 00,217,160 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\cmnclim.dll
[2009-07-06 17:15:18 | 00,113,222 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\zoneclim.dll
[2009-07-06 17:15:18 | 00,036,937 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\zclientm.exe
[2009-07-06 17:15:18 | 00,029,760 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\znetm.dll
[2009-07-06 17:15:18 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\write.exe
[2009-07-06 17:15:18 | 00,005,632 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\write.exe
[2009-07-06 17:15:18 | 00,000,000 | ---D | C] -- H:\Program Files\MSN Gaming Zone
[2009-07-06 17:15:10 | 00,139,264 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\sndvol32.exe
[2009-07-06 17:15:10 | 00,139,264 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\sndvol32.exe
[2009-07-06 17:15:09 | 00,231,424 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\avtapi.dll
[2009-07-06 17:15:09 | 00,231,424 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\avtapi.dll
[2009-07-06 17:15:09 | 00,073,216 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\avwav.dll
[2009-07-06 17:15:09 | 00,073,216 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\avwav.dll
[2009-07-06 17:15:09 | 00,044,544 | ---- | C] (Hilgraeve, Inc.) -- H:\WINDOWS\System32\hticons.dll
[2009-07-06 17:15:09 | 00,016,384 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\avmeter.dll
[2009-07-06 17:15:09 | 00,016,384 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\avmeter.dll
[2009-07-06 17:15:09 | 00,013,312 | ---- | C] (Hilgraeve, Inc.) -- H:\WINDOWS\System32\dllcache\htrn_jis.dll
[2009-07-06 17:15:08 | 00,035,328 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\winchat.exe
[2009-07-06 17:15:08 | 00,035,328 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\winchat.exe
[2009-07-06 17:15:04 | 00,065,954 | ---- | C] () -- H:\WINDOWS\Pod mikroskopem.bmp
[2009-07-06 17:15:04 | 00,065,832 | ---- | C] () -- H:\WINDOWS\Stiuk z Santa Fe.bmp
[2009-07-06 17:15:04 | 00,026,680 | ---- | C] () -- H:\WINDOWS\Wachlarze.bmp
[2009-07-06 17:15:04 | 00,017,362 | ---- | C] () -- H:\WINDOWS\Rododendron.bmp
[2009-07-06 17:15:04 | 00,009,522 | ---- | C] () -- H:\WINDOWS\Indiański pled.bmp
[2009-07-06 17:15:03 | 00,093,702 | ---- | C] () -- H:\WINDOWS\System32\subrange.uce
[2009-07-06 17:15:03 | 00,065,978 | ---- | C] () -- H:\WINDOWS\Bąbelki.bmp
[2009-07-06 17:15:03 | 00,026,582 | ---- | C] () -- H:\WINDOWS\Nefryt.bmp
[2009-07-06 17:15:03 | 00,017,336 | ---- | C] () -- H:\WINDOWS\Na rybkach.bmp
[2009-07-06 17:15:03 | 00,017,062 | ---- | C] () -- H:\WINDOWS\Kawa.bmp
[2009-07-06 17:15:03 | 00,016,740 | ---- | C] () -- H:\WINDOWS\System32\shiftjis.uce
[2009-07-06 17:15:03 | 00,016,730 | ---- | C] () -- H:\WINDOWS\Puch.bmp
[2009-07-06 17:15:03 | 00,001,272 | ---- | C] () -- H:\WINDOWS\Niebieska koronka 16.bmp
[2009-07-06 17:15:02 | 00,605,696 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\getuname.dll
[2009-07-06 17:15:02 | 00,605,696 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\getuname.dll
[2009-07-06 17:15:02 | 00,115,200 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\calc.exe
[2009-07-06 17:15:02 | 00,115,200 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\calc.exe
[2009-07-06 17:15:02 | 00,080,896 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\charmap.exe
[2009-07-06 17:15:02 | 00,080,896 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\charmap.exe
[2009-07-06 17:15:02 | 00,060,458 | ---- | C] () -- H:\WINDOWS\System32\ideograf.uce
[2009-07-06 17:15:02 | 00,024,006 | ---- | C] () -- H:\WINDOWS\System32\gb2312.uce
[2009-07-06 17:15:02 | 00,022,984 | ---- | C] () -- H:\WINDOWS\System32\bopomofo.uce
[2009-07-06 17:15:02 | 00,012,876 | ---- | C] () -- H:\WINDOWS\System32\korean.uce
[2009-07-06 17:15:02 | 00,008,484 | ---- | C] () -- H:\WINDOWS\System32\kanji_2.uce
[2009-07-06 17:15:02 | 00,006,948 | ---- | C] () -- H:\WINDOWS\System32\kanji_1.uce
[2009-07-06 17:15:01 | 00,128,000 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\mshearts.exe
[2009-07-06 17:15:01 | 00,128,000 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\mshearts.exe
[2009-07-06 17:15:01 | 00,119,808 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\winmine.exe
[2009-07-06 17:15:01 | 00,119,808 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\winmine.exe
[2009-07-06 17:15:01 | 00,057,344 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\sol.exe
[2009-07-06 17:15:01 | 00,057,344 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\sol.exe
[2009-07-06 17:15:01 | 00,055,808 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\freecell.exe
[2009-07-06 17:15:01 | 00,055,808 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\freecell.exe
[2009-07-06 17:15:00 | 00,033,792 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\regini.exe
[2009-07-06 17:15:00 | 00,033,792 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\regini.exe
[2009-07-06 17:15:00 | 00,022,528 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\qwinsta.exe
[2009-07-06 17:15:00 | 00,022,528 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\msg.exe
[2009-07-06 17:15:00 | 00,022,528 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\qwinsta.exe
[2009-07-06 17:15:00 | 00,022,528 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\msg.exe
[2009-07-06 17:15:00 | 00,017,920 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\tsshutdn.exe
[2009-07-06 17:15:00 | 00,017,920 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\tsshutdn.exe
[2009-07-06 17:15:00 | 00,017,408 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\qappsrv.exe
[2009-07-06 17:15:00 | 00,017,408 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\qappsrv.exe
[2009-07-06 17:15:00 | 00,016,384 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\tskill.exe
[2009-07-06 17:15:00 | 00,016,384 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\rwinsta.exe
[2009-07-06 17:15:00 | 00,016,384 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\tskill.exe
[2009-07-06 17:15:00 | 00,016,384 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\rwinsta.exe
[2009-07-06 17:15:00 | 00,015,360 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\tsdiscon.exe
[2009-07-06 17:15:00 | 00,015,360 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\tscon.exe
[2009-07-06 17:15:00 | 00,015,360 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\shadow.exe
[2009-07-06 17:15:00 | 00,015,360 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\tsdiscon.exe
[2009-07-06 17:15:00 | 00,015,360 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\tscon.exe
[2009-07-06 17:15:00 | 00,015,360 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\shadow.exe
[2009-07-06 17:15:00 | 00,009,728 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\reset.exe
[2009-07-06 17:15:00 | 00,009,728 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\reset.exe
[2009-07-06 17:15:00 | 00,004,608 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\rdpcfgex.dll
[2009-07-06 17:15:00 | 00,004,608 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\rdpcfgex.dll
[2009-07-06 17:15:00 | 00,003,286 | ---- | C] () -- H:\WINDOWS\System32\tslabels.h
[2009-07-06 17:15:00 | 00,001,225 | ---- | C] () -- H:\WINDOWS\System32\usrlogon.cmd
[2009-07-06 17:14:59 | 00,019,456 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\mtsadmin.tlb
[2009-07-06 17:14:59 | 00,015,872 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\logoff.exe
[2009-07-06 17:14:59 | 00,015,872 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\logoff.exe
[2009-07-06 17:14:59 | 00,015,872 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\cdmodem.dll
[2009-07-06 17:14:59 | 00,015,872 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\cdmodem.dll
[2009-07-06 17:14:59 | 00,000,768 | ---- | C] () -- H:\WINDOWS\System32\msdtcprf.h
[2009-07-06 17:14:58 | 00,097,792 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\comrepl.dll
[2009-07-06 17:14:58 | 00,059,392 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\stclient.dll
[2009-07-06 17:14:58 | 00,034,304 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\mtxlegih.dll
[2009-07-06 17:14:58 | 00,030,720 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\mtxdm.dll
[2009-07-06 17:14:58 | 00,028,160 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\comaddin.dll
[2009-07-06 17:14:58 | 00,006,144 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dcomcnfg.exe
[2009-07-06 17:14:58 | 00,004,096 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\mtxex.dll
[2009-07-06 17:14:57 | 00,167,424 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\comsnap.dll
[2009-07-06 17:14:57 | 00,045,568 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\wmi2xml.dll
[2009-07-06 17:14:54 | 00,116,224 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\updprov.dll
[2009-07-06 17:14:54 | 00,076,800 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\wmipicmp.dll
[2009-07-06 17:14:54 | 00,061,952 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\tmplprov.dll
[2009-07-06 17:14:54 | 00,061,440 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\wmimsg.dll
[2009-07-06 17:14:54 | 00,059,904 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\wbemdisp.tlb
[2009-07-06 17:14:54 | 00,059,904 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\trnsprov.dll
[2009-07-06 17:14:54 | 00,052,224 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\wmitimep.dll
[2009-07-06 17:14:54 | 00,040,960 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\smtpcons.dll
[2009-07-06 17:14:54 | 00,031,232 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\wbemads.tlb
[2009-07-06 17:14:54 | 00,017,920 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\winmgmtr.dll
[2009-07-06 17:14:54 | 00,016,896 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\unsecapp.exe
[2009-07-06 17:14:54 | 00,013,824 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\winmgmt.exe
[2009-07-06 17:14:54 | 00,012,288 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\wbemads.dll
[2009-07-06 17:14:53 | 00,273,920 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\msiprov.dll
[2009-07-06 17:14:53 | 00,120,320 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\dsprov.dll
[2009-07-06 17:14:53 | 00,063,488 | ---- | C] () -- H:\WINDOWS\System32\wmimgmt.msc
[2009-07-06 17:14:53 | 00,053,248 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\fwdprov.dll
[2009-07-06 17:14:52 | 00,188,416 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\accwiz.exe
[2009-07-06 17:14:52 | 00,132,608 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\sndrec32.exe
[2009-07-06 17:14:52 | 00,070,656 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\access.cpl
[2009-07-06 17:14:51 | 00,351,744 | ---- | C] (Hilgraeve, Inc.) -- H:\WINDOWS\System32\hypertrm.dll
[2009-07-06 17:14:51 | 00,345,088 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\mspaint.exe
[2009-07-06 17:14:51 | 00,124,928 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\mplay32.exe
[2009-07-06 17:14:51 | 00,124,928 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\mplay32.exe
[2009-07-06 17:14:51 | 00,000,000 | ---D | C] -- H:\Program Files\Windows NT
[2009-07-06 17:14:50 | 00,538,624 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\spider.exe
[2009-07-06 17:14:50 | 00,139,656 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\drivers\rdpwd.sys
[2009-07-06 17:14:50 | 00,103,424 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\clipbrd.exe
[2009-07-06 17:14:50 | 00,094,720 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\tscfgwmi.dll
[2009-07-06 17:14:50 | 00,021,896 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\drivers\tdtcp.sys
[2009-07-06 17:14:50 | 00,012,040 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\drivers\tdpipe.sys
[2009-07-06 17:14:49 | 02,061,824 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\mstscax.dll
[2009-07-06 17:14:49 | 00,677,888 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\mstsc.exe
[2009-07-06 17:14:49 | 00,655,360 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\mstscax.dll
[2009-07-06 17:14:49 | 00,408,576 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\mstsc.exe
[2009-07-06 17:14:49 | 00,296,448 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\termsrv.dll
[2009-07-06 17:14:49 | 00,147,968 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\rdchost.dll
[2009-07-06 17:14:49 | 00,142,336 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\sessmgr.exe
[2009-07-06 17:14:49 | 00,087,176 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\rdpwsx.dll
[2009-07-06 17:14:49 | 00,067,072 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\rdshost.exe
[2009-07-06 17:14:49 | 00,060,928 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\remotepg.dll
[2009-07-06 17:14:49 | 00,044,544 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\tscupgrd.exe
[2009-07-06 17:14:49 | 00,044,544 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\tscupgrd.exe
[2009-07-06 17:14:49 | 00,019,968 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\rdpsnd.dll
[2009-07-06 17:14:49 | 00,013,824 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\rdsaddin.exe
[2009-07-06 17:14:48 | 00,428,032 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\msdtcprx.dll
[2009-07-06 17:14:48 | 00,161,792 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\msdtcuiu.dll
[2009-07-06 17:14:48 | 00,091,648 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\mtxoci.dll
[2009-07-06 17:14:48 | 00,062,976 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\rdpclip.exe
[2009-07-06 17:14:48 | 00,038,912 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\cfgbkend.dll
[2009-07-06 17:14:48 | 00,020,992 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\qprocess.exe
[2009-07-06 17:14:48 | 00,011,264 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\icaapi.dll
[2009-07-06 17:14:48 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\MsDtc
[2009-07-06 17:14:47 | 00,956,928 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\msdtctm.dll
[2009-07-06 17:14:47 | 00,058,880 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\msdtclog.dll
[2009-07-06 17:14:47 | 00,011,776 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\xolehlp.dll
[2009-07-06 17:14:47 | 00,006,144 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\msdtc.exe
[2009-07-06 17:14:46 | 00,625,664 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\catsrvut.dll
[2009-07-06 17:14:46 | 00,226,304 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\catsrv.dll
[2009-07-06 17:14:46 | 00,110,592 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\clbcatex.dll
[2009-07-06 17:14:46 | 00,085,504 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\catsrvps.dll
[2009-07-06 17:14:46 | 00,060,416 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\colbact.dll
[2009-07-06 17:14:46 | 00,000,000 | ---D | C] -- H:\WINDOWS\System32\Com
[2009-07-06 17:14:45 | 01,267,200 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\comsvcs.dll
[2009-07-06 17:14:45 | 00,539,648 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\comuid.dll
[2009-07-06 17:14:45 | 00,498,688 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\clbcatq.dll
[2009-07-06 17:14:40 | 00,187,904 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\cmprops.dll
[2009-07-06 17:14:40 | 00,058,880 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\licwmi.dll
[2009-07-06 17:14:40 | 00,056,320 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\servdeps.dll
[2009-07-06 17:14:40 | 00,017,920 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\mmfutil.dll
[2009-07-06 17:14:36 | 00,196,224 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\drivers\rdpdr.sys
[2009-07-06 17:14:36 | 00,040,840 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\drivers\termdd.sys
[2004-08-04 14:00:00 | 00,000,603 | ---- | C] () -- H:\WINDOWS\win.ini
[2004-08-04 14:00:00 | 00,000,227 | ---- | C] () -- H:\WINDOWS\system.ini
[2003-04-08 11:40:22 | 00,005,679 | ---- | C] () -- H:\WINDOWS\System32\OUTLPERF.INI

========== Files - Modified Within 30 Days ==========

[5 H:\WINDOWS\*.tmp files]
[2009-07-24 20:07:12 | 00,000,972 | ---- | M] () -- H:\WINDOWS\tasks\Google Software Updater.job
[2009-07-24 20:04:51 | 00,514,048 | ---- | M] (OldTimer Tools) -- H:\Documents and Settings\Świnka Morska\Pulpit\OTL.exe
[2009-07-24 20:01:40 | 00,001,046 | ---- | M] () -- H:\WINDOWS\tasks\GoogleUpdateTaskMachine.job
[2009-07-24 16:40:35 | 00,597,112 | ---- | M] () -- H:\Documents and Settings\Świnka Morska\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
[2009-07-24 16:28:28 | 01,089,268 | ---- | M] () -- H:\WINDOWS\System32\PerfStringBackup.INI
[2009-07-24 16:28:28 | 00,490,808 | ---- | M] () -- H:\WINDOWS\System32\perfh015.dat
[2009-07-24 16:28:28 | 00,432,856 | ---- | M] () -- H:\WINDOWS\System32\perfh009.dat
[2009-07-24 16:28:28 | 00,083,988 | ---- | M] () -- H:\WINDOWS\System32\perfc015.dat
[2009-07-24 16:28:28 | 00,067,560 | ---- | M] () -- H:\WINDOWS\System32\perfc009.dat
[2009-07-24 16:27:53 | 00,218,624 | ---- | M] () -- H:\Documents and Settings\Świnka Morska\Pulpit\regulamin_konkursu_TdF_2009.doc
[2009-07-24 16:26:19 | 00,350,192 | ---- | M] () -- H:\WINDOWS\System32\vsconfig.xml
[2009-07-24 16:24:27 | 00,002,206 | ---- | M] () -- H:\WINDOWS\System32\wpa.dbl
[2009-07-24 16:24:07 | 00,000,006 | -H-- | M] () -- H:\WINDOWS\tasks\SA.DAT
[2009-07-24 16:23:44 | 00,002,048 | --S- | M] () -- H:\WINDOWS\bootstat.dat
[2009-07-24 16:23:37 | 01,370,264 | ---- | M] () -- H:\WINDOWS\System32\FNTCACHE.DAT
[2009-07-24 16:09:01 | 00,251,152 | RHS- | M] () -- H:\ntldr
[2009-07-23 16:34:12 | 00,662,560 | ---- | M] () -- H:\Documents and Settings\Świnka Morska\Pulpit\SA400311.JPG
[2009-07-23 16:34:09 | 00,614,472 | ---- | M] () -- H:\Documents and Settings\Świnka Morska\Pulpit\SA400307.JPG
[2009-07-23 16:34:03 | 00,663,398 | ---- | M] () -- H:\Documents and Settings\Świnka Morska\Pulpit\SA400312.JPG
[2009-07-23 16:33:57 | 00,345,977 | ---- | M] () -- H:\Documents and Settings\Świnka Morska\Pulpit\SA400302.JPG
[2009-07-21 16:34:38 | 00,176,506 | ---- | M] () -- H:\WINDOWS\hpoins21.dat
[2009-07-21 16:34:16 | 00,001,858 | ---- | M] () -- H:\Documents and Settings\All Users\Pulpit\HP Photosmart Essential 2.5.lnk
[2009-07-21 16:32:49 | 00,001,808 | ---- | M] () -- H:\Documents and Settings\All Users\Menu Start\Programy\Autostart\HP Digital Imaging Monitor.lnk
[2009-07-21 16:32:14 | 00,000,862 | ---- | M] () -- H:\Documents and Settings\All Users\Pulpit\Centrum obsługi HP.lnk
[2009-07-21 15:41:09 | 00,001,958 | ---- | M] () -- H:\Documents and Settings\All Users\Pulpit\Shop for HP Supplies.lnk
[2009-07-19 18:01:56 | 00,001,920 | ---- | M] () -- H:\Documents and Settings\All Users\Pulpit\Angels vs Devils.lnk
[2009-07-19 10:03:39 | 00,002,557 | ---- | M] () -- H:\Documents and Settings\Świnka Morska\Pulpit\Microsoft Office Excel 2003.lnk
[2009-07-18 10:43:05 | 00,000,766 | ---- | M] () -- H:\Documents and Settings\Świnka Morska\Pulpit\Ceville.lnk
[2009-07-17 21:06:26 | 00,000,883 | ---- | M] () -- H:\Documents and Settings\All Users\Pulpit\Foxit Reader.lnk
[2009-07-16 20:10:35 | 00,054,156 | -H-- | M] () -- H:\WINDOWS\QTFont.qfn
[2009-07-16 20:10:35 | 00,001,409 | ---- | M] () -- H:\WINDOWS\QTFont.for
[2009-07-16 15:50:37 | 03,237,376 | ---- | M] () -- H:\Documents and Settings\Świnka Morska\Pulpit\happyland_install.exe
[2009-07-11 21:29:28 | 00,002,137 | ---- | M] () -- H:\Documents and Settings\All Users\Pulpit\iTunes.lnk
[2009-07-11 21:17:49 | 09,684,964 | ---- | M] () -- H:\Documents and Settings\Świnka Morska\Pulpit\opr005DL.flv
[2009-07-10 21:23:05 | 00,000,830 | ---- | M] () -- H:\Documents and Settings\Świnka Morska\Pulpit\Rule the Rail!.lnk
[2009-07-10 21:22:39 | 06,599,293 | ---- | M] (The BrainBombers Group ) -- H:\Documents and Settings\Świnka Morska\Pulpit\ruletherail_11.exe
[2009-07-10 15:10:12 | 00,002,539 | ---- | M] () -- H:\Documents and Settings\Świnka Morska\Pulpit\Microsoft Word.lnk
[2009-07-09 15:41:44 | 00,000,696 | ---- | M] () -- H:\Documents and Settings\All Users\Pulpit\Malwarebytes' Anti-Malware.lnk
[2009-07-08 17:37:57 | 00,001,836 | ---- | M] () -- H:\Documents and Settings\All Users\Pulpit\Google Earth.lnk
[2009-07-07 20:43:00 | 00,003,584 | ---- | M] () -- H:\Documents and Settings\Świnka Morska\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009-07-07 20:40:49 | 00,000,603 | ---- | M] () -- H:\WINDOWS\win.ini
[2009-07-07 20:40:49 | 00,000,227 | ---- | M] () -- H:\WINDOWS\system.ini
[2009-07-07 17:36:34 | 00,812,344 | ---- | M] (Trend Micro Inc.) -- H:\Documents and Settings\Świnka Morska\Pulpit\HT.exe
[2009-07-07 17:14:07 | 00,388,974 | ---- | M] () -- H:\Documents and Settings\Świnka Morska\Pulpit\USBVaccine.zip
[2009-07-07 17:10:56 | 24,539,592 | ---- | M] (Microsoft Corporation) -- H:\WINDOWS\System32\MRT.exe
[2009-07-07 17:04:10 | 01,709,408 | ---- | M] () -- H:\Documents and Settings\Świnka Morska\Pulpit\taskmanager17.exe
[2009-07-07 15:12:21 | 00,001,853 | ---- | M] () -- H:\Documents and Settings\All Users\Pulpit\Sony Ericsson PC Suite 3.1.lnk
[2009-07-07 15:11:06 | 00,000,736 | ---- | M] () -- H:\Documents and Settings\All Users\Pulpit\WinZip.lnk
[2009-07-07 15:09:54 | 00,000,719 | ---- | M] () -- H:\Documents and Settings\All Users\Pulpit\VLC media player.lnk
[2009-07-07 15:08:26 | 00,023,392 | ---- | M] () -- H:\WINDOWS\System32\nscompat.tlb
[2009-07-07 15:08:26 | 00,016,832 | ---- | M] () -- H:\WINDOWS\System32\amcompat.tlb
[2009-07-07 15:06:25 | 00,000,000 | -H-- | M] () -- H:\WINDOWS\System32\drivers\UMDF\MsftWdf_user_01_00_00.Wdf
[2009-07-07 15:00:33 | 00,001,604 | ---- | M] () -- H:\Documents and Settings\All Users\Pulpit\QuickTime Player.lnk
[2009-07-07 14:36:45 | 00,000,935 | ---- | M] () -- H:\WINDOWS\System32\PQ_BATCH.PQB
[2009-07-07 14:26:19 | 00,001,863 | ---- | M] () -- H:\Documents and Settings\Świnka Morska\Pulpit\PartitionMagic 7.0.lnk
[2009-07-07 14:01:59 | 00,000,806 | ---- | M] () -- H:\WINDOWS\unins000.dat
[2009-07-06 21:07:17 | 00,000,421 | ---- | M] () -- H:\WINDOWS\ODBC.INI
[2009-07-06 20:51:26 | 00,000,592 | ---- | M] () -- H:\Documents and Settings\All Users\Pulpit\Opera.lnk
[2009-07-06 20:50:37 | 07,562,568 | ---- | M] (Opera Software ASA) -- H:\Documents and Settings\Świnka Morska\Pulpit\Opera_964_int_Setup.exe
[2009-07-06 20:49:48 | 06,895,256 | ---- | M] (Opera Software ASA ) -- H:\Documents and Settings\Świnka Morska\Pulpit\Opera_1000_en_b1_Setup.exe
[2009-07-06 20:41:44 | 00,004,212 | -H-- | M] () -- H:\WINDOWS\System32\zllictbl.dat
[2009-07-06 20:40:21 | 33,952,648 | ---- | M] () -- H:\Documents and Settings\Świnka Morska\Pulpit\zaZA_Setup_en.exe
[2009-07-06 20:25:23 | 06,928,768 | -H-- | M] () -- H:\Documents and Settings\Świnka Morska\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2009-07-06 20:19:29 | 00,267,152 | ---- | M] () -- H:\Documents and Settings\Świnka Morska\Pulpit\zaSetup_en[1].exe
[2009-07-06 19:03:37 | 00,000,210 | -HS- | M] () -- H:\boot.ini
[2009-07-06 18:22:17 | 00,124,464 | ---- | M] (Symantec Corporation) -- H:\WINDOWS\System32\drivers\SYMEVENT.SYS
[2009-07-06 18:22:17 | 00,060,808 | ---- | M] (Symantec Corporation) -- H:\WINDOWS\System32\S32EVNT1.DLL
[2009-07-06 18:22:17 | 00,010,635 | ---- | M] () -- H:\WINDOWS\System32\drivers\SYMEVENT.CAT
[2009-07-06 18:22:17 | 00,000,806 | ---- | M] () -- H:\WINDOWS\System32\drivers\SYMEVENT.INF
[2009-07-06 18:05:47 | 00,000,602 | ---- | M] () -- H:\WINDOWS\tasks\Norton AntiVirus - Uruchom pełne skanowanie systemu - Świnka Morska.job
[2009-07-06 18:04:38 | 00,001,981 | ---- | M] () -- H:\Documents and Settings\All Users\Pulpit\Norton AntiVirus.lnk
[2009-07-06 17:46:01 | 00,000,021 | ---- | M] () -- H:\WINDOWS\kit.ini
[2009-07-06 17:40:35 | 00,059,944 | ---- | M] (Windows ® 2000 DDK provider) -- H:\WINDOWS\System32\wpfb_ialmrnt5.dll
[2009-07-06 17:40:26 | 00,016,384 | ---- | M] () -- H:\WINDOWS\System32\WINKRNME.DLL
[2009-07-06 17:36:01 | 00,940,794 | ---- | M] () -- H:\WINDOWS\System32\LoopyMusic.wav
[2009-07-06 17:36:01 | 00,146,650 | ---- | M] () -- H:\WINDOWS\System32\BuzzingBee.wav
[2009-07-06 17:21:06 | 00,008,192 | ---- | M] () -- H:\WINDOWS\REGLOCS.OLD
[2009-07-06 17:20:27 | 00,000,249 | ---- | M] () -- H:\WINDOWS\System32\$winnt$.inf
[2009-07-06 17:18:35 | 00,000,000 | ---- | M] () -- H:\WINDOWS\control.ini
[2009-07-06 17:18:32 | 00,316,640 | ---- | M] () -- H:\WINDOWS\WMSysPr9.prx
[2009-07-06 17:18:23 | 00,004,293 | ---- | M] () -- H:\WINDOWS\ODBCINST.INI
[2009-07-06 17:17:41 | 00,000,488 | RH-- | M] () -- H:\WINDOWS\System32\WindowsLogon.manifest
[2009-07-06 17:17:41 | 00,000,488 | RH-- | M] () -- H:\WINDOWS\System32\logonui.exe.manifest
[2009-07-06 17:17:35 | 00,000,749 | RH-- | M] () -- H:\WINDOWS\WindowsShell.Manifest
[2009-07-06 17:17:35 | 00,000,749 | RH-- | M] () -- H:\WINDOWS\System32\wuaucpl.cpl.manifest
[2009-07-06 17:17:35 | 00,000,749 | RH-- | M] () -- H:\WINDOWS\System32\sapi.cpl.manifest
[2009-07-06 17:17:35 | 00,000,749 | RH-- | M] () -- H:\WINDOWS\System32\nwc.cpl.manifest
[2009-07-06 17:17:35 | 00,000,749 | RH-- | M] () -- H:\WINDOWS\System32\ncpa.cpl.manifest
[2009-07-06 17:17:35 | 00,000,749 | RH-- | M] () -- H:\WINDOWS\System32\cdplayer.exe.manifest
[2009-07-06 17:16:05 | 00,021,856 | ---- | M] () -- H:\WINDOWS\System32\emptyregdb.dat
[2009-07-06 17:15:55 | 00,000,037 | ---- | M] () -- H:\WINDOWS\vbaddin.ini
[2009-07-06 17:15:55 | 00,000,036 | ---- | M] () -- H:\WINDOWS\vb.ini
< End of report >

Extras.txt:

OTL Extras logfile created on: 2009-07-24 20:05:34 - Run 1
OTL by OldTimer - Version 3.0.10.2 Folder = H:\Documents and Settings\Świnka Morska\Pulpit
Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

503,48 Mb Total Physical Memory | 153,03 Mb Available Physical Memory | 30,39% Memory free
1,20 Gb Paging File | 0,71 Gb Available in Paging File | 59,48% Paging File free
Paging file location(s): H:\pagefile.sys 756 1512 [binary data]

%SystemDrive% = H: | %SystemRoot% = H:\WINDOWS | %ProgramFiles% = H:\Program Files
C: Drive not present or media not loaded
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
Drive H: | 97,66 Gb Total Space | 72,43 Gb Free Space | 74,17% Space Free | Partition Type: NTFS
Drive I: | 51,39 Gb Total Space | 50,87 Gb Free Space | 99,00% Space Free | Partition Type: NTFS

Computer Name: PPTH
Current User Name: Świnka Morska
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html [@ = Opera.HTML] -- H:\Program Files\Opera\opera.exe (Opera Software)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"H:\Program Files\iTunes\iTunes.exe" = H:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes -- (Apple Inc.)
"H:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe" = H:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe -- (Hewlett-Packard Co.)
"H:\Program Files\HP\Digital Imaging\bin\hpqste08.exe" = H:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe -- (Hewlett-Packard Co.)
"H:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe" = H:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe -- (Hewlett-Packard Co.)
"H:\Program Files\HP\Digital Imaging\bin\hposfx08.exe" = H:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe -- (Hewlett-Packard Co.)
"H:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = H:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Co.)
"H:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe" = H:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe -- (Hewlett-Packard Co.)
"H:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" = H:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe -- (Hewlett-Packard Co.)
"H:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe" = H:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe -- (Hewlett-Packard)
"H:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe" = H:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe -- (Hewlett-Packard)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{02E89EFC-7B07-4D5A-AA03-9EC0902914EE}" = VC 9.0 Runtime
"{0776325E-EF23-4CC1-9C98-3964738D7AC4}" = SymNet
"{09BDEEF0-5590-457D-89A9-5DB2742F9BBF}" = 32 Bit HP CIO Components Installer
"{0F7C2E47-089E-4d23-B9F7-39BE00100776}" = Toolbox
"{11B83AD3-7A46-4C2E-A568-9505981D4C6F}" = HP Update
"{12A76360-388E-4B27-ABEB-D5FC5378DD2A}" = HPPhotoSmartPhotobookWebPack1
"{18669FF9-C8FE-407a-9F70-E674896B1DB4}" = GPBaseService
"{195F2C6C-A343-4b10-B1A4-3F00AB9E9DD9}" = Fax
"{1E5007FA-DA5E-4EDD-BDE5-14D128D66887}" = PowerQuest PartitionMagic 7.0
"{20B30DC1-E423-4939-B51D-05C58B0F9BBB}" = HP Photosmart All-In-One Driver Software 10.0 Rel .2
"{2BA00471-0328-3743-93BD-FA813353A783}" = Microsoft .NET Framework 3.0 Service Pack 1
"{2FC099BD-AC9B-33EB-809C-D332E1B27C40}" = Microsoft .NET Framework 3.5
"{2FFE93F0-BB72-4E52-8761-354D1AAA9387}" = Sony Ericsson PC Suite 3.107.00
"{31478BE1-CDE5-4753-A8B2-F6D4BC1FBE09}" = Component Framework
"{34BFB099-07B2-4E95-A673-7362D60866A2}" = PSSWCORE
"{34EEB1F5-E939-40A1-A6BA-957282A4B2C8}" = Norton AntiVirus Help
"{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{36FDBE6E-6684-462b-AE98-9A39A1B200CC}" = HPProductAssistant
"{3A02407B-4456-4462-8640-FDB73DC7EC58}" = Symantec Real Time Storage Protection Component
"{3EBD3749-304E-4A4C-9575-C00E5F015217}" = Apple Mobile Device Support
"{4CACFCD9-F71B-413A-8DF5-1A6419D5CDC6}" = Cards_Calendar_OrderGift_DoMorePlugout
"{5109C064-813E-4e87-B0DE-C8AF7B5BC02B}" = SmartWebPrintingOC
"{52A69E11-7CEB-4a7d-9607-68BA4F39A89B}" = DeviceDiscovery
"{584204D4-9FF9-42FD-B3F7-51A9302947BB}" = Angels vs Devils
"{5ACE69F0-A3E8-44eb-88C1-0A841E700180}" = TrayApp
"{62120008-8E1E-4807-860D-A8B48F8552DB}" = Norton Protection Center
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{679EC478-3FF9-4987-B2FF-C2C2B27532A2}" = DocProc
"{687FEF8A-8597-40b4-832C-297EA3F35817}" = BufferChm
"{6B437F94-056F-4791-AF2C-0D10E2706AF0}" = PanoStandAlone
"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}" = Avanquest update
"{77772678-817F-4401-9301-ED1D01A8DA56}" = SPBBC 32bit
"{77FFBA7E-0973-4F39-BBDB-AC2F537578D2}" = Norton AntiVirus
"{80533B67-C407-485D-8B5D-63BB8ED9D878}" = Scan
"{87E2B986-07E8-477a-93DC-AF0B6758B192}" = DocProcQFolder
"{8A708DD8-A5E6-11D4-A706-000629E95E20}" = Intel® Graphics Media Accelerator Driver
"{8A85DEAD-7C1F-4368-881C-72AC74CB2E91}" = UnloadSupport
"{91120415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Standard Edition 2003
"{95A890AA-B3B1-44B6-9C18-A8F7AB3EE7FC}" = QuickTime
"{A07840FC-CE63-4CB8-8030-EF4B9805925A}" = HPPhotoSmartDiscLabel_PaperLabel
"{A0B9F8DF-C949-45ed-9808-7DC5C0C19C81}" = Status
"{A5AB9D5E-52E2-440e-A3ED-9512E253C81A}" = SolutionCenter
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{ADD53756-F4C3-4797-85B3-D8B3D1FC93B3}" = forteManager
"{ADFB9653-F44C-460C-BF58-189CC552DFFE}" = hpphotosmartdisclabelplugin
"{AF7FC1CA-79DF-43c3-90A3-33EFEB9294CE}" = AIO_Scan
"{B045B608-4A47-4C77-9EAD-06C394503306}" = iTunes
"{B24E05CC-46FF-4787-BBB8-5CD516AFB118}" = ccCommon
"{B4E91E95-A5BA-4E50-A465-DB7EFEB176E8}" = HPPhotoSmartDiscLabel_PrintOnDisc
"{B508B3F1-A24A-32C0-B310-85786919EF28}" = Microsoft .NET Framework 2.0 Service Pack 1
"{B74F042E-E1B9-4A5B-8D46-387BB172F0A4}" = Apple Software Update
"{B8DBED1E-8BC3-4d08-B94A-F9D7D88E9BBF}" = HPSSupply
"{BAD0FA60-09CF-4411-AE6A-C2844C8812FA}" = HP Photosmart Essential 2.5
"{c4549405-195f-4450-8865-6be9dc5ad136}" = PS_AIO_02_Software_Min
"{C950420B-4182-49EA-850A-A6A2ABF06C6B}" = Marvell Miniport Driver
"{CC016F21-3970-11DE-B878-005056806466}" = Google Earth
"{CCB9B81A-167F-4832-B305-D2A0430840B3}" = WebReg
"{cd0b9359-b716-4fd0-8e0a-09b3e312e8a4}" = PS_AIO_02_Software
"{D2E0F0CC-6BE0-490b-B08B-9267083E34C9}" = MarketResearch
"{D41FAAA9-8048-4906-86B2-9AADEA1FA0B7}" = SpeedTouch USB Software
"{D99A8E3A-AE5A-4692-8B19-6F16D454E240}" = Destination Component
"{DD3C88A0-C53C-41D0-A21B-6D021981D23E}" = HPPhotoSmartDiscLabelContent1
"{E08DC77E-D09A-4e36-8067-D6DBBCC5F8DC}" = VideoToolkit01
"{E1BBBAC5-2857-4155-82A6-54492CE88620}" = Opera 9.64
"{E80F62FF-5D3C-4A19-8409-9721F2928206}" = LiveUpdate (Symantec Corporation)
"{EFB5B3B5-A280-4E25-BE1C-634EEFE32C1B}" = AppCore
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F42CD69D-E393-47c8-B2CD-B139C4ADA9A8}" = Copy
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"audcle" = Plus! MP3 Audio Converter LE
"Ceville" = Ceville
"DriverCD" = DriverCD
"drmtool.inf" = Personal License Update Wizard for Windows Media Player
"Ekspert CD_is1" = Ekspert CD
"Foxit Reader" = Foxit Reader
"Google Updater" = Aktualizator Google
"Happyland Adventures - Xmas Edition_is1" = Happyland Adventures - Xmas Edition v1.3
"HP Imaging Device Functions" = HP Imaging Device Functions 10.0
"HP Photosmart Essential" = HP Photosmart Essential 2.5
"HP Smart Web Printing" = HP Smart Web Printing
"HP Solution Center & Imaging Support Tools" = HP Solution Center 10.0
"HPExtendedCapabilities" = HP Customer Participation Program 10.0
"HPOCR" = OCR Software by I.R.I.S. 10.0
"ie8" = Windows Internet Explorer 8
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 3.5" = Microsoft .NET Framework 3.5
"mmmusic" = Movie Maker Background Music Files
"mmsounds" = Movie Maker Sound Effects
"mmtitle" = Movie Maker Title Images
"mplibwiz.inf" = Media Library Management Wizard
"mpxlswiz.inf" = Windows Media Player Playlist Import to Excel Wizard
"mpxptray.inf" = Windows Media Player Tray Control
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"PsuedoLiveUpdate" = LiveUpdate (Symantec Corporation)
"RtR_is1" = Rule the Rail! 1.1 free starter kit
"Security Task Manager" = Security Task Manager 1.7h
"Shop for HP Supplies" = Shop for HP Supplies
"SymSetup.{77FFBA7E-0973-4F39-BBDB-AC2F537578D2}" = Norton AntiVirus (Symantec Corporation)
"VLC media player" = VideoLAN VLC media player 0.8.6
"wa2wmp" = Windows Media Player Skin Importer
"WIC" = Windows Imaging Component
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinZip" = WinZip
"WMBK2" = Windows Media Bonus Pack for Windows XP
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
"ZoneAlarm" = ZoneAlarm

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 2009-07-12 09:28:40 | Computer Name = PPTH | Source = Google Update | ID = 20
Description =

Error - 2009-07-12 11:16:03 | Computer Name = PPTH | Source = Google Update | ID = 20
Description =

Error - 2009-07-12 15:02:38 | Computer Name = PPTH | Source = Google Update | ID = 20
Description =

Error - 2009-07-14 10:31:45 | Computer Name = PPTH | Source = Google Update | ID = 20
Description =

Error - 2009-07-15 10:48:01 | Computer Name = PPTH | Source = Google Update | ID = 20
Description =

Error - 2009-07-15 14:11:53 | Computer Name = PPTH | Source = Google Update | ID = 20
Description =

Error - 2009-07-16 09:34:36 | Computer Name = PPTH | Source = Google Update | ID = 20
Description =

Error - 2009-07-16 14:06:27 | Computer Name = PPTH | Source = Google Update | ID = 20
Description =

Error - 2009-07-17 10:33:02 | Computer Name = PPTH | Source = Google Update | ID = 20
Description =

Error - 2009-07-17 14:44:05 | Computer Name = PPTH | Source = Google Update | ID = 20
Description =

[ System Events ]
Error - 2009-07-18 15:39:06 | Computer Name = PPTH | Source = W32Time | ID = 39452701
Description = Dostawca czasu NtpClient jest skonfigurowany, tak aby pobierać czas
z jednego lub kilku źródeł czasu, jednak żadne ze źródeł jest obecnie niedostępne.
Przez 14 min nie nastąpi próba kontaktu ze źródłem. NtpClient nie ma źródła dokładnego
czasu. [TIME PROVIDER NtpClient IS CONFIGURED TO ADJUST TIME FROM ONE OR MORE SOURCES, BUT NO SOURCE IS CURRENTLY AVAILABLE. THERE'LL BE NO ATTEMPT TO CONTACT THE SOURCE FOR 14 MINUTES. NtpClient HAS NO SOURCE FOR ACCURATE TIME]

Error - 2009-07-19 03:41:38 | Computer Name = PPTH | Source = W32Time | ID = 39452689
Description = Dostawca czasu NtpClient: Wystąpił błąd podczas wyszukiwania serwera
DNS ręcznie skonfigurowanej końcówki „time.windows.com,0x1”. Klient NtpClient ponowi
próbę wyszukania serwera DNS za 15 min. Wystąpił błąd: Próba przeprowadzenia operacji,
wykonywanej przez gniazdo, na nieosiągalnym hoście. (0x80072751) [TIME PROVIDER NtpClient: ERROR DURING SEARCHING FOR DNS SERVER OF MANUALLY CONFIGURED „timTIME PROVIDER NtpClient: ERROR DURING SEARCHING FOR DNS SERVER OF MANUALLY CONFIGURED „time.windows.com,0x1”. NtpClient WILL SEARCH FOR DNS SERVER IN 15 MINUTES. ERROR: ATTEMPT TO PERFORM AN OPERATION ON AN UNAVAILABLE HOST]e.windows.com,0x1”. NtpClient WILL SEARCH FOR DNS SERVER IN 15 MINUTES. ERROR: ATTEMPT TO PERFORM AN OPERATION ON AN UNAVAILABLE HOST (0x80072751)]

Error - 2009-07-19 03:41:38 | Computer Name = PPTH | Source = W32Time | ID = 39452701
Description = Dostawca czasu NtpClient jest skonfigurowany, tak aby pobierać czas
z jednego lub kilku źródeł czasu, jednak żadne ze źródeł jest obecnie niedostępne.
Przez 14 min nie nastąpi próba kontaktu ze źródłem. NtpClient nie ma źródła dokładnego
czasu. [TIME PROVIDER NtpClient IS CONFIGURED TO ADJUST TIME FROM ONE OR MORE SOURCES, BUT NO SOURCE IS CURRENTLY AVAILABLE. THERE'LL BE NO ATTEMPT TO CONTACT THE SOURCE FOR 14 MINUTES. NtpClient HAS NO SOURCE FOR ACCURATE TIME]

Error - 2009-07-19 05:27:48 | Computer Name = PPTH | Source = W32Time | ID = 39452689
Description = Dostawca czasu NtpClient: Wystąpił błąd podczas wyszukiwania serwera
DNS ręcznie skonfigurowanej końcówki „time.windows.com,0x1”. Klient NtpClient ponowi
próbę wyszukania serwera DNS za 15 min. Wystąpił błąd: Próba przeprowadzenia operacji,
wykonywanej przez gniazdo, na nieosiągalnym hoście. (0x80072751) [TIME PROVIDER NtpClient: ERROR DURING SEARCHING FOR DNS SERVER OF MANUALLY CONFIGURED „timTIME PROVIDER NtpClient: ERROR DURING SEARCHING FOR DNS SERVER OF MANUALLY CONFIGURED „time.windows.com,0x1”. NtpClient WILL SEARCH FOR DNS SERVER IN 15 MINUTES. ERROR: ATTEMPT TO PERFORM AN OPERATION ON AN UNAVAILABLE HOST]e.windows.com,0x1”. NtpClient WILL SEARCH FOR DNS SERVER IN 15 MINUTES. ERROR: ATTEMPT TO PERFORM AN OPERATION ON AN UNAVAILABLE HOST (0x80072751)]

Error - 2009-07-19 05:27:49 | Computer Name = PPTH | Source = W32Time | ID = 39452701
Description = Dostawca czasu NtpClient jest skonfigurowany, tak aby pobierać czas
z jednego lub kilku źródeł czasu, jednak żadne ze źródeł jest obecnie niedostępne.
Przez 14 min nie nastąpi próba kontaktu ze źródłem. NtpClient nie ma źródła dokładnego
czasu. [TIME PROVIDER NtpClient IS CONFIGURED TO ADJUST TIME FROM ONE OR MORE SOURCES, BUT NO SOURCE IS CURRENTLY AVAILABLE. THERE'LL BE NO ATTEMPT TO CONTACT THE SOURCE FOR 14 MINUTES. NtpClient HAS NO SOURCE FOR ACCURATE TIME]

Error - 2009-07-21 08:32:36 | Computer Name = PPTH | Source = W32Time | ID = 39452689
Description = Dostawca czasu NtpClient: Wystąpił błąd podczas wyszukiwania serwera
DNS ręcznie skonfigurowanej końcówki „time.windows.com,0x1”. Klient NtpClient ponowi
próbę wyszukania serwera DNS za 15 min. Wystąpił błąd: Próba przeprowadzenia operacji,
wykonywanej przez gniazdo, na nieosiągalnym hoście. (0x80072751) [TIME PROVIDER NtpClient: ERROR DURING SEARCHING FOR DNS SERVER OF MANUALLY CONFIGURED „timTIME PROVIDER NtpClient: ERROR DURING SEARCHING FOR DNS SERVER OF MANUALLY CONFIGURED „time.windows.com,0x1”. NtpClient WILL SEARCH FOR DNS SERVER IN 15 MINUTES. ERROR: ATTEMPT TO PERFORM AN OPERATION ON AN UNAVAILABLE HOST]e.windows.com,0x1”. NtpClient WILL SEARCH FOR DNS SERVER IN 15 MINUTES. ERROR: ATTEMPT TO PERFORM AN OPERATION ON AN UNAVAILABLE HOST (0x80072751)]

Error - 2009-07-21 08:32:36 | Computer Name = PPTH | Source = W32Time | ID = 39452701
Description = Dostawca czasu NtpClient jest skonfigurowany, tak aby pobierać czas
z jednego lub kilku źródeł czasu, jednak żadne ze źródeł jest obecnie niedostępne.
Przez 14 min nie nastąpi próba kontaktu ze źródłem. NtpClient nie ma źródła dokładnego
czasu. [TIME PROVIDER NtpClient IS CONFIGURED TO ADJUST TIME FROM ONE OR MORE SOURCES, BUT NO SOURCE IS CURRENTLY AVAILABLE. THERE'LL BE NO ATTEMPT TO CONTACT THE SOURCE FOR 14 MINUTES. NtpClient HAS NO SOURCE FOR ACCURATE TIME]

Error - 2009-07-21 10:51:19 | Computer Name = PPTH | Source = Service Control Manager | ID = 7022
Description = Usługa Usługa HP CUE DeviceDiscovery zawiesiła się podczas uruchamiania. [HP CUE DeviceDiscovery SERVICE HUNG UP DURING STARTING]

Error - 2009-07-23 10:27:47 | Computer Name = PPTH | Source = Service Control Manager | ID = 7022
Description = Usługa Usługa HP CUE DeviceDiscovery zawiesiła się podczas uruchamiania. [HP CUE DeviceDiscovery SERVICE HUNG UP DURING STARTING]

Error - 2009-07-24 10:00:34 | Computer Name = PPTH | Source = Service Control Manager | ID = 7022
Description = Usługa Usługa HP CUE DeviceDiscovery zawiesiła się podczas uruchamiania. [HP CUE DeviceDiscovery SERVICE HUNG UP DURING STARTING]

< End of report >

As for problems: I still don't have access to System Volume Information folders. And although options "Hide known file extensions", "Hide protected system files" are unchecked, and "Show hidden files" is checked, Windows doesn't show the file extensions, hides system files and doesn't show hidden files - that's new.

Shagrak

#8 myrti

Sillyberry

Malware Study Hall Admin
33,766 posts
OFFLINE

Gender:Female
Location:At home
Local time:05:11 PM

Posted 24 July 2009 - 02:48 PM

Hi,

good to hear you used Flash_Disinfector before reformatting :thumbup2:

Your logs look clean to me.

The presence of the system restore folder is normal. It is a system folder, which will always be there. When you turn of System Restore, those folders are emptied (but some configuration files may remain) but not deleted.
It is also normal that you as a user do not have access to that folder. Your anti virus program also needs to elevate its rights to access this folder.

However you should be able to set your file extensions the way you like. Have you just noticed this now, or has this been like this for some time?
I'm gonna check on that and will post more checks in my next reply.

I would like to ask you to run an onlinescan just to make sure we didn't miss something:

I'd like us to scan your machine with ESET OnlineScan

Hold down Control and click on the following link to open ESET OnlineScan in a new window.
ESET OnlineScan
Click the button.
For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
- Click on to download the ESET Smart Installer. Save it to your desktop.
- Double click on the icon on your desktop.
Check
Click the button.
Accept any security warnings from your browser.
Check
Please uncheck remove found threats
Push the Start button.
ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
When the scan completes, push
Push , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
Push the button.
Push

regards _temp_

is that a bird? a plane? nooo it's the flying blueberry!

If I have been helping you and haven't replied in 2 days, feel free to shoot me a PM! Please don't send help request via PM, unless I am already helping you. Use the forums!

Follow BleepingComputer on: Facebook | Twitter | Google+

#9 Shagrak

Topic Starter

Members
10 posts
OFFLINE

Local time:10:11 AM

Posted 25 July 2009 - 09:03 AM

Hi,

I realise that System Volume Information should be present and that it appears even though System Restore is turned off, but prior to infection with W32.Silly.FDC I was able to open it and see its contents, and associated the Acces denied message with the infection. Also, Windows Explorer shows that it's empty, but NAV2008 scan shows files inside the folder, which looks suspicious to me...

ESET scan didn't find any threats :thumbup2:

(my AV didn't either, but before formatting online scanners and my AV said my computer was clean of infection, but the virus was nevertheless present on the system because it managed to infect one of my removable drives, which led to current infection...)

Edited by Shagrak, 25 July 2009 - 09:07 AM.

#10 myrti

Sillyberry

Malware Study Hall Admin
33,766 posts
OFFLINE

Gender:Female
Location:At home
Local time:05:11 PM

Posted 25 July 2009 - 02:22 PM

Hi,

let's try to fix your hidden files first. Maybe you will then also be able to see the files in that folder.

I would first like to check the settings of the hidden attributes in your registry.

Open Notepad and copy/paste the code box below into a new text file.

@echo off

reg query HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder >%temp%\list.txt

reg query HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden >>%temp%\list.txt

reg query HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\HideFileExt  >>%temp%\list.txt

reg query HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\nohidden  >>%temp%\list.txt

reg query HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\showall >>%temp%\list.txt


reg query HKEY_Current_User\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder >>%temp%\list.txt

reg query HKEY_current_user\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden >>%temp%\list.txt

reg query HKEY_current_user\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\HideFileExt >>%temp%\list.txt

reg query HKEY_current_user\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\nohidden >>%temp%\list.txt

reg query HKEY_current_user\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\showall >>%temp%\list.txt

%temp%\list.txt

Save the file as regquery.bat by choosing save as All Files, and save it to your Desktop.
Locate "regquery.bat" and double-click on it to run.
It will open a text file, please copy the content in your next reply.

This will list the registry branches where the settings regarding file extensions and shown files should be stored.
regards _temp_

is that a bird? a plane? nooo it's the flying blueberry!

If I have been helping you and haven't replied in 2 days, feel free to shoot me a PM! Please don't send help request via PM, unless I am already helping you. Use the forums!

Follow BleepingComputer on: Facebook | Twitter | Google+

#11 Shagrak

Topic Starter

Members
10 posts
OFFLINE

Local time:10:11 AM

Posted 25 July 2009 - 02:53 PM

Hi,

list.txt:

! REG.EXE VERSION 3.0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder
Type REG_SZ group
Text REG_SZ @shell32.dll,-30498
Bitmap REG_EXPAND_SZ %SystemRoot%\system32\SHELL32.dll,4
HelpID REG_SZ shell.hlp#51140

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\ClassicViewState

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\ControlPanelInMyComputer

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\DesktopProcess

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\DisableThumbCache

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\FolderSizeTip

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\FriendlyTree

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\HideFileExt

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\NetCrawler

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\PersistBrowsers

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\ShowCompColor

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\ShowFullPath

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\ShowFullPathAddress

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\ShowInfoTip

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Thickets

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\WebViewBarricade

! REG.EXE VERSION 3.0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden
Text REG_SZ @shell32.dll,-30499
Type REG_SZ group
Bitmap REG_EXPAND_SZ %SystemRoot%\system32\SHELL32.dll,4
HelpID REG_SZ shell.hlp#51131

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL

! REG.EXE VERSION 3.0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\HideFileExt
Type REG_SZ checkbox
Text REG_SZ @shell32.dll,-30503
HKeyRoot REG_DWORD 0x80000001
RegPath REG_SZ Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
ValueName REG_SZ HideFileExt
CheckedValue REG_DWORD 0x1
UncheckedValue REG_DWORD 0x0
DefaultValue REG_DWORD 0x1
HelpID REG_SZ shell.hlp#51101

! REG.EXE VERSION 3.0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\nohidden
RegPath REG_SZ Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
Text REG_SZ @shell32.dll,-30501
Type REG_SZ radio
CheckedValue REG_DWORD 0x2
ValueName REG_SZ Hidden
DefaultValue REG_DWORD 0x2
HKeyRoot REG_DWORD 0x80000001
HelpID REG_SZ shell.hlp#51104

! REG.EXE VERSION 3.0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\showall
RegPath REG_SZ Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
Text REG_SZ @shell32.dll,-30500
Type REG_SZ radio
CheckedValue REG_DWORD 0x1
ValueName REG_SZ Hidden
DefaultValue REG_DWORD 0x2
HKeyRoot REG_DWORD 0x80000001
HelpID REG_SZ shell.hlp#51105

(I unchecked and then again checked boxes for showing system files, extensions and hidden files, now it all seems to work)

#12 myrti

Sillyberry

Malware Study Hall Admin
33,766 posts
OFFLINE

Gender:Female
Location:At home
Local time:05:11 PM

Posted 25 July 2009 - 04:05 PM

Hi,

great! So the problem with the hidden files is solved?

Can you see the files in system restore now?

Do you recall if you were using ntfs or vfat formatted disks before you reformatted?

regards _temp_

is that a bird? a plane? nooo it's the flying blueberry!

If I have been helping you and haven't replied in 2 days, feel free to shoot me a PM! Please don't send help request via PM, unless I am already helping you. Use the forums!

Follow BleepingComputer on: Facebook | Twitter | Google+

#13 Shagrak

Topic Starter

Members
10 posts
OFFLINE

Local time:10:11 AM

Posted 26 July 2009 - 11:14 AM

Hi,

no, access is stil denied when I try to open System Volume Information folder.

I was using NTFS formatted disk.

But hidden files etc. problem is resolved :thumbup2:

#14 myrti

Sillyberry

Malware Study Hall Admin
33,766 posts
OFFLINE

Gender:Female
Location:At home
Local time:05:11 PM

Posted 27 July 2009 - 03:33 PM

Hi,

I just want to stress, that the way it is set now, is the normal setting. Windows, by default, does not allow you to enter system restore folders.
This is also for your protection: If you can not enter that folder, malware executed by you has the same powers you had, and hence is not able to meddle with System Restore.

However if you want to access those folders, please do the following:

Click Start , click Run , type cmd , and then click OK

A DOS window will open.

Type cd\ and hit enter.

Type cacls "H:\System Volume Information" /E /G "username":F and hit enter

Note: Replace username with the name of your account
Note: Make sure to type the quotation marks as indicated and respect the blanks.

This command adds the specified user to the folder with read permissions. Double-click the System Volume Information folder, you should now be able to open it. The command is for the H:\ partition only

Please make sure you typed the command correctly and only do it, when you believe it's absolutely necessary you have access to the system restore folder.

regards _temp_

is that a bird? a plane? nooo it's the flying blueberry!

If I have been helping you and haven't replied in 2 days, feel free to shoot me a PM! Please don't send help request via PM, unless I am already helping you. Use the forums!

Follow BleepingComputer on: Facebook | Twitter | Google+

#15 Shagrak

Topic Starter

Members
10 posts
OFFLINE

Local time:10:11 AM

Posted 28 July 2009 - 08:20 AM

Hi,

THANK YOU :thumbup2:

I didn't know it was Windows default setting to deny access to this folder, since I was permitted access to it prior to infection. But it looks like a good protection, so I'm gonna leave it as it is.

So do You think that the virus is no longer on my system? Is it safe now to turn System Restore back on? I was afraid it would grey out again and I'd have to format my HDD again, so I left it turned off...