Witam , mam ten sam problem.
Zrobiłam to cos OTLem i teraz nie wiem czy ma znaczenie każdy osobny “skan” tego czy jak na wszelki wypadem wklejam to co powstało :
OTL logfile created on: 2010-01-10 20:28:04 - Run 1
OTL by OldTimer - Version 3.1.23.0 Folder = C:\Documents and Settings\Marcelinaa\Pulpit
Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
991,00 Mb Total Physical Memory | 260,00 Mb Available Physical Memory | 26,00% Memory free
2,00 Gb Paging File | 1,00 Gb Available in Paging File | 59,00% Paging File free
Paging file location(s): C:\pagefile.sys 1344 2688 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 61,52 Gb Total Space | 33,20 Gb Free Space | 53,96% Space Free | Partition Type: NTFS
Drive D: | 87,52 Gb Total Space | 27,44 Gb Free Space | 31,35% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: MARCELIN
Current User Name: Marcelinaa
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
========== Processes (SafeList) ==========
PRC - [2010-01-10 20:27:06 | 00,543,744 | ---- | M] (OldTimer Tools) – C:\Documents and Settings\Marcelinaa\Pulpit\OTL.exe
PRC - [2010-01-06 17:27:37 | 00,908,248 | ---- | M] (Mozilla Corporation) – C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2009-11-12 16:33:10 | 00,141,600 | ---- | M] (Apple Inc.) – C:\Program Files\iTunes\iTunesHelper.exe
PRC - [2009-11-12 16:33:00 | 00,545,568 | ---- | M] (Apple Inc.) – C:\Program Files\iPod\bin\iPodService.exe
PRC - [2009-10-09 13:11:12 | 25,623,336 | R— | M] (Skype Technologies S.A.) – C:\Program Files\Skype\Phone\Skype.exe
PRC - [2009-10-09 13:11:12 | 00,078,008 | R— | M] (Skype Technologies) – C:\Program Files\Skype\Plugin Manager\skypePM.exe
PRC - [2009-08-17 17:07:23 | 00,081,000 | ---- | M] (ALWIL Software) – C:\Program Files\Alwil Software\Avast4\ashDisp.exe
PRC - [2009-08-17 17:07:17 | 00,138,680 | ---- | M] (ALWIL Software) – C:\Program Files\Alwil Software\Avast4\ashServ.exe
PRC - [2009-08-17 17:07:01 | 00,254,040 | ---- | M] (ALWIL Software) – C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
PRC - [2009-08-17 17:04:21 | 00,352,920 | ---- | M] (ALWIL Software) – C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
PRC - [2009-08-17 16:58:55 | 00,018,752 | ---- | M] (ALWIL Software) – C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
PRC - [2009-08-03 20:05:02 | 00,238,888 | ---- | M] (Skype Technologies S.A.) – C:\Program Files\Skype\Toolbars\Shared\SkypeNames.exe
PRC - [2009-07-25 04:23:12 | 00,149,280 | ---- | M] (Sun Microsystems, Inc.) – C:\Program Files\Java\jre6\bin\jusched.exe
PRC - [2009-07-25 04:23:10 | 00,153,376 | ---- | M] (Sun Microsystems, Inc.) – C:\Program Files\Java\jre6\bin\jqs.exe
PRC - [2009-07-09 11:22:18 | 00,144,712 | ---- | M] (Apple Inc.) – C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
PRC - [2009-05-04 16:08:28 | 00,194,432 | ---- | M] () – C:\Program Files\Search Guard Plus\SearchGuardPlus.exe
PRC - [2009-03-19 17:11:24 | 01,138,688 | ---- | M] (Last.fm) – C:\Program Files\Last.fm\LastFM.exe
PRC - [2008-12-12 10:17:38 | 00,238,888 | ---- | M] (Apple Inc.) – C:\Program Files\Bonjour\mDNSResponder.exe
PRC - [2008-05-29 21:56:54 | 02,580,480 | ---- | M] (OpenOffice.org) – C:\Program Files\OpenOffice.org 2.4\program\soffice.bin
PRC - [2008-05-29 21:56:52 | 02,363,392 | ---- | M] (OpenOffice.org) – C:\Program Files\OpenOffice.org 2.4\program\soffice.exe
PRC - [2008-04-14 18:21:16 | 01,035,264 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\explorer.exe
PRC - [2008-03-20 11:04:46 | 02,127,296 | ---- | M] (Gadu-Gadu S.A.) – C:\Program Files\Gadu-Gadu\gg.exe
PRC - [2007-05-28 17:57:54 | 00,275,968 | ---- | M] (Rocket Division Software) – C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
PRC - [2007-05-08 15:24:20 | 00,054,840 | ---- | M] (Hewlett-Packard) – C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
PRC - [2006-02-19 04:24:52 | 00,239,320 | ---- | M] (Hewlett-Packard Development Company, L.P.) – C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe
PRC - [2006-02-19 03:21:22 | 00,288,472 | ---- | M] (Hewlett-Packard Development Company, L.P.) – C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
PRC - [2005-12-01 06:02:00 | 00,131,139 | ---- | M] (NVIDIA Corporation) – C:\WINDOWS\system32\nvsvc32.exe
PRC - [2005-10-24 07:45:16 | 00,090,112 | R— | M] (Realtek Semiconductor Corp.) – C:\WINDOWS\soundman.exe
========== Modules (SafeList) ==========
MOD - [2010-01-10 20:27:06 | 00,543,744 | ---- | M] (OldTimer Tools) – C:\Documents and Settings\Marcelinaa\Pulpit\OTL.exe
MOD - [2006-12-21 13:30:44 | 00,102,400 | ---- | M] (Gadu-Gadu S.A.) – C:\Program Files\Gadu-Gadu\ggwhook.dll
MOD - [2006-05-03 21:53:54 | 00,174,592 | ---- | M] (Microsoft Corporation) – C:\WINDOWS\system32\framedyn.dll
========== Win32 Services (SafeList) ==========
SRV - File not found [Auto | Stopped] – -- (Sukoku Service)
SRV - File not found [On_Demand | Stopped] – -- (NMIndexingService)
SRV - File not found [Auto | Stopped] – -- (Nero BackItUp Scheduler 4.0)
SRV - [2009-11-12 16:33:00 | 00,545,568 | ---- | M] (Apple Inc.) [On_Demand | Running] – C:\Program Files\iPod\bin\iPodService.exe – (iPod Service)
SRV - [2009-09-23 16:37:30 | 00,051,168 | ---- | M] (NOS Microsystems Ltd.) [On_Demand | Stopped] – C:\Program Files\NOS\bin\getPlus_Helper.dll – (getPlusHelper) getPlus®
SRV - [2009-08-17 17:07:17 | 00,138,680 | ---- | M] (ALWIL Software) [Auto | Running] – C:\Program Files\Alwil Software\Avast4\ashServ.exe – (avast! Antivirus)
SRV - [2009-08-17 17:07:01 | 00,254,040 | ---- | M] (ALWIL Software) [On_Demand | Running] – C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe – (avast! Mail Scanner)
SRV - [2009-08-17 17:04:21 | 00,352,920 | ---- | M] (ALWIL Software) [On_Demand | Running] – C:\Program Files\Alwil Software\Avast4\ashWebSv.exe – (avast! Web Scanner)
SRV - [2009-08-17 16:58:55 | 00,018,752 | ---- | M] (ALWIL Software) [Auto | Running] – C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe – (aswUpdSv)
SRV - [2009-07-25 04:23:10 | 00,153,376 | ---- | M] (Sun Microsystems, Inc.) [Auto | Running] – C:\Program Files\Java\jre6\bin\jqs.exe – (JavaQuickStarterService)
SRV - [2009-07-09 11:22:18 | 00,144,712 | ---- | M] (Apple Inc.) [Auto | Running] – C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe – (Apple Mobile Device)
SRV - [2008-12-12 10:17:38 | 00,238,888 | ---- | M] (Apple Inc.) [Auto | Running] – C:\Program Files\Bonjour\mDNSResponder.exe – (Bonjour Service)
SRV - [2007-08-09 08:27:52 | 00,073,728 | ---- | M] (HP) [Auto | Stopped] – C:\WINDOWS\system32\HPZipm12.exe – (Pml Driver HPZ12)
SRV - [2007-05-28 17:57:54 | 00,275,968 | ---- | M] (Rocket Division Software) [Auto | Running] – C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe – (StarWindServiceAE)
SRV - [2005-12-01 06:02:00 | 00,131,139 | ---- | M] (NVIDIA Corporation) [Auto | Running] – C:\WINDOWS\system32\nvsvc32.exe – (NVSvc)
========== Driver Services (SafeList) ==========
DRV - [2009-08-28 18:42:52 | 00,040,448 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\usbaapl.sys – (USBAAPL)
DRV - [2009-08-17 17:06:43 | 00,094,160 | ---- | M] (ALWIL Software) [File_System | Auto | Running] – C:\WINDOWS\system32\drivers\aswmon2.sys – (aswMon2)
DRV - [2009-08-17 17:05:52 | 00,114,768 | ---- | M] (ALWIL Software) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\aswSP.sys – (aswSP)
DRV - [2009-08-17 17:05:37 | 00,020,560 | ---- | M] (ALWIL Software) [File_System | Auto | Running] – C:\WINDOWS\system32\drivers\aswFsBlk.sys – (aswFsBlk)
DRV - [2009-08-17 17:04:40 | 00,051,376 | ---- | M] (ALWIL Software) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\aswTdi.sys – (aswTdi)
DRV - [2009-08-17 17:04:29 | 00,023,152 | ---- | M] (ALWIL Software) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\aswRdr.sys – (aswRdr)
DRV - [2009-08-17 17:03:21 | 00,026,944 | ---- | M] (ALWIL Software) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\aavmker4.sys – (Aavmker4)
DRV - [2009-05-18 14:17:00 | 00,026,600 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\GEARAspiWDM.sys – (GEARAspiWDM)
DRV - [2009-05-05 20:56:32 | 00,721,904 | ---- | M] () [Kernel | Boot | Running] – C:\WINDOWS\System32\Drivers\sptd.sys – (sptd)
DRV - [2008-10-28 22:53:31 | 00,094,208 | ---- | M] (VSO Software) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\ezplay.sys – (ezplay)
DRV - [2008-10-28 22:53:16 | 00,047,360 | ---- | M] (VSO Software) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\pcouffin.sys – (pcouffin)
DRV - [2008-04-13 17:39:16 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\secdrv.sys – (Secdrv)
DRV - [2007-05-02 10:11:18 | 00,109,704 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\ss_mdm.sys – (ss_mdm)
DRV - [2007-05-02 10:11:18 | 00,015,112 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\ss_mdfl.sys – (ss_mdfl)
DRV - [2007-05-02 10:11:16 | 00,083,592 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\ss_bus.sys – (ss_bus) SAMSUNG Mobile USB Device 1.0 driver (WDM)
DRV - [2006-07-24 15:05:00 | 00,005,632 | ---- | M] () [File_System | System | Running] – C:\WINDOWS\system32\drivers\StarOpen.sys – (StarOpen)
DRV - [2006-04-13 01:04:39 | 00,049,664 | R— | M] (HP) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\HPZid412.sys – (HPZid412)
DRV - [2006-04-13 01:04:39 | 00,021,568 | ---- | M] (HP) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\HPZius12.sys – (HPZius12)
DRV - [2006-04-13 01:04:39 | 00,016,496 | R— | M] (HP) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\HPZipr12.sys – (HPZipr12)
DRV - [2006-03-02 13:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\ptilink.sys – (Ptilink)
DRV - [2006-01-27 07:04:16 | 00,099,584 | R— | M] (NVIDIA Corporation) [Kernel | Boot | Running] – C:\WINDOWS\system32\DRIVERS\nvata.sys – (nvata)
DRV - [2005-12-01 06:02:00 | 03,535,424 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\nv4_mini.sys – (nv)
DRV - [2005-11-03 15:40:07 | 00,063,488 | ---- | M] (Protection Technology) [Kernel | Boot | Running] – C:\WINDOWS\System32\drivers\sfvfs02.sys – (sfvfs02) StarForce Protection VFS Driver (version 2.x)
DRV - [2005-10-26 09:08:26 | 03,786,944 | R— | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\alcxwdm.sys – (ALCXWDM) Service for Realtek AC97 Audio (WDM)
DRV - [2005-08-10 13:44:04 | 00,050,688 | ---- | M] (Protection Technology) [Kernel | Boot | Running] – C:\WINDOWS\System32\drivers\sfdrv01.sys – (sfdrv01) StarForce Protection Environment Driver (version 1.x)
DRV - [2005-07-29 09:11:04 | 00,012,928 | R— | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\nvnetbus.sys – (nvnetbus)
DRV - [2005-07-29 09:11:02 | 00,034,048 | R— | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\NVENETFD.sys – (NVENETFD)
DRV - [2005-05-16 14:20:39 | 00,006,656 | ---- | M] (Protection Technology) [Kernel | Boot | Running] – C:\WINDOWS\System32\drivers\sfhlp02.sys – (sfhlp02) StarForce Protection Helper Driver (version 2.x)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = wyborcza.pl/0,0.html?p=020
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.tattoodle.com?tid={360581F9-6472-4b6f-AC00-9690DFB85BCE}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU…\URLSearchHook: {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\2.bin\A5SRCHAS.DLL File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: “ProxyEnable” = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: “ProxyOverride” = *.local
========== FireFox ==========
FF - prefs.js…browser.search.defaultenginename: “Fast Browser Search”
FF - prefs.js…browser.search.defaultthis.engineName: “Fast Browser Search”
FF - prefs.js…browser.search.order.1: “Fast Browser Search”
FF - prefs.js…browser.search.selectedEngine: “Wrzuta”
FF - prefs.js…browser.search.useDBForOrder: true
FF - prefs.js…browser.startup.homepage: “http://pl.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:pl:official”
FF - prefs.js…extensions.enabledItems: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1
FF - prefs.js…extensions.enabledItems: 6
FF - prefs.js…extensions.enabledItems: 2
FF - prefs.js…extensions.enabledItems: 48
FF - prefs.js…extensions.enabledItems: AstroToolbar@toolbarnet.com:1.0.7.0117
FF - prefs.js…extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js…extensions.enabledItems: {2224E955-00E9-4613-A844-CE69FCCAAE91}:3.7.0.4550
FF - prefs.js…extensions.enabledItems: {B13721C7-F507-4982-B2E5-502A71474FED}:3.3.0.3971
FF - prefs.js…extensions.enabledItems: {7AB6D133-2A14-4C11-B3AD-35B1548D38F9}:1.0
FF - prefs.js…extensions.enabledItems: {9f08cb5a-76b1-4bcf-aff9-90e1a5d60b1e}:3.72
FF - prefs.js…extensions.enabledItems: {F587B2D4-7C09-4a23-AC4A-8D6E3CE8C7DA}:3.5.2
FF - prefs.js…extensions.enabledItems: {558D3F58-1E89-4fe2-A1F1-5EADC7BC77CB}:3.5.2
FF - HKLM\software\mozilla\Firefox\extensions\{2224E955-00E9-4613-A844-CE69FCCAAE91}: C:\Program Files\Internet Saving Optimizer\3.7.0.4550\FF [2009-08-30 10:06:45 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\Components: C:\Program Files\Mozilla Firefox\components [2010-01-06 22:20:27 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010-01-06 17:27:41 | 00,000,000 | —D | M]
[2008-10-02 20:37:24 | 00,000,000 | —D | M] – C:\Documents and Settings\Marcelinaa\Dane aplikacji\Mozilla\Extensions
[2010-01-10 19:49:50 | 00,000,000 | —D | M] – C:\Documents and Settings\Marcelinaa\Dane aplikacji\Mozilla\Firefox\Profiles\bsvpb0tj.default\extensions
[2009-08-29 17:18:09 | 00,000,000 | —D | M] (Scribblies Plain) – C:\Documents and Settings\Marcelinaa\Dane aplikacji\Mozilla\Firefox\Profiles\bsvpb0tj.default\extensions{558D3F58-1E89-4fe2-A1F1-5EADC7BC77CB}
[2009-03-28 11:01:40 | 00,000,000 | —D | M] (Aero Fox) – C:\Documents and Settings\Marcelinaa\Dane aplikacji\Mozilla\Firefox\Profiles\bsvpb0tj.default\extensions{5c8bfb7c-9a54-11dc-8314-0800200c9a66}
[2009-12-29 22:22:59 | 00,000,000 | —D | M] (Noia 2.0 (eXtreme)) – C:\Documents and Settings\Marcelinaa\Dane aplikacji\Mozilla\Firefox\Profiles\bsvpb0tj.default\extensions{9f08cb5a-76b1-4bcf-aff9-90e1a5d60b1e}
[2009-11-06 16:43:53 | 00,000,000 | —D | M] (Adobe DLM (powered by getPlus®)) – C:\Documents and Settings\Marcelinaa\Dane aplikacji\Mozilla\Firefox\Profiles\bsvpb0tj.default\extensions{E2883E8F-472F-4fb0-9522-AC9BF37916A7}
[2009-08-29 17:17:57 | 00,000,000 | —D | M] (Scribblies Brite) – C:\Documents and Settings\Marcelinaa\Dane aplikacji\Mozilla\Firefox\Profiles\bsvpb0tj.default\extensions{F587B2D4-7C09-4a23-AC4A-8D6E3CE8C7DA}
[2009-12-31 15:45:49 | 00,000,000 | —D | M] – C:\Documents and Settings\Marcelinaa\Dane aplikacji\Mozilla\Firefox\Profiles\bsvpb0tj.default\extensions\illimitux@illimitux.net
[2009-08-29 17:18:13 | 00,000,000 | —D | M] (No name found) – C:\Documents and Settings\Marcelinaa\Dane aplikacji\Mozilla\Firefox\Profiles\bsvpb0tj.default\extensions{558D3F58-1E89-4fe2-A1F1-5EADC7BC77CB}\chrome\mozapps\extensions
[2009-08-29 17:18:00 | 00,000,000 | —D | M] (No name found) – C:\Documents and Settings\Marcelinaa\Dane aplikacji\Mozilla\Firefox\Profiles\bsvpb0tj.default\extensions{F587B2D4-7C09-4a23-AC4A-8D6E3CE8C7DA}\chrome\mozapps\extensions
[2008-10-19 16:57:24 | 00,001,994 | ---- | M] () – C:\Documents and Settings\Marcelinaa\Dane aplikacji\Mozilla\Firefox\Profiles\bsvpb0tj.default\searchplugins\wrzuta.xml
[2010-01-10 19:44:07 | 00,000,000 | —D | M] – C:\Program Files\Mozilla Firefox\extensions
[2009-09-29 07:45:06 | 00,000,000 | —D | M] (Sukoku) – C:\Program Files\Mozilla Firefox\extensions{7AB6D133-2A14-4C11-B3AD-35B1548D38F9}
[2009-10-29 15:01:49 | 00,002,767 | ---- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml
[2009-11-03 22:19:47 | 00,003,700 | ---- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\fast.png
[2009-11-03 22:19:48 | 00,001,963 | ---- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\fast.xml
[2009-10-29 15:01:49 | 00,001,406 | ---- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml
[2009-10-29 15:01:50 | 00,000,917 | ---- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml
[2009-10-29 15:01:50 | 00,000,858 | ---- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml
[2009-08-31 08:23:17 | 00,002,381 | ---- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\sukoku115.xml
[2009-09-04 06:08:20 | 00,002,381 | ---- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\sukoku117.xml
[2009-09-29 07:45:07 | 00,002,381 | ---- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\sukoku119.xml
[2009-10-29 15:01:50 | 00,001,183 | ---- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml
[2009-10-29 15:01:50 | 00,001,683 | ---- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml
O1 HOSTS File: (742 bytes) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (NP Helper Class) - {35B8D58C-B0CB-46b0-BA64-05B3804E4E86} - C:\Program Files\Internet Saving Optimizer\3.7.0.4550\NPIEAddOn.dll ()
O2 - BHO: (BrowserHelper Class) - {8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6} - C:\Program Files\SGPSA\SearchAssistant.dll (Make The Web Better, LLC)
O2 - BHO: (Ask Search Assistant BHO) - {9CB65201-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\2.bin\A5SRCHAS.DLL File not found
O2 - BHO: (Java Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O2 - BHO: (Ask Toolbar BHO) - {FE063DB1-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\2.bin\ASKTBAR.DLL (Ask.com)
O3 - HKLM…\Toolbar: (Astroburn Toolbar) - {EFEED92A-A33D-4873-BA8F-32BAA631E54D} - C:\Program Files\Astroburn Toolbar\ABToolbar.dll ()
O3 - HKLM…\Toolbar: (Ask Toolbar) - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\2.bin\ASKTBAR.DLL (Ask.com)
O3 - HKCU…\Toolbar\ShellBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKCU…\Toolbar\ShellBrowser: (Ask Toolbar) - {FE063DB9-4EC0-403E-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\2.bin\ASKTBAR.DLL (Ask.com)
O3 - HKCU…\Toolbar\WebBrowser: (Astroburn Toolbar) - {EFEED92A-A33D-4873-BA8F-32BAA631E54D} - C:\Program Files\Astroburn Toolbar\ABToolbar.dll ()
O3 - HKCU…\Toolbar\WebBrowser: (Ask Toolbar) - {FE063DB9-4EC0-403E-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\2.bin\ASKTBAR.DLL (Ask.com)
O4 - HKLM…\Run: [] File not found
O4 - HKLM…\Run: [Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM…\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM…\Run: [avast!] C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software)
O4 - HKLM…\Run: [benLicCheck] C:\Program Files\Beniamin\WLConfig.exe File not found
O4 - HKLM…\Run: [C2K] C:\WINDOWS\Cyb2k.exe File not found
O4 - HKLM…\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\hpwuSchd2.exe (Hewlett-Packard)
O4 - HKLM…\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.)
O4 - HKLM…\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM…\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation)
O4 - HKLM…\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM…\Run: [QuickTime Task] C:\Program Files\QuickTime\qttask.exe (Apple Inc.)
O4 - HKLM…\Run: [soundMan] C:\WINDOWS\soundman.exe (Realtek Semiconductor Corp.)
O4 - HKLM…\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - HKCU…\Run: [AlcoholAutomount] C:\Program Files\Alcohol Soft\Alcohol 52\axcmd.exe (Alcohol Soft Development Team)
O4 - HKCU…\Run: [ALLUpdate] C:\Program Files\ALLPlayer\ALLUpdate.exe File not found
O4 - HKCU…\Run: [Komunikator] C:\Program Files\Tlen.pl\tlen.exe File not found
O4 - HKCU…\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe File not found
O4 - HKCU…\Run: [QuickTime Task] C:\Program Files\QuickTime\qttask.exe (Apple Inc.)
O4 - HKCU…\Run: [skype] C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.)
O4 - HKLM…\RunOnce: [DeleteDir[CD8] Search Guard Plus] File not found
O4 - HKLM…\RunOnce: [DeleteDir[CD8] Search Guard Plus Updater] File not found
O4 - HKLM…\RunOnce: [DeleteDir[CD8] Search Guard Plus Updater1] File not found
O4 - HKLM…\RunOnce: [DeleteDir[CD8] Search Guard Plus1] File not found
O4 - HKLM…\RunOnce: [DeleteDir[CD8] SGPSA] File not found
O4 - HKLM…\RunOnce: [DeleteDir[CD8] SGPSA1] File not found
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Development Company, L.P.)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewContextMenu = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O15 - HKLM…Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O15 - HKCU…Trusted Domains: 3 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} http://download.microsoft.com/download/ … mv9VCM.CAB (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta … s-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta … s-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta … s-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shoc … wflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 85.14.85.14 85.14.110.5
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008-08-04 20:38:19 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT – [NTFS]
O33 - MountPoints2{14ba11e6-6f85-11dd-9f74-001921362b8e}\Shell\Open(&0)\command - “” = Recycled\ctfmon.exe
O33 - MountPoints2{b0e396bc-1523-11de-a17a-001921362b8e}\Shell\Auto\command - “” = activexdebugger32.exe f
O33 - MountPoints2{b0e396bc-1523-11de-a17a-001921362b8e}\Shell\explore\Command - “” = activexdebugger32.exe f
O33 - MountPoints2{b0e396bc-1523-11de-a17a-001921362b8e}\Shell\open\Command - “” = activexdebugger32.exe f
O33 - MountPoints2{b0e396bd-1523-11de-a17a-001921362b8e}\Shell\AutoRun\command - “” = G:\s.exe – File not found
O33 - MountPoints2{b0e396bd-1523-11de-a17a-001921362b8e}\Shell\open\Command - “” = G:\s.exe – File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - comfile [open] – “%1” %*
O35 - exefile [open] – “%1” %*
========== Files/Folders - Created Within 30 Days ==========
[2010-01-10 20:27:06 | 00,543,744 | ---- | C] (OldTimer Tools) – C:\Documents and Settings\Marcelinaa\Pulpit\OTL.exe
[2009-12-31 13:41:52 | 00,000,000 | —D | C] – C:\Documents and Settings\Marcelinaa\Dane aplikacji\skypePM
[2009-12-31 13:38:22 | 00,000,000 | —D | C] – C:\Program Files\Common Files\Skype
[2009-12-31 13:38:18 | 00,000,000 | R–D | C] – C:\Program Files\Skype
[2009-12-12 13:54:57 | 00,107,368 | ---- | C] (GEAR Software Inc.) – C:\WINDOWS\System32\GEARAspi.dll
[2009-12-12 13:54:25 | 00,000,000 | —D | C] – C:\Program Files\iPod
[2009-12-12 13:53:23 | 00,000,000 | —D | C] – C:\Program Files\QuickTime
[2009-10-29 19:07:47 | 00,000,000 | --SD | M] – C:\Documents and Settings\LocalService\Dane aplikacji\Microsoft
[2009-10-24 11:35:50 | 00,000,000 | —D | M] – C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Microsoft
[2008-12-06 13:56:42 | 00,000,000 | —D | M] – C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Panda Software
[2008-10-28 22:53:31 | 00,094,208 | ---- | C] (VSO Software) – C:\Documents and Settings\Marcelinaa\Dane aplikacji\ezplay.sys
[2008-10-28 22:53:15 | 00,047,360 | ---- | C] (VSO Software) – C:\Documents and Settings\Marcelinaa\Dane aplikacji\pcouffin.sys
[2008-10-18 10:14:17 | 00,053,248 | ---- | C] ( ) – C:\WINDOWS\vsnpstd3.dll
[2008-08-25 18:36:01 | 00,000,000 | —D | M] – C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Apple
[2008-08-04 20:41:24 | 00,000,000 | —D | M] – C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\Microsoft
[2008-08-04 20:38:11 | 00,000,000 | --SD | M] – C:\Documents and Settings\NetworkService\Dane aplikacji\Microsoft
[6 C:\WINDOWS*.tmp files -> C:\WINDOWS*.tmp ->]
[4 C:\WINDOWS\System32*.tmp files -> C:\WINDOWS\System32*.tmp ->]
========== Files - Modified Within 30 Days ==========
[2010-01-10 20:27:06 | 00,543,744 | ---- | M] (OldTimer Tools) – C:\Documents and Settings\Marcelinaa\Pulpit\OTL.exe
[2010-01-10 18:55:14 | 00,048,837 | ---- | M] () – C:\Documents and Settings\Marcelinaa\Pulpit\plan.JPG
[2010-01-10 15:13:14 | 00,043,209 | ---- | M] () – C:\WINDOWS\System32\nvapps.xml
[2010-01-10 12:29:59 | 00,000,006 | -H-- | M] () – C:\WINDOWS\tasks\SA.DAT
[2010-01-10 12:29:54 | 00,002,048 | --S- | M] () – C:\WINDOWS\bootstat.dat
[2010-01-09 21:49:28 | 07,340,032 | -H-- | M] () – C:\Documents and Settings\Marcelinaa\NTUSER.DAT
[2010-01-09 21:49:28 | 00,000,292 | -HS- | M] () – C:\Documents and Settings\Marcelinaa\ntuser.ini
[2010-01-09 17:38:03 | 00,095,744 | ---- | M] () – C:\Documents and Settings\Marcelinaa\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-01-06 07:08:01 | 00,000,284 | ---- | M] () – C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010-01-03 11:26:58 | 00,013,712 | ---- | M] () – C:\WINDOWS\System32\wpa.dbl
[6 C:\WINDOWS*.tmp files -> C:\WINDOWS*.tmp ->]
[4 C:\WINDOWS\System32*.tmp files -> C:\WINDOWS\System32*.tmp ->]
========== Files Created - No Company Name ==========
[2010-01-08 18:23:37 | 00,048,837 | ---- | C] () – C:\Documents and Settings\Marcelinaa\Pulpit\plan.JPG
[2009-11-29 19:10:45 | 00,178,176 | ---- | C] () – C:\WINDOWS\System32\unrar.dll
[2009-11-29 19:10:44 | 00,000,038 | ---- | C] () – C:\WINDOWS\avisplitter.ini
[2009-11-29 19:10:41 | 00,881,664 | ---- | C] () – C:\WINDOWS\System32\xvidcore.dll
[2009-11-29 19:10:41 | 00,205,824 | ---- | C] () – C:\WINDOWS\System32\xvidvfw.dll
[2009-11-29 19:10:40 | 03,596,288 | ---- | C] () – C:\WINDOWS\System32\qt-dx331.dll
[2009-11-29 19:10:37 | 00,000,547 | ---- | C] () – C:\WINDOWS\System32\ff_vfw.dll.manifest
[2009-11-29 19:10:36 | 00,085,504 | ---- | C] () – C:\WINDOWS\System32\ff_vfw.dll
[2009-10-15 15:27:05 | 00,054,802 | ---- | C] () – C:\WINDOWS\System32\adwfil.dll
[2009-10-15 15:27:05 | 00,012,684 | ---- | C] () – C:\WINDOWS\System32\gblfil.dll
[2009-10-15 15:27:05 | 00,010,644 | ---- | C] () – C:\WINDOWS\System32\chtfil.dll
[2009-10-15 15:27:05 | 00,005,782 | ---- | C] () – C:\WINDOWS\System32\vgamfil.dll
[2009-10-15 15:27:05 | 00,005,160 | ---- | C] () – C:\WINDOWS\System32\wfileu.drv
[2009-10-15 15:27:05 | 00,004,572 | ---- | C] () – C:\WINDOWS\System32\iawfil.dll
[2009-10-15 15:27:05 | 00,004,442 | ---- | C] () – C:\WINDOWS\System32\hatfil.dll
[2009-10-15 15:27:05 | 00,004,084 | ---- | C] () – C:\WINDOWS\System32\viofil.dll
[2009-10-15 15:27:05 | 00,003,398 | ---- | C] () – C:\WINDOWS\System32\srchin.dll
[2009-10-15 15:27:05 | 00,002,706 | ---- | C] () – C:\WINDOWS\System32\lgwfil.dll
[2009-10-15 15:27:05 | 00,001,830 | ---- | C] () – C:\WINDOWS\System32\cultfil.dll
[2009-10-15 15:27:05 | 00,001,482 | ---- | C] () – C:\WINDOWS\System32\gdwfil.dll
[2009-10-15 15:27:05 | 00,000,434 | ---- | C] () – C:\WINDOWS\System32\imgfil.dll
[2009-10-15 15:27:05 | 00,000,400 | ---- | C] () – C:\WINDOWS\bsnlst.dll
[2009-10-15 15:27:05 | 00,000,306 | ---- | C] () – C:\WINDOWS\System32\picsfil.dll
[2009-10-15 15:27:05 | 00,000,258 | ---- | C] () – C:\WINDOWS\System32\srchout.dll
[2009-07-12 16:03:42 | 00,000,000 | ---- | C] () – C:\Documents and Settings\All Users\Dane aplikacji\LauncherAccess.dt
[2009-07-12 16:02:08 | 00,005,632 | ---- | C] () – C:\WINDOWS\System32\drivers\StarOpen.sys
[2009-03-31 21:33:54 | 00,721,904 | ---- | C] () – C:\WINDOWS\System32\drivers\sptd.sys
[2009-03-19 17:12:36 | 00,000,177 | ---- | C] () – C:\Documents and Settings\Marcelinaa\Dane aplikacji\default.rss
[2009-03-19 16:44:11 | 00,004,767 | ---- | C] () – C:\WINDOWS\Irremote.ini
[2009-02-14 20:36:15 | 00,000,032 | ---- | C] () – C:\Documents and Settings\All Users\Dane aplikacji\ezsid.dat
[2009-01-17 20:15:08 | 00,047,104 | ---- | C] () – C:\WINDOWS\System32\KMVIDC32.DLL
[2008-10-28 22:58:09 | 00,000,054 | ---- | C] () – C:\Documents and Settings\Marcelinaa\Dane aplikacji\burnaware.ini
[2008-10-28 22:53:32 | 00,000,033 | ---- | C] () – C:\Documents and Settings\Marcelinaa\Dane aplikacji\ezplay.log
[2008-10-28 22:53:31 | 00,007,861 | ---- | C] () – C:\Documents and Settings\Marcelinaa\Dane aplikacji\ezplay.cat
[2008-10-28 22:53:31 | 00,001,104 | ---- | C] () – C:\Documents and Settings\Marcelinaa\Dane aplikacji\ezplay.inf
[2008-10-28 22:53:31 | 00,000,125 | ---- | C] () – C:\Documents and Settings\Marcelinaa\Dane aplikacji\ezplay.ini
[2008-10-28 22:53:29 | 00,000,055 | ---- | C] () – C:\Documents and Settings\Marcelinaa\Dane aplikacji\pcouffin.log
[2008-10-28 22:53:16 | 00,087,608 | ---- | C] () – C:\Documents and Settings\Marcelinaa\Dane aplikacji\inst.exe
[2008-10-28 22:53:16 | 00,007,887 | ---- | C] () – C:\Documents and Settings\Marcelinaa\Dane aplikacji\pcouffin.cat
[2008-10-28 22:53:15 | 00,001,144 | ---- | C] () – C:\Documents and Settings\Marcelinaa\Dane aplikacji\pcouffin.inf
[2008-10-23 17:33:51 | 00,000,135 | ---- | C] () – C:\Documents and Settings\Marcelinaa\Ustawienia lokalne\Dane aplikacji\fusioncache.dat
[2008-10-05 15:42:31 | 00,000,069 | ---- | C] () – C:\WINDOWS\NeroDigital.ini
[2008-09-30 19:39:17 | 00,000,427 | ---- | C] () – C:\WINDOWS\ODBC.INI
[2008-08-05 12:39:14 | 00,095,744 | ---- | C] () – C:\Documents and Settings\Marcelinaa\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008-08-04 22:12:00 | 00,077,824 | R— | C] () – C:\WINDOWS\System32\HPZIDS01.dll
[2008-08-04 22:06:49 | 00,000,749 | ---- | C] () – C:\Documents and Settings\All Users\Dane aplikacji\hpzinstall.log
[2008-08-04 20:50:00 | 00,157,184 | R— | C] () – C:\WINDOWS\System32\RtlCPAPI.dll
[2008-08-04 20:49:51 | 00,000,164 | R— | C] () – C:\WINDOWS\avrack.ini
[2005-12-01 06:02:00 | 01,662,976 | ---- | C] () – C:\WINDOWS\System32\nvwdmcpl.dll
[2005-12-01 06:02:00 | 01,466,368 | ---- | C] () – C:\WINDOWS\System32\nview.dll
[2005-12-01 06:02:00 | 01,019,904 | ---- | C] () – C:\WINDOWS\System32\nvwimg.dll
[2005-12-01 06:02:00 | 00,573,440 | ---- | C] () – C:\WINDOWS\System32\nvhwvid.dll
[2005-12-01 06:02:00 | 00,466,944 | ---- | C] () – C:\WINDOWS\System32\nvshell.dll
[2005-12-01 06:02:00 | 00,286,720 | ---- | C] () – C:\WINDOWS\System32\nvnt4cpl.dll
[2005-12-01 06:02:00 | 00,106,496 | ---- | C] () – C:\WINDOWS\System32\nvapi.dll
[2001-07-07 02:00:02 | 00,003,234 | ---- | C] () – C:\WINDOWS\System32\HPTCPMON.INI
[1999-01-22 16:46:58 | 00,065,536 | ---- | C] () – C:\WINDOWS\System32\MSRTEDIT.DLL
========== Alternate Data Streams ==========
@Alternate Data Stream - 122 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:DD4DD9B9
@Alternate Data Stream - 113 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:1493A0EF
< End of report >
i co teraz 
z góry dziękuje
