OTL logfile created on: 2012-07-13 08:39:11 - Run 1
OTL by OldTimer - Version 3.2.54.0     Folder = G:\wirus
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
1,89 Gb Total Physical Memory | 1,52 Gb Available Physical Memory | 80,15% Memory free
3,74 Gb Paging File | 3,62 Gb Available in Paging File | 96,69% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 50,14 Gb Total Space | 12,40 Gb Free Space | 24,72% Space Free | Partition Type: NTFS
Drive D: | 98,90 Gb Total Space | 0,23 Gb Free Space | 0,23% Space Free | Partition Type: NTFS
Drive E: | 702,31 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: UDF
Drive G: | 488,60 Mb Total Space | 9,16 Mb Free Space | 1,87% Space Free | Partition Type: FAT
 
Computer Name: PLDPDPC1137 | User Name: NEN7357 | NOT logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-07-13 08:33:30 | 000,596,480 | ---- | M] (OldTimer Tools) -- G:\wirus\OTL.exe
PRC - [2009-11-18 09:38:16 | 000,108,392 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
PRC - [2009-11-18 09:38:14 | 002,440,632 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe
PRC - [2009-11-18 09:38:14 | 001,803,592 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe
PRC - [2009-11-18 09:38:14 | 001,443,144 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe
PRC - [2008-04-15 14:00:00 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - [2012-01-11 10:55:00 | 005,161,036 | ---- | M] (Altiris, Inc.) [Auto | Stopped] -- C:\Program Files\Altiris\AClient\ACLIENT.EXE -- (AClient)
SRV - [2011-07-26 14:41:48 | 000,212,328 | ---- | M] (Rockwell Automation, Inc.) [Auto | Stopped] -- C:\Program Files\Rockwell Software\RSView Enterprise\TagSrv.exe -- (Rockwell Tag Server)
SRV - [2011-07-26 14:40:52 | 000,106,344 | ---- | M] (Rockwell Automation, Inc.) [Auto | Stopped] -- C:\Program Files\Rockwell Software\RSView Enterprise\HMIDIAGNOSTICSLSTADAPT.exe -- (Rockwell HMI Diagnostics)
SRV - [2011-06-24 21:36:08 | 000,246,120 | ---- | M] (Rockwell Automation, Inc.) [Auto | Stopped] -- C:\Program Files\Rockwell Software\RSLinx Enterprise\RSLinxNG.exe -- (RSLinxNG)
SRV - [2011-06-24 21:36:04 | 000,080,232 | ---- | M] (Rockwell Automation, Inc.) [On_Demand | Stopped] -- C:\Program Files\Rockwell Software\RSLinx Enterprise\LogReceiver.exe -- (LogReceiver)
SRV - [2011-05-31 12:56:46 | 000,152,936 | ---- | M] (Rockwell Automation, Inc.) [Auto | Stopped] -- C:\Program Files\Rockwell Software\FactoryTalk Activation\Tools\FTActivationBoost.exe -- (FTActivationBoost)
SRV - [2011-05-27 18:50:02 | 000,224,104 | ---- | M] (Rockwell Automation, Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\Rockwell\RsvcHost.exe -- (RsvcHost)
SRV - [2011-05-27 18:43:18 | 000,245,096 | ---- | M] (Rockwell Automation, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Rockwell\RNADiagReceiver.exe -- (RNADiagReceiver)
SRV - [2011-05-27 18:42:58 | 000,030,056 | ---- | M] (Rockwell Automation Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\Rockwell\RNADiagnosticsSrv.exe -- (RNADiagnosticsService)
SRV - [2011-05-27 17:44:04 | 000,922,984 | ---- | M] (Rockwell Automation, Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\Rockwell\RnaDirServer.exe -- (RNADirectory)
SRV - [2011-05-27 17:43:36 | 001,049,448 | ---- | M] (Rockwell Automation, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Rockwell\RNADirMultiplexor.exe -- (RNADirMultiplexor)
SRV - [2011-05-27 17:39:32 | 000,224,104 | ---- | M] (Rockwell Automation, Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\Rockwell\RdcyHost.exe -- (RdcyHost)
SRV - [2011-05-27 17:37:06 | 000,224,104 | ---- | M] (Rockwell Automation, Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\Rockwell\NmspHost.exe -- (NmspHost)
SRV - [2011-05-27 17:27:22 | 000,250,216 | ---- | M] (Rockwell Automation, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Rockwell\EventServer.exe -- (EventServer)
SRV - [2011-05-27 17:27:02 | 000,334,696 | ---- | M] (Rockwell Automation, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Rockwell\EventClientMultiplexer.exe -- (EventClientMultiplexer)
SRV - [2011-05-05 16:03:50 | 000,202,088 | ---- | M] (Rockwell Automation, Inc.) [On_Demand | Stopped] -- C:\Program Files\Rockwell Software\RSCommon\RSOBSERV.EXE -- (Harmony)
SRV - [2011-03-21 20:04:54 | 000,775,736 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Hewlett-Packard\Discovery Agent\bin32\discagnt.exe -- (prgnDiscAgent)
SRV - [2010-05-17 22:07:14 | 001,122,568 | R--- | M] (Acresso Software Inc.) [Auto | Stopped] -- C:\Program Files\Rockwell Software\FactoryTalk Activation\lmgrd.exe -- (FactoryTalk Activation Service)
SRV - [2010-01-06 16:15:39 | 003,391,488 | ---- | M] (IBM Corp) [Auto | Stopped] -- D:\Notes\nsd.exe -- (Lotus Notes Diagnostics)
SRV - [2009-11-25 14:49:38 | 001,996,336 | ---- | M] (Rockwell Automation, Inc.) [Auto | Stopped] -- C:\Program Files\Rockwell Software\RSLinx\RSLINX.EXE -- (RSLinx)
SRV - [2009-11-20 07:34:06 | 000,140,544 | ---- | M] (Tibbo Technology Inc.) [Auto | Stopped] -- C:\Program Files\Tibbo\TDST\tsvc.exe -- (tsvc)
SRV - [2009-11-18 09:38:16 | 000,108,392 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccSetMgr)
SRV - [2009-11-18 09:38:16 | 000,108,392 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccEvtMgr)
SRV - [2009-11-18 09:38:14 | 002,440,632 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe -- (Symantec AntiVirus)
SRV - [2009-11-18 09:38:14 | 001,803,592 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe -- (SmcService)
SRV - [2009-11-18 09:38:14 | 000,320,840 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE -- (SNAC)
SRV - [2009-10-22 05:00:04 | 000,395,824 | ---- | M] (VMware, Inc.) [Auto | Stopped] -- C:\WINDOWS\system32\vmnat.exe -- (VMware NAT Service)
SRV - [2009-10-22 04:59:58 | 000,113,200 | ---- | M] (VMware, Inc.) [Auto | Stopped] -- C:\Program Files\VMware\VMware Workstation\vmware-authd.exe -- (VMAuthdService)
SRV - [2009-10-22 04:59:48 | 000,334,384 | ---- | M] (VMware, Inc.) [Auto | Stopped] -- C:\WINDOWS\system32\vmnetdhcp.exe -- (VMnetDHCP)
SRV - [2009-10-22 03:47:54 | 000,563,760 | ---- | M] (VMware, Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe -- (VMUSBArbService)
SRV - [2009-10-12 14:32:24 | 000,191,024 | ---- | M] (VMware, Inc.) [On_Demand | Stopped] -- C:\Program Files\VMware\VMware Workstation\vmware-ufad.exe -- (ufad-ws60)
SRV - [2009-10-09 17:07:20 | 000,493,248 | ---- | M] (Cisco Systems, Inc.) [Auto | Stopped] -- C:\Program Files\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe -- (vpnagent)
SRV - [2009-09-21 14:55:12 | 000,858,384 | ---- | M] (Intel(R) Corporation) [Auto | Stopped] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng) Intel(R)
SRV - [2009-09-21 14:50:04 | 000,364,544 | ---- | M] (Intel(R) Corporation) [Auto | Stopped] -- C:\Program Files\Intel\WiFi\bin\WLKEEPER.exe -- (WLANKEEPER) Intel(R)
SRV - [2009-09-21 14:44:48 | 000,954,368 | ---- | M] (Intel(R) Corporation) [Auto | Stopped] -- C:\Program Files\Intel\WiFi\bin\S24EvMon.exe -- (S24EventMonitor) Intel(R)
SRV - [2009-09-21 14:31:36 | 000,473,360 | ---- | M] (Intel(R) Corporation) [Auto | Stopped] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc) Intel(R)
SRV - [2009-08-04 13:55:56 | 002,058,776 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files\Common Files\Intel\Privacy Icon\UNS\UNS.exe -- (UNS) Intel(R)
SRV - [2009-08-04 13:55:54 | 000,174,616 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files\Intel\AMT\lms.exe -- (LMS) Intel(R)
SRV - [2009-03-20 20:10:15 | 003,093,880 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_3.EXE -- (LiveUpdate)
SRV - [2009-03-17 03:57:26 | 000,254,034 | ---- | M] (IDT, Inc.) [Auto | Stopped] -- c:\drivers\audio\R213367\stacsv.exe -- (STacSV)
SRV - [2009-02-11 19:38:40 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON) Intel(R)
SRV - [2009-02-06 20:06:56 | 000,443,168 | ---- | M] (Dell Inc.) [Auto | Stopped] -- C:\Program Files\Dell\Dell ControlPoint\System Manager\DCPSysMgrSvc.exe -- (dcpsysmgrsvc)
SRV - [2008-12-29 11:07:28 | 000,320,800 | ---- | M] (Dell Inc.) [Auto | Stopped] -- C:\Program Files\Dell\Dell ControlPoint\DCPButtonSvc.exe -- (buttonsvc32)
SRV - [2008-12-10 18:34:22 | 000,102,968 | ---- | M] (PGP Corporation) [Auto | Stopped] -- C:\WINDOWS\system32\PGPserv.exe -- (PGPserv)
SRV - [2008-10-15 18:13:58 | 000,439,632 | ---- | M] (RealVNC Ltd.) [Auto | Stopped] -- C:\Program Files\RealVNC\VNC4\winvnc4.exe -- (WinVNC4)
SRV - [2008-06-04 13:04:32 | 000,099,728 | ---- | M] (Rockwell Automation, Inc.) [On_Demand | Stopped] -- C:\Program Files\Rockwell Software\RSLinx\dnwhodisp.exe -- (dnWhoDisp)
SRV - [2008-04-15 14:00:00 | 000,015,872 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\WINDOWS\system32\inetsrv\inetinfo.exe -- (W3SVC)
SRV - [2008-04-15 14:00:00 | 000,015,872 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\WINDOWS\system32\inetsrv\inetinfo.exe -- (SMTPSVC) Simple Mail Transport Protocol (SMTP)
SRV - [2008-04-15 14:00:00 | 000,015,872 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\WINDOWS\system32\inetsrv\inetinfo.exe -- (IISADMIN)
SRV - [2007-11-06 22:22:26 | 000,092,792 | ---- | M] (CACE Technologies) [On_Demand | Stopped] -- C:\Program Files\WinPcap\rpcapd.exe -- (rpcapd) Remote Packet Capture Protocol v.0 (experimental)
SRV - [2007-06-28 11:12:56 | 000,364,629 | ---- | M] (Atheros) [Auto | Stopped] -- C:\WINDOWS\system32\acs.exe -- (ACS)
SRV - [2007-04-19 07:56:36 | 000,133,968 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\ASF Agent\ASFAgent.exe -- (ASFAgent)
SRV - [2006-09-07 08:00:00 | 000,299,008 | ---- | M] (AT&T) [Auto | Stopped] -- C:\Program Files\AT&T Global Network Client\NetCfgSv.EXE -- (NetCfgSvr)
SRV - [2006-07-25 17:36:40 | 000,696,320 | ---- | M] (National Instruments, Inc.) [Auto | Stopped] -- C:\Program Files\National Instruments\Shared\Tagger\tagsrv.exe -- (NITaggerService)
SRV - [2006-07-25 17:28:16 | 000,200,704 | ---- | M] (National Instruments, Inc.) [Auto | Stopped] -- C:\Program Files\National Instruments\Shared\Security\nidmsrv.exe -- (NIDomainService)
SRV - [2006-07-25 17:28:10 | 000,057,344 | ---- | M] (National Instruments, Inc.) [Auto | Stopped] -- C:\WINDOWS\system32\lktsrv.exe -- (lkTimeSync)
SRV - [2006-07-25 17:28:02 | 000,045,056 | ---- | M] (National Instruments, Inc.) [Auto | Stopped] -- C:\WINDOWS\system32\lkads.exe -- (lkClassAds)
SRV - [2006-07-15 19:47:00 | 000,005,728 | ---- | M] (National Instruments Corporation) [Auto | Stopped] -- C:\Program Files\National Instruments\MAX\nimxs.exe -- (mxssvr)
SRV - [2006-06-27 19:55:28 | 001,007,616 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Program Files\National Instruments\Shared\License Manager\Bin\lmgrd.exe -- (NILM License Manager)
SRV - [2006-06-19 14:01:52 | 000,688,190 | ---- | M] (National Instruments, Inc.) [Auto | Stopped] -- C:\WINDOWS\system32\lkcitdl.exe -- (LkCitadelServer)
SRV - [2006-02-06 16:46:42 | 000,049,152 | ---- | M] (National Instruments Corp.) [Auto | Stopped] -- C:\WINDOWS\system32\nisvcloc.exe -- (niSvcLoc)
SRV - [2005-09-22 17:16:08 | 000,005,728 | ---- | M] (National Instruments Corporation) [Auto | Stopped] -- C:\WINDOWS\system32\nipalsm.exe -- (nipxirmu)
SRV - [2005-09-22 17:16:08 | 000,005,728 | ---- | M] (National Instruments Corporation) [Auto | Stopped] -- C:\WINDOWS\system32\nipalsm.exe -- (nimcdldu)
SRV - [2005-09-22 17:16:08 | 000,005,728 | ---- | M] (National Instruments Corporation) [Auto | Stopped] -- C:\WINDOWS\system32\nipalsm.exe -- (nidevldu)
SRV - [2005-09-22 09:14:00 | 000,618,496 | ---- | M] (Total Control Products (Canada) Inc.) [Auto | Stopped] -- C:\Program Files\GE Fanuc\Proficy Machine Edition\fxControl\Runtime\NT\FxControl.exe -- (FxControlRuntime)
SRV - [2005-09-17 05:17:20 | 000,102,400 | ---- | M] () [Auto | Stopped] -- C:\Program Files\GE Fanuc\Proficy Machine Edition\Common\Components\NT\TrapiServer.exe -- (TrapiServer)
SRV - [2005-09-16 07:02:06 | 000,024,576 | ---- | M] (GE Fanuc Automation Americas) [Auto | Stopped] -- C:\Program Files\GE Fanuc\Alarm Viewer\Host\AEClientHostService.exe -- (AEClientHostService)
SRV - [2005-08-16 09:52:22 | 000,053,248 | ---- | M] (GE Fanuc Automation Americas) [Auto | Stopped] -- C:\Program Files\GE Fanuc\Proficy Common\Proficy Common Licensing\CCFLIC0.exe -- (CCFLIC0)
SRV - [2004-12-02 08:28:32 | 000,098,304 | ---- | M] (OPC Foundation) [On_Demand | Stopped] -- C:\WINDOWS\system32\Opcenum.exe -- (OpcEnum)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)
DRV - File not found [Kernel | System | Stopped] -- C:\WINDOWS\System32\Drivers\VirtualBackplane.sys -- (VirtualBackplane)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\Drivers\Bulk100.sys -- (USBCamera) DSC Still Image Capture (CA100)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\Drivers\pcidnt.sys -- (pcidnt)
DRV - File not found [Kernel | Boot | Stopped] -- system32\DRIVERS\PBADRV.sys -- (PBADRV)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\Drivers\NvtSp50.sys -- (NvtSp50)
DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\Drivers\cvusbdrv.sys -- (cvusbdrv)
DRV - File not found [Kernel | System | Stopped] --  -- (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\Drivers\Ca100v.sys -- (Ca100v)
DRV - [2012-07-13 08:09:35 | 000,040,776 | ---- | M] (Malwarebytes Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys -- (MBAMSwissArmy)
DRV - [2012-05-31 13:20:30 | 000,002,401 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\AlKernel.sys -- (AlKernel)
DRV - [2012-05-30 10:00:00 | 000,376,480 | ---- | M] (Symantec Corporation) [Kernel | System | Stopped] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)
DRV - [2012-05-30 10:00:00 | 000,106,656 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2012-05-16 13:18:14 | 001,589,752 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\Program Files\Common Files\Symantec Shared\VirusDefs\20120530.018\NAVEX15.SYS -- (NAVEX15)
DRV - [2012-05-16 13:18:14 | 000,087,928 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\Program Files\Common Files\Symantec Shared\VirusDefs\20120530.018\NAVENG.SYS -- (NAVENG)
DRV - [2012-03-15 13:33:36 | 000,047,616 | ---- | M] (Aladdin Knowledge Systems) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\Haspnt.sys -- (Haspnt)
DRV - [2010-05-21 11:27:37 | 000,061,067 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ftser2k.sys -- (FTSER2K)
DRV - [2010-05-21 11:27:37 | 000,047,249 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ftdibus.sys -- (FTDIBUS)
DRV - [2010-04-03 12:02:54 | 000,240,608 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\WINDOWS\system32\drivers\RsFx0150.sys -- (RsFx0150)
DRV - [2010-01-05 12:00:14 | 000,123,952 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SYMEVENT.SYS -- (SymEvent)
DRV - [2009-11-25 14:27:26 | 000,155,440 | ---- | M] (Rockwell Software Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\rsserial.sys -- (RSSERIAL)
DRV - [2009-11-25 14:27:26 | 000,039,067 | ---- | M] (Rockwell Software Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\RSIKT.SYS -- (RsiKtControl)
DRV - [2009-11-20 07:36:02 | 000,061,576 | ---- | M] (Tibbo Technology Inc.) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\tsvc.sys -- (tsvckrnl)
DRV - [2009-11-20 07:35:08 | 000,127,688 | ---- | M] (Tibbo Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\tvspd.sys -- (tvspd)
DRV - [2009-11-18 09:38:16 | 000,319,920 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\srtspl.sys -- (SRTSPL)
DRV - [2009-11-18 09:38:16 | 000,280,112 | ---- | M] (Symantec Corporation) [File_System | System | Stopped] -- C:\WINDOWS\system32\drivers\srtsp.sys -- (SRTSP)
DRV - [2009-11-18 09:38:16 | 000,043,824 | ---- | M] (Symantec Corporation) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\srtspx.sys -- (SRTSPX)
DRV - [2009-11-18 09:38:16 | 000,038,056 | ---- | M] (Symantec Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\WGX.SYS -- (WGX)
DRV - [2009-11-18 09:38:12 | 000,421,424 | ---- | M] (Symantec Corporation) [Kernel | System | Stopped] -- C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys -- (SPBBCDrv)
DRV - [2009-11-18 09:38:12 | 000,191,536 | ---- | M] (Symantec Corporation) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\symtdi.sys -- (SYMTDI)
DRV - [2009-11-18 09:38:12 | 000,027,696 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\symredrv.sys -- (SYMREDRV)
DRV - [2009-11-18 09:38:10 | 000,023,888 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\COH_Mon.sys -- (COH_Mon)
DRV - [2009-10-22 05:00:50 | 000,032,688 | ---- | M] (VMware, Inc.) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\vmnetbridge.sys -- (VMnetBridge)
DRV - [2009-10-22 05:00:46 | 000,853,936 | ---- | M] (VMware, Inc.) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\vmx86.sys -- (vmx86)
DRV - [2009-10-22 05:00:44 | 000,070,704 | ---- | M] (VMware, Inc.) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\vmci.sys -- (vmci)
DRV - [2009-10-22 05:00:44 | 000,026,288 | ---- | M] (VMware, Inc.) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\vmnetuserif.sys -- (VMnetuserif)
DRV - [2009-10-22 05:00:44 | 000,023,216 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\VMkbd.sys -- (vmkbd)
DRV - [2009-10-22 03:47:52 | 000,032,304 | ---- | M] (VMware, Inc.) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\hcmon.sys -- (hcmon)
DRV - [2009-10-22 00:13:32 | 000,016,560 | R--- | M] (VMware, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\vmnetadapter.sys -- (VMnetAdapter)
DRV - [2009-10-12 14:31:52 | 000,022,448 | ---- | M] (VMware, Inc.) [Kernel | Auto | Stopped] -- C:\Program Files\VMware\VMware Workstation\vstor2-ws60.sys -- (vstor2-ws60)
DRV - [2009-10-09 16:50:48 | 000,020,152 | ---- | M] (Cisco Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\vpnva.sys -- (vpnva)
DRV - [2009-09-15 11:34:10 | 005,977,216 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NETw5x32.sys -- (NETw5x32) Sterownik karty Intel(R)
DRV - [2009-08-10 00:46:38 | 000,013,952 | ---- | M] (Intel Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\s24trans.sys -- (s24trans)
DRV - [2009-08-04 14:56:28 | 000,240,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\e1y5132.sys -- (e1yexpress) Intel(R)
DRV - [2009-06-23 14:49:58 | 000,040,832 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HECI.sys -- (HECI) Intel(R)
DRV - [2009-06-15 15:05:16 | 000,143,968 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CtClsFlt.sys -- (CtClsFlt)
DRV - [2009-05-28 12:48:20 | 000,134,144 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CtAudDrv.sys -- (CtAudDrv)
DRV - [2009-04-15 18:49:48 | 000,028,672 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbccid.sys -- (USBCCID)
DRV - [2009-04-03 06:25:50 | 000,048,128 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2009-03-30 02:28:44 | 000,133,632 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\OA001Ufd.sys -- (OA001Ufd)
DRV - [2009-03-30 02:28:42 | 000,280,096 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\OA001Vid.sys -- (OA001Vid)
DRV - [2009-03-30 02:28:40 | 000,148,056 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\OA001Afx.sys -- (OA001Afx)
DRV - [2009-03-24 17:33:38 | 000,232,744 | R--- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SRS_PremiumSound_i386.sys -- (SRS_PremiumSound_Service)
DRV - [2009-03-17 03:57:30 | 001,545,795 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sthda.sys -- (STHDA)
DRV - [2009-03-17 03:57:12 | 000,112,512 | ---- | M] (Andrea Electronics Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\AESTAud.sys -- (AESTAud)
DRV - [2009-02-22 23:51:20 | 000,170,032 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Apfiltr.sys -- (ApfiltrService)
DRV - [2009-02-12 01:10:20 | 000,047,272 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB)
DRV - [2009-02-12 00:41:54 | 000,037,032 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btwmodem.sys -- (btwmodem)
DRV - [2009-02-12 00:41:50 | 000,156,392 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btwdndis.sys -- (BTWDNDIS)
DRV - [2009-02-12 00:41:46 | 000,037,160 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btport.sys -- (BTDriver)
DRV - [2009-02-12 00:41:42 | 000,991,016 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL)
DRV - [2009-02-12 00:41:40 | 000,534,440 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btaudio.sys -- (btaudio)
DRV - [2008-12-10 18:34:28 | 000,040,504 | ---- | M] (PGP Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\PGPsdk.sys -- (PGPsdkDriver)
DRV - [2008-12-10 18:34:26 | 000,245,816 | ---- | M] (PGP Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\System32\drivers\PGPdisk.sys -- (PGPdisk)
DRV - [2008-12-10 18:34:22 | 000,212,024 | ---- | M] (PGP Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\PGPwded.sys -- (PGPwded)
DRV - [2008-12-10 18:34:22 | 000,134,712 | ---- | M] (PGP Corporation) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\PGPfsfd.sys -- (pgpfs)
DRV - [2008-09-22 13:40:46 | 000,109,568 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\IntcHdmi.sys -- (IntcHdmiAddService) Intel(R)
DRV - [2008-04-15 14:00:00 | 000,040,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmnt.sys -- (nm)
DRV - [2008-02-18 17:21:08 | 000,011,304 | ---- | M] (Ahead Software AG) [Kernel | Boot | Stopped] -- C:\WINDOWS\system32\drivers\imagedrv.sys -- (Imagedrv)
DRV - [2007-11-06 22:22:06 | 000,034,064 | ---- | M] (CACE Technologies) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\npf.sys -- (NPF)
DRV - [2007-07-23 16:55:16 | 001,297,824 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ar5416.sys -- (AR5416)
DRV - [2007-07-03 19:46:24 | 000,057,344 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wsimd.sys -- (WSIMD)
DRV - [2007-04-19 07:28:12 | 000,042,832 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Asfalrt.sys -- (AsfAlrt)
DRV - [2006-11-22 10:01:48 | 000,693,760 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\hardlock.sys -- (Hardlock)
DRV - [2006-09-07 11:08:42 | 000,006,488 | ---- | M] (Control Techniques Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ctndrv2.sys -- (ctndrvd)
DRV - [2006-07-27 10:00:00 | 000,004,096 | ---- | M] () [Kernel | Auto | Stopped] -- C:\WINDOWS\System32\drivers\cvintdrv.sys -- (cvintdrv)
DRV - [2006-07-20 18:50:28 | 001,746,432 | ---- | M] (National Instruments Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\nixsrk.dll -- (nixsrk)
DRV - [2006-07-20 18:50:24 | 000,434,688 | ---- | M] (National Instruments Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\niwfrk.dll -- (niwfrk)
DRV - [2006-07-20 18:50:16 | 001,026,560 | ---- | M] (National Instruments Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nissrk.dll -- (nissrk)
DRV - [2006-07-20 18:50:12 | 000,500,224 | ---- | M] (National Instruments Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\niesrk.dll -- (niesrk)
DRV - [2006-07-20 18:50:08 | 000,370,176 | ---- | M] (National Instruments Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\niemrk.dll -- (niemrk)
DRV - [2006-07-20 18:39:42 | 000,648,192 | ---- | M] (National Instruments Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nidsark.dll -- (nidsark)
DRV - [2006-07-20 15:36:02 | 000,018,432 | ---- | M] (National Instruments) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\niwdk.sys -- (niwdk)
DRV - [2006-07-20 15:35:26 | 000,136,791 | ---- | M] (National Instruments Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\NICANpk.dll -- (nicanpk)
DRV - [2006-07-20 00:19:04 | 000,200,704 | ---- | M] (National Instruments Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\nidmxfk.dll -- (nidmxfk)
DRV - [2006-07-18 09:51:54 | 000,051,200 | ---- | M] (National Instruments Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nismbusk.sys -- (nismbusk)
DRV - [2006-07-18 09:34:58 | 000,071,680 | ---- | M] (National Instruments Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\nipxirmk.dll -- (nipxirmk)
DRV - [2006-07-16 03:16:20 | 000,081,920 | ---- | M] (National Instruments Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\nifslk.dll -- (nifslk)
DRV - [2006-07-16 02:22:40 | 000,019,968 | ---- | M] (National Instruments Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\usb6xxxk.dll -- (usb6xxxk)
DRV - [2006-07-16 02:22:06 | 000,240,128 | ---- | M] (National Instruments Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nisdigk.dll -- (nisdigk)
DRV - [2006-07-16 00:57:50 | 000,790,528 | ---- | M] (National Instruments Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nitiork.dll -- (nitiork)
DRV - [2006-07-16 00:57:24 | 000,111,616 | ---- | M] (National Instruments Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nistcrk.dll -- (nistcrk)
DRV - [2006-07-16 00:55:26 | 000,020,480 | ---- | M] (National Instruments Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\nimxpk.dll -- (nimxpk)
DRV - [2006-07-16 00:50:24 | 000,171,520 | ---- | M] (National Instruments Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nicdrk.dll -- (nicdrk)
DRV - [2006-07-16 00:42:04 | 000,043,008 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nispdk.dll -- (nispdk)
DRV - [2006-07-16 00:42:00 | 000,506,880 | ---- | M] (National Instruments Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\niscdk.dll -- (niscdk)
DRV - [2006-07-16 00:39:46 | 000,164,864 | ---- | M] (National Instruments Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nisftk.dll -- (nisftk)
DRV - [2006-07-16 00:16:04 | 000,496,640 | ---- | M] (National Instruments Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\niswdk.dll -- (niswdk)
DRV - [2006-07-16 00:07:34 | 000,051,712 | ---- | M] (National Instruments Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nimstsk.dll -- (nimstsk)
DRV - [2006-07-16 00:05:06 | 000,137,728 | ---- | M] (National Instruments Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nimsdrk.dll -- (nimsdrk)
DRV - [2006-07-14 11:57:20 | 000,008,704 | ---- | M] (National Instruments Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\NiViFWK.sys -- (NiViFWK)
DRV - [2006-07-14 11:56:20 | 000,048,128 | ---- | M] (National Instruments Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\NiViPciK.sys -- (NiViPciK)
DRV - [2006-07-14 11:56:20 | 000,010,752 | ---- | M] (National Instruments Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\NiViPxiK.sys -- (NiViPxiK)
DRV - [2006-07-13 21:31:20 | 000,086,016 | ---- | M] (National Instruments Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nimcdfxk.dll -- (nimcdfxk)
DRV - [2006-07-13 19:13:24 | 000,029,184 | ---- | M] (National Instruments Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nimcdlbk.dll -- (nimcdlbk)
DRV - [2006-07-13 12:58:06 | 000,248,832 | ---- | M] (National Instruments Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nimru2k.dll -- (nimru2k)
DRV - [2006-07-13 12:30:48 | 000,218,112 | ---- | M] (National Instruments Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nimxdfk.dll -- (nimxdfk)
DRV - [2006-07-13 12:04:18 | 000,159,232 | ---- | M] (National Instruments Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\nidimk.dll -- (nidimk)
DRV - [2006-07-13 11:34:16 | 000,171,008 | ---- | M] (National Instruments Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nimdbgk.dll -- (nimdbgk)
DRV - [2006-07-13 11:22:12 | 000,038,912 | ---- | M] (National Instruments Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\niorbk.dll -- (niorbk)
DRV - [2006-07-13 08:56:58 | 000,557,568 | ---- | M] (National Instruments Corporation) [Kernel | Boot | Stopped] -- C:\WINDOWS\system32\drivers\nipalk.sys -- (NIPALK)
DRV - [2006-07-10 17:52:32 | 000,979,456 | ---- | M] (National Instruments Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\nidwgk.dll -- (nidwgk)
DRV - [2006-07-10 15:02:52 | 000,815,616 | ---- | M] (National Instruments Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\nihsdrk.dll -- (nihsdrk)
DRV - [2006-07-10 14:05:46 | 000,965,632 | ---- | M] (National Instruments Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\nisrcdk.dll -- (nisrcdk)
DRV - [2006-07-10 13:55:36 | 000,395,776 | ---- | M] (National Instruments Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\nisldk.dll -- (nisldk)
DRV - [2006-07-10 10:55:12 | 000,246,784 | ---- | M] (National Instruments Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\nipsdk.dll -- (nipsdk)
DRV - [2006-07-06 10:09:10 | 000,226,816 | ---- | M] (National Instruments Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\niimaqk.dll -- (niimaqk)
DRV - [2006-07-04 17:26:16 | 000,050,688 | ---- | M] (National Instruments Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\nidmmk.dll -- (nidmmk)
DRV - [2006-07-04 17:24:50 | 000,674,304 | ---- | M] (National Instruments Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\System32\drivers\nidaq32k.sys -- (Nidaq32k)
DRV - [2006-07-04 16:36:36 | 000,111,616 | ---- | M] (National Instruments Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\niSTCk.dll -- (nistck)
DRV - [2006-07-04 16:36:18 | 000,030,208 | ---- | M] (National Instruments Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\nimdsk.dll -- (nimdsk)
DRV - [2006-07-04 16:35:40 | 000,021,504 | ---- | M] (National Instruments Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\nibffrk.dll -- (nibffrk)
DRV - [2006-07-04 16:35:38 | 000,037,376 | ---- | M] (National Instruments Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\niarbk.dll -- (niarbk)
DRV - [2006-06-06 00:21:30 | 000,163,328 | ---- | M] (National Instruments Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nistc2k.dll -- (nistc2k)
DRV - [2006-06-05 18:03:38 | 000,151,683 | ---- | M] (National Instruments Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nimsrlk.dll -- (nimsrlk)
DRV - [2006-06-05 18:03:34 | 000,014,464 | ---- | M] (National Instruments Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nimslk.dll -- (nimslk)
DRV - [2006-05-19 09:46:14 | 000,180,864 | ---- | M] (AT&T) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\agnfilt.sys -- (agnfilt)
DRV - [2006-02-15 09:59:08 | 000,101,376 | ---- | M] (National Instruments Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\nigplk.dll -- (nigplk)
DRV - [2006-02-14 16:38:38 | 000,374,448 | ---- | M] (National Instruments Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\pciimaq.sys -- (PCIIMAQ)
DRV - [2006-02-13 11:45:34 | 000,199,783 | ---- | M] (National Instruments Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\GpibPrtK.sys -- (GpibPrtK)
DRV - [2006-02-13 11:45:34 | 000,031,334 | ---- | M] (National Instruments Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\gpib420.sys -- (gpib420)
DRV - [2005-07-27 08:58:56 | 000,010,829 | ---- | M] (National Instruments) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\lvalarmk.dll -- (lvalarmk)
DRV - [2004-08-27 04:19:08 | 000,071,336 | ---- | M] (Rockwell Automation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\abpcd.sys -- (abpcd)
DRV - [2004-08-22 16:31:48 | 000,005,248 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\d347prt.sys -- (d347prt)
DRV - [2004-08-22 16:31:10 | 000,155,136 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\d347bus.sys -- (d347bus)
DRV - [2004-06-28 06:08:56 | 000,042,752 | R--- | M] (Prolific Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ser2pl.sys -- (Ser2pl)
DRV - [2004-04-29 17:19:18 | 000,019,328 | ---- | M] (AT&T) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\agnwifi.sys -- (agnwifi)
DRV - [2004-02-10 18:37:40 | 000,058,140 | ---- | M] (Rockwell Software, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\PcmkWdm.sys -- (PcmkWdm)
DRV - [2003-04-04 12:48:06 | 000,013,952 | ---- | M] (AT&T) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\avpnnic.sys -- (avpnnic)
DRV - [2002-11-13 12:38:40 | 000,016,447 | ---- | M] (Rockwell Automation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RSI-PKTX-A.sys -- (RSI-PKTX-A)
DRV - [2002-04-23 17:02:26 | 000,038,999 | ---- | M] (Rockwell Software Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RsiKtNG.sys -- (RSLINXNGKtControl)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKLM\..\SearchScopes,DefaultScope = {79AC7F5B-87AE-4ABF-A930-C1105E52BE47}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://startsear.ch/?aff=1&src=sp&cf=dac0e1c0-18d5-11e1-bd60-001d0fba22a6&q={searchTerms}
IE - HKLM\..\SearchScopes\{10313F39-D18E-444E-B445-32D9E8EFB3BF}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKLM\..\SearchScopes\{79AC7F5B-87AE-4ABF-A930-C1105E52BE47}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://startsear.ch/?aff=1&cf=dac0e1c0-18d5-11e1-bd60-001d0fba22a6
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore = http://www.google.com/
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0388404D-6072-4CEB-B521-8F090FEAEE57}: "URL" = http://klit.startnow.com/s/?q={searchTerms}&src=defsearch&provider=&provider_name=yahoo&provider_code=&partner_id=693&product_id=741&affiliate_id=&channel=&toolbar_id=200&toolbar_version=2.4.0&install_country=PL&install_date=20111212&user_guid=8D00437D6DCC4E9986F5F6DA881F8BA2&machine_id=96a0fe711b1301a72f58bd6a04a374eb&browser=IE&os=win&os_version=5.1-x86-SP3&iesrc={referrer:source}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://startsear.ch/?aff=1&src=sp&cf=dac0e1c0-18d5-11e1-bd60-001d0fba22a6&q={searchTerms}
IE - HKCU\..\SearchScopes\{10313F39-D18E-444E-B445-32D9E8EFB3BF}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{79AC7F5B-87AE-4ABF-A930-C1105E52BE47}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7ADFA_plPL460
IE - HKCU\..\SearchScopes\{8E597187-C678-4EC1-BB80-74E63C1AEF57}: "URL" = http://startsear.ch/?aff=2&src=sp&cf=dac0e1c0-18d5-11e1-bd60-001d0fba22a6&q={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = 172.25.32.93:8080
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultengine: "Web Search"
FF - prefs.js..browser.search.defaultenginename: "Web Search"
FF - prefs.js..browser.search.order.1: "Search the web"
FF - prefs.js..browser.search.selectedEngine: "Search the web"
FF - prefs.js..browser.startup.homepage: "http://startsear.ch/?aff=1&cf=dac0e1c0-18d5-11e1-bd60-001d0fba22a6"
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.1.3
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {d1fce654-5fd1-48ad-b13c-5064736120b7}:3.2.1.3
FF - prefs.js..extensions.enabledItems: welcome@toolmin.com:1.03
FF - prefs.js..extensions.enabledItems: {5911488E-9D1E-40ec-8CBB-06B231CC153F}:2.4.0
FF - prefs.js..keyword.URL: "http://www.browsersafesearch.com?client=mozilla-firefox&cd=UTF-8&search=1&q="
FF - prefs.js..browser.search.defaultengine: "Web Search"
FF - prefs.js..browser.search.defaultenginename: "Web Search"
FF - prefs.js..browser.search.order.1: "Search the web"
FF - prefs.js..browser.search.selectedEngine: "Search the web"
FF - prefs.js..browser.startup.homepage: "http://startsear.ch/?aff=1&cf=dac0e1c0-18d5-11e1-bd60-001d0fba22a6"
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.1.3
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {d1fce654-5fd1-48ad-b13c-5064736120b7}:3.2.1.3
FF - prefs.js..extensions.enabledItems: welcome@toolmin.com:1.03
FF - prefs.js..extensions.enabledItems: {5911488E-9D1E-40ec-8CBB-06B231CC153F}:2.4.0
FF - prefs.js..keyword.URL: "http://www.browsersafesearch.com?client=mozilla-firefox&cd=UTF-8&search=1&q="
FF - prefs.js..browser.search.defaultengine: "Web Search"
FF - prefs.js..browser.search.defaultenginename: "Web Search"
FF - prefs.js..browser.search.order.1: "Web Search"
FF - prefs.js..browser.search.selectedEngine: "Search the web"
FF - prefs.js..browser.startup.homepage: "http://startsear.ch/?aff=1&cf=dac0e1c0-18d5-11e1-bd60-001d0fba22a6"
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.1.3
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {d1fce654-5fd1-48ad-b13c-5064736120b7}:3.2.1.3
FF - prefs.js..extensions.enabledItems: welcome@toolmin.com:1.03
FF - prefs.js..extensions.enabledItems: {5911488E-9D1E-40ec-8CBB-06B231CC153F}:2.4.0
FF - prefs.js..keyword.URL: "http://www.browsersafesearch.com?client=mozilla-firefox&cd=UTF-8&search=1&q="
FF - prefs.js..browser.search.defaultengine: "Web Search"
FF - prefs.js..browser.search.defaultenginename: "Web Search"
FF - prefs.js..browser.search.order.1: "Search the web"
FF - prefs.js..browser.search.selectedEngine: "Search the web"
FF - prefs.js..browser.startup.homepage: "http://startsear.ch/?aff=1&cf=dac0e1c0-18d5-11e1-bd60-001d0fba22a6"
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.1.3
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {d1fce654-5fd1-48ad-b13c-5064736120b7}:3.2.1.3
FF - prefs.js..extensions.enabledItems: welcome@toolmin.com:1.03
FF - prefs.js..extensions.enabledItems: {5911488E-9D1E-40ec-8CBB-06B231CC153F}:2.4.0
FF - prefs.js..keyword.URL: "http://www.browsersafesearch.com?client=mozilla-firefox&cd=UTF-8&search=1&q="
FF - prefs.js..browser.search.defaultengine: "Web Search"
FF - prefs.js..browser.search.defaultenginename: "Web Search"
FF - prefs.js..browser.search.order.1: "Search the web"
FF - prefs.js..browser.search.selectedEngine: "Web Search"
FF - prefs.js..browser.startup.homepage: "http://startsear.ch/?aff=1&cf=dac0e1c0-18d5-11e1-bd60-001d0fba22a6"
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.1.3
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {d1fce654-5fd1-48ad-b13c-5064736120b7}:3.2.1.3
FF - prefs.js..extensions.enabledItems: welcome@toolmin.com:1.03
FF - prefs.js..extensions.enabledItems: {5911488E-9D1E-40ec-8CBB-06B231CC153F}:2.4.0
FF - prefs.js..keyword.URL: "http://www.browsersafesearch.com?client=mozilla-firefox&cd=UTF-8&search=1&q="
FF - prefs.js..browser.search.defaultengine: "Web Search"
FF - prefs.js..browser.search.defaultenginename: "Web Search"
FF - prefs.js..browser.search.order.1: "Search the web"
FF - prefs.js..browser.search.selectedEngine: "Search the web"
FF - prefs.js..browser.startup.homepage: "http://startsear.ch/?aff=1&cf=dac0e1c0-18d5-11e1-bd60-001d0fba22a6"
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.1.3
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {d1fce654-5fd1-48ad-b13c-5064736120b7}:3.2.1.3
FF - prefs.js..extensions.enabledItems: welcome@toolmin.com:1.03
FF - prefs.js..extensions.enabledItems: {5911488E-9D1E-40ec-8CBB-06B231CC153F}:2.4.0
FF - prefs.js..keyword.URL: "http://www.browsersafesearch.com?client=mozilla-firefox&cd=UTF-8&search=1&q="
FF - prefs.js..browser.search.defaultengine: "Web Search"
FF - prefs.js..browser.search.defaultenginename: "Web Search"
FF - prefs.js..browser.search.order.1: "Web Search"
FF - prefs.js..browser.search.selectedEngine: "Search the web"
FF - prefs.js..browser.startup.homepage: "http://startsear.ch/?aff=1&cf=dac0e1c0-18d5-11e1-bd60-001d0fba22a6"
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.1.3
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {d1fce654-5fd1-48ad-b13c-5064736120b7}:3.2.1.3
FF - prefs.js..extensions.enabledItems: welcome@toolmin.com:1.03
FF - prefs.js..extensions.enabledItems: {5911488E-9D1E-40ec-8CBB-06B231CC153F}:2.4.0
FF - prefs.js..keyword.URL: "http://www.browsersafesearch.com?client=mozilla-firefox&cd=UTF-8&search=1&q="
FF - prefs.js..browser.search.defaultengine: "Web Search"
FF - prefs.js..browser.search.defaultenginename: "Web Search"
FF - prefs.js..browser.search.order.1: "Search the web"
FF - prefs.js..browser.search.selectedEngine: "Search the web"
FF - prefs.js..browser.startup.homepage: "http://startsear.ch/?aff=1&cf=dac0e1c0-18d5-11e1-bd60-001d0fba22a6"
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.1.3
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {d1fce654-5fd1-48ad-b13c-5064736120b7}:3.2.1.3
FF - prefs.js..extensions.enabledItems: welcome@toolmin.com:1.03
FF - prefs.js..extensions.enabledItems: {5911488E-9D1E-40ec-8CBB-06B231CC153F}:2.4.0
FF - prefs.js..keyword.URL: "http://www.browsersafesearch.com?client=mozilla-firefox&cd=UTF-8&search=1&q="
FF - prefs.js..browser.search.defaultengine: "Web Search"
FF - prefs.js..browser.search.defaultenginename: "Web Search"
FF - prefs.js..browser.search.order.1: "Search the web"
FF - prefs.js..browser.search.selectedEngine: "Search the web"
FF - prefs.js..browser.startup.homepage: "http://startsear.ch/?aff=1&cf=dac0e1c0-18d5-11e1-bd60-001d0fba22a6"
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.1.3
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {d1fce654-5fd1-48ad-b13c-5064736120b7}:3.2.1.3
FF - prefs.js..extensions.enabledItems: welcome@toolmin.com:1.03
FF - prefs.js..extensions.enabledItems: {5911488E-9D1E-40ec-8CBB-06B231CC153F}:2.4.0
FF - prefs.js..keyword.URL: "http://startsear.ch/?aff=1&src=sp&cf=dac0e1c0-18d5-11e1-bd60-001d0fba22a6&q="
FF - prefs.js..browser.search.defaultengine: "Web Search"
FF - prefs.js..browser.search.defaultenginename: "Web Search"
FF - prefs.js..browser.search.order.1: "Search the web"
FF - prefs.js..browser.search.selectedEngine: "Search the web"
FF - prefs.js..browser.startup.homepage: "http://startsear.ch/?aff=1&cf=dac0e1c0-18d5-11e1-bd60-001d0fba22a6"
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.1.3
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {d1fce654-5fd1-48ad-b13c-5064736120b7}:3.2.1.3
FF - prefs.js..extensions.enabledItems: welcome@toolmin.com:1.03
FF - prefs.js..extensions.enabledItems: {5911488E-9D1E-40ec-8CBB-06B231CC153F}:2.4.0
FF - prefs.js..keyword.URL: "http://www.browsersafesearch.com?client=mozilla-firefox&cd=UTF-8&search=1&q="
FF - prefs.js..browser.search.defaultengine: "Web Search"
FF - prefs.js..browser.search.defaultenginename: "Web Search"
FF - prefs.js..browser.search.order.1: "Web Search"
FF - prefs.js..browser.search.selectedEngine: "Search the web"
FF - prefs.js..browser.startup.homepage: "http://startsear.ch/?aff=1&cf=dac0e1c0-18d5-11e1-bd60-001d0fba22a6"
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.1.3
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {d1fce654-5fd1-48ad-b13c-5064736120b7}:3.2.1.3
FF - prefs.js..extensions.enabledItems: welcome@toolmin.com:1.03
FF - prefs.js..extensions.enabledItems: {5911488E-9D1E-40ec-8CBB-06B231CC153F}:2.4.0
FF - prefs.js..keyword.URL: "http://www.browsersafesearch.com?client=mozilla-firefox&cd=UTF-8&search=1&q="
FF - prefs.js..browser.search.defaultengine: "Web Search"
FF - prefs.js..browser.search.defaultenginename: "Web Search"
FF - prefs.js..browser.search.order.1: "Search the web"
FF - prefs.js..browser.search.selectedEngine: "Search the web"
FF - prefs.js..browser.startup.homepage: "http://startsear.ch/?aff=1&cf=dac0e1c0-18d5-11e1-bd60-001d0fba22a6"
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.1.3
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {d1fce654-5fd1-48ad-b13c-5064736120b7}:3.2.1.3
FF - prefs.js..extensions.enabledItems: welcome@toolmin.com:1.03
FF - prefs.js..extensions.enabledItems: {5911488E-9D1E-40ec-8CBB-06B231CC153F}:2.4.0
FF - prefs.js..keyword.URL: "http://www.browsersafesearch.com?client=mozilla-firefox&cd=UTF-8&search=1&q="
FF - prefs.js..browser.search.defaultengine: "Web Search"
FF - prefs.js..browser.search.defaultenginename: "Web Search"
FF - prefs.js..browser.search.order.1: "Search the web"
FF - prefs.js..browser.search.selectedEngine: "Web Search"
FF - prefs.js..browser.startup.homepage: "http://startsear.ch/?aff=1&cf=dac0e1c0-18d5-11e1-bd60-001d0fba22a6"
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.1.3
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {d1fce654-5fd1-48ad-b13c-5064736120b7}:3.2.1.3
FF - prefs.js..extensions.enabledItems: welcome@toolmin.com:1.03
FF - prefs.js..extensions.enabledItems: {5911488E-9D1E-40ec-8CBB-06B231CC153F}:2.4.0
FF - prefs.js..keyword.URL: "http://www.browsersafesearch.com?client=mozilla-firefox&cd=UTF-8&search=1&q="
FF - prefs.js..browser.search.defaultengine: "Web Search"
FF - prefs.js..browser.search.defaultenginename: "Web Search"
FF - prefs.js..browser.search.order.1: "Search the web"
FF - prefs.js..browser.search.selectedEngine: "Search the web"
FF - prefs.js..browser.startup.homepage: "http://startsear.ch/?aff=1&cf=dac0e1c0-18d5-11e1-bd60-001d0fba22a6"
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.1.3
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {d1fce654-5fd1-48ad-b13c-5064736120b7}:3.2.1.3
FF - prefs.js..extensions.enabledItems: welcome@toolmin.com:1.03
FF - prefs.js..extensions.enabledItems: {5911488E-9D1E-40ec-8CBB-06B231CC153F}:2.4.0
FF - prefs.js..keyword.URL: "http://www.browsersafesearch.com?client=mozilla-firefox&cd=UTF-8&search=1&q="
FF - prefs.js..browser.search.defaultengine: "Web Search"
FF - prefs.js..browser.search.defaultenginename: "Web Search"
FF - prefs.js..browser.search.order.1: "Web Search"
FF - prefs.js..browser.search.selectedEngine: "Search the web"
FF - prefs.js..browser.startup.homepage: "http://startsear.ch/?aff=1&cf=dac0e1c0-18d5-11e1-bd60-001d0fba22a6"
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.1.3
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {d1fce654-5fd1-48ad-b13c-5064736120b7}:3.2.1.3
FF - prefs.js..extensions.enabledItems: welcome@toolmin.com:1.03
FF - prefs.js..extensions.enabledItems: {5911488E-9D1E-40ec-8CBB-06B231CC153F}:2.4.0
FF - prefs.js..keyword.URL: "http://www.browsersafesearch.com?client=mozilla-firefox&cd=UTF-8&search=1&q="
FF - prefs.js..browser.search.defaultengine: "Web Search"
FF - prefs.js..browser.search.defaultenginename: "Web Search"
FF - prefs.js..browser.search.order.1: "Search the web"
FF - prefs.js..browser.search.selectedEngine: "Search the web"
FF - prefs.js..browser.startup.homepage: "http://startsear.ch/?aff=1&cf=dac0e1c0-18d5-11e1-bd60-001d0fba22a6"
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.1.3
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {d1fce654-5fd1-48ad-b13c-5064736120b7}:3.2.1.3
FF - prefs.js..extensions.enabledItems: welcome@toolmin.com:1.03
FF - prefs.js..extensions.enabledItems: {5911488E-9D1E-40ec-8CBB-06B231CC153F}:2.4.0
FF - prefs.js..keyword.URL: "http://www.browsersafesearch.com?client=mozilla-firefox&cd=UTF-8&search=1&q="
 
FF - user.js..browser.search.selectedEngine: "Search the web"
FF - user.js..browser.search.order.1: "Search the web"
FF - user.js..browser.search.defaultenginename: "Search the web"
FF - user.js..keyword.URL: "http://www.browsersafesearch.com?client=mozilla-firefox&cd=UTF-8&search=1&q="
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.0.61118.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.5.5\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-05-08 07:44:44 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.5.5\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-07-13 08:27:43 | 000,000,000 | ---D | M]
 
[2010-05-08 07:44:47 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\nen7357\Dane aplikacji\Mozilla\Extensions
[2012-01-29 13:14:57 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\nen7357\Dane aplikacji\Mozilla\Firefox\Profiles\lljib3mm.default\extensions
[2010-05-14 19:03:44 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\nen7357\Dane aplikacji\Mozilla\Firefox\Profiles\lljib3mm.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011-12-12 18:03:58 | 000,000,000 | ---D | M] (StartNow Toolbar) -- C:\Documents and Settings\nen7357\Dane aplikacji\Mozilla\Firefox\Profiles\lljib3mm.default\extensions\{5911488E-9D1E-40ec-8CBB-06B231CC153F}
[2011-01-29 10:01:47 | 000,000,000 | ---D | M] (Soft32 Community Toolbar) -- C:\Documents and Settings\nen7357\Dane aplikacji\Mozilla\Firefox\Profiles\lljib3mm.default\extensions\{d1fce654-5fd1-48ad-b13c-5064736120b7}
[2011-01-29 10:01:47 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Documents and Settings\nen7357\Dane aplikacji\Mozilla\Firefox\Profiles\lljib3mm.default\extensions\engine@conduit.com
[2011-10-22 22:46:52 | 000,000,000 | ---D | M] (toolplugin) -- C:\Documents and Settings\nen7357\Dane aplikacji\Mozilla\Firefox\Profiles\lljib3mm.default\extensions\welcome@toolmin.com
[2012-04-03 21:00:40 | 000,000,792 | ---- | M] () -- C:\Documents and Settings\nen7357\Dane aplikacji\Mozilla\Firefox\Profiles\lljib3mm.default\searchplugins\startsear.xml
[2011-12-12 18:03:58 | 000,001,390 | ---- | M] () -- C:\Documents and Settings\nen7357\Dane aplikacji\Mozilla\Firefox\Profiles\lljib3mm.default\searchplugins\yahoo-zugo.xml
[2010-05-08 07:44:38 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2009-12-10 09:08:23 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2006-01-23 10:32:04 | 000,020,992 | ---- | M] (National Instruments) -- C:\Program Files\mozilla firefox\plugins\NPLV80Win32.dll
[2006-06-07 14:40:18 | 000,027,376 | ---- | M] (National Instruments) -- C:\Program Files\mozilla firefox\plugins\NPLV82Win32.dll
[2009-11-03 03:54:10 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2009-11-03 03:54:10 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2009-11-03 03:54:10 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2009-11-03 03:54:10 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2011-10-22 22:46:52 | 000,000,158 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\Search the web.src
[2009-11-03 03:54:10 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2009-11-03 03:54:10 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - default_search_provider: Google ()
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?client=chrome&hl={language}&q={searchTerms}
CHR - homepage: http://startsear.ch/?aff=1&cf=dac0e1c0-18d5-11e1-bd60-001d0fba22a6
 
O1 HOSTS File: ([2012-05-24 12:04:20 | 000,000,768 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: 172.22.11.22 pldmfgsrv01
O2 - BHO: (Soft32 Toolbar) - {d1fce654-5fd1-48ad-b13c-5064736120b7} - C:\Program Files\Soft32\prxtbSof2.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Soft32 Toolbar) - {d1fce654-5fd1-48ad-b13c-5064736120b7} - C:\Program Files\Soft32\prxtbSof2.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {30F9B915-B755-4826-820B-08FBA6BD249D} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Soft32 Toolbar) - {D1FCE654-5FD1-48AD-B13C-5064736120B7} - C:\Program Files\Soft32\prxtbSof2.dll (Conduit Ltd.)
O4 - HKLM..\Run: [11NWCU] C:\Program Files\TP-LINK\TP-LINK Draft N Wireless Client Utility\11NWCU.exe ()
O4 - HKLM..\Run: [AESTFltr] C:\WINDOWS\System32\AESTFltr.exe (Andrea Electronics Corporation)
O4 - HKLM..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe (Alps Electric Co., Ltd.)
O4 - HKLM..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
O4 - HKLM..\Run: [RMActivate_ssp] C:\Documents and Settings\nen7357\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\2997\RMActivate_ssp.exe ()
O4 - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray.exe (IDT, Inc.)
O4 - HKLM..\Run: [UsbCipHelper] C:\Program Files\Rockwell Automation\Rockwell Automation USBCIP Driver Package\UsbCipHelper\UsbCipHelper.exe (Rockwell Automation, Inc.)
O4 - HKCU..\Run: [SRS Premium Sound] C:\Program Files\SRS Labs\SRS Premium Sound\SRSPremiumSoundBig_Small.exe (SRS Labs, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Bluetooth.lnk = C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\PGPtray.exe.lnk = C:\WINDOWS\Installer\{504FCACA-C5E7-4F5E-AABA-7304390AC4FB}\Icon6560581611.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 221
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = ** Korzystanie z systemów komputerowych ** (Rockwell Automation, Inc.)
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 221
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWindowsUpdate = 1
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Send To Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\WINDOWS\System32\PGPlsp.dll (PGP Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\WINDOWS\System32\PGPlsp.dll (PGP Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Program Files\VMware\VMware Workstation\vsocklib.dll (VMware, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Program Files\VMware\VMware Workstation\vsocklib.dll (VMware, Inc.)
O15 - HKCU\..Trusted Domains: goodyear.com ([*] * in Zaufane witryny)
O15 - HKCU\..Trusted Domains: goodyear.com ([*] https in Zaufane witryny)
O15 - HKCU\..Trusted Domains: goodyear.com ([saml] https in Lokalny intranet)
O16 - DPF: {1F831FAC-42FC-11D4-95A6-0080AD30DCE1} file:///C:/Program%20Files/AutoCAD%20LT%202000i%20Plk/InstFred.ocx (NOXLATE)
O16 - DPF: {36F17E17-AC00-42BC-A6D9-294AD4E7DCD6} http://pldhqnt23/Altiris/NS/NSCap/Bin/Win32/x86/AeXClientBootstrap.cab (Altiris ClientBootstraper Class)
O16 - DPF: {55963676-2F5E-4BAF-AC28-CF26AA587566} https://myoffice.eu.goodyear.com/CACHE/stc/1/binaries/vpnweb.cab (Cisco AnyConnect VPN Client Web Control)
O16 - DPF: {705EC6D4-B138-4079-A307-EF13E4889A82} https://myoffice.eu.goodyear.com/CACHE/sdesktop/install/binaries/instweb.cab (CSD ActiveX Installer)
O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} file:///C:/Program%20Files/AutoCAD%20LT%202000i%20Plk/AcDcToday.ocx (AcDcToday)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/products/plugin/autodl/jinstall-160-windows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {91B29AFF-E4FF-11D6-8C88-00A0C9D7BBEB} http://www.ab.com/support/abdrives/webupdate/RADriveWebUpdate.cab (RADriveWebUpdateCtrl Class)
O16 - DPF: {CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA} http://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab (Java Plug-in 1.4.2)
O16 - DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} file:///C:/Program%20Files/AutoCAD%20LT%202000i%20Plk/AcPreview.ocx (AcPreview Control)
O16 - DPF: {F8FC1530-0608-11DF-2008-0800200C9A66} https://myoffice.na.goodyear.com/CACHE/sdesktop/install/binaries/instweb.cab (CSD ActiveX Installer)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = ec.ad.goodyear.com
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A533A57B-D21C-423F-AEB1-2A9552939513}: NameServer = 192.168.100.252,192.168.0.1
O18 - Protocol\Handler\saphtmlp {D1F8BD1E-7967-11D2-B43A-006094B9EADB} - c:\Program Files\SAP\FrontEnd\SAPgui\SAPHTMLP.DLL (SAP AG, Walldorf)
O18 - Protocol\Handler\sapr3 {D1F8BD1E-7967-11D2-B43A-006094B9EADB} - c:\Program Files\SAP\FrontEnd\SAPgui\SAPHTMLP.DLL (SAP AG, Walldorf)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\nen7357\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\nen7357\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011-04-12 07:20:54 | 000,000,047 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2012-02-03 09:27:12 | 000,589,082 | ---- | M] () - C:\AutoMapaSetupLog.txt -- [ NTFS ]
O33 - MountPoints2\{94a7212b-7316-11e1-af81-0024d69b77ee}\Shell\AutoRun\command - "" = G:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\spoolsv.exe
O33 - MountPoints2\{94a7212b-7316-11e1-af81-0024d69b77ee}\Shell\open\command - "" = G:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\spoolsv.exe
O33 - MountPoints2\{c0d417d2-d845-11df-bc27-0024d69b77ee}\Shell\AutoRun\command - "" = RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\spoolsv.exe
O33 - MountPoints2\{c0d417d2-d845-11df-bc27-0024d69b77ee}\Shell\open\command - "" = RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\spoolsv.exe
O33 - MountPoints2\{ea1a12f1-63d1-11df-bbc0-0024d69b77ee}\Shell\AutoRun\command - "" = 2aaxaiy.exe
O33 - MountPoints2\{ea1a12f1-63d1-11df-bbc0-0024d69b77ee}\Shell\open\Command - "" = 2aaxaiy.exe
O33 - MountPoints2\{ee541594-b395-11e1-afed-0024d69b77ee}\Shell\AutoRun\command - "" = G:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\spoolsv.exe
O33 - MountPoints2\{ee541594-b395-11e1-afed-0024d69b77ee}\Shell\open\command - "" = G:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\spoolsv.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012-07-13 08:09:35 | 000,040,776 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2012-07-13 07:46:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Malwarebytes' Anti-Malware
[2012-07-13 07:46:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes
[2012-07-13 07:46:24 | 000,022,344 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2012-07-13 07:46:24 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2012-07-12 22:50:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\nen7357\Menu Start\Programy\Live Security Platinum
[2012-07-12 22:44:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\036DFF8518B893D79506551381CB3EF3
[2012-07-10 23:40:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\nen7357\Dane aplikacji\hellomoto
[2012-07-10 23:40:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\F4D55F3B000B4681013CA6A90CDF108C
[2012-07-05 11:40:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Indramat
[2012-07-05 11:40:45 | 000,211,488 | ---- | C] (Borland International) -- C:\WINDOWS\System\BWCC32.DLL
[2012-07-05 11:40:45 | 000,176,128 | ---- | C] (Borland International) -- C:\WINDOWS\System\CW3215.DLL
[2012-07-05 11:40:45 | 000,159,744 | ---- | C] (Borland International) -- C:\WINDOWS\System\BW320009.DLL
[2012-07-05 11:40:45 | 000,132,096 | ---- | C] (Borland International) -- C:\WINDOWS\System\BW320010.DLL
[2012-07-05 11:40:45 | 000,131,072 | ---- | C] (Borland International) -- C:\WINDOWS\System\BW32000A.DLL
[2012-07-05 11:40:45 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\CTL3D32.DLL
[2012-07-05 11:40:42 | 000,244,544 | ---- | C] (WexTech Systems, Inc.) -- C:\WINDOWS\D2HNAV.EXE
[2012-07-05 11:40:42 | 000,046,192 | ---- | C] (WexTech Systems, Inc.) -- C:\WINDOWS\System\D2HTOOLS.DLL
[2012-07-05 11:40:42 | 000,024,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MSOUTLIN.VBX
[2012-07-05 11:40:42 | 000,008,944 | ---- | C] (WexTech Systems, Inc.) -- C:\WINDOWS\System\D2HLINK.DLL
[2012-07-05 11:40:27 | 000,000,000 | ---D | C] -- C:\INDRAMAT
[2012-07-05 11:40:23 | 000,025,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\CTL3DV2.DLL
[2010-01-05 12:11:47 | 003,100,672 | ---- | C] (SAP Technology,Inc) -- C:\Program Files\Common Files\sapxlhelper.dll
[2010-01-05 12:11:46 | 000,192,512 | ---- | C] (SAP Tech Inc.) -- C:\Program Files\Common Files\sapconsr3.dll
[2010-01-05 12:11:45 | 000,626,688 | ---- | C] (SAP AG) -- C:\Program Files\Common Files\sapconsaccess.dll
[2010-01-05 12:11:44 | 000,040,960 | ---- | C] (SAP-TECHNOLOGY) -- C:\Program Files\Common Files\DigitalSignature.ocx
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012-07-13 08:41:23 | 000,623,350 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2012-07-13 08:41:23 | 000,562,118 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012-07-13 08:41:23 | 000,138,934 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2012-07-13 08:41:23 | 000,119,010 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012-07-13 08:38:24 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012-07-13 08:37:06 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012-07-13 08:35:50 | 000,002,295 | ---- | M] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\PGPtray.exe.lnk
[2012-07-13 08:35:27 | 000,001,445 | ---- | M] () -- C:\AClient.cfg
[2012-07-13 08:34:00 | 000,000,069 | ---- | M] () -- C:\WINDOWS\pxisys.ini
[2012-07-13 08:34:00 | 000,000,030 | ---- | M] () -- C:\WINDOWS\pxiesys.ini
[2012-07-13 08:09:35 | 000,040,776 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2012-07-13 07:57:21 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2012-07-13 07:46:25 | 000,000,786 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Malwarebytes Anti-Malware.lnk
[2012-07-10 07:34:43 | 003,072,054 | ---- | M] () -- C:\Documents and Settings\nen7357\Pulpit\Sai_Kasowanie parametrow_1.bmp
[2012-07-07 00:55:54 | 000,002,305 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\VisiSet.lnk
[2012-07-05 11:44:08 | 000,000,633 | ---- | M] () -- C:\Documents and Settings\nen7357\Pulpit\DriveTop 04v05.lnk
[2012-07-03 13:46:44 | 000,022,344 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2012-06-22 09:26:54 | 000,004,170 | ---- | M] () -- C:\Documents and Settings\nen7357\Moje dokumenty\RACommServer.err
[2012-06-22 08:14:10 | 000,003,982 | ---- | M] () -- C:\WINDOWS\NewDLXFBEditor.INI
[2012-06-16 09:32:12 | 003,072,054 | ---- | M] () -- C:\Documents and Settings\nen7357\Pulpit\2.bmp
[2012-06-16 09:30:48 | 003,072,054 | ---- | M] () -- C:\Documents and Settings\nen7357\Pulpit\1.bmp
[2012-06-13 23:40:47 | 000,001,197 | ---- | M] () -- C:\WINDOWS\ODBC.INI
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012-07-13 07:46:25 | 000,000,786 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Malwarebytes Anti-Malware.lnk
[2012-07-10 07:34:43 | 003,072,054 | ---- | C] () -- C:\Documents and Settings\nen7357\Pulpit\Sai_Kasowanie parametrow_1.bmp
[2012-07-05 11:44:08 | 000,000,633 | ---- | C] () -- C:\Documents and Settings\nen7357\Pulpit\DriveTop 04v05.lnk
[2012-07-05 11:40:45 | 000,159,744 | ---- | C] () -- C:\WINDOWS\System\BW32000C.DLL
[2012-07-05 11:40:45 | 000,159,744 | ---- | C] () -- C:\WINDOWS\System\BW320007.DLL
[2012-07-05 11:40:23 | 000,187,392 | ---- | C] () -- C:\WINDOWS\PI.EXE
[2012-06-16 09:32:12 | 003,072,054 | ---- | C] () -- C:\Documents and Settings\nen7357\Pulpit\2.bmp
[2012-06-16 09:30:48 | 003,072,054 | ---- | C] () -- C:\Documents and Settings\nen7357\Pulpit\1.bmp
[2012-06-16 08:34:46 | 009,278,984 | R--- | C] () -- C:\Documents and Settings\nen7357\Pulpit\Appl_MatrixDaVinci_Release_OptForTime.bin
[2012-05-28 09:40:34 | 000,023,152 | ---- | C] () -- C:\WINDOWS\System32\smtpctrs.ini
[2012-05-28 09:40:34 | 000,001,092 | ---- | C] () -- C:\WINDOWS\System32\ntfsdrct.ini
[2012-05-28 09:40:10 | 000,058,750 | ---- | C] () -- C:\WINDOWS\System32\w3ctrs.ini
[2012-05-28 09:40:10 | 000,014,972 | ---- | C] () -- C:\WINDOWS\System32\axperf.ini
[2012-05-28 09:40:09 | 000,018,031 | ---- | C] () -- C:\WINDOWS\System32\infoctrs.ini
[2012-03-22 14:25:23 | 000,005,494 | ---- | C] () -- C:\WINDOWS\ADSIO.INI
[2012-03-22 14:25:23 | 000,000,235 | ---- | C] () -- C:\WINDOWS\ADSCAN.INI
[2012-03-22 14:25:23 | 000,000,231 | ---- | C] () -- C:\WINDOWS\ADSCOM.INI
[2012-03-20 12:29:56 | 000,295,016 | ---- | C] () -- C:\WINDOWS\CTCommsServer.exe
[2012-03-15 13:33:36 | 000,000,383 | ---- | C] () -- C:\WINDOWS\System32\haspdos.sys
[2012-03-15 13:33:33 | 000,153,088 | ---- | C] () -- C:\WINDOWS\System32\UNWISE.EXE
[2012-03-15 13:33:33 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\hdduinst.exe
[2012-01-15 23:11:23 | 000,000,963 | ---- | C] () -- C:\WINDOWS\VPlayer.INI
[2012-01-09 18:08:31 | 000,000,424 | ---- | C] () -- C:\Documents and Settings\nen7357\.jmv_registry
[2012-01-05 08:36:03 | 000,000,874 | ---- | C] () -- C:\WINDOWS\LogicEditorTool.INI
[2011-12-15 10:54:11 | 000,000,165 | ---- | C] () -- C:\WINDOWS\Spttgs32.INI
[2011-12-14 08:10:55 | 000,061,440 | ---- | C] () -- C:\WINDOWS\System32\AbUsbFuncRndisCoInstaller.dll
[2011-12-12 18:03:42 | 000,650,752 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2011-12-12 18:03:42 | 000,243,200 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2011-12-12 18:03:42 | 000,074,752 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2011-11-07 10:34:51 | 000,000,108 | ---- | C] () -- C:\WINDOWS\icedbe.ini
[2011-10-24 11:34:20 | 000,000,000 | ---- | C] () -- C:\WINDOWS\imaqconf.ini
[2011-10-24 10:51:11 | 000,000,069 | ---- | C] () -- C:\WINDOWS\pxisys.ini
[2011-10-24 10:51:11 | 000,000,030 | ---- | C] () -- C:\WINDOWS\pxiesys.ini
[2011-09-29 08:02:49 | 000,000,377 | ---- | C] () -- C:\WINDOWS\RADrvDLX.INI
[2011-09-18 12:42:00 | 000,000,103 | ---- | C] () -- C:\Documents and Settings\nen7357\default.pls
[2011-09-18 12:40:55 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2011-08-25 16:37:02 | 000,000,000 | ---- | C] () -- C:\WINDOWS\fxVPhdrvsnp.INI
[2011-08-17 13:01:59 | 000,001,024 | ---- | C] () -- C:\Documents and Settings\nen7357\.rnd
[2011-06-27 08:23:59 | 000,003,982 | ---- | C] () -- C:\WINDOWS\NewDLXFBEditor.INI
[2011-03-30 12:32:07 | 000,000,033 | ---- | C] () -- C:\WINDOWS\RADrvAlarm.INI
[2011-03-03 08:41:00 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\FDT100.dll
[2011-03-03 08:40:53 | 000,060,416 | ---- | C] () -- C:\WINDOWS\OPCENUM.EXE
[2011-03-03 08:40:53 | 000,003,662 | ---- | C] () -- C:\WINDOWS\winhlp32.ini
[2011-03-03 08:40:52 | 000,001,247 | ---- | C] () -- C:\WINDOWS\SICKLogicEditorTool.ini
[2011-02-01 10:02:55 | 000,355,085 | ---- | C] () -- C:\WINDOWS\System32\Cpp0.exe
[2011-01-29 10:35:57 | 000,725,005 | ---- | C] () -- C:\WINDOWS\unins000.exe
[2011-01-29 10:35:57 | 000,040,868 | ---- | C] () -- C:\WINDOWS\unins000.dat
[2010-12-17 11:40:20 | 000,001,752 | ---- | C] () -- C:\WINDOWS\ULTRAMST.INI
[2010-12-16 21:31:06 | 000,258,048 | ---- | C] () -- C:\WINDOWS\System32\libFLAC.dll
[2010-12-16 21:12:20 | 000,175,616 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2010-12-16 10:16:46 | 000,038,912 | ---- | C] () -- C:\WINDOWS\System32\Trend.dll
[2010-12-07 17:39:53 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\nen7357\Dane aplikacji\$_hpcst$.hpc
[2010-10-26 22:02:52 | 000,000,048 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2010-10-07 09:15:05 | 000,000,000 | ---- | C] () -- C:\WINDOWS\MERuntime.INI
[2010-09-29 09:56:57 | 000,000,247 | ---- | C] () -- C:\WINDOWS\RLEIcons.ini
[2010-05-13 11:00:30 | 000,038,400 | ---- | C] () -- C:\Documents and Settings\nen7357\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-05-08 07:22:21 | 000,003,324 | RHS- | C] () -- C:\Documents and Settings\nen7357\ntuser.pol
[2010-05-08 07:22:19 | 000,000,132 | ---- | C] () -- C:\Documents and Settings\nen7357\Ustawienia lokalne\Dane aplikacji\fusioncache.dat
[2010-05-08 07:22:19 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\nen7357\Ustawienia lokalne\Dane aplikacji\WavXMapDrive.bat
[2010-05-08 07:09:57 | 000,014,215 | RHS- | C] () -- C:\Documents and Settings\All Users\ntuser.pol
[2010-01-05 12:22:19 | 000,001,824 | ---- | C] () -- C:\Documents and Settings\All Users\desktop
[2010-01-05 12:11:45 | 001,124,864 | ---- | C] () -- C:\Program Files\Common Files\SAPActiveXL_nosig.xlt
[2010-01-05 12:11:44 | 001,129,984 | ---- | C] () -- C:\Program Files\Common Files\SAPActiveXL.xlt
[2006-09-07 21:49:58 | 000,044,762 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\devicemanager.xml.rc4
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 124 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:FFE0B1EF

< End of report >