Logi z OTL
OTL logfile created on: 2013-10-25 17:35:06 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Zenek\Pulpit
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
1023,48 Mb Total Physical Memory | 601,00 Mb Available Physical Memory | 58,72% Memory free
2,40 Gb Paging File | 2,02 Gb Available in Paging File | 83,95% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 24,84 Gb Total Space | 5,56 Gb Free Space | 22,38% Space Free | Partition Type: NTFS
Drive D: | 24,84 Gb Total Space | 23,09 Gb Free Space | 92,95% Space Free | Partition Type: NTFS
Drive E: | 24,83 Gb Total Space | 24,66 Gb Free Space | 99,31% Space Free | Partition Type: NTFS
Drive H: | 0,06 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Computer Name: MX8PC | User Name: Zenek | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
[color=#E56717]========== Processes (SafeList) ==========[/color]
PRC - [2013-10-25 17:34:19 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Zenek\Pulpit\OTL.exe
PRC - [2013-10-24 14:19:13 | 000,879,456 | ---- | M] (Opera Software) -- C:\Program Files\Opera\opera.exe
PRC - [2013-03-07 01:32:44 | 004,767,304 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
PRC - [2013-03-07 01:32:44 | 000,045,248 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2012-11-01 15:54:58 | 000,161,768 | ---- | M] (Oracle Corporation) -- C:\Program Files\Java\jre7\bin\jqs.exe
PRC - [2009-06-27 17:16:26 | 003,642,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
[color=#E56717]========== Modules (No Company Name) ==========[/color]
MOD - [2013-10-24 20:15:02 | 002,105,856 | ---- | M] () -- C:\Program Files\Alwil Software\Avast5\defs\13102400\algo.dll
MOD - [2013-01-19 21:25:17 | 014,586,888 | ---- | M] () -- C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_146.dll
MOD - [2008-04-15 00:50:38 | 000,014,336 | ---- | M] () -- C:\Windows\system32\msdmo.dll
[color=#E56717]========== Services (SafeList) ==========[/color]
SRV - File not found [Auto | Stopped] -- %systemroot%\system32\wuauserv.dll -- (wuauserv)
SRV - File not found [Auto | Stopped] -- %SYSTEMROOT%\system32\wscsvc.dll -- (wscsvc)
SRV - File not found [On_Demand | Stopped] -- C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe -- (NBService)
SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ)
SRV - File not found [Auto | Stopped] -- %SystemRoot%\System32\ersvc.dll -- (ERSvc)
SRV - File not found [On_Demand | Stopped] -- C:\WINDOWS\system32\cisvc.exe -- (CiSvc)
SRV - [2013-03-07 01:32:44 | 000,045,248 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2013-01-24 12:24:06 | 000,161,384 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012-11-01 15:54:58 | 000,161,768 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\Program Files\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService)
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ETdrv.sys -- (USBET)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\EagleXNt.sys -- (EagleXNt)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\Zenek\USTAWI~1\Temp\catchme.sys -- (catchme)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\Zenek\USTAWI~1\Temp\ALSysIO.sys -- (ALSysIO)
DRV - File not found [Kernel | On_Demand | Unknown] -- -- (ajpd0g0v)
DRV - [2013-08-13 12:53:09 | 000,243,128 | ---- | M] (Disc Soft Ltd) [Kernel | System | Running] -- C:\Windows\system32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2013-03-07 01:33:24 | 000,765,736 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2013-03-07 01:33:24 | 000,368,176 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2013-03-07 01:33:24 | 000,164,736 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\aswVmm.sys -- (aswVmm)
DRV - [2013-03-07 01:33:24 | 000,062,376 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2013-03-07 01:33:24 | 000,049,760 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2013-03-07 01:33:24 | 000,049,248 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\aswRvrt.sys -- (aswRvrt)
DRV - [2013-03-07 01:33:23 | 000,066,336 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\system32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2013-03-07 01:33:22 | 000,029,816 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2013-01-22 15:54:03 | 000,025,280 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\hamachi.sys -- (hamachi)
DRV - [2012-12-25 13:13:00 | 000,466,008 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\sptd.sys -- (sptd)
DRV - [2012-11-08 16:06:20 | 000,279,712 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\system32\drivers\atksgt.sys -- (atksgt)
DRV - [2012-11-08 16:06:19 | 000,025,888 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\system32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2012-10-06 19:22:52 | 000,013,232 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\apf003.sys -- (apf003)
DRV - [2012-07-02 16:15:16 | 000,955,816 | ---- | M] (cFos Software GmbH) [Kernel | On_Demand | Running] -- C:\Windows\system32\drivers\cfosspeed.sys -- (cFosSpeed)
DRV - [2011-03-28 19:46:40 | 000,098,160 | ---- | M] (Tonec Inc.) [Kernel | System | Running] -- C:\Windows\system32\drivers\idmtdi.sys -- (IDMTDI)
DRV - [2009-07-05 02:19:05 | 000,062,208 | ---- | M] (Silicon Image, Inc.) [Kernel | Boot | Stopped] -- C:\WINDOWS\System32\drivers\si3112.sys -- (Si3112)
DRV - [2009-07-04 23:08:36 | 000,032,768 | ---- | M] (SiS Corporation) [Kernel | On_Demand | Running] -- C:\Windows\system32\drivers\sisnic.sys -- (SISNIC)
DRV - [2009-07-04 23:08:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\Windows\system32\drivers\RTL8139.sys -- (rtl8139)
DRV - [2009-07-04 23:08:24 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2009-02-17 14:19:00 | 000,057,672 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\ftdibus.sys -- (FTDIBUS)
DRV - [2009-02-17 14:17:00 | 000,072,520 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\ftser2k.sys -- (FTSER2K)
DRV - [2006-01-25 05:52:31 | 001,478,656 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2005-09-23 23:18:32 | 000,171,520 | ---- | M] (Pinnacle Systems GmbH) [Kernel | On_Demand | Running] -- C:\Windows\system32\drivers\MarvinBus.sys -- (MarvinBus)
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
[color=#E56717]========== Internet Explorer ==========[/color]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\..\SearchScopes,Backup.Old.DefaultScope = {006ee092-9658-4fd6-bd8e-a21a348e59f5}
IE - HKLM\..\SearchScopes,DefaultScope = {30F5AB16-9F1E-4E99-93F2-ECB9ABB0EC12}
IE - HKLM\..\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}: " URL " = http://feed.helperbar.com/?publisher=OPENCANDY & dpid=OPENCANDYAPRIL & co=PL & userid=5dd04c45-5f18-4936-9e6c-2316ecc5ee41 & affid=110774 & searchtype=ds & babsrc=lnkry & q={searchTerms}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: " URL " = http://search.live.com/results.aspx?q={searchTerms} & src={referrer:source?}
IE - HKLM\..\SearchScopes\{30F5AB16-9F1E-4E99-93F2-ECB9ABB0EC12}: " URL " = http://www.searchya.com/?q={searchTerms} & s=1 & a=foxtab & chnl=ft-100 & cd=2XzuyEtN2Y1L1QzutDtDtAtDyE0FyD0ByCyEyBtC0A0EtD0CtN0D0Tzu0CtBtBtAtN1L2XzutBtFtCtFtCtFtAtCtB & cr=185267382
IE - HKLM\..\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}: " URL " = http://search.gboxapp.com/?q={searchTerms}
IE - HKLM\..\SearchScopes\{E7155FB9-28B0-43D4-91B7-8740BC2AD04D}: " URL " = http://www.google.com/search?q={searchTerms} & rls=com.microsoft:{language}:{referrer:source?} & ie={inputEncoding} & oe={outputEncoding} & sourceid=ie7
IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: " URL " = http://search.sweetim.com/search.asp?src=6 & q={searchTerms} & crg=3.1010000.10011 & barid={8CA8E5E9-CB4D-11E1-9631-00304F5B6471}
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.latingamerz.net
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: " ProxyEnable " = 0
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.latingamerz.net
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: " ProxyEnable " = 0
IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: " ProxyEnable " = 0
IE - HKU\S-1-5-21-73586283-1592454029-1177238915-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKU\S-1-5-21-73586283-1592454029-1177238915-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
IE - HKU\S-1-5-21-73586283-1592454029-1177238915-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKU\S-1-5-21-73586283-1592454029-1177238915-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?babsrc=HP_ss & mntrId=60A3000B6A61DC90 & affID=123895 & tsp=4973
IE - HKU\S-1-5-21-73586283-1592454029-1177238915-1004\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKU\S-1-5-21-73586283-1592454029-1177238915-1004\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKU\S-1-5-21-73586283-1592454029-1177238915-1004\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKU\S-1-5-21-73586283-1592454029-1177238915-1004\..\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}: " URL " = http://feed.helperbar.com/?publisher=OPENCANDY & dpid=OPENCANDYAPRIL & co=PL & userid=5dd04c45-5f18-4936-9e6c-2316ecc5ee41 & affid=110774 & searchtype=ds & babsrc=lnkry & q={searchTerms}
IE - HKU\S-1-5-21-73586283-1592454029-1177238915-1004\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: " URL " = http://search.v9.com/web/?q={searchTerms}
IE - HKU\S-1-5-21-73586283-1592454029-1177238915-1004\..\SearchScopes\{0D7562AE-8EF6-416d-A838-AB665251703A}: " URL " = http://start.facemoods.com/?a=desktop & s={searchTerms} & f=4
IE - HKU\S-1-5-21-73586283-1592454029-1177238915-1004\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: " URL " = http://search.babylon.com/?q={searchTerms} & babsrc=SP_ss & mntrId=60A3000B6A61DC90 & affID=123895 & tsp=4973
IE - HKU\S-1-5-21-73586283-1592454029-1177238915-1004\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: " URL " = http://websearch.ask.com/redirect?client=ie & tb=CPUID & o=14654 & src=crm & q={searchTerms} & locale=en_US & apn_ptnrs=CV & apn_dtid=YYYYYYYYPL & apn_uid=471F5B01-080C-4F87-AED1-2DF16D23F55A & apn_sauid=B2F76CE6-5089-4AA0-8995-AA69497EA1B5
IE - HKU\S-1-5-21-73586283-1592454029-1177238915-1004\..\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}: " URL " = http://www.daemon-search.com/search?q={searchTerms}
IE - HKU\S-1-5-21-73586283-1592454029-1177238915-1004\..\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}: " URL " = http://search.conduit.com/ResultsExt.aspx?q={searchTerms} & SearchSource=4 & ctid=CT2704262
IE - HKU\S-1-5-21-73586283-1592454029-1177238915-1004\..\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}: " URL " = http://search.gboxapp.com/?q={searchTerms}
IE - HKU\S-1-5-21-73586283-1592454029-1177238915-1004\..\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}: " URL " = http://mystart.incredibar.com/mb128/?search={searchTerms} & loc=IB_DS & a=6PQcfjgTTY & i=26
IE - HKU\S-1-5-21-73586283-1592454029-1177238915-1004\..\SearchScopes\{E7155FB9-28B0-43D4-91B7-8740BC2AD04D}: " URL " = http://www.google.com/search?q={searchTerms} & rls=com.microsoft:{language}:{referrer:source?} & ie={inputEncoding} & oe={outputEncoding} & sourceid=ie7 & rlz=1I7AMSA_plPL482
IE - HKU\S-1-5-21-73586283-1592454029-1177238915-1004\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: " URL " = http://search.sweetim.com/search.asp?src=6 & q={searchTerms} & crg=3.1010000.10011 & barid={8CA8E5E9-CB4D-11E1-9631-00304F5B6471}
IE - HKU\S-1-5-21-73586283-1592454029-1177238915-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: " ProxyEnable " = 0
IE - HKU\S-1-5-21-73586283-1592454029-1177238915-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: " ProxyOverride " = 127.0.0.1:9421; & lt; local & gt;
[color=#E56717]========== FireFox ==========[/color]
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_5_502_146.dll ()
FF - HKLM\Software\MozillaPlugins\@bittorrent.com/BitTorrentDNA: C:\Program Files\DNA\plugins\npbtdna.dll (BitTorrent, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@ngm.nexoneu.com/NxGame: C:\Documents and Settings\All Users\Dane aplikacji\NexonEU\NGM\npNxGameeu.dll (Nexon)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Documents and Settings\Zenek\Ustawienia lokalne\Dane aplikacji\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll File not found
FF - HKCU\Software\MozillaPlugins\vitzo.com/VDownloader: C:\Program Files\VDownloader\Addons\npVDownloader.dll File not found
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\support@vdownloader.com: C:\Program Files\VDownloader\Addons\FireFox
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\Program Files\Web Assistant\Firefox
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\5062fd49d1f58@5062fd49d1f91.com: C:\Documents and Settings\Zenek\Dane aplikacji\Mozilla\Firefox\Profiles\8nc8ijkb.default\extensions\5062fd49d1f58@5062fd49d1f91.com
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Documents and Settings\Zenek\Dane aplikacji\IDM\idmmzcc3
FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Documents and Settings\Zenek\Dane aplikacji\IDM\idmmzcc3
[2012-12-29 18:24:28 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Zenek\Dane aplikacji\Mozilla\Extensions
[2012-12-27 22:03:06 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Zenek\Dane aplikacji\Mozilla\Firefox\Profiles\extensions
[2012-11-06 18:19:24 | 000,214,034 | ---- | M] () (No name found) -- C:\Documents and Settings\Zenek\Dane aplikacji\Mozilla\Firefox\Profiles\extensions\putlockerdownloader@putlockerdownloader.com.xpi
[2012-11-25 13:04:59 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012-01-12 19:49:19 | 000,002,310 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml
[2012-10-13 20:58:14 | 000,002,050 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fcmdSrchdesktop.xml
O1 HOSTS File: ([2013-02-09 17:33:50 | 000,000,027 | ---- | M]) - C:\Windows\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (no name) - {98889811-442D-49dd-99D7-DC866BE87DBC} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - No CLSID value found.
O3 - HKU\S-1-5-21-73586283-1592454029-1177238915-1004\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O4 - HKLM..\Run: [avast] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software)
O4 - HKU\S-1-5-21-73586283-1592454029-1177238915-1004..\Run: [DAEMON Tools Lite] D:\DAEMON Tools Lite\DTLite.exe (Disc Soft Ltd)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktopCleanupWizard = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoInternetOpenWith = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableStatusMessages = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: VerboseStatus = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyPictures = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyPictures = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyPictures = 1
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O7 - HKU\S-1-5-21-73586283-1592454029-1177238915-1004\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-73586283-1592454029-1177238915-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-73586283-1592454029-1177238915-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyPictures = 1
O7 - HKU\S-1-5-21-73586283-1592454029-1177238915-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1
O7 - HKU\S-1-5-21-73586283-1592454029-1177238915-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 0
O7 - HKU\S-1-5-21-73586283-1592454029-1177238915-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKU\S-1-5-21-73586283-1592454029-1177238915-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
O7 - HKU\S-1-5-21-73586283-1592454029-1177238915-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1
O7 - HKU\S-1-5-21-73586283-1592454029-1177238915-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O7 - HKU\S-1-5-21-73586283-1592454029-1177238915-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O8 - Extra context menu item: Download with & Media Finder - C:\Program Files\Media Finder\hook.html File not found
O8 - Extra context menu item: E & ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: E & ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Ściągnij przez IDM - C:\Program Files\Internet Download Manager\IEExt.htm File not found
O8 - Extra context menu item: Ściągnij wszystkie linki przez IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm File not found
O8 - Extra context menu item: Wyślij & do programu OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Wyślij & do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: & Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : & Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F82BF4C7-5FA0-4A9D-A496-397F0B7C47FD}: NameServer = 192.168.69.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\Windows\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Zenek\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Zenek\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011-03-28 19:44:31 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (sdnclean.exe)
O35 - HKLM\..comfile [open] -- " %1 " %*
O35 - HKLM\..exefile [open] -- " %1 " %*
O37 - HKLM\...com [@ = ComFile] -- " %1 " %*
O37 - HKLM\...exe [@ = exefile] -- " %1 " %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
[2013-10-25 17:34:18 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Zenek\Pulpit\OTL.exe
[2013-10-24 18:44:15 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Zenek\Recent
[2013-10-24 16:22:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Zenek\Dane aplikacji\Malwarebytes
[2013-10-24 16:22:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Malwarebytes' Anti-Malware
[2013-10-24 16:21:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes
[2013-10-24 16:21:53 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2013-10-24 15:35:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\HD Tune
[2013-10-21 15:59:21 | 000,000,000 | -HSD | C] -- C:\found.000
[2013-10-03 17:45:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Skype
[2013-10-03 17:45:17 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2013-10-03 17:26:57 | 000,324,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DIFxAPI.dll
[2013-10-03 17:20:53 | 000,005,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstee.sys
[2013-10-03 17:20:44 | 000,010,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ndisip.sys
[2013-10-03 17:20:41 | 000,015,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\streamip.sys
[2013-10-03 17:20:37 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ipsink.ax
[2013-10-03 17:20:37 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ipsink.ax
[2013-10-03 17:20:30 | 000,011,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\slip.sys
[2013-10-03 17:20:21 | 000,019,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wstcodec.sys
[2013-10-03 17:20:12 | 000,085,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nabtsfec.sys
[2013-10-03 17:20:08 | 000,017,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ccdecode.sys
[2013-10-03 17:20:02 | 000,054,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vfwwdm32.dll
[2013-10-03 17:20:02 | 000,054,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\vfwwdm32.dll
[2013-10-03 17:20:02 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vidcap.ax
[2013-10-03 17:20:02 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\vidcap.ax
[2013-10-03 17:19:59 | 000,121,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbvideo.sys
[2013-10-03 17:19:59 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kswdmcap.ax
[2013-10-03 17:19:59 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kswdmcap.ax
[2013-10-03 17:19:59 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksxbar.ax
[2013-10-03 17:19:59 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ksxbar.ax
[2013-10-03 17:19:56 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kstvtune.ax
[2013-10-03 17:19:56 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kstvtune.ax
[2013-10-03 17:19:55 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dshowext.ax
[2013-10-03 17:19:55 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dshowext.ax
[2013-09-29 20:37:54 | 000,000,000 | ---D | C] -- C:\Program Files\GIANTS Software
[2013-09-29 09:26:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Zenek\Dane aplikacji\Skype
[2013-09-29 09:25:54 | 000,000,000 | R--D | C] -- C:\Program Files\Skype
[2013-09-29 09:25:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Skype
[2013-09-29 09:23:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Zenek\Ustawienia lokalne\Dane aplikacji\Lollipop
[2 C:\WINDOWS\System32\*.tmp files - & gt; C:\WINDOWS\System32\*.tmp - & gt; ]
[1 C:\WINDOWS\*.tmp files - & gt; C:\WINDOWS\*.tmp - & gt; ]
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
[2013-10-25 17:34:19 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Zenek\Pulpit\OTL.exe
[2013-10-25 17:32:03 | 000,003,172 | ---- | M] () -- C:\WINDOWS\System32\NOTEPAD.ini
[2013-10-25 17:26:07 | 000,000,366 | -H-- | M] () -- C:\WINDOWS\tasks\avast! Emergency Update.job
[2013-10-25 17:24:25 | 000,000,282 | ---- | M] () -- C:\WINDOWS\tasks\GoforFilesUpdate.job
[2013-10-25 17:24:11 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2013-10-25 17:24:05 | 1073,270,784 | -HS- | M] () -- C:\hiberfil.sys
[2013-10-24 18:19:26 | 003,913,801 | ---- | M] () -- C:\Documents and Settings\Zenek\Pulpit\Łydka Grubasa - Rapapara (www.getmp3.pl).mp3
[2013-10-24 16:22:00 | 000,000,534 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Malwarebytes Anti-Malware.lnk
[2013-10-24 16:16:15 | 001,533,952 | ---- | M] () -- C:\Documents and Settings\Zenek\Pulpit\MHDD.iso
[2013-10-21 20:23:56 | 000,002,499 | ---- | M] () -- C:\Documents and Settings\Zenek\Pulpit\Microsoft Word 2010.lnk
[2013-10-20 11:39:29 | 000,000,549 | ---- | M] () -- C:\WINDOWS\System\CmiCnfg.ini
[2013-10-20 09:57:35 | 000,002,267 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk
[2013-10-19 19:01:57 | 000,002,184 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2013-10-06 20:14:18 | 000,921,654 | ---- | M] () -- C:\WINDOWS\snapshot.bmp
[2 C:\WINDOWS\System32\*.tmp files - & gt; C:\WINDOWS\System32\*.tmp - & gt; ]
[1 C:\WINDOWS\*.tmp files - & gt; C:\WINDOWS\*.tmp - & gt; ]
[color=#E56717]========== Files Created - No Company Name ==========[/color]
[2013-10-24 18:19:26 | 003,913,801 | ---- | C] () -- C:\Documents and Settings\Zenek\Pulpit\Łydka Grubasa - Rapapara (www.getmp3.pl).mp3
[2013-10-24 16:22:00 | 000,000,534 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Malwarebytes Anti-Malware.lnk
[2013-10-24 16:16:15 | 001,533,952 | ---- | C] () -- C:\Documents and Settings\Zenek\Pulpit\MHDD.iso
[2013-10-06 20:14:18 | 000,921,654 | ---- | C] () -- C:\WINDOWS\snapshot.bmp
[2013-10-03 17:45:18 | 000,002,267 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk
[2013-10-03 17:26:57 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\ETCoInst.dll
[2013-08-20 13:52:29 | 000,004,997 | ---- | C] () -- C:\Documents and Settings\Zenek\Ustawienia lokalne\Dane aplikacji\recently-used.xbel
[2013-06-07 09:33:31 | 000,005,937 | ---- | C] () -- C:\WINDOWS\mgxoschk.ini
[2013-04-29 15:29:28 | 000,022,328 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2013-04-29 15:13:45 | 000,000,319 | ---- | C] () -- C:\WINDOWS\game.ini
[2013-04-05 15:49:21 | 000,067,939 | ---- | C] () -- C:\WINDOWS\System32\x264vfw-uninstall.exe
[2013-03-13 20:36:12 | 000,164,736 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswVmm.sys
[2013-03-13 20:36:12 | 000,049,248 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswRvrt.sys
[2013-03-13 20:13:37 | 000,148,480 | ---- | C] () -- C:\WINDOWS\gddi32.dll
[2013-03-11 15:46:48 | 000,565,760 | ---- | C] () -- C:\WINDOWS\AvitalBypass.exe
[2013-03-11 15:46:47 | 000,337,408 | ---- | C] () -- C:\WINDOWS\75631375.dll
[2013-03-11 15:46:47 | 000,146,944 | ---- | C] () -- C:\WINDOWS\ikernel32.dll
[2012-12-23 20:03:24 | 000,103,736 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe
[2012-12-23 20:02:53 | 000,066,872 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe
[2012-11-29 20:30:31 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2012-11-29 20:30:30 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2012-11-29 20:30:30 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2012-11-29 20:30:30 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2012-11-29 20:30:30 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2012-11-24 19:53:38 | 000,022,328 | ---- | C] () -- C:\Documents and Settings\Zenek\Dane aplikacji\PnkBstrK.sys
[2012-11-08 16:06:20 | 000,279,712 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys
[2012-11-08 16:06:19 | 000,025,888 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys
[2012-10-06 19:22:52 | 000,016,304 | ---- | C] () -- C:\WINDOWS\System32\apl003.sys
[2012-10-06 19:22:52 | 000,013,232 | ---- | C] () -- C:\WINDOWS\System32\apf003.sys
[2012-09-30 15:52:18 | 000,000,414 | RHS- | C] () -- C:\Documents and Settings\All Users\ntuser.pol
[2012-07-13 16:51:47 | 000,000,556 | ---- | C] () -- C:\WINDOWS\eReg.dat
[2012-05-20 19:23:43 | 000,000,050 | ---- | C] () -- C:\WINDOWS\System32\bridf08b.dat
[2012-05-20 19:23:40 | 000,000,413 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI
[2012-05-03 12:20:56 | 000,000,204 | ---- | C] () -- C:\WINDOWS\System32\secustat.dat
[2012-05-03 12:19:09 | 000,000,025 | ---- | C] () -- C:\WINDOWS\libem.INI
[2012-02-06 15:29:40 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012-02-06 14:43:49 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin
[2012-02-06 14:40:26 | 000,520,192 | ---- | C] () -- C:\WINDOWS\System32\ati2sgag.exe
[2011-04-01 18:54:45 | 000,025,088 | ---- | C] () -- C:\Documents and Settings\Zenek\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[color=#E56717]========== ZeroAccess Check ==========[/color]
[2011-03-28 19:47:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
" " = %SystemRoot%\system32\shdocvw.dll -- [2009-06-09 01:53:09 | 003,418,112 | ---- | M] (Microsoft Corporation)
" ThreadingModel " = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
" " = %systemroot%\system32\wbem\fastprox.dll -- [2009-07-05 01:06:28 | 000,473,600 | ---- | M] (Microsoft Corporation)
" ThreadingModel " = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
" " = %systemroot%\system32\wbem\wbemess.dll -- [2008-04-15 00:50:58 | 000,273,920 | ---- | M] (Microsoft Corporation)
" ThreadingModel " = Both
[color=#E56717]========== LOP Check ==========[/color]
[2013-04-10 14:37:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\DAEMON Tools Lite
[2011-03-28 19:44:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Foxit
[2012-07-26 09:59:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Opera
[2013-04-25 16:49:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ADDICT-THING
[2011-03-28 20:04:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Alwil Software
[2012-12-23 15:33:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Astroburn Lite
[2013-02-17 21:56:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Babylon
[2012-09-30 16:45:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\cFos
[2012-09-02 15:25:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite
[2012-08-05 13:33:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\GG
[2011-10-15 20:52:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\IncrediMail
[2013-04-09 20:26:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\InstallMate
[2012-12-22 20:46:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\NCH Swift Sound
[2013-03-07 21:33:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Nexon
[2013-03-08 20:18:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\NexonEU
[2013-06-27 17:04:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Pinnacle
[2013-06-27 16:50:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Pinnacle Studio
[2013-06-27 16:43:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Pinnacle Studio Plus
[2013-06-27 16:43:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Studio 12
[2013-01-13 13:02:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TuneUp Software
[2012-09-01 18:22:22 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{32364CEA-7855-4A3C-B674-53D8E9B97936}
[2013-01-13 13:02:02 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
[2011-03-28 19:44:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Default User\Dane aplikacji\Foxit
[2012-09-01 18:43:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\TuneUp Software
[2012-08-06 19:02:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Zenek\Dane aplikacji\AIMP
[2013-10-13 10:19:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Zenek\Dane aplikacji\AIMP3
[2012-05-04 10:15:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Zenek\Dane aplikacji\BITS
[2013-09-14 09:30:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Zenek\Dane aplikacji\DAEMON Tools Lite
[2012-04-15 11:27:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Zenek\Dane aplikacji\DMCache
[2013-04-02 11:29:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Zenek\Dane aplikacji\DNA
[2011-03-28 19:44:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Zenek\Dane aplikacji\Foxit
[2013-08-19 20:35:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Zenek\Dane aplikacji\GG
[2013-03-23 17:53:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Zenek\Dane aplikacji\GoforFiles
[2012-10-09 15:30:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Zenek\Dane aplikacji\gtk-2.0
[2013-06-08 13:00:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Zenek\Dane aplikacji\Leadertech
[2013-06-05 10:06:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Zenek\Dane aplikacji\MAGIX
[2012-12-29 18:27:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Zenek\Dane aplikacji\Media Finder
[2012-04-25 14:46:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Zenek\Dane aplikacji\Mikrotik
[2013-07-30 15:51:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Zenek\Dane aplikacji\Opera
[2013-06-06 11:19:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Zenek\Dane aplikacji\PerformerSoft
[2013-07-21 13:26:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Zenek\Dane aplikacji\PhotoScape
[2013-06-19 14:17:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Zenek\Dane aplikacji\Sony
[2012-11-26 22:09:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Zenek\Dane aplikacji\Spider Player
[2013-04-05 15:49:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Zenek\Dane aplikacji\SSR
[2012-09-22 19:38:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Zenek\Dane aplikacji\TS3Client
[2013-01-13 13:02:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Zenek\Dane aplikacji\TuneUp Software
[2013-07-03 21:51:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Zenek\Dane aplikacji\uTorrent
[2013-08-21 21:37:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Zenek\Dane aplikacji\WebCake
[color=#E56717]========== Purity Check ==========[/color]
& lt; End of report & gt;