OTL logfile created on: 2013-04-18 12:36:55 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\ATomaszewski\Pulpit Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1012,89 Mb Total Physical Memory | 379,59 Mb Available Physical Memory | 37,48% Memory free 2,37 Gb Paging File | 1,82 Gb Available in Paging File | 76,90% Paging File free Paging file location(s): C:\pagefile.sys 1512 3024 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 148,93 Gb Total Space | 128,63 Gb Free Space | 86,37% Space Free | Partition Type: NTFS Computer Name: IHZ-AT | User Name: ATomaszewski | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2013-04-18 12:35:44 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\ATomaszewski\Pulpit\OTL.exe PRC - [2013-04-09 10:57:09 | 001,312,720 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Chrome\Application\chrome.exe PRC - [2013-03-18 14:29:37 | 000,170,912 | ---- | M] (Oracle Corporation) -- C:\Program Files\Java\jre7\bin\jqs.exe PRC - [2010-04-07 21:07:24 | 000,810,120 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe PRC - [2010-04-07 21:07:04 | 002,145,000 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\egui.exe PRC - [2009-02-04 22:26:38 | 000,128,232 | ---- | M] (CyberLink Corp.) -- C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe PRC - [2008-04-15 14:00:00 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2013-04-09 10:57:07 | 000,390,096 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\26.0.1410.64\ppgooglenaclpluginchrome.dll MOD - [2013-04-09 10:57:06 | 013,130,704 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\26.0.1410.64\PepperFlash\pepflashplayer.dll MOD - [2013-04-09 10:57:05 | 004,050,896 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\26.0.1410.64\pdf.dll MOD - [2013-04-09 10:56:13 | 001,606,096 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\26.0.1410.64\ffmpegsumo.dll MOD - [2008-04-15 14:00:00 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ) SRV - [2013-04-03 12:49:55 | 000,115,608 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2013-03-18 14:29:37 | 000,170,912 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\Program Files\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService) SRV - [2013-03-18 12:12:11 | 000,253,656 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2010-04-07 21:10:38 | 000,033,560 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe -- (EhttpSrv) SRV - [2010-04-07 21:07:24 | 000,810,120 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe -- (ekrn) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys -- (esgiguard) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - [2010-04-07 21:08:08 | 000,055,232 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\epfwtdi.sys -- (epfwtdi) DRV - [2010-04-07 21:08:06 | 000,032,584 | ---- | M] (ESET) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\epfwndis.sys -- (Epfwndis) DRV - [2010-04-07 21:08:04 | 000,134,488 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\epfw.sys -- (epfw) DRV - [2010-04-07 21:07:08 | 000,114,984 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ehdrv.sys -- (ehdrv) DRV - [2010-04-07 21:03:44 | 000,139,192 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\eamon.sys -- (eamon) DRV - [2008-07-16 06:03:18 | 000,176,640 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\k57xp32.sys -- (k57w2k) DRV - [2008-07-16 05:40:58 | 000,024,064 | ---- | M] (Sonic Focus, Inc) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sfaudio.sys -- (SFAUDIO) DRV - [2007-07-23 16:05:20 | 000,009,104 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\DLADResM.SYS -- (DLADResM) DRV - [2007-07-23 16:04:58 | 000,037,360 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\DLABMFSM.SYS -- (DLABMFSM) DRV - [2007-07-23 16:04:56 | 000,098,448 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\DLAUDF_M.SYS -- (DLAUDF_M) DRV - [2007-07-23 16:04:56 | 000,093,552 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\DLAUDFAM.SYS -- (DLAUDFAM) DRV - [2007-07-23 16:04:54 | 000,027,216 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\DLAOPIOM.SYS -- (DLAOPIOM) DRV - [2007-07-23 16:04:52 | 000,032,848 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\DLABOIOM.SYS -- (DLABOIOM) DRV - [2007-07-23 16:04:52 | 000,016,304 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\DLAPoolM.SYS -- (DLAPoolM) DRV - [2007-07-23 16:04:50 | 000,108,752 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\DLAIFS_M.SYS -- (DLAIFS_M) DRV - [2007-07-23 15:49:44 | 000,030,064 | ---- | M] (Roxio) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\DLARTL_M.SYS -- (DLARTL_M) DRV - [2007-07-23 15:49:44 | 000,014,576 | ---- | M] (Roxio) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\DLACDBHM.SYS -- (DLACDBHM) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2049290462-4258717894-3957272904-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie IE - HKU\S-1-5-21-2049290462-4258717894-3957272904-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://search.b1.org/?bsrc=hmior&chid=c167991 IE - HKU\S-1-5-21-2049290462-4258717894-3957272904-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page Before = http://www.google.com IE - HKU\S-1-5-21-2049290462-4258717894-3957272904-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKU\S-1-5-21-2049290462-4258717894-3957272904-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Before = http://www.google.com/ IE - HKU\S-1-5-21-2049290462-4258717894-3957272904-1005\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKU\S-1-5-21-2049290462-4258717894-3957272904-1005\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990} IE - HKU\S-1-5-21-2049290462-4258717894-3957272904-1005\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC IE - HKU\S-1-5-21-2049290462-4258717894-3957272904-1005\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7NNVC_plPL476 IE - HKU\S-1-5-21-2049290462-4258717894-3957272904-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "http://search.b1.org/?bsrc=hmfor&chid=c167991" FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:20.0 FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll () FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.17.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\jqs@sun.com: C:\Program Files\Java\jre6\lib\deploy\jqs\ff FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 20.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013-04-03 12:49:56 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 20.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2013-04-03 11:13:05 | 000,000,000 | ---D | M] [2013-03-07 16:47:58 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\ATomaszewski\Dane aplikacji\Mozilla\Extensions [2013-03-07 17:06:16 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\ATomaszewski\Dane aplikacji\Mozilla\Firefox\Profiles\rhcrpogb.default\extensions [2013-03-07 17:06:16 | 000,120,435 | ---- | M] () (No name found) -- C:\Documents and Settings\ATomaszewski\Dane aplikacji\Mozilla\Firefox\Profiles\rhcrpogb.default\extensions\searchy@searchy.xpi [2013-04-03 12:49:44 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2013-04-03 12:49:56 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2013-02-27 09:11:30 | 000,002,980 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2013-02-27 09:11:30 | 000,001,619 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2013-02-27 09:11:30 | 000,001,130 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2013-02-27 09:11:30 | 000,001,071 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2013-02-27 09:11:30 | 000,001,396 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2013-02-27 09:11:30 | 000,001,896 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Bing (Enabled) CHR - default_search_provider: search_url = http://www.bing.com/search?setmkt=pl-PL&q={searchTerms} CHR - default_search_provider: suggest_url = http://api.bing.com/osjson.aspx?query={searchTerms}&language={language} CHR - homepage: http://search.b1.org/?bsrc=hmcor&chid=c167991 CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\26.0.1410.64\PepperFlash\pepflashplayer.dll CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\26.0.1410.64\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\26.0.1410.64\pdf.dll CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll CHR - plugin: Java(TM) Platform SE 7 U17 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll CHR - plugin: Java Deployment Toolkit 7.0.170.2 (Enabled) = C:\WINDOWS\system32\npDeployJava1.dll CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll CHR - Extension: Dokumenty Google = C:\Documents and Settings\ATomaszewski\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\ CHR - Extension: Dysk Google = C:\Documents and Settings\ATomaszewski\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\ CHR - Extension: YouTube = C:\Documents and Settings\ATomaszewski\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\ CHR - Extension: Szukaj w Google = C:\Documents and Settings\ATomaszewski\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\ CHR - Extension: Improved Search = C:\Documents and Settings\ATomaszewski\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\hahpjplbmicfkmoccokbjejahjjpnena\1.2_0\ CHR - Extension: Mapy Google = C:\Documents and Settings\ATomaszewski\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh\5.2.7_0\ CHR - Extension: Gmail = C:\Documents and Settings\ATomaszewski\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2008-04-15 14:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll File not found O3 - HKU\S-1-5-21-2049290462-4258717894-3957272904-1005\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found. O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET) O4 - HKLM..\Run: [PDVDDXSrv] C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe (CyberLink Corp.) O4 - HKU\S-1-5-21-2049290462-4258717894-3957272904-1005..\Run: [Privacy Protection] C:\Documents and Settings\All Users\Dane aplikacji\privacy.exe File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-2049290462-4258717894-3957272904-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - mswsock.dll File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - mswsock.dll File not found O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1361788234312 (WUWebControl Class) O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1361969464849 (MUWebControl Class) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 156.17.187.200 156.17.254.3 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F315D736-3936-4AF4-A5AC-A83E801DA73B}: DhcpNameServer = 156.17.187.200 156.17.254.3 O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\ATomaszewski\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\ATomaszewski\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2013-04-18 12:02:04 | 000,000,000 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2013-04-18 12:35:34 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\ATomaszewski\Pulpit\OTL.exe [2013-04-18 12:31:58 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\ATomaszewski\Recent [2013-04-18 12:29:24 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine [2013-04-18 12:28:38 | 002,237,968 | ---- | C] (Kaspersky Lab ZAO) -- C:\Documents and Settings\ATomaszewski\Pulpit\TDSSKiller.exe [2013-04-18 12:27:14 | 000,000,000 | -HSD | C] -- C:\Config.Msi [2013-04-18 12:00:58 | 000,000,000 | ---D | C] -- C:\Program Files\Enigma Software Group [2013-04-18 12:00:11 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard [2013-04-18 11:53:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ATomaszewski\Ustawienia lokalne\Dane aplikacji\B1E [2013-04-18 11:53:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ATomaszewski\Dane aplikacji\B1Toolbar [2013-04-17 16:29:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ATomaszewski\Pulpit\rw [2013-04-03 16:19:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ATomaszewski\Moje dokumenty\PAH [2013-04-03 13:26:22 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe [2013-04-03 13:03:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Google Chrome [2013-04-03 12:49:43 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox [2013-04-03 11:13:02 | 000,000,000 | ---D | C] -- C:\Program Files\ESET [2013-04-03 11:13:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\ESET [2013-03-25 18:17:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ATomaszewski\Moje dokumenty\DOKTORAT [2013-03-20 18:37:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ATomaszewski\Moje dokumenty\Ashampoo Pictures [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] File not found -- C:\Documents and Settings\ATomaszewski\Pulpit\CAZA2HV3. File not found -- C:\WINDOWS\System32\ [2013-04-18 12:35:44 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\ATomaszewski\Pulpit\OTL.exe [2013-04-18 12:34:40 | 000,523,678 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2013-04-18 12:34:40 | 000,442,466 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2013-04-18 12:34:40 | 000,098,306 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2013-04-18 12:34:40 | 000,071,732 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2013-04-18 12:30:40 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2013-04-18 12:30:39 | 000,001,044 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2013-04-18 12:30:25 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2013-04-18 12:30:23 | 1062,170,624 | -HS- | M] () -- C:\hiberfil.sys [2013-04-18 12:11:17 | 000,000,930 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job [2013-04-18 12:07:03 | 000,001,048 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2013-04-18 12:02:04 | 000,000,000 | ---- | M] () -- C:\autoexec.bat [2013-04-18 11:53:46 | 000,000,047 | ---- | M] () -- C:\chid [2013-04-18 09:57:58 | 000,000,100 | ---- | M] () -- C:\WINDOWS\WPCMAPI.INI [2013-04-17 12:40:02 | 001,248,429 | ---- | M] () -- C:\Documents and Settings\ATomaszewski\Pulpit\Sterol regulatory element binding transcription factor 1 FA.pdf [2013-04-17 12:36:06 | 000,214,892 | ---- | M] () -- C:\Documents and Settings\ATomaszewski\Pulpit\A Genome Scan to Detect Quantitative Trait Loci f.pdf [2013-04-17 12:34:14 | 000,212,272 | ---- | M] () -- C:\Documents and Settings\ATomaszewski\Pulpit\Exploring polymorphisms and effects on milk traits of the DGAT1, SCD1 a.pdf [2013-04-17 12:32:41 | 000,168,676 | ---- | M] () -- C:\Documents and Settings\ATomaszewski\Pulpit\DGAT1-exon8 polymorphism in Anatolian buffalo.pdf [2013-04-17 12:31:55 | 000,366,820 | ---- | M] () -- C:\Documents and Settings\ATomaszewski\Pulpit\The lipin protein family_Dual roles in lipid biosynthesis and gene expression.pdf [2013-04-17 12:30:55 | 000,344,043 | ---- | M] () -- C:\Documents and Settings\ATomaszewski\Pulpit\Effects of SCD1- and DGAT1-genes on production traits of Chinese Holstein.pdf [2013-04-17 12:25:07 | 000,657,724 | ---- | M] () -- C:\Documents and Settings\ATomaszewski\Pulpit\SCD review.pdf [2013-04-17 12:24:16 | 004,290,928 | ---- | M] () -- C:\Documents and Settings\ATomaszewski\Pulpit\DGAT_molecular biology biochemistry biotechnoogy.pdf [2013-04-16 13:52:45 | 000,279,714 | ---- | M] () -- C:\Documents and Settings\ATomaszewski\Pulpit\ptok_2011___10_Miesaki_kosci.pdf [2013-04-16 13:52:02 | 000,481,097 | ---- | M] () -- C:\Documents and Settings\ATomaszewski\Pulpit\ptok_2011___11_Miesaki_tkanek_miekkich.pdf [2013-04-05 12:29:44 | 001,030,997 | ---- | M] () -- C:\Documents and Settings\ATomaszewski\Pulpit\85126134.pdf [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] File not found -- C:\Documents and Settings\ATomaszewski\Pulpit\CAZA2HV3. File not found -- C:\WINDOWS\System32\ [2013-04-18 12:02:04 | 000,000,000 | ---- | C] () -- C:\autoexec.bat [2013-04-18 11:53:46 | 000,000,047 | ---- | C] () -- C:\chid [2013-04-17 12:40:01 | 001,248,429 | ---- | C] () -- C:\Documents and Settings\ATomaszewski\Pulpit\Sterol regulatory element binding transcription factor 1 FA.pdf [2013-04-17 12:36:06 | 000,214,892 | ---- | C] () -- C:\Documents and Settings\ATomaszewski\Pulpit\A Genome Scan to Detect Quantitative Trait Loci f.pdf [2013-04-17 12:34:14 | 000,212,272 | ---- | C] () -- C:\Documents and Settings\ATomaszewski\Pulpit\Exploring polymorphisms and effects on milk traits of the DGAT1, SCD1 a.pdf [2013-04-17 12:32:41 | 000,168,676 | ---- | C] () -- C:\Documents and Settings\ATomaszewski\Pulpit\DGAT1-exon8 polymorphism in Anatolian buffalo.pdf [2013-04-17 12:31:55 | 000,366,820 | ---- | C] () -- C:\Documents and Settings\ATomaszewski\Pulpit\The lipin protein family_Dual roles in lipid biosynthesis and gene expression.pdf [2013-04-17 12:30:55 | 000,344,043 | ---- | C] () -- C:\Documents and Settings\ATomaszewski\Pulpit\Effects of SCD1- and DGAT1-genes on production traits of Chinese Holstein.pdf [2013-04-17 12:25:07 | 000,657,724 | ---- | C] () -- C:\Documents and Settings\ATomaszewski\Pulpit\SCD review.pdf [2013-04-17 12:24:15 | 004,290,928 | ---- | C] () -- C:\Documents and Settings\ATomaszewski\Pulpit\DGAT_molecular biology biochemistry biotechnoogy.pdf [2013-04-16 13:52:45 | 000,279,714 | ---- | C] () -- C:\Documents and Settings\ATomaszewski\Pulpit\ptok_2011___10_Miesaki_kosci.pdf [2013-04-16 13:52:01 | 000,481,097 | ---- | C] () -- C:\Documents and Settings\ATomaszewski\Pulpit\ptok_2011___11_Miesaki_tkanek_miekkich.pdf [2013-04-05 12:29:38 | 001,030,997 | ---- | C] () -- C:\Documents and Settings\ATomaszewski\Pulpit\85126134.pdf [2013-04-03 13:26:36 | 000,001,804 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Adobe Reader 8.lnk [2013-04-03 13:02:20 | 000,001,048 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2013-04-03 13:02:19 | 000,001,044 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2013-02-26 17:04:38 | 000,000,100 | ---- | C] () -- C:\WINDOWS\WPCMAPI.INI [2013-01-18 14:54:24 | 115,302,985 | ---- | C] () -- C:\Program Files\openofficeorg1.cab [2013-01-18 14:52:54 | 000,475,136 | ---- | C] () -- C:\Program Files\setup.exe [2013-01-18 14:52:52 | 003,153,920 | ---- | C] () -- C:\Program Files\openofficeorg341.msi [2013-01-18 14:52:52 | 000,000,294 | ---- | C] () -- C:\Program Files\setup.ini [2012-10-10 15:51:15 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll [2011-11-03 12:20:39 | 048,324,552 | ---- | C] () -- C:\WINDOWS\System32\MRT.exe [2009-11-05 12:25:00 | 000,007,168 | ---- | C] () -- C:\Documents and Settings\ATomaszewski\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-10-16 11:35:25 | 000,000,138 | ---- | C] () -- C:\Documents and Settings\ATomaszewski\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [color=#E56717]========== ZeroAccess Check ==========[/color] [2008-05-09 07:04:29 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shdocvw.dll -- [2012-08-30 22:33:28 | 001,510,400 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009-02-09 12:53:44 | 000,473,600 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008-04-15 14:00:00 | 000,273,920 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [color=#E56717]========== LOP Check ==========[/color] [2009-06-09 12:51:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Windows Desktop Search [2013-02-25 12:25:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AVAST Software [2013-04-03 11:13:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ESET [2013-04-05 16:15:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ATomaszewski\Dane aplikacji\.oit [2013-04-16 14:29:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ATomaszewski\Dane aplikacji\7 Sticky Notes [2013-04-18 11:53:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ATomaszewski\Dane aplikacji\B1Toolbar [2011-11-04 14:59:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ATomaszewski\Dane aplikacji\ESET [2013-02-26 17:07:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ATomaszewski\Dane aplikacji\Novell [2013-02-25 18:04:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ATomaszewski\Dane aplikacji\OpenOffice.org [2013-02-25 14:02:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ATomaszewski\Dane aplikacji\pdfforge [2009-06-09 12:51:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ATomaszewski\Dane aplikacji\Windows Desktop Search [2009-10-22 11:55:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ATomaszewski\Dane aplikacji\Windows Search [2009-06-09 12:51:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Default User\Dane aplikacji\Windows Desktop Search [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Files - Unicode (All) ==========[/color] [2013-04-17 12:30:37 | 000,550,596 | ---- | M] ()(C:\Documents and Settings\ATomaszewski\Pulpit\Polymorphism identi?cation in goat DGAT2 gene and association with milk traits.pdf) -- C:\Documents and Settings\ATomaszewski\Pulpit\Polymorphism identification in goat DGAT2 gene and association with milk traits.pdf [2013-04-17 12:30:37 | 000,550,596 | ---- | C] ()(C:\Documents and Settings\ATomaszewski\Pulpit\Polymorphism identi?cation in goat DGAT2 gene and association with milk traits.pdf) -- C:\Documents and Settings\ATomaszewski\Pulpit\Polymorphism identification in goat DGAT2 gene and association with milk traits.pdf [color=#E56717]========== Hard Links - Junction Points - Mount Points - Symbolic Links ==========[/color] [C:\WINDOWS\$NtUninstallKB63487$] -> Error: Cannot create file handle -> Unknown point type < End of report >