OTL logfile created on: 2012-07-06 13:57:57 - Run 2 OTL by OldTimer - Version 3.2.53.1 Folder = G:\ 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 8.0.7601.17514) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,87 Gb Total Physical Memory | 2,79 Gb Available Physical Memory | 72,10% Memory free 7,73 Gb Paging File | 6,70 Gb Available in Paging File | 86,65% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 100,00 Gb Total Space | 62,55 Gb Free Space | 62,55% Space Free | Partition Type: NTFS Drive D: | 100,00 Gb Total Space | 38,19 Gb Free Space | 38,19% Space Free | Partition Type: NTFS Drive E: | 100,00 Gb Total Space | 33,24 Gb Free Space | 33,24% Space Free | Partition Type: NTFS Drive G: | 113,64 Gb Total Space | 10,65 Gb Free Space | 9,37% Space Free | Partition Type: NTFS Computer Name: MAREKLENOVO | User Name: Kubus05_2007 | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-07-06 13:55:39 | 000,595,968 | ---- | M] (OldTimer Tools) -- G:\OTL (1).exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012-06-28 12:28:56 | 000,438,296 | ---- | M] () -- C:\Users\Kubus05_2007\AppData\Local\Google\Chrome\Application\20.0.1132.47\ppGoogleNaClPluginChrome.dll MOD - [2012-06-28 12:28:54 | 003,972,120 | ---- | M] () -- C:\Users\Kubus05_2007\AppData\Local\Google\Chrome\Application\20.0.1132.47\pdf.dll MOD - [2012-06-28 12:27:29 | 000,140,328 | ---- | M] () -- C:\Users\Kubus05_2007\AppData\Local\Google\Chrome\Application\20.0.1132.47\avutil-51.dll MOD - [2012-06-28 12:27:28 | 000,262,184 | ---- | M] () -- C:\Users\Kubus05_2007\AppData\Local\Google\Chrome\Application\20.0.1132.47\avformat-54.dll MOD - [2012-06-28 12:27:26 | 002,386,984 | ---- | M] () -- C:\Users\Kubus05_2007\AppData\Local\Google\Chrome\Application\20.0.1132.47\avcodec-54.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2009-09-22 20:16:32 | 000,579,400 | ---- | M] (Lenovo Group Limited) [On_Demand | Stopped] -- C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe -- (Lenovo ReadyComm ConnSvc) SRV:[b]64bit:[/b] - [2009-08-14 16:22:48 | 000,509,192 | ---- | M] (Lenovo Group Limited) [On_Demand | Stopped] -- C:\Program Files\Lenovo\ReadyComm\AppSvc.exe -- (Lenovo ReadyComm AppSvc) SRV:[b]64bit:[/b] - [2009-08-11 18:59:38 | 000,864,032 | ---- | M] (Broadcom Corporation.) [Auto | Stopped] -- C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe -- (btwdins) SRV:[b]64bit:[/b] - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2012-06-21 22:58:52 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2011-11-30 17:12:40 | 000,718,888 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2010-04-13 10:17:40 | 000,253,264 | ---- | M] () [Auto | Stopped] -- D:\Programy\ZTE\Cyfrowy Polsat\AssistantServices.exe -- (UI Assistant Service) SRV - [2010-03-18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2010-03-03 22:16:06 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) Intel(R) SRV - [2009-12-09 10:48:26 | 002,320,920 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) Intel(R) SRV - [2009-12-09 10:48:24 | 000,268,824 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) Intel(R) SRV - [2009-07-16 05:12:42 | 000,276,296 | ---- | M] (Lenovo Group Limited) [On_Demand | Stopped] -- C:\Program Files (x86)\Lenovo\ReadyComm\PS_MDP.dll -- (PS_MDP) SRV - [2009-07-14 16:27:26 | 000,038,152 | ---- | M] (Lenovo Group Limited) [On_Demand | Stopped] -- C:\Program Files (x86)\Lenovo\ReadyComm\common\IGRS.exe -- (IGRS) SRV - [2009-07-14 16:27:20 | 000,103,688 | ---- | M] (Lenovo Group Limited) [Auto | Stopped] -- C:\Program Files (x86)\Lenovo\ReadyComm\common\router.dll -- (ReadyComm.DirectRouter) SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2007-05-31 17:11:54 | 000,443,784 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm) SRV - [2007-05-31 17:11:46 | 000,225,672 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2012-03-01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2012-02-15 12:01:50 | 000,052,736 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64) DRV:[b]64bit:[/b] - [2012-01-05 01:01:54 | 000,037,888 | ---- | M] (AnchorFree Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\taphss.sys -- (taphss) DRV:[b]64bit:[/b] - [2011-12-08 06:22:36 | 000,172,104 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdmdm.sys -- (sscdmdm) DRV:[b]64bit:[/b] - [2011-12-08 06:22:36 | 000,136,264 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdbus.sys -- (sscdbus) SAMSUNG USB Composite Device driver (WDM) DRV:[b]64bit:[/b] - [2011-12-08 06:22:36 | 000,019,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdmdfl.sys -- (sscdmdfl) DRV:[b]64bit:[/b] - [2011-12-08 06:22:28 | 000,177,640 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadmdm.sys -- (ssadmdm) DRV:[b]64bit:[/b] - [2011-12-08 06:22:28 | 000,157,672 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadbus.sys -- (ssadbus) SAMSUNG Android USB Composite Device driver (WDM) DRV:[b]64bit:[/b] - [2011-12-08 06:22:28 | 000,146,920 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadserd.sys -- (ssadserd) SAMSUNG Android USB Diagnostic Serial Port (WDM) DRV:[b]64bit:[/b] - [2011-12-08 06:22:28 | 000,036,328 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadadb.sys -- (androidusb) DRV:[b]64bit:[/b] - [2011-12-08 06:22:28 | 000,016,872 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadmdfl.sys -- (ssadmdfl) SAMSUNG Android USB Modem (Filter) DRV:[b]64bit:[/b] - [2011-11-01 11:07:26 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltjx64.sys -- (UsbserFilt) DRV:[b]64bit:[/b] - [2011-11-01 11:07:26 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys -- (upperdev) DRV:[b]64bit:[/b] - [2011-11-01 11:07:24 | 000,027,136 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdc) DRV:[b]64bit:[/b] - [2011-11-01 11:07:24 | 000,019,968 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcd) DRV:[b]64bit:[/b] - [2011-07-25 17:44:46 | 000,074,752 | ---- | M] (Research In Motion Limited) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RimUsb_AMD64.sys -- (RimUsb) DRV:[b]64bit:[/b] - [2011-07-20 14:58:22 | 000,044,032 | ---- | M] (Research in Motion Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RimSerial_AMD64.sys -- (RimVSerPort) DRV:[b]64bit:[/b] - [2011-06-10 07:34:52 | 000,539,240 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2010-11-20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2010-11-20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2010-11-20 12:43:57 | 000,032,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser) DRV:[b]64bit:[/b] - [2010-06-24 04:43:58 | 000,167,816 | ---- | M] (ELAN Microelectronics Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ETD.sys -- (ETD) DRV:[b]64bit:[/b] - [2010-06-18 15:34:58 | 004,170,304 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BCMWL664.SYS -- (BCM43XX) DRV:[b]64bit:[/b] - [2010-03-18 12:35:10 | 000,215,168 | ---- | M] (Vimicro Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vm331avs.sys -- (vm331avs) DRV:[b]64bit:[/b] - [2010-03-12 05:23:16 | 000,242,720 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR) DRV:[b]64bit:[/b] - [2010-03-03 21:51:40 | 000,540,696 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor) DRV:[b]64bit:[/b] - [2010-01-28 13:55:04 | 000,086,120 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA) DRV:[b]64bit:[/b] - [2010-01-18 11:45:50 | 000,717,368 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CHDRT64.sys -- (CnxtHdAudService) DRV:[b]64bit:[/b] - [2010-01-05 16:23:44 | 000,121,344 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ZTEusbser6k.sys -- (ZTEusbser6k) DRV:[b]64bit:[/b] - [2010-01-05 16:23:44 | 000,121,344 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ZTEusbnmea.sys -- (ZTEusbnmea) DRV:[b]64bit:[/b] - [2009-10-19 02:40:50 | 000,028,176 | ---- | M] (Lenovo Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AcpiVpc.sys -- (ACPIVPC) DRV:[b]64bit:[/b] - [2009-09-27 10:46:16 | 000,011,776 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\massfilter.sys -- (massfilter) DRV:[b]64bit:[/b] - [2009-09-17 06:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64) Intel(R) DRV:[b]64bit:[/b] - [2009-07-21 16:20:06 | 000,121,840 | ---- | M] (CyberLink) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wsvd.sys -- (wsvd) DRV:[b]64bit:[/b] - [2009-07-16 13:55:34 | 000,011,280 | ---- | M] (Lenovo) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WDMirror.sys -- (wdmirror) DRV:[b]64bit:[/b] - [2009-07-16 05:38:20 | 000,079,376 | ---- | M] (Lenovo) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WDBridge.sys -- (Bridge0) DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-07-14 02:10:47 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rootmdm.sys -- (ROOTMODEM) DRV:[b]64bit:[/b] - [2009-07-01 06:46:58 | 000,052,264 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btusbflt.sys -- (btusbflt) DRV:[b]64bit:[/b] - [2009-07-01 06:46:52 | 000,098,344 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwaudio.sys -- (btwaudio) DRV:[b]64bit:[/b] - [2009-07-01 06:46:48 | 000,132,648 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwavdt.sys -- (btwavdt) DRV:[b]64bit:[/b] - [2009-07-01 06:46:40 | 000,021,160 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwrchid.sys -- (btwrchid) DRV:[b]64bit:[/b] - [2009-06-10 22:37:05 | 006,108,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) DRV:[b]64bit:[/b] - [2009-06-10 22:35:28 | 005,434,368 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netw5v64.sys -- (netw5v64) Intel(R) DRV:[b]64bit:[/b] - [2009-06-10 22:34:36 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\k57nd60a.sys -- (k57nd60a) Broadcom NetLink (TM) DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009-05-18 14:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM) DRV:[b]64bit:[/b] - [2009-04-07 09:33:08 | 000,035,104 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwl2cap.sys -- (btwl2cap) DRV:[b]64bit:[/b] - [2008-12-18 04:04:54 | 000,150,784 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ZTEusbmdm6k.sys -- (ZTEusbmdm6k) DRV:[b]64bit:[/b] - [2008-08-28 12:44:42 | 000,025,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd) DRV:[b]64bit:[/b] - [2008-08-06 14:32:16 | 000,151,656 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr) DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local IE - HKU\S-1-5-21-1528030528-93823963-2258503987-1000\..\SearchScopes,DefaultScope = {02A6E3C7-C389-4F6F-A204-77517362CCDD} IE - HKU\S-1-5-21-1528030528-93823963-2258503987-1000\..\SearchScopes\{02A6E3C7-C389-4F6F-A204-77517362CCDD}: "URL" = http://www.google.com/search?hl=pl&q={searchTerms} IE - HKU\S-1-5-21-1528030528-93823963-2258503987-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox IE - HKU\S-1-5-21-1528030528-93823963-2258503987-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1528030528-93823963-2258503987-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local [color=#E56717]========== FireFox ==========[/color] FF - user.js - File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF64_11_3_300_257.dll File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_257.dll () FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: D:\Programy\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: D:\Java\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.0.61118.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@RIM.com/WebSLLauncher,version=1.0: C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll () FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Kubus05_2007\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Kubus05_2007\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{27182e60-b5f3-411c-b545-b44205977502}: C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\ [2011-12-16 05:40:03 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}: C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\ [2011-12-16 05:40:06 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: D:\Programy\MozillaFirefox\components [2012-06-21 22:58:53 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: D:\Programy\MozillaFirefox\plugins FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: D:\Programy\ESET\Mozilla Thunderbird [2011-12-07 22:12:22 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kubus05_2007\AppData\Roaming\mozilla\Extensions [2012-05-05 22:53:45 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kubus05_2007\AppData\Roaming\mozilla\Firefox\Profiles\xtu2asny.default\extensions [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}, CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Users\Kubus05_2007\AppData\Local\Google\Chrome\Application\20.0.1132.47\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Kubus05_2007\AppData\Local\Google\Chrome\Application\20.0.1132.47\pdf.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Kubus05_2007\AppData\Local\Google\Chrome\Application\20.0.1132.47\gcswf32.dll CHR - plugin: Shockwave Flash (Disabled) = C:\Users\Kubus05_2007\AppData\Local\Google\Chrome\User Data\PepperFlash\11.1.31.203\pepflashplayer.dll CHR - plugin: Shockwave Flash (Enabled) = C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll CHR - plugin: Java Deployment Toolkit 6.0.290.11 (Enabled) = D:\Java\bin\new_plugin\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 6 U29 (Enabled) = D:\Java\bin\new_plugin\npjp2.dll CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\5.0.61118.0\npctrl.dll CHR - plugin: Windows Live\u00AE Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll CHR - plugin: iTunes Application Detector (Enabled) = D:\Programy\Mozilla Plugins\npitunes.dll CHR - Extension: News Reader (by Google) = C:\Users\Kubus05_2007\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhhcdlggicnjoobiphdkdgmblbknkjjp\2.2.1_0\ CHR - Extension: YouTube = C:\Users\Kubus05_2007\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: Szukaj w Google = C:\Users\Kubus05_2007\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\ CHR - Extension: Gmail = C:\Users\Kubus05_2007\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2009-06-10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2:[b]64bit:[/b] - BHO: (no name) - {3706EE7C-3CAD-445D-8A43-03EBC3B75908} - No CLSID value found. O2 - BHO: (Bing Bar BHO) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll (Microsoft Corporation) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Java\bin\jp2ssv.dll (Sun Microsystems, Inc.) O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKLM\..\Toolbar: (@C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll,-100) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll (Microsoft Corporation) O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O4:[b]64bit:[/b] - HKLM..\Run: [cAudioFilterAgent] C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe (Conexant Systems, Inc.) O4:[b]64bit:[/b] - HKLM..\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronics Corp.) O4:[b]64bit:[/b] - HKLM..\Run: [NvCplDaemon] C:\windows\SysNative\NvCpl.dll (NVIDIA Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [Windows Mobile Device Center] C:\Windows\WindowsMobile\wmdc.exe (Microsoft Corporation) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation) O4 - HKLM..\Run: [iTunesHelper] D:\Programy\iTunesHelper.exe (Apple Inc.) O4 - HKLM..\Run: [RIMBBLaunchAgent.exe] C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe (Research In Motion Limited) O4 - HKLM..\Run: [UpdateP2GShortCut] C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM..\Run: [wrwcpyfpvpktqna] C:\ProgramData\wrwcpyfp.exe () O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-1528030528-93823963-2258503987-1000..\Run: [BitTorrent] D:\Programy\BitTorrent\BitTorrent.exe (BitTorrent, Inc.) O4 - HKU\S-1-5-21-1528030528-93823963-2258503987-1000..\Run: [wrwcpyfpvpktqna] C:\ProgramData\wrwcpyfp.exe () O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found F3:[b]64bit:[/b] - HKU\S-1-5-21-1528030528-93823963-2258503987-1000 WinNT: Run - (C:\windows\system32\config\Win.exe) - File not found F3 - HKU\S-1-5-21-1528030528-93823963-2258503987-1000 WinNT: Run - (C:\windows\system32\config\Win.exe) - C:\Windows\SysWOW64\config\Win.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O8:[b]64bit:[/b] - Extra context menu item: E&ksport do programu Microsoft Excel - D:\Programy\msOffice\OFFICE11\EXCEL.EXE (Microsoft Corporation) O8:[b]64bit:[/b] - Extra context menu item: Wyślij obraz do urządzenia &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm () O8:[b]64bit:[/b] - Extra context menu item: Wyślij stronę do urządzenia &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm () O8 - Extra context menu item: E&ksport do programu Microsoft Excel - D:\Programy\msOffice\OFFICE11\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: Wyślij obraz do urządzenia &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm () O8 - Extra context menu item: Wyślij stronę do urządzenia &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm () O9:[b]64bit:[/b] - Extra Button: @C:\Program Files\Lenovo\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm () O9:[b]64bit:[/b] - Extra 'Tools' menuitem : @C:\Program Files\Lenovo\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm () O9 - Extra Button: @C:\windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : @C:\windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation) O9 - Extra Button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\Programy\msOffice\OFFICE11\REFIEBAR.DLL (Microsoft Corporation) O9 - Extra Button: Wyślij do interfejsu Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm () O9 - Extra 'Tools' menuitem : Wyślij do urządzenia &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm () O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000006 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O16:[b]64bit:[/b] - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 213.241.79.37 83.238.255.76 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0D9EAAE2-BD84-4AAA-9B87-FBA32F100F78}: DhcpNameServer = 213.241.79.37 83.238.255.76 O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\oledb - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\ms-itss - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap11 - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O18:[b]64bit:[/b] - Protocol\Filter\text/xml - No CLSID value found O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (C:\windows\system32\WinSit.exe) - C:\Windows\SysWOW64\WinSit.exe () O20 - HKLM Winlogon: UserInit - (C:\windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2012-04-09 09:06:50 | 000,123,834 | ---- | M] () - C:\AutoMapaSetupLog.txt -- [ NTFS ] O33 - MountPoints2\{3d61fddc-360d-11e1-857d-88ae1de204b0}\Shell - "" = AutoRun O33 - MountPoints2\{3d61fddc-360d-11e1-857d-88ae1de204b0}\Shell\AutoRun\command - "" = H:\AutoRun.exe O33 - MountPoints2\{3d61fe38-360d-11e1-857d-88ae1de204b0}\Shell - "" = AutoRun O33 - MountPoints2\{3d61fe38-360d-11e1-857d-88ae1de204b0}\Shell\AutoRun\command - "" = H:\AutoRun.exe O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-07-06 11:47:06 | 000,000,000 | ---D | C] -- C:\ProgramData\huskzckuqkhaasw [2012-06-29 17:06:22 | 000,000,000 | ---D | C] -- C:\Users\Kubus05_2007\Documents\BlackBerry [2012-06-29 17:04:23 | 000,000,000 | ---D | C] -- C:\Users\Kubus05_2007\AppData\Local\Research In Motion [2012-06-29 17:04:21 | 000,000,000 | ---D | C] -- C:\Users\Kubus05_2007\AppData\Roaming\Research In Motion [2012-06-29 17:04:00 | 000,044,032 | ---- | C] (Research in Motion Ltd) -- C:\windows\SysNative\drivers\RimSerial_AMD64.sys [2012-06-29 17:03:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlackBerry [2012-06-29 17:03:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Research In Motion [2012-06-29 17:03:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\XCPCSync.OEM [2012-06-29 17:03:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Research In Motion [2012-06-25 12:21:22 | 000,735,744 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\msfeeds.dll [2012-06-25 12:21:21 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieui.dll [2012-06-25 12:21:21 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ieui.dll [2012-06-25 12:21:21 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\mshtmled.dll [2012-06-25 12:21:21 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\mshtmled.dll [2012-06-25 12:21:20 | 000,134,144 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\url.dll [2012-06-25 12:21:20 | 000,132,096 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\url.dll [2012-06-25 12:20:49 | 005,559,664 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ntoskrnl.exe [2012-06-25 12:20:48 | 003,913,072 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ntoskrnl.exe [2012-06-25 12:20:47 | 003,968,368 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ntkrnlpa.exe [2012-06-25 12:20:39 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\rdpcorekmts.dll [2012-06-25 12:20:39 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\rdpwsx.dll [2012-06-25 12:20:39 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\rdrmemptylst.exe [2012-06-23 12:29:45 | 002,622,464 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\wucltux.dll [2012-06-23 12:29:45 | 000,057,880 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\wuauclt.exe [2012-06-23 12:29:45 | 000,044,056 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\wups2.dll [2012-06-23 12:29:40 | 000,701,976 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\wuapi.dll [2012-06-23 12:29:40 | 000,099,840 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\wudriver.dll [2012-06-23 12:29:40 | 000,038,424 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\wups.dll [2012-06-23 12:29:32 | 000,186,752 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\wuwebv.dll [2012-06-23 12:29:32 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\wuapp.exe [2012-06-17 21:11:50 | 000,000,000 | ---D | C] -- C:\Users\Kubus05_2007\AppData\Local\Macromedia [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-07-06 13:59:36 | 004,456,448 | -HS- | M] () -- C:\Users\Kubus05_2007\ntuser.dat [2012-07-06 13:19:33 | 001,549,696 | ---- | M] () -- C:\windows\SysNative\PerfStringBackup.INI [2012-07-06 13:19:33 | 000,697,674 | ---- | M] () -- C:\windows\SysNative\perfh015.dat [2012-07-06 13:19:33 | 000,615,810 | ---- | M] () -- C:\windows\SysNative\perfh009.dat [2012-07-06 13:19:33 | 000,134,784 | ---- | M] () -- C:\windows\SysNative\perfc015.dat [2012-07-06 13:19:33 | 000,106,190 | ---- | M] () -- C:\windows\SysNative\perfc009.dat [2012-07-06 13:15:02 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat [2012-07-06 13:14:54 | 3113,365,504 | -HS- | M] () -- C:\hiberfil.sys [2012-07-06 12:01:10 | 000,013,632 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012-07-06 12:01:10 | 000,013,632 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012-07-06 11:57:10 | 000,001,056 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore.job [2012-07-06 11:54:00 | 000,000,006 | -H-- | M] () -- C:\windows\tasks\SA.DAT [2012-07-06 11:47:06 | 000,000,051 | ---- | M] () -- C:\ProgramData\nksvachlcytfmck [2012-07-06 11:46:50 | 000,066,048 | ---- | M] () -- C:\ProgramData\wrwcpyfp.exe [2012-07-06 11:18:00 | 000,001,086 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-1528030528-93823963-2258503987-1000UA.job [2012-07-06 11:18:00 | 000,001,060 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA.job [2012-07-06 02:19:34 | 012,722,224 | -H-- | M] () -- C:\Users\Kubus05_2007\AppData\Local\IconCache.db [2012-07-03 16:18:00 | 000,001,034 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-1528030528-93823963-2258503987-1000Core.job [2012-07-01 16:05:06 | 003,683,156 | ---- | M] () -- C:\Users\Kubus05_2007\Desktop\PN_2012_LATO_www.pdf [2012-06-29 17:49:47 | 000,024,261 | ---- | M] () -- C:\ads_err.adt [2012-06-29 17:23:50 | 000,004,559 | ---- | M] () -- C:\ads_err.adm [2012-06-29 17:23:50 | 000,003,072 | ---- | M] () -- C:\ads_err.adi [2012-06-29 17:23:30 | 000,006,499 | ---- | M] () -- C:\ads_err.dbf [2012-06-29 17:20:52 | 000,000,000 | -H-- | M] () -- C:\windows\SysNative\drivers\Msft_Kernel_RimUsb_AMD64_01007.Wdf [2012-06-29 17:06:00 | 000,005,120 | ---- | M] () -- C:\Users\Kubus05_2007\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-06-29 17:04:02 | 000,000,000 | -H-- | M] () -- C:\windows\SysNative\drivers\Msft_Kernel_RimSerial_AMD64_01007.Wdf [2012-06-29 11:37:24 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\windows\SysWow64\FlashPlayerApp.exe [2012-06-29 11:37:24 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\windows\SysWow64\FlashPlayerCPLApp.cpl [2012-06-28 11:55:29 | 000,110,468 | ---- | M] () -- C:\Users\Kubus05_2007\Desktop\dojazd.png [2012-06-25 14:43:46 | 000,334,400 | ---- | M] () -- C:\windows\SysNative\FNTCACHE.DAT [2012-06-21 20:21:12 | 000,721,790 | ---- | M] () -- C:\Users\Kubus05_2007\Desktop\102.jpg [2012-06-09 14:42:12 | 000,122,624 | ---- | M] () -- C:\Users\Kubus05_2007\Desktop\mat2.jpg [2012-06-09 14:42:01 | 000,101,194 | ---- | M] () -- C:\Users\Kubus05_2007\Desktop\mat.jpg [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-07-06 11:47:06 | 000,066,048 | ---- | C] () -- C:\ProgramData\wrwcpyfp.exe [2012-07-06 11:46:51 | 000,000,051 | ---- | C] () -- C:\ProgramData\nksvachlcytfmck [2012-07-01 16:05:05 | 003,683,156 | ---- | C] () -- C:\Users\Kubus05_2007\Desktop\PN_2012_LATO_www.pdf [2012-06-29 17:23:30 | 000,024,261 | ---- | C] () -- C:\ads_err.adt [2012-06-29 17:23:30 | 000,006,499 | ---- | C] () -- C:\ads_err.dbf [2012-06-29 17:23:30 | 000,004,559 | ---- | C] () -- C:\ads_err.adm [2012-06-29 17:23:30 | 000,003,072 | ---- | C] () -- C:\ads_err.adi [2012-06-29 17:20:52 | 000,000,000 | -H-- | C] () -- C:\windows\SysNative\drivers\Msft_Kernel_RimUsb_AMD64_01007.Wdf [2012-06-29 17:05:59 | 000,005,120 | ---- | C] () -- C:\Users\Kubus05_2007\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-06-29 17:04:02 | 000,000,000 | -H-- | C] () -- C:\windows\SysNative\drivers\Msft_Kernel_RimSerial_AMD64_01007.Wdf [2012-06-28 11:55:29 | 000,110,468 | ---- | C] () -- C:\Users\Kubus05_2007\Desktop\dojazd.png [2012-06-21 20:21:11 | 000,721,790 | ---- | C] () -- C:\Users\Kubus05_2007\Desktop\102.jpg [2012-06-09 14:42:07 | 000,122,624 | ---- | C] () -- C:\Users\Kubus05_2007\Desktop\mat2.jpg [2012-06-09 14:41:53 | 000,101,194 | ---- | C] () -- C:\Users\Kubus05_2007\Desktop\mat.jpg [2012-06-06 14:51:56 | 000,000,690 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk [2012-05-22 13:56:11 | 000,000,000 | ---- | C] () -- C:\windows\SysWow64\Penx.dat [2012-05-20 04:09:13 | 000,057,344 | ---- | C] () -- C:\windows\SysWow64\WinSit.exe [2012-04-06 18:08:50 | 000,000,252 | ---- | C] () -- C:\windows\game.ini [2012-04-06 17:58:26 | 000,000,632 | ---- | C] () -- C:\windows\CoD.INI [2012-04-02 20:48:59 | 000,000,041 | ---- | C] () -- C:\windows\wininit.ini [2012-03-22 19:01:32 | 000,079,360 | ---- | C] () -- C:\windows\SysWow64\ff_vfw.dll [2012-03-15 07:40:28 | 004,826,112 | ---- | C] () -- C:\windows\SysWow64\x264vfw.dll [2012-03-04 11:49:49 | 000,524,288 | -HS- | C] () -- C:\Users\Kubus05_2007\ntuser.dat{b48e5a89-65cb-11e1-af4c-18f46af3a22e}.TMContainer00000000000000000002.regtrans-ms [2012-03-04 11:49:49 | 000,524,288 | -HS- | C] () -- C:\Users\Kubus05_2007\ntuser.dat{b48e5a89-65cb-11e1-af4c-18f46af3a22e}.TMContainer00000000000000000001.regtrans-ms [2012-03-04 11:49:49 | 000,065,536 | -HS- | C] () -- C:\Users\Kubus05_2007\ntuser.dat{b48e5a89-65cb-11e1-af4c-18f46af3a22e}.TM.blf [2012-03-04 00:26:29 | 000,108,124 | -H-- | C] () -- C:\windows\SysWow64\mlfcache.dat [2012-03-03 16:25:51 | 000,000,000 | ---- | C] () -- C:\windows\SysWow64\Xpen.dat [2012-02-27 20:47:30 | 000,524,288 | -HS- | C] () -- C:\Users\Kubus05_2007\ntuser.dat{d5a28ce4-6171-11e1-a98f-88ae1de204b0}.TMContainer00000000000000000002.regtrans-ms [2012-02-27 20:47:29 | 000,524,288 | -HS- | C] () -- C:\Users\Kubus05_2007\ntuser.dat{d5a28ce4-6171-11e1-a98f-88ae1de204b0}.TMContainer00000000000000000001.regtrans-ms [2012-02-27 20:47:29 | 000,065,536 | -HS- | C] () -- C:\Users\Kubus05_2007\ntuser.dat{d5a28ce4-6171-11e1-a98f-88ae1de204b0}.TM.blf [2012-02-14 22:59:54 | 000,011,705 | ---- | C] () -- C:\Users\Kubus05_2007\AppData\Roaming\UserTile.png [2012-02-02 14:26:28 | 000,524,288 | -HS- | C] () -- C:\Users\Kubus05_2007\ntuser.dat{21700541-4d7f-11e1-a3c6-88ae1de204b0}.TMContainer00000000000000000002.regtrans-ms [2012-02-02 14:26:28 | 000,524,288 | -HS- | C] () -- C:\Users\Kubus05_2007\ntuser.dat{21700541-4d7f-11e1-a3c6-88ae1de204b0}.TMContainer00000000000000000001.regtrans-ms [2012-02-02 14:26:28 | 000,065,536 | -HS- | C] () -- C:\Users\Kubus05_2007\ntuser.dat{21700541-4d7f-11e1-a3c6-88ae1de204b0}.TM.blf [2012-01-09 20:45:18 | 000,178,688 | ---- | C] () -- C:\windows\SysWow64\unrar.dll [2011-12-23 21:58:28 | 000,030,568 | ---- | C] () -- C:\windows\MusiccityDownload.exe [2011-12-23 21:58:24 | 000,974,848 | ---- | C] () -- C:\windows\SysWow64\cis-2.4.dll [2011-12-23 21:58:24 | 000,081,920 | ---- | C] () -- C:\windows\SysWow64\issacapi_bs-2.3.dll [2011-12-23 21:58:24 | 000,065,536 | ---- | C] () -- C:\windows\SysWow64\issacapi_pe-2.3.dll [2011-12-23 21:58:24 | 000,057,344 | ---- | C] () -- C:\windows\SysWow64\issacapi_se-2.3.dll [2011-12-23 16:09:34 | 000,001,024 | ---- | C] () -- C:\ProgramData\1doc2pdf.dll [2011-12-23 16:09:21 | 000,000,164 | ---- | C] () -- C:\windows\SysWow64\psconv.ini [2011-12-15 22:47:45 | 000,000,412 | ---- | C] () -- C:\windows\ODBC.INI [2011-12-14 18:22:00 | 001,575,678 | ---- | C] () -- C:\windows\SysWow64\PerfStringBackup.INI [2011-12-08 23:21:35 | 000,650,752 | ---- | C] () -- C:\windows\SysWow64\xvidcore.dll [2011-12-08 23:21:35 | 000,243,200 | ---- | C] () -- C:\windows\SysWow64\xvidvfw.dll [2011-12-07 21:44:53 | 000,000,088 | ---- | C] () -- C:\ProgramData\profile.xml [2011-12-07 20:32:24 | 000,216,064 | ---- | C] ( ) -- C:\windows\SysWow64\lagarith.dll [2011-12-05 19:13:11 | 012,722,224 | -H-- | C] () -- C:\Users\Kubus05_2007\AppData\Local\IconCache.db [2011-12-05 18:59:40 | 000,072,040 | ---- | C] () -- C:\Users\Kubus05_2007\AppData\Local\GDIPFONTCACHEV1.DAT [2011-12-05 18:58:41 | 004,456,448 | -HS- | C] () -- C:\Users\Kubus05_2007\ntuser.dat [2011-12-05 18:58:41 | 000,524,288 | -HS- | C] () -- C:\Users\Kubus05_2007\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms [2011-12-05 18:58:41 | 000,524,288 | -HS- | C] () -- C:\Users\Kubus05_2007\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms [2011-12-05 18:58:41 | 000,065,536 | -HS- | C] () -- C:\Users\Kubus05_2007\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf [2011-12-05 18:58:41 | 000,000,020 | -HS- | C] () -- C:\Users\Kubus05_2007\ntuser.ini [2010-10-29 07:54:05 | 000,000,512 | ---- | C] () -- C:\windows\previous.bin [2010-10-29 07:54:05 | 000,000,512 | ---- | C] () -- C:\windows\current.bin [2010-10-29 07:46:15 | 000,016,648 | ---- | C] () -- C:\windows\SysWow64\LogAPI.dll [2010-10-29 07:35:55 | 002,110,816 | ---- | C] () -- C:\windows\SysWow64\Apblend.dll [2010-10-29 07:35:55 | 001,171,456 | ---- | C] () -- C:\windows\SysWow64\PicNotify.dll [2010-10-29 07:35:47 | 001,044,480 | ---- | C] () -- C:\windows\SysWow64\3DImageRenderer.dll [2010-10-29 07:12:07 | 000,001,341 | ---- | C] () -- C:\windows\vm331Rmv.ini [color=#E56717]========== LOP Check ==========[/color] [2011-12-07 21:46:20 | 000,000,000 | ---D | M] -- C:\Users\Kubus05_2007\AppData\Roaming\ArcSyncConfig [2012-07-06 12:02:19 | 000,000,000 | ---D | M] -- C:\Users\Kubus05_2007\AppData\Roaming\BitTorrent [2012-01-10 23:27:18 | 000,000,000 | ---D | M] -- C:\Users\Kubus05_2007\AppData\Roaming\com.prakaz.project.photogettr.FBAB9E68ED32BC183252F597C39DBF71CF315A79.1 [2012-05-19 12:44:19 | 000,000,000 | ---D | M] -- C:\Users\Kubus05_2007\AppData\Roaming\DAEMON Tools Lite [2012-04-07 12:21:00 | 000,000,000 | ---D | M] -- C:\Users\Kubus05_2007\AppData\Roaming\Dropbox [2011-12-21 20:03:27 | 000,000,000 | ---D | M] -- C:\Users\Kubus05_2007\AppData\Roaming\EurekaLog [2012-07-05 23:49:25 | 000,000,000 | ---D | M] -- C:\Users\Kubus05_2007\AppData\Roaming\foobar2000 [2011-12-22 01:13:36 | 000,000,000 | ---D | M] -- C:\Users\Kubus05_2007\AppData\Roaming\Gadu-Gadu 10 [2012-05-23 18:10:00 | 000,000,000 | ---D | M] -- C:\Users\Kubus05_2007\AppData\Roaming\Mp3tag [2012-02-12 23:36:22 | 000,000,000 | ---D | M] -- C:\Users\Kubus05_2007\AppData\Roaming\naan studio, Inc [2011-12-31 18:31:48 | 000,000,000 | ---D | M] -- C:\Users\Kubus05_2007\AppData\Roaming\NapiProjekt [2012-03-16 23:34:05 | 000,000,000 | ---D | M] -- C:\Users\Kubus05_2007\AppData\Roaming\Nokia [2012-02-16 19:57:33 | 000,000,000 | ---D | M] -- C:\Users\Kubus05_2007\AppData\Roaming\OpenFM [2011-12-13 23:26:25 | 000,000,000 | ---D | M] -- C:\Users\Kubus05_2007\AppData\Roaming\OpenOffice.org [2012-03-01 16:27:41 | 000,000,000 | ---D | M] -- C:\Users\Kubus05_2007\AppData\Roaming\Opera [2012-04-09 07:35:44 | 000,000,000 | ---D | M] -- C:\Users\Kubus05_2007\AppData\Roaming\Patcher [2012-04-10 15:05:50 | 000,000,000 | ---D | M] -- C:\Users\Kubus05_2007\AppData\Roaming\PC Suite [2011-12-19 19:43:53 | 000,000,000 | ---D | M] -- C:\Users\Kubus05_2007\AppData\Roaming\Red Kawa [2012-06-29 17:05:51 | 000,000,000 | ---D | M] -- C:\Users\Kubus05_2007\AppData\Roaming\Research In Motion [2012-02-03 11:02:58 | 000,000,000 | ---D | M] -- C:\Users\Kubus05_2007\AppData\Roaming\Rovio [2012-01-07 11:48:25 | 000,000,000 | ---D | M] -- C:\Users\Kubus05_2007\AppData\Roaming\Samsung [2012-02-11 15:10:20 | 000,000,000 | ---D | M] -- C:\Users\Kubus05_2007\AppData\Roaming\SharePod [2011-12-31 17:21:44 | 000,000,000 | ---D | M] -- C:\Users\Kubus05_2007\AppData\Roaming\SoftGrid Client [2011-12-23 16:28:32 | 000,000,000 | ---D | M] -- C:\Users\Kubus05_2007\AppData\Roaming\Softland [2012-01-07 12:00:46 | 000,000,000 | ---D | M] -- C:\Users\Kubus05_2007\AppData\Roaming\Temp [2011-12-14 18:22:31 | 000,000,000 | ---D | M] -- C:\Users\Kubus05_2007\AppData\Roaming\TP [2012-03-26 08:30:59 | 000,000,000 | ---D | M] -- C:\Users\Kubus05_2007\AppData\Roaming\Win7codecs [2012-05-27 21:20:15 | 000,032,604 | ---- | M] () -- C:\windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] < End of report >