OTL logfile created on: 2012-07-21 16:23:34 - Run 2 OTL by OldTimer - Version 3.2.54.0 Folder = C:\Documents and Settings\Nicole\Desktop Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Poland | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 1,65 Gb Available Physical Memory | 82,57% Memory free 3,85 Gb Paging File | 3,74 Gb Available in Paging File | 97,24% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 44,77 Gb Total Space | 7,74 Gb Free Space | 17,28% Space Free | Partition Type: NTFS Drive D: | 48,39 Gb Total Space | 10,11 Gb Free Space | 20,90% Space Free | Partition Type: NTFS Computer Name: ASUS | User Name: Nicole | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-07-21 13:24:13 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Nicole\Desktop\OTL.exe PRC - [2008-04-14 15:42:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2009-02-27 19:04:20 | 000,311,296 | ---- | M] () -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\pdfshell.POL MOD - [2004-08-10 14:00:00 | 000,015,360 | ---- | M] () -- C:\WINDOWS\system32\tsd32.dll MOD - [2002-04-18 19:16:38 | 000,094,636 | ---- | M] () -- C:\WINDOWS\dropcpyr.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Auto | Stopped] -- C:\Documents and Settings\Nicole\Desktop\Updater\Updater.exe -- (SkypeUpdate) SRV - [2012-07-18 21:51:44 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2012-04-04 18:47:32 | 000,161,664 | ---- | M] (Oracle Corporation) [Auto | Stopped] -- C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe -- (JavaQuickStarterService) SRV - [2012-04-01 14:08:00 | 000,253,600 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2011-11-28 20:01:23 | 000,127,192 | ---- | M] (AVAST Software) [Auto | Stopped] -- C:\Program Files\Alwil Software\Avast5\afwServ.exe -- (avast! Firewall) SRV - [2011-11-28 20:01:23 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Stopped] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus) SRV - [2010-03-05 08:38:00 | 000,071,096 | ---- | M] () [Auto | Stopped] -- C:\Program Files\CDBurnerXP\NMSAccessU.exe -- (NMSAccess) SRV - [2009-07-20 12:51:52 | 000,935,208 | ---- | M] (Nero AG) [Auto | Stopped] -- C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0) SRV - [2009-02-26 18:36:22 | 000,064,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- D:\Nikola\office2007\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service) SRV - [2007-11-07 18:58:18 | 003,004,416 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- c:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\Remote Debugger\x86\msvsmon.exe -- (msvsmon90) SRV - [2005-11-29 12:51:04 | 000,099,872 | ---- | M] (Infineon Technologies AG) [Auto | Stopped] -- C:\Program Files\Infineon\Security Platform Software\PSDsrvc.EXE -- (PersonalSecureDriveService) SRV - [2004-07-08 12:58:28 | 000,032,768 | ---- | M] (Panda Software) [Auto | Stopped] -- C:\Program Files\Common Files\Panda Software\PavShld\PavPrSrv.exe -- (PavPrSrv) SRV - [2003-04-07 22:21:46 | 000,065,795 | R--- | M] (HP) [On_Demand | Stopped] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - [2012-01-03 19:54:58 | 000,229,224 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\VMM.sys -- (vmm) DRV - [2011-12-13 18:27:30 | 007,069,288 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2011-11-28 19:54:38 | 000,111,320 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswFW.sys -- (aswFW) DRV - [2011-11-28 19:53:53 | 000,435,032 | ---- | M] (AVAST Software) [File_System | System | Stopped] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx) DRV - [2011-11-28 19:53:35 | 000,314,456 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP) DRV - [2011-11-28 19:53:22 | 000,195,416 | ---- | M] (AVAST Software) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\aswNdis2.sys -- (aswNdis2) DRV - [2011-11-28 19:52:19 | 000,034,392 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr) DRV - [2011-11-28 19:52:16 | 000,052,952 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi) DRV - [2011-11-28 19:52:02 | 000,111,320 | ---- | M] (AVAST Software) [File_System | Auto | Stopped] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2) DRV - [2011-11-28 19:51:50 | 000,020,568 | ---- | M] (AVAST Software) [File_System | Auto | Stopped] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk) DRV - [2011-11-28 19:48:49 | 000,030,808 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4) DRV - [2011-11-28 19:26:19 | 000,012,112 | ---- | M] (ALWIL Software) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\aswNdis.sys -- (aswNdis) DRV - [2011-03-02 12:38:50 | 000,242,976 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btfilter.sys -- (btfilter) DRV - [2011-03-02 12:38:48 | 000,663,072 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btathprot.sys -- (BTATHPROT) DRV - [2011-03-02 12:38:48 | 000,085,152 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btathspp.sys -- (btathspp) DRV - [2011-03-02 12:38:48 | 000,079,008 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btathusb.sys -- (BTATHUSB) DRV - [2011-03-02 12:38:48 | 000,036,384 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btathpan.sys -- (btathPan) DRV - [2011-03-02 12:38:48 | 000,029,856 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btathsco.sys -- (Atheros_btAudio) DRV - [2011-03-02 12:38:48 | 000,013,344 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btathrcp.sys -- (btathrcp) DRV - [2011-03-02 12:38:46 | 000,074,912 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btatha2dp.sys -- (btatha2dp) DRV - [2011-03-02 12:38:46 | 000,042,016 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\AthDfu.sys -- (AthDfu) DRV - [2010-03-15 12:38:44 | 000,124,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1039mdm.sys -- (s1039mdm) DRV - [2010-03-15 12:38:44 | 000,123,504 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1039unic.sys -- (s1039unic) Sony Ericsson Device 1039 USB Ethernet Emulation (WDM) DRV - [2010-03-15 12:38:44 | 000,117,872 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1039mgmt.sys -- (s1039mgmt) Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM) DRV - [2010-03-15 12:38:44 | 000,113,904 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1039obex.sys -- (s1039obex) DRV - [2010-03-15 12:38:44 | 000,098,672 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1039bus.sys -- (s1039bus) Sony Ericsson Device 1039 driver (WDM) DRV - [2010-03-15 12:38:44 | 000,025,456 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1039nd5.sys -- (s1039nd5) Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS) DRV - [2010-03-15 12:38:44 | 000,014,960 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1039mdfl.sys -- (s1039mdfl) DRV - [2009-11-18 07:17:00 | 001,395,800 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt) DRV - [2009-11-18 07:16:00 | 001,691,480 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt) DRV - [2009-11-12 23:48:56 | 000,007,168 | ---- | M] () [File_System | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen) DRV - [2009-03-30 13:09:28 | 000,239,336 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\WINDOWS\system32\drivers\RsFx0103.sys -- (RsFx0103) DRV - [2008-09-04 16:28:22 | 000,019,968 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbdiag.sys -- (UsbDiag) DRV - [2008-09-04 16:27:54 | 000,024,832 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbmodem.sys -- (USBModem) DRV - [2008-09-04 16:27:28 | 000,013,056 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbbus.sys -- (usbbus) DRV - [2008-05-16 12:33:14 | 000,115,752 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016unic.sys -- (s0016unic) Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM) DRV - [2008-05-16 12:33:14 | 000,025,512 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016nd5.sys -- (s0016nd5) Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS) DRV - [2008-05-16 12:33:14 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016mdfl.sys -- (s0016mdfl) DRV - [2008-05-16 12:33:12 | 000,120,744 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016mdm.sys -- (s0016mdm) DRV - [2008-05-16 12:33:12 | 000,114,216 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016mgmt.sys -- (s0016mgmt) Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM) DRV - [2008-05-16 12:33:12 | 000,110,632 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016obex.sys -- (s0016obex) DRV - [2008-05-16 12:33:12 | 000,089,256 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016bus.sys -- (s0016bus) Sony Ericsson Device 0016 driver (WDM) DRV - [2008-02-05 02:50:44 | 000,059,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\VMNetSrv.sys -- (VPCNetS2) DRV - [2006-04-14 23:04:08 | 000,013,568 | ---- | M] (Intel Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\s24trans.sys -- (s24trans) DRV - [2006-04-04 13:17:24 | 001,429,632 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\w39n51.sys -- (w39n51) Intel(R) DRV - [2006-03-29 19:36:26 | 000,889,472 | ---- | M] (Motorola Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\smserial.sys -- (smserial) DRV - [2006-02-09 03:33:34 | 000,062,848 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\tosrfhid.sys -- (Tosrfhid) DRV - [2006-02-03 09:16:08 | 000,108,928 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\tosrfbd.sys -- (Tosrfbd) DRV - [2006-02-01 04:35:28 | 000,039,808 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\tosrfusb.sys -- (Tosrfusb) DRV - [2006-01-20 10:59:16 | 000,841,110 | R--- | M] (Syntek America Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SynMini.sys -- (SynMini) DRV - [2006-01-02 12:02:26 | 000,008,278 | R--- | M] (Syntek America Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SynScan.sys -- (SynScan) DRV - [2005-12-15 03:07:24 | 000,037,632 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\tosrfbnp.sys -- (Tosrfbnp) DRV - [2005-11-29 12:50:58 | 000,036,768 | ---- | M] (Infineon Technologies AG) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\psd.sys -- (PersonalSecureDrive) DRV - [2005-11-24 23:37:36 | 000,047,104 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\tosporte.sys -- (tosporte) DRV - [2005-11-16 10:08:16 | 000,078,976 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTL8023xp) DRV - [2005-11-12 01:09:52 | 000,052,864 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\tosrfsnd.sys -- (TosRfSnd) Bluetooth Audio Device (WDM) DRV - [2005-10-21 05:19:34 | 000,036,352 | R--- | M] (Infineon Technologies AG) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ifxtpm.sys -- (IFXTPM) DRV - [2005-09-17 21:01:50 | 000,028,672 | ---- | M] (REDC) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rimmptsk.sys -- (rimmptsk) DRV - [2005-09-14 22:45:24 | 000,050,560 | ---- | M] (REDC) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rimsptsk.sys -- (rimsptsk) DRV - [2005-08-02 02:45:08 | 000,064,896 | ---- | M] (TOSHIBA Corporation) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\tosrfcom.sys -- (Tosrfcom) DRV - [2005-07-12 04:58:56 | 000,003,712 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\toshidpt.sys -- (toshidpt) DRV - [2005-02-17 17:07:48 | 000,005,632 | R--- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ATKACPI.sys -- (MTsensor) DRV - [2005-01-06 23:42:42 | 000,018,612 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\tosrfnds.sys -- (tosrfnds) DRV - [2004-10-08 03:16:04 | 000,035,840 | ---- | M] (Oak Technology Inc.) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\AFS2K.SYS -- (AFS2K) DRV - [2004-08-23 09:51:40 | 000,024,828 | ---- | M] (Panda Software) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\ShldDrv.sys -- (ShldDrv) DRV - [2004-01-08 09:54:32 | 000,163,856 | ---- | M] (Panda Software) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\PavProc.sys -- (PavProc) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = pl.v9.com/pbr/pbr_1330893548_655182 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKLM\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.) IE - HKLM\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD22} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD22}: "URL" = http://search.bearshare.com//web?src=ieb&appid=0&systemid=2&sr=0&q={searchTerms} IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1715567821-2139871995-725345543-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.softonic.com/MON00084/tb_v1?SearchSource=10&cc= IE - HKU\S-1-5-21-1715567821-2139871995-725345543-1005\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb&sysid=2 IE - HKU\S-1-5-21-1715567821-2139871995-725345543-1005\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) IE - HKU\S-1-5-21-1715567821-2139871995-725345543-1005\..\URLSearchHook: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files\BitTorrentBar\prxtbBitT.dll (Conduit Ltd.) IE - HKU\S-1-5-21-1715567821-2139871995-725345543-1005\..\SearchScopes,DefaultScope = {E5260168-5F51-4080-BF65-FC323F3CCE04} IE - HKU\S-1-5-21-1715567821-2139871995-725345543-1005\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC IE - HKU\S-1-5-21-1715567821-2139871995-725345543-1005\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=110819&tt=060612_8_&babsrc=SP_ss&mntrId=f84b28290000000000000018de10408a IE - HKU\S-1-5-21-1715567821-2139871995-725345543-1005\..\SearchScopes\{1572957A-6F98-4ca0-9602-1579E03393F4}: "URL" = http://cameratunersoft.com/search/result.html?cx=partner-pub-6861212750969490%3A7j13m9tukox&cof=FORID%3A10&ie=UTF-8&q={searchTerms}&sa=Search IE - HKU\S-1-5-21-1715567821-2139871995-725345543-1005\..\SearchScopes\{4E3C5B4D-0295-4D2E-BFF0-5367C721E330}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=OVO2&o=2164&src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=^A2N&apn_dtid=^YYYYYY^YY^PL&apn_uid=51ff7287-7e36-425a-bd0a-e823d9e891cf&apn_sauid=F43A672C-4640-42F4-9AFF-C0FA4612F0AC IE - HKU\S-1-5-21-1715567821-2139871995-725345543-1005\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKU\S-1-5-21-1715567821-2139871995-725345543-1005\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2790392 IE - HKU\S-1-5-21-1715567821-2139871995-725345543-1005\..\SearchScopes\{F00DD97F-F243-4517-A18A-8235179F323F}: "URL" = http://search.softonic.com/MON00084/tb_v1?q={searchTerms}&SearchSource=4&cc=&r=46 IE - HKU\S-1-5-21-1715567821-2139871995-725345543-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultengine: "Ask.com" FF - prefs.js..browser.search.defaultenginename: "Search the web (Babylon)" FF - prefs.js..browser.search.order.1: "Search the web (Babylon)" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.startup.homepage: "http://www.google.pl/" FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2790392&SearchSource=2&q=" FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_2_202_228.dll () FF - HKLM\Software\MozillaPlugins\@ganymede/GanymedeNetPlugin,version=1.0: C:\Program Files\Ganymede\Plugins\npganymedenet.dll ( ) FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.4.1: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.4.1: C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@playstation.com/PsndlCheck,version=1.00: C:\Program Files\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.) FF - HKLM\Software\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0: C:\Program Files\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-07-18 21:51:46 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-05-16 22:37:22 | 000,000,000 | ---D | M] [2012-06-23 17:13:32 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Nicole\Application Data\mozilla\Extensions [2012-07-18 14:13:11 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Nicole\Application Data\mozilla\Firefox\Profiles\ry2ja25t.default\extensions [2012-06-21 16:18:05 | 000,000,000 | ---D | M] (New Tab Homepage) -- C:\Documents and Settings\Nicole\Application Data\mozilla\Firefox\Profiles\ry2ja25t.default\extensions\{7D82654F-F1DA-439b-AE43-18CF8A381F6A} [2012-07-18 14:13:11 | 000,000,000 | ---D | M] (BitTorrentBar Community Toolbar) -- C:\Documents and Settings\Nicole\Application Data\mozilla\Firefox\Profiles\ry2ja25t.default\extensions\{88c7f2aa-f93f-432c-8f0e-b7d85967a527} [2012-06-21 16:18:00 | 000,000,000 | ---D | M] (CameraTunerSoft.com Toolbar) -- C:\Documents and Settings\Nicole\Application Data\mozilla\Firefox\Profiles\ry2ja25t.default\extensions\{CE145D23-6208-49df-ABE9-8827ECFA439B} [2012-01-29 21:49:09 | 000,000,000 | ---D | M] (ooVoo toolbar, powered by Ask.com) -- C:\Documents and Settings\Nicole\Application Data\mozilla\Firefox\Profiles\ry2ja25t.default\extensions\toolbar@ask.com [2012-01-03 17:27:44 | 000,002,333 | ---- | M] () -- C:\Documents and Settings\Nicole\Application Data\Mozilla\Firefox\Profiles\ry2ja25t.default\searchplugins\askcom.xml [2012-06-21 16:19:05 | 000,001,559 | ---- | M] () -- C:\Documents and Settings\Nicole\Application Data\Mozilla\Firefox\Profiles\ry2ja25t.default\searchplugins\cts.xml [2012-07-07 14:49:05 | 000,002,060 | ---- | M] () -- C:\Documents and Settings\Nicole\Application Data\Mozilla\Firefox\Profiles\ry2ja25t.default\searchplugins\softonic.xml [2012-02-06 17:07:08 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2012-05-03 19:24:43 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2012-07-04 09:37:01 | 000,340,684 | ---- | M] () (No name found) -- C:\DOCUMENTS AND SETTINGS\NICOLE\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\RY2JA25T.DEFAULT\EXTENSIONS\{A7C6CF7F-112C-4500-A7EA-39801A327E5F}.XPI [2012-07-18 21:51:45 | 000,136,672 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2008-01-23 09:20:30 | 000,491,520 | ---- | M] (BitComet) -- C:\Program Files\mozilla firefox\plugins\npBitCometAgent.dll [2008-06-24 19:22:00 | 000,884,736 | ---- | M] (Ganymede Technologies) -- C:\Program Files\mozilla firefox\plugins\NPDARTS.dll [2011-08-31 02:06:34 | 000,120,984 | ---- | M] ( ) -- C:\Program Files\mozilla firefox\plugins\npganymedenet.dll [2011-07-11 23:48:12 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll [2012-06-08 16:34:11 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2012-06-23 17:13:33 | 000,002,352 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml [2010-09-14 14:41:12 | 000,002,506 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\BearShareWebSearch.xml [2012-06-08 16:34:11 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2012-06-08 16:34:11 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2012-06-08 16:34:11 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2011-10-30 21:04:10 | 000,002,503 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\SearchResults.xml [2012-03-04 22:39:08 | 000,002,415 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\v9.xml [2012-06-08 16:34:11 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2012-06-08 16:34:11 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: () CHR - default_search_provider: search_url = CHR - default_search_provider: suggest_url = CHR - homepage: http://search.softonic.com/MON00084/tb_v1?SearchSource=48&cc= O1 HOSTS File: ([2012-07-21 14:39:34 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Winamp Toolbar Loader) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.) O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Nikola\office2007\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O2 - BHO: (UrlHelper Class) - {74322BF9-DF26-493f-B0DA-6D2FC5E6429E} - C:\Program Files\BearShare Applications\MediaBar\Datamngr\IEBHO.dll (MusicLab, LLC) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation) O2 - BHO: (BitTorrentBar Toolbar) - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files\BitTorrentBar\prxtbBitT.dll (Conduit Ltd.) O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Documents and Settings\Nicole\Desktop\Toolbars\Internet Explorer\skypeieplugin.dll File not found O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll (Google Inc.) O2 - BHO: (MediaBar) - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - C:\Program Files\BearShare Applications\MediaBar\Datamngr\ToolBar\bsdtxmltbpi.dll () O2 - BHO: (ooVoo toolbar, powered by Ask.com) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (Softonic Helper Object) - {E87806B5-E908-45FD-AF5E-957D83E58E68} - C:\Program Files\Softonic\Softonic\1.5.24.3\bh\Softonic.dll (Softonic.com) O3 - HKLM\..\Toolbar: (Softonic Toolbar) - {5018CFD2-804D-4C99-9F81-25EAEA2769DE} - C:\Program Files\Softonic\Softonic\1.5.24.3\SoftonicTlbr.dll (Softonic.com) O3 - HKLM\..\Toolbar: (BitTorrentBar Toolbar) - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files\BitTorrentBar\prxtbBitT.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.) O3 - HKLM\..\Toolbar: (MediaBar) - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - C:\Program Files\BearShare Applications\MediaBar\Datamngr\ToolBar\bsdtxmltbpi.dll () O3 - HKLM\..\Toolbar: (ooVoo toolbar, powered by Ask.com) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.) O3 - HKU\S-1-5-21-1715567821-2139871995-725345543-1005\..\Toolbar\WebBrowser: (BitTorrentBar Toolbar) - {88C7F2AA-F93F-432C-8F0E-B7D85967A527} - C:\Program Files\BitTorrentBar\prxtbBitT.dll (Conduit Ltd.) O3 - HKU\S-1-5-21-1715567821-2139871995-725345543-1005\..\Toolbar\WebBrowser: (ooVoo toolbar, powered by Ask.com) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) O3 - HKU\S-1-5-21-1715567821-2139871995-725345543-1005\..\Toolbar\WebBrowser: (Winamp Toolbar) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.) O4 - HKLM..\Run: [ApnUpdater] C:\Program Files\Ask.com\Updater\Updater.exe (Ask) O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) O4 - HKLM..\Run: [AtherosBtXpStack] D:\Bluetooth\BluetoothSuit.exe (Atheros Commnucations) O4 - HKLM..\Run: [avast] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software) O4 - HKLM..\Run: [AzMixerSel] C:\Program Files\Realtek\Audio\InstallShield\AzMixerSel.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [DATAMNGR] C:\Program Files\BearShare Applications\MediaBar\Datamngr\datamngrUI.exe (MusicLab, LLC) O4 - HKLM..\Run: [EOUApp] C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe (Intel Corporation) O4 - HKLM..\Run: [GrooveMonitor] D:\Nikola\office2007\Office12\GrooveMonitor.exe (Microsoft Corporation) O4 - HKLM..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe () O4 - HKLM..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe (Intel Corporation) O4 - HKLM..\Run: [IntelZeroConfig] C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe (Intel Corporation) O4 - HKLM..\Run: [Malwarebytes Anti-Malware (reboot)] D:\Nikola\Anti-Melware\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe () O4 - HKLM..\Run: [SMSERIAL] C:\WINDOWS\sm56hlpr.exe (Motorola Inc.) O4 - HKLM..\Run: [TURegOpt] C:\Documents and Settings\XP\Local Settings\Application Data\Microsoft\Windows\4949\TURegOpt.exe File not found O4 - HKLM..\Run: [vsjitdebugger] C:\Documents and Settings\Nicole\Local Settings\Application Data\Microsoft\Windows\3341\vsjitdebugger.exe () O4 - HKLM..\Run: [Wireless Console 2] C:\Program Files\Wireless Console 2\wcourier.exe () O4 - Startup: C:\Documents and Settings\Nicole\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk = D:\Nikola\office2007\Office12\ONENOTEM.EXE (Microsoft Corporation) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallVisualStyle = C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles (Microsoft) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallTheme = C:\WINDOWS\Resources\Themes\Royale.theme () O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1715567821-2139871995-725345543-1005\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-1715567821-2139871995-725345543-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-21-1715567821-2139871995-725345543-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-21-1715567821-2139871995-725345543-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O8 - Extra context menu item: Download with &Media Finder - C:\Program Files\Media Finder\hook.html File not found O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 File not found O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Nikola\office2007\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Nikola\office2007\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe File not found O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Documents and Settings\Nicole\Desktop\Toolbars\Internet Explorer\skypeieplugin.dll File not found O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Documents and Settings\Nicole\Desktop\Toolbars\Internet Explorer\skypeieplugin.dll File not found O9 - Extra Button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Documents and Settings\Nicole\Desktop\PartyPoker.lnk File not found O9 - Extra 'Tools' menuitem : PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Documents and Settings\Nicole\Desktop\PartyPoker.lnk File not found O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1292559794656 (MUWebControl Class) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30) O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.179.1.62 62.179.1.63 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B68CA451-2515-4D34-B615-B4F832B102EB}: DhcpNameServer = 62.179.1.62 62.179.1.63 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E185AB82-DAF7-42F9-8C3D-CCAD608FE0B8}: DhcpNameServer = 62.179.1.63 62.179.1.62 O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\Nikola\office2007\Office12\GrooveSystemServices.dll (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Documents and Settings\Nicole\Desktop\Toolbars\Internet Explorer\skypeieplugin.dll File not found O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O20 - Winlogon\Notify\IfxWlxEN: DllName - (IfxWlxEN.dll) - C:\WINDOWS\System32\IfxWlxEN.dll (Infineon Technologies AG) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - D:\Nikola\office2007\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2010-12-16 22:07:14 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-07-21 15:34:50 | 000,000,000 | -HSD | C] -- C:\RECYCLER [2012-07-21 15:31:49 | 000,000,000 | ---D | C] -- C:\_OTL [2012-07-21 15:03:32 | 000,040,776 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2012-07-21 14:37:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\temp [2012-07-21 14:22:59 | 000,000,000 | ---D | C] -- C:\ComboFix [2012-07-21 13:48:30 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe [2012-07-21 13:48:30 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe [2012-07-21 13:48:30 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe [2012-07-21 13:48:30 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe [2012-07-21 13:48:23 | 000,000,000 | ---D | C] -- C:\Qoobox [2012-07-21 13:24:13 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Nicole\Desktop\OTL.exe [2012-07-21 09:46:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes' Anti-Malware [2012-07-20 23:08:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Nicole\Application Data\Malwarebytes [2012-07-20 23:07:51 | 000,022,344 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2012-07-20 23:07:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes [2012-07-20 21:32:53 | 000,163,856 | ---- | C] (Panda Software) -- C:\WINDOWS\System32\drivers\PavProc.sys [2012-07-20 21:32:53 | 000,024,828 | ---- | C] (Panda Software) -- C:\WINDOWS\System32\drivers\ShldDrv.sys [2012-07-20 21:32:53 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Panda Software [2012-07-20 18:57:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\HitmanPro [2012-07-20 16:40:24 | 000,000,000 | -HSD | C] -- C:\WINDOWS\CSC [2012-07-20 16:05:37 | 000,000,000 | RHSD | C] -- C:\cmdcons [2012-07-20 15:44:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\erdnt [2012-07-19 23:02:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Nicole\Application Data\hellomoto [2012-07-07 14:49:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Nicole\Application Data\Softonic [2012-07-07 14:49:13 | 000,000,000 | ---D | C] -- C:\Program Files\Softonic [2012-07-07 14:48:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\PixelPlanet [2012-07-07 14:48:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\PdfGrabber [2012-07-07 14:48:38 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\BCL Technologies [2012-07-07 14:48:36 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\XPressUpdate [2012-07-07 14:48:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Nicole\Application Data\PixelPlanet [2012-07-07 14:48:36 | 000,000,000 | ---D | C] -- C:\Program Files\PdfGrabber 4.0 [2012-07-07 14:48:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Nicole\My Documents\PdfGrabber [2012-07-07 14:42:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Nicole\My Documents\Notesy programu OneNote [2012-07-07 14:29:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\BitTorrentBar [2012-07-05 10:10:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Nicole\Desktop\materiay [2012-07-03 18:35:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Nicole\Application Data\NapiProjekt [2012-07-03 18:35:21 | 000,000,000 | ---D | C] -- C:\Program Files\NapiProjekt [2012-07-03 09:28:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Nicole\Local Settings\Application Data\CRE [2012-07-03 09:28:17 | 000,000,000 | ---D | C] -- C:\Program Files\Conduit [2012-07-03 09:28:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Nicole\Local Settings\Application Data\BitTorrentBar [2012-07-03 09:28:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Nicole\Local Settings\Application Data\Conduit [2012-07-03 09:28:12 | 000,000,000 | ---D | C] -- C:\Program Files\BitTorrentBar [2012-07-03 09:27:50 | 000,000,000 | ---D | C] -- C:\Program Files\BitTorrent [2012-07-03 09:26:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Nicole\Application Data\BitTorrent [2012-07-03 09:26:05 | 006,078,360 | ---- | C] (BitTorrent, Inc.) -- C:\Documents and Settings\Nicole\Desktop\BitTorrent.exe [2012-06-25 18:22:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Nicole\My Documents\Visual Studio 2010 [2012-06-24 15:02:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Nicole\Application Data\IEToolbar [2012-06-23 17:14:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Nicole\Application Data\BabylonToolbar [2012-06-23 17:13:51 | 000,000,000 | ---D | C] -- C:\Program Files\BabylonToolbar [2012-06-23 17:13:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Nicole\Application Data\Media Finder [2012-06-23 17:13:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Nicole\Application Data\Babylon [2012-06-23 17:13:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Babylon [2012-06-23 16:30:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Nicole\My Documents\ChomikBox [2012-06-23 16:29:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Nicole\.gstreamer-0.10 [2012-06-23 16:29:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Nicole\Local Settings\Application Data\ChomikBox [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-07-21 16:01:04 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2012-07-21 15:42:30 | 000,040,776 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2012-07-21 15:42:14 | 000,050,868 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml [2012-07-21 15:14:03 | 000,000,236 | ---- | M] () -- C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job [2012-07-21 14:52:12 | 000,001,028 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2012-07-21 14:39:34 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts [2012-07-21 14:12:13 | 000,004,210 | ---- | M] () -- C:\Documents and Settings\Nicole\bmarchive.bms [2012-07-21 14:09:26 | 000,000,930 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job [2012-07-21 13:24:13 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Nicole\Desktop\OTL.exe [2012-07-21 12:49:18 | 000,274,168 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2012-07-21 10:11:11 | 000,000,724 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk [2012-07-20 21:16:36 | 000,001,917 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2012-07-20 20:28:25 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2012-07-20 19:09:07 | 000,000,718 | ---- | M] () -- C:\Documents and Settings\Nicole\Desktop\Skrót do ComboFix.lnk [2012-07-20 17:52:00 | 000,001,024 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2012-07-20 16:05:47 | 000,000,325 | RHS- | M] () -- C:\boot.ini [2012-07-19 21:05:37 | 000,191,188 | ---- | M] () -- C:\Documents and Settings\Nicole\Desktop\Plecan Przemysław - CV.pdf [2012-07-14 14:29:02 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job [2012-07-07 14:49:17 | 000,000,359 | ---- | M] () -- C:\user.js [2012-07-07 14:42:02 | 000,000,790 | ---- | M] () -- C:\Documents and Settings\Nicole\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk [2012-07-04 22:53:07 | 000,025,088 | ---- | M] () -- C:\Documents and Settings\Nicole\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-07-03 13:46:44 | 000,022,344 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2012-07-03 09:26:14 | 006,078,360 | ---- | M] (BitTorrent, Inc.) -- C:\Documents and Settings\Nicole\Desktop\BitTorrent.exe [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-07-21 13:48:30 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe [2012-07-21 13:48:30 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe [2012-07-21 13:48:30 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe [2012-07-21 13:48:30 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe [2012-07-21 13:48:30 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe [2012-07-21 10:11:11 | 000,000,724 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk [2012-07-20 19:09:06 | 000,000,718 | ---- | C] () -- C:\Documents and Settings\Nicole\Desktop\Skrót do ComboFix.lnk [2012-07-20 16:05:47 | 000,000,207 | ---- | C] () -- C:\Boot.bak [2012-07-20 16:05:45 | 000,262,400 | RHS- | C] () -- C:\cmldr [2012-07-19 21:05:35 | 000,191,188 | ---- | C] () -- C:\Documents and Settings\Nicole\Desktop\Plecan Przemysław - CV.pdf [2012-07-07 14:42:02 | 000,000,790 | ---- | C] () -- C:\Documents and Settings\Nicole\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk [2012-06-23 17:13:52 | 000,000,359 | ---- | C] () -- C:\user.js [2012-06-13 23:23:03 | 000,001,094 | ---- | C] () -- C:\Documents and Settings\Nicole\newEmptyPHP.html [2012-04-01 15:46:17 | 000,021,736 | ---- | C] () -- C:\WINDOWS\System32\drivers\RTAIODAT.DAT [2012-03-03 22:50:39 | 000,000,855 | ---- | C] () -- C:\Program Files\Play DominoesStars.lnk [2012-02-15 17:20:52 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll [2011-12-28 18:34:52 | 000,004,210 | ---- | C] () -- C:\Documents and Settings\Nicole\bmarchive.bms [2011-12-24 00:09:00 | 000,000,098 | ---- | C] () -- C:\WINDOWS\WirelessFTP.INI [2011-11-26 10:20:11 | 000,064,197 | ---- | C] () -- C:\Program Files\EULA.eng [2011-09-05 21:44:37 | 000,196,608 | ---- | C] () -- C:\WINDOWS\System32\PDFSpooler.exe [2011-09-05 21:44:36 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll [2011-08-28 22:38:10 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Game.INI [2011-08-05 06:16:34 | 000,000,238 | ---- | C] () -- C:\WINDOWS\mafosav.INI [2011-06-02 21:11:29 | 000,462,848 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll [2011-06-02 21:11:26 | 000,014,456 | ---- | C] () -- C:\WINDOWS\System32\Kara_v.dll [2011-05-22 22:01:10 | 000,000,294 | ---- | C] () -- C:\WINDOWS\wcx_ftp.ini [2011-05-22 21:58:28 | 000,000,711 | ---- | C] () -- C:\WINDOWS\wincmd.ini [2011-05-18 21:50:31 | 000,020,458 | ---- | C] () -- C:\WINDOWS\hpoins01.dat [2011-05-18 21:50:31 | 000,016,622 | ---- | C] () -- C:\WINDOWS\hpomdl01.dat [2011-04-04 04:35:03 | 000,000,182 | ---- | C] () -- C:\WINDOWS\venple.ini [2011-03-02 12:34:36 | 000,246,804 | ---- | C] () -- C:\WINDOWS\System32\drivers\AtherosBt.bin [2011-02-27 03:26:42 | 000,000,041 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\.zreglib [2011-01-23 21:47:13 | 000,577,312 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-S-1-5-21-1715567821-2139871995-725345543-1005-0.dat [2011-01-23 21:47:12 | 000,199,762 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-System.dat [2011-01-04 03:06:57 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat [2010-12-22 21:27:01 | 000,025,088 | ---- | C] () -- C:\Documents and Settings\Nicole\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-12-21 09:14:01 | 000,000,129 | ---- | C] () -- C:\Documents and Settings\Nicole\Local Settings\Application Data\fusioncache.dat [2010-12-21 04:31:11 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat [2010-12-18 07:58:05 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat [2010-12-17 00:21:07 | 000,258,048 | ---- | C] () -- C:\WINDOWS\System32\libFLAC.dll [2010-12-17 00:18:34 | 000,007,168 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys [2010-12-17 00:16:30 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2010-12-17 00:16:30 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini [2010-12-17 00:16:28 | 000,881,664 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2010-12-17 00:16:28 | 000,134,144 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2010-12-17 00:16:27 | 000,108,032 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2010-12-17 00:14:11 | 000,000,556 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2010-12-16 23:04:15 | 000,000,000 | ---- | C] () -- C:\WINDOWS\tosOBEX.INI [2010-12-16 23:03:36 | 000,045,056 | R--- | C] () -- C:\WINDOWS\StkUnist.exe [2010-12-16 23:03:36 | 000,024,576 | R--- | C] () -- C:\WINDOWS\System32\SynSvc_.exe [2010-12-16 23:03:13 | 000,987,136 | ---- | C] () -- C:\WINDOWS\System32\wcourier.exe [2010-12-16 22:51:51 | 000,005,632 | R--- | C] () -- C:\WINDOWS\System32\drivers\ATKACPI.sys [2010-12-16 22:47:10 | 000,007,424 | R--- | C] () -- C:\WINDOWS\System32\drivers\MMIOPORT.SYS [2010-12-16 22:09:53 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2010-12-16 22:02:42 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2010-12-16 14:15:24 | 000,040,960 | R--- | C] () -- C:\WINDOWS\System32\ChCfg.exe [2010-12-16 14:15:12 | 000,000,520 | ---- | C] () -- C:\WINDOWS\System32\drivers\RTEQEX1.dat [2010-12-16 14:15:12 | 000,000,520 | ---- | C] () -- C:\WINDOWS\System32\drivers\RTEQEX0.dat [2010-12-16 14:15:12 | 000,000,008 | ---- | C] () -- C:\WINDOWS\System32\drivers\rtkhdaud.dat [2010-12-16 13:52:07 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2010-12-16 13:50:48 | 000,274,168 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [color=#E56717]========== LOP Check ==========[/color] [2011-03-30 06:43:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\2D280 [2010-12-17 00:20:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Alwil Software [2011-12-24 00:17:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Avanquest [2012-06-23 17:13:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Babylon [2011-11-01 05:00:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\boost_interprocess [2011-12-24 00:15:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\BVRP Software [2011-10-26 01:36:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite [2010-12-18 07:18:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Gadu-Gadu 10 [2012-07-20 18:57:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\HitmanPro [2010-12-16 23:02:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Infineon [2012-03-17 11:14:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ipla [2011-10-23 08:26:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\OpenFM [2012-07-07 14:48:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PixelPlanet [2010-12-21 08:19:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PreEmptive Solutions [2011-06-01 18:39:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\RDRM [2012-06-23 17:13:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nicole\Application Data\Babylon [2012-06-24 15:02:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nicole\Application Data\BabylonToolbar [2010-12-31 04:53:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nicole\Application Data\bearsharemediabartb [2012-06-21 16:14:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nicole\Application Data\BESTplayer [2012-07-04 22:44:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nicole\Application Data\BitTorrent [2011-12-31 01:06:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nicole\Application Data\bsbandmltbpi [2012-04-28 22:26:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nicole\Application Data\BSW [2012-07-03 11:54:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nicole\Application Data\foobar2000 [2010-12-17 01:05:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nicole\Application Data\Gadu-Gadu 10 [2011-09-30 07:43:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nicole\Application Data\GanymedeNet [2012-02-20 21:30:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nicole\Application Data\GetRightToGo [2012-07-19 23:02:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nicole\Application Data\hellomoto [2012-06-24 15:02:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nicole\Application Data\IEToolbar [2010-12-17 00:49:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nicole\Application Data\Infineon [2012-05-01 19:54:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nicole\Application Data\ipla [2011-01-17 07:14:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nicole\Application Data\LG Electronics [2012-06-23 17:36:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nicole\Application Data\Media Finder [2011-12-31 01:06:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nicole\Application Data\mediabarbs [2012-07-03 18:36:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nicole\Application Data\NapiProjekt [2010-12-17 05:51:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nicole\Application Data\Nowe Gadu-Gadu [2012-01-29 21:51:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nicole\Application Data\ooVoo Details [2010-12-17 01:05:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nicole\Application Data\OpenFM [2011-12-31 01:10:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nicole\Application Data\Opera [2012-05-16 22:37:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nicole\Application Data\Oracle [2011-11-26 10:24:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nicole\Application Data\PacificPoker [2011-09-05 21:44:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nicole\Application Data\PDFCreator [2012-07-07 14:48:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nicole\Application Data\PixelPlanet [2010-12-17 01:05:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nicole\Application Data\RDRM [2012-07-07 14:49:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nicole\Application Data\Softonic [2011-12-24 17:02:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nicole\Application Data\Sony [2011-12-25 17:49:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nicole\Application Data\Sony Network Entertainment International LLC [2011-12-23 23:23:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nicole\Application Data\Sony Setup [2010-12-17 01:06:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nicole\Application Data\Teleca [2011-11-03 00:54:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nicole\Application Data\Thinstall [2011-02-12 23:10:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nicole\Application Data\TS3Client [2010-12-17 00:53:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\XP\Application Data\AutoTransfer [2012-06-24 18:15:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\XP\Application Data\BESTplayer [2011-10-30 21:57:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\XP\Application Data\bsbandmltbpi [2010-12-17 00:53:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\XP\Application Data\DAEMON Tools Lite [2010-12-17 00:53:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\XP\Application Data\DAEMON Tools Pro [2010-12-17 00:53:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\XP\Application Data\Dev-Cpp [2010-12-17 00:53:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\XP\Application Data\Facebook [2010-12-17 00:53:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\XP\Application Data\foobar2000 [2010-12-17 00:53:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\XP\Application Data\Gadu-Gadu [2010-12-17 00:53:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\XP\Application Data\Gadu-Gadu 10 [2010-12-17 00:53:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\XP\Application Data\GanymedeNet [2012-07-20 09:39:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\XP\Application Data\hellomoto [2012-07-09 21:05:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\XP\Application Data\IEToolbar [2010-12-16 23:02:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\XP\Application Data\Infineon [2012-04-01 16:41:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\XP\Application Data\ipla [2010-12-17 00:54:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\XP\Application Data\Leadertech [2011-10-30 22:01:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\XP\Application Data\mediabarbs [2010-12-17 00:54:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\XP\Application Data\Nowe Gadu-Gadu [2011-07-23 06:39:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\XP\Application Data\OpenCandy [2010-12-17 00:54:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\XP\Application Data\OpenFM [2010-12-17 00:54:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\XP\Application Data\RDRM [2010-12-17 00:54:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\XP\Application Data\Softland [2010-12-17 00:54:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\XP\Application Data\Sony Setup [2011-08-18 22:00:09 | 000,000,344 | ---- | M] () -- C:\WINDOWS\Tasks\FRU Task #Hewlett-Packard#hp psc 2170 series#1305748807.job [2012-07-21 15:14:03 | 000,000,236 | ---- | M] () -- C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job [color=#E56717]========== Purity Check ==========[/color] < End of report >