OTL logfile created on: 2012-07-30 00:13:18 - Run 2 OTL by OldTimer - Version 3.2.55.0 Folder = C:\Documents and Settings\WOJTEK\Pulpit Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 7.0.5730.13) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,25 Gb Total Physical Memory | 2,58 Gb Available Physical Memory | 79,47% Memory free 5,09 Gb Paging File | 4,63 Gb Available in Paging File | 90,95% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 221,62 Gb Total Space | 34,97 Gb Free Space | 15,78% Space Free | Partition Type: NTFS Drive E: | 244,14 Gb Total Space | 38,93 Gb Free Space | 15,94% Space Free | Partition Type: NTFS Drive G: | 1397,26 Gb Total Space | 350,44 Gb Free Space | 25,08% Space Free | Partition Type: NTFS Computer Name: BAZEL2 | User Name: WOJTEK | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-07-29 12:47:01 | 000,597,504 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\WOJTEK\Pulpit\OTL.exe PRC - [2012-06-16 12:17:59 | 000,913,888 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2011-01-20 20:54:04 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2009-10-07 10:16:50 | 000,472,280 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe PRC - [2009-10-07 10:15:42 | 001,461,080 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe PRC - [2009-02-16 17:59:38 | 000,032,768 | ---- | M] (Logitech) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe PRC - [2008-10-20 22:18:26 | 000,071,096 | ---- | M] () -- C:\Program Files\CDBurnerXP\NMSAccessU.exe PRC - [2008-05-02 06:15:46 | 000,015,872 | ---- | M] () -- C:\Program Files\Unlocker\UnlockerAssistant.exe PRC - [2007-08-11 15:50:00 | 000,331,264 | ---- | M] () -- C:\Program Files\NetMeter\NetMeter.exe PRC - [2007-05-28 18:57:54 | 000,275,968 | ---- | M] (Rocket Division Software) -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe PRC - [2007-04-03 18:50:00 | 001,603,152 | ---- | M] (CANON INC.) -- C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE PRC - [2005-12-09 16:37:42 | 000,081,920 | ---- | M] (Logitech Inc.) -- c:\Program Files\Common Files\Logitech\LVMVFM\LVPrcSrv.exe PRC - [2005-12-09 16:32:18 | 000,225,280 | ---- | M] (Logitech Inc.) -- C:\WINDOWS\system32\LVCOMSX.EXE PRC - [2005-12-07 11:26:30 | 000,489,472 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\Video\CameraAssistant.exe PRC - [2005-06-08 16:45:04 | 000,278,528 | ---- | M] (Teleca Software Solutions AB) -- C:\Program Files\Common Files\Teleca Shared\CapabilityManager.exe PRC - [2004-11-01 18:22:22 | 000,262,144 | ---- | M] (Logitech Inc.) -- C:\WINDOWS\system32\ElkCtrl.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012-06-16 12:17:57 | 002,042,848 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll MOD - [2009-02-27 21:04:20 | 000,311,296 | ---- | M] () -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\pdfshell.POL MOD - [2009-02-16 17:59:38 | 000,536,617 | ---- | M] () -- C:\Program Files\Logitech\Desktop Messenger\8876480\7.2.0.137-8876480SL\Program\BWDocMapExt.dll MOD - [2009-02-16 17:59:38 | 000,147,493 | ---- | M] () -- C:\Program Files\Logitech\Desktop Messenger\8876480\7.2.0.137-8876480SL\Program\bwfiles.dll MOD - [2009-02-16 17:59:38 | 000,114,688 | ---- | M] () -- C:\Program Files\Logitech\Desktop Messenger\8876480\7.2.0.137-8876480SL\Program\BWScriptExt.dll MOD - [2009-02-16 17:59:38 | 000,061,496 | ---- | M] () -- C:\Program Files\Logitech\Desktop Messenger\8876480\7.2.0.137-8876480SL\Program\clntutil.dll MOD - [2009-01-15 09:19:00 | 000,466,944 | ---- | M] () -- C:\WINDOWS\system32\nvshell.dll MOD - [2008-10-20 22:18:26 | 000,071,096 | ---- | M] () -- C:\Program Files\CDBurnerXP\NMSAccessU.exe MOD - [2008-05-02 06:15:46 | 000,015,872 | ---- | M] () -- C:\Program Files\Unlocker\UnlockerAssistant.exe MOD - [2008-05-02 06:15:37 | 000,010,240 | ---- | M] () -- C:\Program Files\Unlocker\UnlockerCOM.dll MOD - [2008-05-02 06:15:35 | 000,004,608 | ---- | M] () -- C:\Program Files\Unlocker\UnlockerHook.dll MOD - [2007-09-20 19:34:58 | 000,129,024 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll MOD - [2007-08-11 15:50:00 | 000,331,264 | ---- | M] () -- C:\Program Files\NetMeter\NetMeter.exe MOD - [2005-05-11 13:23:42 | 000,073,728 | R--- | M] () -- C:\Program Files\Common Files\Teleca Shared\boost_log-vc71-mt-1_32.dll MOD - [2001-10-28 17:42:30 | 000,116,224 | ---- | M] () -- C:\WINDOWS\system32\pdfcmnnt.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ) SRV - [2012-06-16 12:17:58 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2009-10-07 10:21:14 | 000,020,680 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe -- (EhttpSrv) SRV - [2009-10-07 10:16:50 | 000,472,280 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -- (ekrn) SRV - [2009-07-26 07:43:14 | 000,025,832 | ---- | M] (BioWare) [On_Demand | Stopped] -- C:\Program Files\Dragon Age\bin_ship\daupdatersvc.service.exe -- (DAUpdaterSvc) SRV - [2008-10-20 22:18:26 | 000,071,096 | ---- | M] () [Auto | Running] -- C:\Program Files\CDBurnerXP\NMSAccessU.exe -- (NMSAccessU) SRV - [2007-05-28 18:57:54 | 000,275,968 | ---- | M] (Rocket Division Software) [Auto | Running] -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE) SRV - [2005-12-09 16:37:42 | 000,081,920 | ---- | M] (Logitech Inc.) [Auto | Running] -- c:\Program Files\Common Files\Logitech\LVMVFM\LVPrcSrv.exe -- (LVPrcSrv) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - File not found [Kernel | On_Demand | Unknown] -- -- (ap9q2hmq) DRV - File not found [Kernel | On_Demand | Unknown] -- -- (a2vfgkdq) DRV - [2010-04-04 19:34:39 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sptd.sys -- (sptd) DRV - [2010-04-04 19:08:31 | 000,281,760 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt) DRV - [2010-04-04 19:08:31 | 000,025,888 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt) DRV - [2009-10-07 10:18:36 | 000,035,168 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\epfwtdir.sys -- (epfwtdir) DRV - [2009-10-07 10:12:22 | 000,054,184 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\easdrv.sys -- (easdrv) DRV - [2009-10-07 10:11:10 | 000,040,824 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\eamon.sys -- (eamon) DRV - [2009-03-27 02:16:28 | 000,012,672 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\cpuz132_x32.sys -- (cpuz132) DRV - [2008-12-16 15:44:42 | 000,516,480 | ---- | M] (Digital Camera) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\Ca1528av.sys -- (Ca1528av) DRV - [2008-06-27 16:41:14 | 000,011,648 | ---- | M] (SunPlus) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Bulk1528.sys -- (Bulk1528) DRV - [2008-06-25 18:47:00 | 000,036,864 | R--- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\l1e51x86.sys -- (L1e) DRV - [2008-06-13 11:11:16 | 004,754,944 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) DRV - [2008-04-14 01:26:50 | 000,012,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usb8023.sys -- (usb_rndis) DRV - [2008-03-31 17:12:16 | 000,073,728 | ---- | M] (EZB Systems, Inc.) [File_System | System | Running] -- C:\Program Files\UltraISO\drivers\ISODrive.sys -- (ISODrive) DRV - [2007-09-19 22:37:48 | 000,041,456 | ---- | M] (Cyberlink Corp.) [Kernel | Auto | Running] -- C:\Program Files\CyberLink\PowerDVD\000.fcl -- ({95808DC4-FA4A-4C74-92FE-5B863F82066B}) DRV - [2005-12-09 16:37:42 | 002,400,256 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LVMVdrv.sys -- (lvmvdrv) DRV - [2005-12-09 16:37:42 | 000,016,768 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LVPrcMon.sys -- (LVPrcMon) DRV - [2005-12-09 16:35:54 | 002,174,464 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Lvckap.sys -- (Lvckap) DRV - [2005-12-06 05:30:19 | 000,916,096 | R--- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LV302AV.SYS -- (PID_08A0) DRV - [2005-12-06 05:27:04 | 000,007,136 | R--- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\lv302af.sys -- (pepifilter) DRV - [2005-12-06 05:26:16 | 000,039,424 | R--- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LVUSBSta.sys -- (LVUSBSta) DRV - [2005-06-03 13:47:06 | 000,079,488 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k750obex.sys -- (k750obex) DRV - [2005-06-03 13:47:04 | 000,081,728 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k750mgmt.sys -- (k750mgmt) DRV - [2005-06-03 13:47:00 | 000,089,872 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k750mdm.sys -- (k750mdm) DRV - [2005-06-03 13:46:58 | 000,006,576 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k750mdfl.sys -- (k750mdfl) DRV - [2005-06-03 13:46:52 | 000,055,216 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k750bus.sys -- (k750bus) DRV - [2004-08-13 04:56:20 | 000,005,810 | R--- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ASACPI.sys -- (MTsensor) DRV - [2003-12-08 13:53:48 | 000,053,600 | ---- | M] (THOMSON) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\alcan5wn.sys -- (alcan5wn) DRV - [2003-12-08 13:53:46 | 000,070,688 | ---- | M] (THOMSON) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\alcaudsl.sys -- (alcaudsl) DRV - [2003-08-04 13:22:44 | 000,016,128 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\PCANDIS5.SYS -- (PCANDIS5) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://wyborcza.pl/0,0.html?p=009 IE - HKCU\..\SearchScopes,DefaultScope = {6F5AF09C-6D63-4AD1-91DA-C192184853EE} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKCU\..\SearchScopes\{6F5AF09C-6D63-4AD1-91DA-C192184853EE}: "URL" = http://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.selectedEngine: "Wikipedia (pl)" FF - prefs.js..browser.startup.homepage: "http://www.google.pl/" FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=14: C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2321: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1483: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-07-28 23:43:48 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-04-07 22:54:36 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 1.5.0.14\Extensions\\Components: C:\Program Files\Mozilla Thunderbird\components\ [2009-07-01 17:30:43 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 1.5.0.14\Extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins\ [2010-12-25 22:57:17 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 1.5.0.14\Extensions\\Components: C:\Program Files\Mozilla Thunderbird\components\ [2009-07-01 17:30:43 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 1.5.0.14\Extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins\ [2010-12-25 22:57:17 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Documents and Settings\WOJTEK\Dane aplikacji\IDM\idmmzcc3 [2009-01-24 15:27:21 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\WOJTEK\Dane aplikacji\Mozilla\Extensions [2012-07-25 21:26:54 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\WOJTEK\Dane aplikacji\Mozilla\Firefox\Profiles\61ieljv0.default\extensions [2012-06-30 09:35:08 | 000,000,000 | ---D | M] (Forecastfox) -- C:\Documents and Settings\WOJTEK\Dane aplikacji\Mozilla\Firefox\Profiles\61ieljv0.default\extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3} [2010-08-17 10:28:56 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\WOJTEK\Dane aplikacji\Mozilla\Firefox\Profiles\61ieljv0.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2012-05-04 16:55:08 | 000,000,000 | ---D | M] (IE Tab Plus) -- C:\Documents and Settings\WOJTEK\Dane aplikacji\Mozilla\Firefox\Profiles\61ieljv0.default\extensions\ietab@ip.cn [2012-07-28 23:59:49 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2012-07-18 21:20:58 | 000,339,888 | ---- | M] () (No name found) -- C:\DOCUMENTS AND SETTINGS\WOJTEK\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\61IELJV0.DEFAULT\EXTENSIONS\{19503E42-CA3C-4C27-B1E2-9CDB2170EE34}.XPI [2011-07-17 17:21:13 | 000,097,169 | ---- | M] () (No name found) -- C:\DOCUMENTS AND SETTINGS\WOJTEK\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\61IELJV0.DEFAULT\EXTENSIONS\{3D7EB24F-2740-49DF-8937-200B1CC08F8A}.XPI [2012-04-24 20:39:01 | 000,081,104 | ---- | M] () (No name found) -- C:\DOCUMENTS AND SETTINGS\WOJTEK\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\61IELJV0.DEFAULT\EXTENSIONS\{6E84150A-D526-41F1-A480-A67D3FED910D}.XPI [2011-06-11 10:32:10 | 000,049,419 | ---- | M] () (No name found) -- C:\DOCUMENTS AND SETTINGS\WOJTEK\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\61IELJV0.DEFAULT\EXTENSIONS\{9125C9CB-BE2B-4389-A0C7-46A4BDD46AEA}.XPI [2011-11-10 00:01:23 | 000,042,737 | ---- | M] () (No name found) -- C:\DOCUMENTS AND SETTINGS\WOJTEK\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\61IELJV0.DEFAULT\EXTENSIONS\{AFF87FA2-A58E-4EDD-B852-0A20203C1E17}.XPI [2012-06-16 12:17:59 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2008-06-24 19:05:00 | 000,636,408 | ---- | M] (Ganymede Technologies) -- C:\Program Files\mozilla firefox\plugins\NPBILLARD8.dll [2008-06-24 19:05:12 | 000,620,040 | ---- | M] (Ganymede Technologies) -- C:\Program Files\mozilla firefox\plugins\NPBILLARDT.dll [2012-04-07 18:45:39 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2009-02-03 17:35:38 | 000,120,296 | ---- | M] ( ) -- C:\Program Files\mozilla firefox\plugins\npganymedenet.dll [2002-09-16 15:32:04 | 000,138,752 | ---- | M] () -- C:\Program Files\mozilla firefox\plugins\npImagine.dll [2008-06-24 19:06:28 | 000,550,392 | ---- | M] (Ganymede Technologies) -- C:\Program Files\mozilla firefox\plugins\NPSLOTS70.dll [2011-06-11 10:31:09 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2011-06-11 10:31:10 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2011-06-11 10:31:10 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2011-06-11 10:31:10 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2011-06-11 10:31:10 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2011-06-11 10:31:10 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2012-07-29 00:14:46 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Octh Class) - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll (Orbitdownloader.com) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.) O4 - HKLM..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe (CANON INC.) O4 - HKLM..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe (CANON INC.) O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET) O4 - HKLM..\Run: [LogitechCameraAssistant] C:\Program Files\Logitech\Video\CameraAssistant.exe (Logitech Inc.) O4 - HKLM..\Run: [LogitechCameraService(E)] C:\WINDOWS\System32\ElkCtrl.exe (Logitech Inc.) O4 - HKLM..\Run: [LogitechVideo[inspector]] C:\Program Files\Logitech\Video\InstallHelper.exe (Logitech Inc.) O4 - HKLM..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE (Logitech Inc.) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe () O4 - HKLM..\Run: [Sony Ericsson PC Suite] C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe (Sony Ericsson Mobile Communications AB) O4 - HKLM..\Run: [UnlockerAssistant] C:\Program Files\Unlocker\UnlockerAssistant.exe () O4 - HKCU..\Run: [AlcoholAutomount] C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe (Alcohol Soft Development Team) O4 - HKCU..\Run: [C:\Program Files\NetMeter\NetMeter.exe] C:\Program Files\NetMeter\NetMeter.exe () O4 - HKCU..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe (Logitech) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe (Logitech) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O8 - Extra context menu item: &Download by Orbit - C:\Program Files\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com) O8 - Extra context menu item: &Grab video by Orbit - C:\Program Files\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com) O8 - Extra context menu item: Do&wnload selected by Orbit - C:\Program Files\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com) O8 - Extra context menu item: Down&load all by Orbit - C:\Program Files\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com) O9 - Extra 'Tools' menuitem : My kikin - {0F7195C2-6713-4d93-A1BC-DA5FA33F0A65} - Reg Error: Key error. File not found O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{AC8B370A-39A0-45CC-AC68-E1624E27F839}: DhcpNameServer = 192.168.1.1 192.168.1.1 O18 - Protocol\Handler\bw+0 {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bw+0s {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bw-0 {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bw00 {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bw00s {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bw-0s {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bw10 {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bw10s {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bw20 {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bw20s {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bw30 {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bw30s {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bw40 {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bw40s {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bw50 {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bw50s {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bw60 {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bw60s {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bw70 {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bw70s {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bw80 {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bw80s {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bw90 {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bw90s {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwa0 {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwa0s {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwb0 {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwb0s {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwc0 {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwc0s {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwd0 {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwd0s {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwe0 {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwe0s {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwf0 {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwf0s {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwfile-8876480 {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwg0 {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwg0s {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwh0 {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwh0s {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwi0 {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwi0s {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwj0 {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwj0s {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwk0 {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwk0s {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwl0 {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwl0s {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwm0 {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwm0s {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwn0 {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwn0s {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwo0 {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwo0s {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwp0 {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwp0s {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwq0 {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwq0s {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwr0 {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwr0s {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bws0 {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bws0s {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwt0 {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwt0s {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwu0 {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwu0s {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwv0 {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwv0s {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bww0 {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bww0s {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwx0 {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwx0s {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwy0 {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwy0s {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwz0 {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\bwz0s {5d8e2764-dcba-41d9-8d65-07f7be71874a} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\offline-8876480 {5D8E2764-DCBA-41D9-8D65-07F7BE71874A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\WOJTEK\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\WOJTEK\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2008-12-21 04:44:08 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-07-30 00:03:19 | 000,000,000 | ---D | C] -- C:\_OTL [2012-07-29 12:46:57 | 000,597,504 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\WOJTEK\Pulpit\OTL.exe [2012-07-29 01:01:58 | 000,000,000 | -HSD | C] -- C:\RECYCLER [2012-07-29 00:12:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\temp [2012-07-29 00:08:00 | 000,000,000 | RHSD | C] -- C:\cmdcons [2012-07-29 00:06:19 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe [2012-07-29 00:06:19 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe [2012-07-29 00:06:19 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe [2012-07-29 00:06:19 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe [2012-07-29 00:05:08 | 000,000,000 | ---D | C] -- C:\Qoobox [2012-07-29 00:04:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\erdnt [2012-07-28 23:54:35 | 000,000,000 | ---D | C] -- C:\WINDOWS\CSC [2012-07-28 23:44:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\WOJTEK\Pulpit\procesor [2012-07-28 23:44:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\WOJTEK\Pulpit\łazienki [2012-07-20 23:42:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\WOJTEK\Menu Start\Programy\GTA IV The Lost and Damned oraz The Ballad of Gay Tony PL [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-07-30 00:13:36 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2012-07-30 00:08:04 | 000,206,530 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml [2012-07-30 00:07:26 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2012-07-29 15:56:47 | 000,002,259 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk [2012-07-29 12:59:28 | 000,302,592 | ---- | M] () -- C:\Documents and Settings\WOJTEK\Pulpit\wgwvnj62.exe [2012-07-29 12:47:01 | 000,597,504 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\WOJTEK\Pulpit\OTL.exe [2012-07-29 09:43:47 | 000,047,616 | ---- | M] () -- C:\Documents and Settings\WOJTEK\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-07-29 00:14:46 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts [2012-07-29 00:08:30 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat [2012-07-29 00:08:05 | 000,000,327 | RHS- | M] () -- C:\boot.ini [2012-07-28 11:14:53 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2012-07-11 13:17:46 | 000,158,314 | ---- | M] () -- C:\Documents and Settings\WOJTEK\default.pls [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-07-29 12:59:28 | 000,302,592 | ---- | C] () -- C:\Documents and Settings\WOJTEK\Pulpit\wgwvnj62.exe [2012-07-29 00:08:05 | 000,000,211 | ---- | C] () -- C:\Boot.bak [2012-07-29 00:08:01 | 000,262,400 | RHS- | C] () -- C:\cmldr [2012-07-29 00:06:19 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe [2012-07-29 00:06:19 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe [2012-07-29 00:06:19 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe [2012-07-29 00:06:19 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe [2012-07-29 00:06:19 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe [2012-04-11 19:13:21 | 000,003,426 | ---- | C] () -- C:\Documents and Settings\WOJTEK\.recently-used.xbel [2012-02-01 16:58:55 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\vidx16.dll [2011-07-12 10:20:50 | 000,319,488 | R--- | C] () -- C:\WINDOWS\System32\MafiaSetup.exe [2011-01-09 02:37:32 | 002,480,350 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-S-1-5-21-343818398-764733703-839522115-1003-0.dat [2011-01-09 02:37:31 | 000,276,790 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-System.dat [2010-11-22 20:42:58 | 000,000,707 | ---- | C] () -- C:\WINDOWS\unins000.dat [2010-11-19 18:10:54 | 000,005,670 | ---- | C] () -- C:\WINDOWS\DiabUnin.dat [2010-08-17 10:07:33 | 000,014,115 | ---- | C] () -- C:\WINDOWS\twspmm.ini [2009-08-07 23:07:49 | 000,874,672 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat [2009-06-04 11:53:25 | 000,158,314 | ---- | C] () -- C:\Documents and Settings\WOJTEK\default.pls [2009-02-03 17:25:53 | 000,022,328 | ---- | C] () -- C:\Documents and Settings\WOJTEK\Dane aplikacji\PnkBstrK.sys [2009-02-01 23:15:55 | 000,047,616 | ---- | C] () -- C:\Documents and Settings\WOJTEK\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-01-24 16:06:37 | 000,000,131 | ---- | C] () -- C:\Documents and Settings\WOJTEK\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [color=#E56717]========== LOP Check ==========[/color] [2010-03-28 20:56:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\2DBoy [2010-03-17 19:33:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\BioWare [2009-02-10 19:47:03 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\CanonBJ [2011-03-05 11:43:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Codemasters [2010-04-04 19:34:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite [2011-01-31 22:33:24 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DSS [2011-04-16 14:19:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\EA Core [2011-04-16 14:19:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Electronic Arts [2011-01-20 21:11:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ESET [2010-07-01 13:02:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Fallout3 [2012-02-24 22:35:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10 [2012-02-03 18:27:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\IObit [2011-06-06 12:50:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla [2011-02-19 17:10:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Keronsoft [2012-06-03 14:34:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\KONAMI [2010-04-12 20:18:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM [2010-05-03 21:50:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Drivers HeadQuarters [2011-06-06 12:50:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\RDRM [2011-06-23 18:17:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Solidshield [2011-07-27 17:43:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Sony [2011-01-08 11:03:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Sports Interactive [2010-11-12 20:54:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Tages [2010-08-25 16:30:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Teleca [2011-08-27 20:36:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Ubisoft [2010-02-25 18:48:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Z-Software [2011-01-30 11:38:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WOJTEK\Dane aplikacji\2K Sports [2010-01-23 10:49:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WOJTEK\Dane aplikacji\Atari [2009-04-06 21:32:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WOJTEK\Dane aplikacji\Black Sea Studios [2009-01-24 15:32:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WOJTEK\Dane aplikacji\Canneverbe_Limited [2010-08-02 20:31:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WOJTEK\Dane aplikacji\Canon [2010-04-05 09:53:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WOJTEK\Dane aplikacji\DAEMON Tools Lite [2009-07-21 10:44:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WOJTEK\Dane aplikacji\Disney Interactive Studios [2011-02-02 17:06:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WOJTEK\Dane aplikacji\DMCache [2012-02-24 22:35:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WOJTEK\Dane aplikacji\Gadu-Gadu 10 [2009-07-23 19:53:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WOJTEK\Dane aplikacji\GanymedeNet [2009-02-08 19:27:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WOJTEK\Dane aplikacji\GrabPro [2012-04-11 19:13:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WOJTEK\Dane aplikacji\gtk-2.0 [2011-01-08 11:26:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WOJTEK\Dane aplikacji\IDM [2011-08-24 11:51:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WOJTEK\Dane aplikacji\ipla [2009-02-13 16:28:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WOJTEK\Dane aplikacji\Leadertech [2010-09-22 21:06:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WOJTEK\Dane aplikacji\mojosoft [2009-03-16 20:30:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WOJTEK\Dane aplikacji\Mount&Blade [2010-12-25 23:18:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WOJTEK\Dane aplikacji\MusicIP [2009-11-28 16:27:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WOJTEK\Dane aplikacji\Nowe Gadu-Gadu [2009-07-23 20:00:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WOJTEK\Dane aplikacji\OpenFM [2011-08-02 15:01:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WOJTEK\Dane aplikacji\Opera [2012-07-18 15:36:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WOJTEK\Dane aplikacji\Orbit [2011-07-27 17:45:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WOJTEK\Dane aplikacji\Publish Providers [2011-08-27 19:14:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WOJTEK\Dane aplikacji\PunkBuster [2010-11-21 11:38:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WOJTEK\Dane aplikacji\RDRM [2012-02-18 14:07:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WOJTEK\Dane aplikacji\Sierra [2011-07-27 17:03:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WOJTEK\Dane aplikacji\Sony [2011-01-08 11:02:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WOJTEK\Dane aplikacji\Sports Interactive [2011-01-20 20:38:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WOJTEK\Dane aplikacji\TeamViewer [2009-07-14 16:39:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WOJTEK\Dane aplikacji\Teleca [2009-01-31 20:57:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WOJTEK\Dane aplikacji\Thunderbird [2010-07-26 11:52:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WOJTEK\Dane aplikacji\Touchstone [2010-04-28 17:12:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WOJTEK\Dane aplikacji\Tropico 3 [2012-04-29 14:30:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WOJTEK\Dane aplikacji\Ubisoft [2010-08-23 15:46:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WOJTEK\Dane aplikacji\WinAVI [2010-08-21 12:56:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WOJTEK\Dane aplikacji\Youtube Downloader HD [2010-02-15 23:34:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\WOJTEK\Dane aplikacji\Z-Software [2010-05-04 11:23:59 | 000,000,260 | ---- | M] () -- C:\WINDOWS\Tasks\WGASetup.job [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 4 bytes -> C:\WINDOWS\win.ini:s1 < End of report >