OTL logfile created on: 2012-10-06 08:32:46 - Run 7 OTL by OldTimer - Version 3.2.69.0 Folder = E:\Program Files Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.2180) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1,75 Gb Total Physical Memory | 1,17 Gb Available Physical Memory | 66,63% Memory free 3,60 Gb Paging File | 3,23 Gb Available in Paging File | 89,64% Paging File free Paging file location(s): E:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = E: | %SystemRoot% = E:\WINDOWS | %ProgramFiles% = E:\Program Files Drive C: | 224,61 Gb Total Space | 193,97 Gb Free Space | 86,36% Space Free | Partition Type: NTFS Drive E: | 241,14 Gb Total Space | 231,73 Gb Free Space | 96,10% Space Free | Partition Type: NTFS Computer Name: DOM | User Name: Krzyś | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-09-29 12:10:31 | 000,602,112 | ---- | M] (OldTimer Tools) -- E:\Program Files\OTL.exe PRC - [2012-09-06 03:24:58 | 000,917,984 | ---- | M] (Mozilla Corporation) -- E:\Program Files\Mozilla Firefox\firefox.exe PRC - [2012-08-30 22:49:51 | 000,161,768 | ---- | M] (Oracle Corporation) -- E:\Program Files\Java\jre7\bin\jqs.exe PRC - [2012-06-03 10:44:46 | 000,071,096 | ---- | M] () -- E:\Program Files\CDBurnerXP\NMSAccessU.exe PRC - [2009-05-12 23:12:36 | 002,440,632 | ---- | M] (Symantec Corporation) -- E:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe PRC - [2009-05-12 21:55:30 | 001,443,144 | ---- | M] (Symantec Corporation) -- E:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe PRC - [2009-05-12 21:55:28 | 001,803,592 | ---- | M] (Symantec Corporation) -- E:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe PRC - [2009-03-17 01:25:56 | 000,115,560 | ---- | M] (Symantec Corporation) -- E:\Program Files\Common Files\Symantec Shared\ccApp.exe PRC - [2009-03-17 01:25:36 | 000,108,392 | ---- | M] (Symantec Corporation) -- E:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe PRC - [2007-06-11 11:18:00 | 000,537,520 | ---- | M] ( ) -- E:\WINDOWS\system32\lxdjcoms.exe PRC - [2007-06-11 11:17:46 | 000,099,248 | ---- | M] (Lexmark International, Inc.) -- E:\WINDOWS\system32\spool\drivers\w32x86\3\lxdjserv.exe PRC - [2007-04-30 08:19:54 | 000,020,480 | ---- | M] () -- E:\Program Files\Lexmark 1400 Series\lxdjamon.exe PRC - [2007-03-30 18:07:00 | 000,132,656 | ---- | M] (Wacom Technology, Corp.) -- E:\WINDOWS\system32\WTablet\TabUserW.exe PRC - [2007-03-30 18:06:00 | 001,189,424 | ---- | M] (Wacom Technology, Corp.) -- E:\WINDOWS\system32\Tablet.exe PRC - [2004-08-04 00:44:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- E:\WINDOWS\explorer.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012-09-06 03:25:12 | 002,244,064 | ---- | M] () -- E:\Program Files\Mozilla Firefox\mozjs.dll MOD - [2012-06-03 10:44:46 | 000,071,096 | ---- | M] () -- E:\Program Files\CDBurnerXP\NMSAccessU.exe MOD - [2011-04-09 15:41:09 | 001,011,712 | ---- | M] () -- E:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\eee9b48577689e92db5a7b5c5de98d9b\System.Configuration.ni.dll MOD - [2011-04-09 13:58:59 | 005,771,264 | ---- | M] () -- E:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\System.Xml.ni.dll MOD - [2011-04-09 13:58:53 | 013,193,216 | ---- | M] () -- E:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll MOD - [2011-04-09 13:58:41 | 001,667,072 | ---- | M] () -- E:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll MOD - [2011-04-09 13:57:41 | 008,265,728 | ---- | M] () -- E:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll MOD - [2011-04-09 13:57:35 | 011,722,752 | ---- | M] () -- E:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll MOD - [2011-04-09 13:55:58 | 000,311,296 | ---- | M] () -- E:\WINDOWS\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pl_b77a5c561934e089\mscorlib.resources.dll MOD - [2011-04-09 13:54:17 | 000,299,008 | ---- | M] () -- E:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll MOD - [2009-04-14 02:03:00 | 000,466,944 | ---- | M] () -- E:\WINDOWS\system32\nvshell.dll MOD - [2007-05-30 05:12:16 | 000,040,960 | ---- | M] () -- E:\Program Files\Lexmark 1400 Series\App4R.Monitor.Core.dll MOD - [2007-05-30 05:12:16 | 000,028,672 | ---- | M] () -- E:\Program Files\Lexmark 1400 Series\App4R.Monitor.Common.dll MOD - [2007-05-30 05:11:22 | 000,057,344 | ---- | M] () -- E:\Program Files\Lexmark 1400 Series\App4R.DevMons.MCMDevMon.dll MOD - [2007-04-30 08:20:26 | 000,011,776 | ---- | M] () -- E:\Program Files\Lexmark 1400 Series\App4R.DevMons.MCMDevMon.AutoPlayUtil.dll MOD - [2007-04-30 08:19:54 | 000,020,480 | ---- | M] () -- E:\Program Files\Lexmark 1400 Series\lxdjamon.exe MOD - [2007-04-30 08:19:52 | 000,020,480 | ---- | M] () -- E:\Program Files\Lexmark 1400 Series\App4R.DevMons.ScanDevMon.dll MOD - [2007-04-30 08:19:48 | 000,020,480 | ---- | M] () -- E:\Program Files\Lexmark 1400 Series\App4R.DevMons.NetworkCardDevMon.dll MOD - [2007-02-27 05:16:26 | 000,103,936 | ---- | M] () -- E:\WINDOWS\system32\spool\prtprocs\w32x86\lxdjdrpp.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV - File not found [Auto | Unknown] -- C:\WINDOWS\system32\wuauserv.dll -- (wuauserv) SRV - [2012-09-08 23:38:07 | 000,114,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- E:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2012-08-30 22:49:51 | 000,161,768 | ---- | M] (Oracle Corporation) [Auto | Running] -- E:\Program Files\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService) SRV - [2012-06-03 10:44:46 | 000,071,096 | ---- | M] () [Auto | Running] -- E:\Program Files\CDBurnerXP\NMSAccessU.exe -- (NMSAccess) SRV - [2011-04-09 15:43:06 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- E:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2009-05-12 23:12:36 | 002,440,632 | ---- | M] (Symantec Corporation) [Auto | Running] -- E:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe -- (Symantec AntiVirus) SRV - [2009-05-12 21:55:28 | 001,803,592 | ---- | M] (Symantec Corporation) [Auto | Running] -- E:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe -- (SmcService) SRV - [2009-03-20 19:10:15 | 003,093,880 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- E:\Program Files\Symantec\LiveUpdate\LuComServer_3_3.EXE -- (LiveUpdate) SRV - [2009-03-17 01:25:36 | 000,108,392 | ---- | M] (Symantec Corporation) [Auto | Running] -- E:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccSetMgr) SRV - [2009-03-17 01:25:36 | 000,108,392 | ---- | M] (Symantec Corporation) [Auto | Running] -- E:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccEvtMgr) SRV - [2009-02-01 22:43:02 | 000,320,840 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- E:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE -- (SNAC) SRV - [2007-06-11 11:18:00 | 000,537,520 | ---- | M] ( ) [Auto | Running] -- E:\WINDOWS\system32\lxdjcoms.exe -- (lxdj_device) SRV - [2007-06-11 11:17:46 | 000,099,248 | ---- | M] () [Auto | Running] -- E:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxdjserv.exe -- (lxdjCATSCustConnectService) SRV - [2007-03-30 18:06:00 | 001,189,424 | ---- | M] (Wacom Technology, Corp.) [Auto | Running] -- E:\WINDOWS\system32\Tablet.exe -- (TabletService) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - [2012-09-30 18:03:24 | 000,174,056 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- E:\WINDOWS\system32\drivers\WpsHelper.sys -- (WpsHelper) DRV - [2012-09-13 10:00:00 | 001,601,184 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- E:\Program Files\Common Files\Symantec Shared\VirusDefs\20121004.032\NAVEX15.SYS -- (NAVEX15) DRV - [2012-09-13 10:00:00 | 000,092,704 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- E:\Program Files\Common Files\Symantec Shared\VirusDefs\20121004.032\NAVENG.SYS -- (NAVENG) DRV - [2012-08-15 10:00:00 | 000,376,480 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- E:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl) DRV - [2012-08-15 10:00:00 | 000,106,656 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- E:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv) DRV - [2012-06-03 10:44:46 | 000,005,504 | ---- | M] () [File_System | Auto | Running] -- E:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen) DRV - [2011-10-04 13:40:19 | 000,428,088 | ---- | M] () [Kernel | Boot | Running] -- E:\WINDOWS\system32\drivers\sptd.sys -- (sptd) DRV - [2011-04-09 13:20:54 | 000,123,952 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- E:\WINDOWS\system32\drivers\SYMEVENT.SYS -- (SymEvent) DRV - [2009-05-12 21:58:06 | 000,091,976 | ---- | M] (Symantec Corporation) [Kernel | Disabled | Stopped] -- E:\WINDOWS\system32\drivers\SysPlant.sys -- (SysPlant) DRV - [2009-05-12 21:56:32 | 000,042,312 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- E:\WINDOWS\system32\drivers\WPSDRVnt.sys -- (WPS) DRV - [2009-05-08 05:22:28 | 001,358,720 | R--- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- E:\WINDOWS\system32\drivers\viahduaa.sys -- (VIAHdAudAddService) DRV - [2009-03-04 14:07:52 | 000,319,920 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- E:\WINDOWS\system32\drivers\srtspl.sys -- (SRTSPL) DRV - [2009-03-04 14:07:52 | 000,280,112 | ---- | M] (Symantec Corporation) [File_System | System | Running] -- E:\WINDOWS\system32\drivers\srtsp.sys -- (SRTSP) DRV - [2009-03-04 14:07:52 | 000,043,824 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- E:\WINDOWS\system32\drivers\srtspx.sys -- (SRTSPX) DRV - [2008-11-18 18:17:08 | 000,023,888 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- E:\WINDOWS\system32\drivers\COH_Mon.sys -- (COH_Mon) DRV - [2008-10-14 12:24:18 | 000,049,536 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- E:\WINDOWS\system32\drivers\Teefer2.sys -- (Teefer2) DRV - [2008-09-09 14:54:42 | 000,421,424 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- E:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys -- (SPBBCDrv) DRV - [2008-08-21 11:13:56 | 000,191,536 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- E:\WINDOWS\system32\drivers\symtdi.sys -- (SYMTDI) DRV - [2008-08-21 11:13:56 | 000,027,696 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- E:\WINDOWS\system32\drivers\symredrv.sys -- (SYMREDRV) DRV - [2008-08-18 12:54:24 | 000,145,952 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- E:\WINDOWS\system32\drivers\nvgts.sys -- (nvgts) DRV - [2008-03-25 05:48:08 | 000,022,016 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- E:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus) DRV - [2008-03-25 05:48:06 | 000,054,400 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- E:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD) DRV - [2008-02-14 08:12:00 | 001,389,056 | R--- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- E:\WINDOWS\system32\drivers\monfilt.sys -- (monfilt) DRV - [2007-02-16 11:12:00 | 000,011,312 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- E:\WINDOWS\system32\drivers\wacommousefilter.sys -- (wacommousefilter) DRV - [2007-02-16 10:30:00 | 000,012,848 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- E:\WINDOWS\system32\drivers\wacomvhid.sys -- (wacomvhid) DRV - [2007-02-15 16:11:00 | 000,011,440 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- E:\WINDOWS\system32\drivers\WacomVKHid.sys -- (WacomVKHid) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-436374069-1085031214-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie IE - HKU\S-1-5-21-436374069-1085031214-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie IE - HKU\S-1-5-21-436374069-1085031214-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com IE - HKU\S-1-5-21-436374069-1085031214-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = IE - HKU\S-1-5-21-436374069-1085031214-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKU\S-1-5-21-436374069-1085031214-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKU\S-1-5-21-436374069-1085031214-725345543-1003\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689 IE - HKU\S-1-5-21-436374069-1085031214-725345543-1003\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={sear IE - HKU\S-1-5-21-436374069-1085031214-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-436374069-1085031214-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "about:blank" FF - prefs.js..extensions.enabledAddons: player@vividas.com:4.1.3 FF - prefs.js..extensions.enabledAddons: {64161300-e22b-11db-8314-0800200c9a66}:0.9.6.8 FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: E:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: E:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: E:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: E:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2: E:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: e:\Program Files\Microsoft Silverlight\5.0.61118.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: E:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Components: E:\Program Files\Mozilla Firefox\components [2012-09-26 13:58:03 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Plugins: E:\Program Files\Mozilla Firefox\plugins [2012-09-08 23:38:02 | 000,000,000 | ---D | M] [2011-04-09 13:34:24 | 000,000,000 | ---D | M] (No name found) -- E:\Documents and Settings\Krzyś\Dane aplikacji\Mozilla\Extensions [2012-07-24 19:28:49 | 000,000,000 | ---D | M] (No name found) -- E:\Documents and Settings\Krzyś\Dane aplikacji\Mozilla\Firefox\Profiles\8gredbie.default\extensions [2012-04-09 21:36:09 | 000,000,000 | ---D | M] (Vividas player plugin) -- E:\Documents and Settings\Krzyś\Dane aplikacji\Mozilla\Firefox\Profiles\8gredbie.default\extensions\player@vividas.com [2012-07-24 19:28:49 | 000,276,167 | ---- | M] () (No name found) -- E:\Documents and Settings\Krzyś\Dane aplikacji\Mozilla\Firefox\Profiles\8gredbie.default\extensions\{64161300-e22b-11db-8314-0800200c9a66}.xpi [2012-09-26 13:58:03 | 000,000,000 | ---D | M] (No name found) -- E:\Program Files\Mozilla Firefox\extensions File not found (No name found) -- E:\DOCUMENTS AND SETTINGS\KRZYĹ›\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\8GREDBIE.DEFAULT\EXTENSIONS\{64161300-E22B-11DB-8314-0800200C9A66}.XPI File not found (No name found) -- E:\DOCUMENTS AND SETTINGS\KRZYĹ›\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\8GREDBIE.DEFAULT\EXTENSIONS\PLAYER@VIVIDAS.COM [2012-09-06 03:26:03 | 000,266,720 | ---- | M] (Mozilla Foundation) -- E:\Program Files\mozilla firefox\components\browsercomps.dll [2011-09-16 12:57:06 | 000,189,088 | ---- | M] ( ) -- E:\Program Files\mozilla firefox\plugins\npVividasPlayer.dll [2012-09-06 04:57:09 | 000,002,767 | ---- | M] () -- E:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2012-09-06 04:57:10 | 000,001,406 | ---- | M] () -- E:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2012-09-06 04:57:10 | 000,000,917 | ---- | M] () -- E:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2012-09-06 04:57:10 | 000,000,858 | ---- | M] () -- E:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2012-09-06 04:57:10 | 000,001,183 | ---- | M] () -- E:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2012-09-06 04:57:09 | 000,001,683 | ---- | M] () -- E:\Program Files\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2001-10-26 19:45:16 | 000,000,742 | ---- | M]) - E:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - E:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O4 - HKLM..\Run: [BluetoothAuthenticationAgent] E:\WINDOWS\System32\bthprops.cpl (Microsoft Corporation) O4 - HKLM..\Run: [ccApp] E:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation) O4 - HKLM..\Run: [lxdjamon] E:\Program Files\Lexmark 1400 Series\lxdjamon.exe () O4 - HKLM..\Run: [NvCplDaemon] E:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] E:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] E:\WINDOWS\System32\nwiz.exe () O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-436374069-1085031214-725345543-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-436374069-1085031214-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-21-436374069-1085031214-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-21-436374069-1085031214-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O8 - Extra context menu item: Add to Google Photos Screensa&ver - E:\WINDOWS\System32\GPhotos.scr (Google Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - E:\Program Files\Bonjour\mdnsNSP.dll (Apple Computer, Inc.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.0.2.2 192.168.0.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{36D2CB52-F571-4FB1-87B5-E130B0178A60}: DhcpNameServer = 192.0.2.2 192.168.0.1 O20 - HKLM Winlogon: Shell - (Explorer.exe) - E:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (E:\WINDOWS\system32\userinit.exe) - E:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: E:\Documents and Settings\Krzyś\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: E:\Documents and Settings\Krzyś\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2011-04-09 12:49:24 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-09-29 12:10:31 | 000,602,112 | ---- | C] (OldTimer Tools) -- E:\Program Files\OTL.exe [2012-09-29 12:10:06 | 000,693,265 | ---- | C] (Farbar) -- E:\Program Files\FSS.exe [2012-09-26 13:25:38 | 000,000,000 | -HSD | C] -- E:\WINDOWS\CSC [2012-09-12 21:42:10 | 000,000,000 | ---D | C] -- E:\WINDOWS\Sun [2012-09-08 23:38:00 | 000,000,000 | ---D | C] -- E:\Program Files\Mozilla Firefox [2012-09-08 21:38:43 | 000,000,000 | ---D | C] -- E:\Documents and Settings\Krzyś\Dane aplikacji\Canneverbe Limited [2012-09-08 21:38:43 | 000,000,000 | ---D | C] -- E:\Documents and Settings\All Users\Dane aplikacji\Canneverbe Limited [2012-09-08 21:38:36 | 000,000,000 | ---D | C] -- E:\Program Files\CDBurnerXP [2012-03-12 20:30:15 | 000,407,552 | ---- | C] (Embarcadero Technologies, Inc.) -- E:\Documents and Settings\Krzyś\midas.dll [1 E:\Documents and Settings\All Users\*.tmp files -> E:\Documents and Settings\All Users\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-10-06 08:29:56 | 000,212,641 | ---- | M] () -- E:\WINDOWS\System32\nvapps.xml [2012-10-06 08:29:13 | 000,000,006 | -H-- | M] () -- E:\WINDOWS\tasks\SA.DAT [2012-10-06 08:29:04 | 000,002,048 | --S- | M] () -- E:\WINDOWS\bootstat.dat [2012-10-06 08:28:24 | 019,398,656 | -H-- | M] () -- E:\Documents and Settings\Krzyś\NTUSER.DAT [2012-10-06 00:26:46 | 003,763,670 | -H-- | M] () -- E:\Documents and Settings\Krzyś\Ustawienia lokalne\Dane aplikacji\IconCache.db [2012-10-05 16:31:59 | 000,002,206 | ---- | M] () -- E:\WINDOWS\System32\wpa.dbl [2012-09-30 18:03:24 | 000,174,056 | ---- | M] (Symantec Corporation) -- E:\WINDOWS\System32\drivers\WpsHelper.sys [2012-09-29 13:38:20 | 000,000,918 | ---- | M] () -- E:\Documents and Settings\All Users\lxdj [2012-09-29 12:30:30 | 000,302,592 | ---- | M] () -- E:\Program Files\28vp6kon.exe [2012-09-29 12:10:50 | 000,881,724 | ---- | M] () -- E:\Program Files\SecurityCheck.exe [2012-09-29 12:10:31 | 000,602,112 | ---- | M] (OldTimer Tools) -- E:\Program Files\OTL.exe [2012-09-29 12:10:07 | 000,693,265 | ---- | M] (Farbar) -- E:\Program Files\FSS.exe [2012-09-29 12:09:18 | 000,139,264 | ---- | M] () -- E:\Program Files\SystemLook.exe [2012-09-26 13:58:05 | 000,000,741 | ---- | M] () -- E:\Documents and Settings\All Users\Pulpit\Mozilla Firefox.lnk [2012-09-26 13:28:49 | 000,000,188 | -HS- | M] () -- E:\Documents and Settings\Krzyś\ntuser.ini [1 E:\Documents and Settings\All Users\*.tmp files -> E:\Documents and Settings\All Users\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-09-29 12:30:29 | 000,302,592 | ---- | C] () -- E:\Program Files\28vp6kon.exe [2012-09-29 12:10:48 | 000,881,724 | ---- | C] () -- E:\Program Files\SecurityCheck.exe [2012-09-29 12:09:18 | 000,139,264 | ---- | C] () -- E:\Program Files\SystemLook.exe [2012-09-08 21:38:37 | 000,001,573 | ---- | C] () -- E:\Documents and Settings\All Users\Menu Start\Programy\CDBurnerXP.lnk [2012-09-08 21:38:36 | 000,005,504 | ---- | C] () -- E:\WINDOWS\System32\drivers\StarOpen.sys [2012-08-30 22:54:37 | 000,000,017 | ---- | C] () -- E:\Documents and Settings\Krzyś\.javafx_ping_sent [2012-08-30 22:54:36 | 000,000,000 | ---- | C] () -- E:\Documents and Settings\Krzyś\.javafx_eula_accepted [2012-03-21 19:17:20 | 000,000,918 | ---- | C] () -- E:\Documents and Settings\All Users\lxdj [2011-10-04 13:40:19 | 000,428,088 | ---- | C] () -- E:\WINDOWS\System32\drivers\sptd.sys [2011-08-12 17:11:44 | 000,256,000 | ---- | C] () -- E:\WINDOWS\PEV.exe [2011-08-12 17:11:44 | 000,208,896 | ---- | C] () -- E:\WINDOWS\MBR.exe [2011-08-12 17:11:44 | 000,098,816 | ---- | C] () -- E:\WINDOWS\sed.exe [2011-08-12 17:11:44 | 000,080,412 | ---- | C] () -- E:\WINDOWS\grep.exe [2011-08-12 17:11:44 | 000,068,096 | ---- | C] () -- E:\WINDOWS\zip.exe [2011-07-25 12:42:06 | 000,011,264 | ---- | C] () -- E:\Documents and Settings\Krzyś\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-06-23 22:25:43 | 000,000,032 | ---- | C] () -- E:\WINDOWS\CD-Start.INI [2011-04-09 14:45:25 | 000,000,421 | ---- | C] () -- E:\WINDOWS\ODBC.INI [2011-04-09 14:38:56 | 000,175,616 | ---- | C] () -- E:\WINDOWS\System32\unrar.dll [2011-04-09 14:38:55 | 000,000,038 | ---- | C] () -- E:\WINDOWS\avisplitter.ini [2011-04-09 14:38:54 | 000,631,808 | ---- | C] () -- E:\WINDOWS\System32\xvidcore.dll [2011-04-09 14:38:54 | 000,243,200 | ---- | C] () -- E:\WINDOWS\System32\xvidvfw.dll [2011-04-09 14:38:54 | 000,080,896 | ---- | C] () -- E:\WINDOWS\System32\ff_vfw.dll [2011-04-09 14:38:54 | 000,000,590 | ---- | C] () -- E:\WINDOWS\System32\ff_vfw.dll.manifest [2011-04-09 14:35:01 | 001,089,268 | ---- | C] () -- E:\WINDOWS\System32\PerfStringBackup.INI [2011-04-09 14:35:00 | 000,004,293 | ---- | C] () -- E:\WINDOWS\ODBCINST.INI [2011-04-09 14:34:05 | 001,535,104 | ---- | C] () -- E:\WINDOWS\System32\FNTCACHE.DAT [2011-04-09 13:55:23 | 000,064,200 | ---- | C] () -- E:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat [2011-04-09 13:52:42 | 000,040,960 | ---- | C] () -- E:\WINDOWS\System32\lxdjvs.dll [2011-04-09 13:52:41 | 000,348,160 | ---- | C] () -- E:\WINDOWS\System32\lxdjcoin.dll [2011-04-09 13:52:07 | 001,232,896 | ---- | C] ( ) -- E:\WINDOWS\System32\lxdjserv.dll [2011-04-09 13:52:07 | 000,999,424 | ---- | C] ( ) -- E:\WINDOWS\System32\lxdjusb1.dll [2011-04-09 13:52:07 | 000,413,696 | ---- | C] ( ) -- E:\WINDOWS\System32\lxdjinpa.dll [2011-04-09 13:52:07 | 000,397,312 | ---- | C] ( ) -- E:\WINDOWS\System32\lxdjiesc.dll [2011-04-09 13:52:07 | 000,323,584 | ---- | C] ( ) -- E:\WINDOWS\System32\lxdjhcp.dll [2011-04-09 13:52:07 | 000,286,720 | ---- | C] () -- E:\WINDOWS\System32\lxdjinst.dll [2011-04-09 13:52:06 | 000,700,416 | ---- | C] ( ) -- E:\WINDOWS\System32\lxdjhbn3.dll [2011-04-09 13:52:06 | 000,684,032 | ---- | C] ( ) -- E:\WINDOWS\System32\lxdjcomc.dll [2011-04-09 13:52:06 | 000,643,072 | ---- | C] ( ) -- E:\WINDOWS\System32\lxdjpmui.dll [2011-04-09 13:52:06 | 000,585,728 | ---- | C] ( ) -- E:\WINDOWS\System32\lxdjlmpm.dll [2011-04-09 13:52:06 | 000,537,520 | ---- | C] ( ) -- E:\WINDOWS\System32\lxdjcoms.exe [2011-04-09 13:52:06 | 000,425,984 | ---- | C] ( ) -- E:\WINDOWS\System32\lxdjcomm.dll [2011-04-09 13:52:06 | 000,394,160 | ---- | C] ( ) -- E:\WINDOWS\System32\lxdjcfg.exe [2011-04-09 13:52:06 | 000,385,968 | ---- | C] ( ) -- E:\WINDOWS\System32\lxdjih.exe [2011-04-09 13:52:06 | 000,208,896 | ---- | C] () -- E:\WINDOWS\System32\lxdjgrd.dll [2011-04-09 13:52:06 | 000,163,840 | ---- | C] ( ) -- E:\WINDOWS\System32\lxdjprox.dll [2011-04-09 13:52:06 | 000,094,208 | ---- | C] ( ) -- E:\WINDOWS\System32\lxdjpplc.dll [2011-04-09 13:34:21 | 000,000,000 | ---- | C] () -- E:\WINDOWS\nsreg.dat [2011-04-09 13:15:02 | 000,063,192 | ---- | C] () -- E:\Documents and Settings\Krzyś\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT [2011-04-09 13:13:27 | 000,000,664 | ---- | C] () -- E:\WINDOWS\System32\d3d9caps.dat [2011-04-09 13:02:44 | 003,763,670 | -H-- | C] () -- E:\Documents and Settings\Krzyś\Ustawienia lokalne\Dane aplikacji\IconCache.db [2011-04-09 12:56:55 | 000,003,948 | R--- | C] () -- E:\WINDOWS\System32\drivers\nvphy.bin [2011-04-09 12:52:55 | 000,000,188 | -HS- | C] () -- E:\Documents and Settings\Krzyś\ntuser.ini [2011-04-09 12:52:54 | 019,398,656 | -H-- | C] () -- E:\Documents and Settings\Krzyś\NTUSER.DAT [2011-04-09 12:50:53 | 000,002,048 | --S- | C] () -- E:\WINDOWS\bootstat.dat [2011-04-09 12:49:24 | 000,000,000 | ---- | C] () -- E:\WINDOWS\control.ini [2011-04-09 12:48:38 | 000,000,488 | RH-- | C] () -- E:\WINDOWS\System32\logonui.exe.manifest [2011-04-09 12:48:34 | 000,000,749 | RH-- | C] () -- E:\WINDOWS\System32\cdplayer.exe.manifest [2011-04-09 12:46:53 | 000,021,856 | ---- | C] () -- E:\WINDOWS\System32\emptyregdb.dat [2011-04-09 12:46:41 | 000,000,037 | ---- | C] () -- E:\WINDOWS\vbaddin.ini [2011-04-09 12:46:41 | 000,000,036 | ---- | C] () -- E:\WINDOWS\vb.ini [2011-04-09 12:46:08 | 000,026,717 | ---- | C] () -- E:\WINDOWS\System32\tslabels.ini [2011-04-09 12:46:07 | 000,003,813 | ---- | C] () -- E:\WINDOWS\System32\msdtcprf.ini [color=#E56717]========== ZeroAccess Check ==========[/color] [2011-04-09 13:54:09 | 000,000,227 | RHS- | M] () -- E:\WINDOWS\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shdocvw.dll -- [2004-08-04 00:44:10 | 001,483,264 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = E:\WINDOWS\system32\wbem\fastprox.dll -- [2004-08-04 00:43:58 | 000,472,064 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = E:\WINDOWS\system32\wbem\wbemess.dll -- [2004-08-04 00:44:14 | 000,273,920 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [color=#E56717]========== LOP Check ==========[/color] [2012-09-08 21:38:43 | 000,000,000 | ---D | M] -- E:\Documents and Settings\All Users\Dane aplikacji\Canneverbe Limited [2011-06-23 22:25:41 | 000,000,000 | ---D | M] -- E:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite [2011-04-09 14:09:39 | 000,000,000 | ---D | M] -- E:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10 [2012-09-08 21:38:43 | 000,000,000 | ---D | M] -- E:\Documents and Settings\Krzyś\Dane aplikacji\Canneverbe Limited [2011-06-23 22:43:24 | 000,000,000 | ---D | M] -- E:\Documents and Settings\Krzyś\Dane aplikacji\DAEMON Tools Lite [2011-04-10 12:22:38 | 000,000,000 | ---D | M] -- E:\Documents and Settings\Krzyś\Dane aplikacji\Foxit Software [2011-04-10 19:11:32 | 000,000,000 | ---D | M] -- E:\Documents and Settings\Krzyś\Dane aplikacji\Gadu-Gadu 10 [color=#E56717]========== Purity Check ==========[/color] < End of report >