OTL logfile created on: 2012-10-15 10:02:13 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = D:\
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
3,25 Gb Total Physical Memory | 2,97 Gb Available Physical Memory | 91,45% Memory free
5,09 Gb Paging File | 5,00 Gb Available in Paging File | 98,24% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 232,88 Gb Total Space | 74,60 Gb Free Space | 32,03% Space Free | Partition Type: NTFS
Drive D: | 232,88 Gb Total Space | 162,09 Gb Free Space | 69,61% Space Free | Partition Type: NTFS
 
Computer Name: OEM | User Name: Admin | Logged in as Administrator.
Boot Mode: SafeMode | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-10-15 09:46:04 | 000,602,112 | ---- | M] (OldTimer Tools) -- D:\OTL.exe
PRC - [2008-04-15 14:00:00 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2012-04-08 00:41:50 | 000,027,958 | ---- | M] () -- C:\Program Files\Common Files\logonInit.dll
MOD - [2006-09-14 01:20:24 | 000,126,464 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ)
SRV - [2012-10-14 00:33:18 | 000,115,168 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012-10-10 14:45:29 | 000,250,808 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012-09-13 15:26:52 | 001,006,448 | ---- | M] () [Auto | Stopped] -- C:\WINDOWS\system32\dmwu.exe -- (WebOptimizer)
SRV - [2012-08-23 15:40:04 | 000,188,760 | ---- | M] () [Auto | Stopped] -- C:\Program Files\Web Assistant\ExtensionUpdaterService.exe -- (Web Assistant Updater)
SRV - [2012-08-23 12:43:32 | 000,161,768 | ---- | M] (Oracle Corporation) [Auto | Stopped] -- C:\Program Files\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2012-05-03 08:31:10 | 000,158,856 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012-01-05 17:42:34 | 000,075,624 | ---- | M] (Alcohol Soft Development Team) [Auto | Stopped] -- C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe -- (AxAutoMntSrv)
SRV - [2011-05-10 15:10:57 | 000,042,184 | ---- | M] (AVAST Software) [Auto | Stopped] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2010-01-15 14:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService)
SRV - [2009-12-23 23:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto | Stopped] -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE)
SRV - [2008-12-05 16:11:54 | 000,935,208 | ---- | M] (Nero AG) [Auto | Stopped] -- C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0)
SRV - [2004-08-23 14:49:56 | 000,040,960 | ---- | M] (France Telecom) [Auto | Stopped] -- C:\WINDOWS\system32\FTRTSVC.exe -- (FTRTSVC)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\PCAMPR5.SYS -- (PCAMPR5)
DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] --  -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] --  -- (Changer)
DRV - [2012-08-11 21:56:09 | 000,477,240 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sptd.sys -- (sptd)
DRV - [2011-08-09 14:03:48 | 006,423,656 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService)
DRV - [2011-05-10 15:03:54 | 000,441,176 | ---- | M] (AVAST Software) [File_System | System | Stopped] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2011-05-10 15:03:44 | 000,307,928 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2011-05-10 15:02:37 | 000,049,240 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2011-05-10 15:02:25 | 000,102,616 | ---- | M] (AVAST Software) [File_System | Auto | Stopped] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2011-05-10 14:59:56 | 000,025,432 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2011-05-10 14:59:37 | 000,030,808 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2011-05-10 14:59:35 | 000,019,544 | ---- | M] (AVAST Software) [File_System | Auto | Stopped] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2011-02-10 01:00:00 | 000,234,392 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2010-01-27 04:09:02 | 000,050,704 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\npf.sys -- (npf)
DRV - [2009-11-18 01:17:00 | 001,395,800 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt)
DRV - [2009-11-18 01:16:00 | 001,691,480 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt)
DRV - [2007-04-16 17:46:34 | 000,033,792 | ---- | M] (Advanced Micro Devices) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\AmdPPM.sys -- (AmdPPM)
DRV - [2006-05-25 19:28:44 | 000,684,265 | R--- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\torususb.sys -- (TaurusUsb)
DRV - [2004-09-07 09:11:50 | 000,090,568 | R--- | M] (VM) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbVM31b.sys -- (ZSMC302)
DRV - [2003-08-12 18:51:00 | 000,060,255 | R--- | M] (STMicroelectronics              ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\stmatm.sys -- (Stmatm)
DRV - [2003-08-04 14:22:44 | 000,016,128 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\PCANDIS5.SYS -- (PCANDIS5)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
IE - HKU\S-1-5-21-436374069-926492609-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT3072253
IE - HKU\S-1-5-21-436374069-926492609-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore = http://www.neostrada.pl
IE - HKU\S-1-5-21-436374069-926492609-682003330-1003\..\URLSearchHook: {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTo0.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-436374069-926492609-682003330-1003\..\SearchScopes,DefaultScope = {CFF4DB9B-135F-47c0-9269-B4C6572FD61A}
IE - HKU\S-1-5-21-436374069-926492609-682003330-1003\..\SearchScopes\{0388404D-6072-4CEB-B521-8F090FEAEE57}: "URL" = http://klit.startnow.com/s/?q={searchTerms}&src=defsearch&provider=&provider_name=yahoo&provider_code=&partner_id=693&product_id=741&affiliate_id=&channel=&toolbar_id=200&toolbar_version=2.4.0&install_country=PL&install_date=20120505&user_guid=6B7E117EA691462D8BCA2D393D3C6B70&machine_id=06c2cb74a3dff949fe9037678ca55fa5&browser=IE&os=win&os_version=5.1-x86-SP3&iesrc={referrer:source}
IE - HKU\S-1-5-21-436374069-926492609-682003330-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC
IE - HKU\S-1-5-21-436374069-926492609-682003330-1003\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=110819&tt=100512_1_&babsrc=SP_ss&mntrId=18cd9865000000000000bc5ff41999cf
IE - HKU\S-1-5-21-436374069-926492609-682003330-1003\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3072253
IE - HKU\S-1-5-21-436374069-926492609-682003330-1003\..\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}: "URL" = http://mystart.incredibar.com/mb165/?search={searchTerms}&loc=IB_DS&a=6PQzEBWtjc&i=26
IE - HKU\S-1-5-21-436374069-926492609-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultenginename: "Search the web (Babylon)"
FF - prefs.js..browser.search.defaultthis.engineName: "uTorrentControl2 Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.order.1: "Search the web (Babylon)"
FF - prefs.js..browser.search.selectedEngine: "uTorrentControl2 Customized Web Search"
FF - prefs.js..browser.startup.homepage: "http://www.google.pl/"
FF - prefs.js..extensions.enabledAddons: ffxtlbr@babylon.com:1.1.9
FF - prefs.js..extensions.enabledAddons: ffxtlbr@incredibar.com:1.5.0
FF - prefs.js..extensions.enabledAddons: plugin@yontoo.com:1.20.00
FF - prefs.js..extensions.enabledAddons: {687578b9-7132-4a7a-80e4-30ee31099e03}:3.15.1.0
FF - prefs.js..extensions.enabledAddons: ffxtlbra@softonic.com:1.6.0
FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&SearchSource=2&q="
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_4_402_287.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.6.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.6.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2571: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1739: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-03-22 15:47:53 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\Program Files\Web Assistant\Firefox [2012-08-31 12:27:29 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-10-14 00:33:19 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
 
[2012-03-23 15:42:34 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Extensions
[2012-10-02 22:46:54 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\xql737d4.default\extensions
[2012-08-28 12:23:52 | 000,000,000 | ---D | M] (uTorrentControl2 Community Toolbar) -- C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\xql737d4.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}
[2012-04-29 18:48:10 | 000,000,000 | ---D | M] (Babylon) -- C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\xql737d4.default\extensions\ffxtlbr@babylon.com
[2012-06-06 15:20:13 | 000,000,000 | ---D | M] (incredibar.com) -- C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\xql737d4.default\extensions\ffxtlbr@incredibar.com
[2012-09-16 13:50:21 | 000,000,000 | ---D | M] (softonic.com) -- C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\xql737d4.default\extensions\ffxtlbra@softonic.com
[2012-10-02 22:46:54 | 000,000,000 | ---D | M] ("TimeLineRemove.Com") -- C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\xql737d4.default\extensions\jid0-YxzrUsJ0WOiOaU89TngAzLcIs18@jetpack
[2012-04-29 18:47:06 | 000,000,000 | ---D | M] (Yontoo) -- C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\xql737d4.default\extensions\plugin@yontoo.com
[2012-06-07 21:16:04 | 000,000,935 | ---- | M] () -- C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\xql737d4.default\searchplugins\conduit.xml
[2012-06-06 15:19:54 | 000,002,203 | ---- | M] () -- C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\xql737d4.default\searchplugins\MyStart Search.xml
[2012-04-23 21:39:41 | 000,001,390 | ---- | M] () -- C:\Documents and Settings\Admin\Dane aplikacji\Mozilla\Firefox\Profiles\xql737d4.default\searchplugins\yahoo-zugo.xml
[2012-10-14 00:33:13 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012-10-14 00:33:13 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}
[2012-10-14 00:33:13 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions\staged
[2012-10-14 00:33:19 | 000,261,600 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012-06-23 16:45:47 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2012-04-29 18:47:14 | 000,002,352 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml
[2012-06-23 16:45:47 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2012-06-23 16:45:47 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2012-06-23 16:45:47 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2012-06-23 16:45:47 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2012-06-23 16:45:47 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2008-04-15 14:00:00 | 000,000,783 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       mpa.one.microsoft.com
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO)
O2 - BHO: (Web Assistant) - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\Web Assistant\Extension32.dll ()
O2 - BHO: (uTorrentControl2 Toolbar) - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTo0.dll (Conduit Ltd.)
O2 - BHO: (Incredibar.com Helper Object) - {6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99} - C:\Program Files\Incredibar.com\incredibar\1.5.11.14\bh\incredibar.dll (Montera Technologeis LTD)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (DealPly) - {A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} - C:\Program Files\DealPly\DealPlyIE.dll (DealPly Technologies Ltd)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (Softonic Helper Object) - {E87806B5-E908-45FD-AF5E-957D83E58E68} - C:\Program Files\Softonic\Softonic\1.6.7.4\bh\Softonic.dll (Softonic.com)
O2 - BHO: (Yontoo) - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files\Yontoo\YontooIEClient.dll (Yontoo LLC)
O3 - HKLM\..\Toolbar: (Softonic Toolbar) - {5018CFD2-804D-4C99-9F81-25EAEA2769DE} - C:\Program Files\Softonic\Softonic\1.6.7.4\SoftonicTlbr.dll (Softonic.com)
O3 - HKLM\..\Toolbar: (uTorrentControl2 Toolbar) - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTo0.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.)
O3 - HKLM\..\Toolbar: (Incredibar Toolbar) - {F9639E4A-801B-4843-AEE3-03D9DA199E77} - C:\Program Files\Incredibar.com\incredibar\1.5.11.14\incredibarTlbr.dll (Montera Technologeis LTD)
O3 - HKU\S-1-5-21-436374069-926492609-682003330-1003\..\Toolbar\WebBrowser: (uTorrentControl2 Toolbar) - {687578B9-7132-4A7A-80E4-30EE31099E03} - C:\Program Files\uTorrentControl2\prxtbuTo0.dll (Conduit Ltd.)
O4 - HKLM..\Run: [AdslTaskBar] C:\WINDOWS\System32\stmctrl.dll (STMicroelectronics              )
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE (BIGDOG)
O4 - HKLM..\Run: [NBKeyScan] C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe (Nero AG)
O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [VDownloader] C:\Program Files\VDownloader\VDownloader.exe (Vitzo)
O4 - HKLM..\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\GestMaj.exe TaskBarIcon.exe File not found
O4 - HKLM..\Run: [WOOWATCH] C:\Program Files\neostrada tp\Watch.exe (France Télécom R&D)
O4 - HKU\S-1-5-21-436374069-926492609-682003330-1003..\Run: [AlcoholAutomount] C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe (Alcohol Soft Development Team)
O4 - HKU\S-1-5-21-436374069-926492609-682003330-1003..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe (Nero AG)
O4 - Startup: C:\Documents and Settings\Admin\Menu Start\Programy\Autostart\ctfmon.lnk = C:\Documents and Settings\All Users\Dane aplikacji\lsass.exe (Microsoft Corporation)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe (McAfee, Inc.)
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: CDRAutoRun = 0
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: CDRAutoRun = 0
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-436374069-926492609-682003330-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 95 00 00 00  [binary data]
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.4.0/jinstall-1_4_0_03-windows-i586.cab (Java Plug-in 1.4.0_03)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\LogonInit: DllName - (logonInit.dll) - C:\Program Files\Common Files\logonInit.dll ()
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2012-03-22 22:21:05 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{004a4848-e475-11e1-8768-9dc6119c3059}\Shell - "" = AutoRun
O33 - MountPoints2\{004a4848-e475-11e1-8768-9dc6119c3059}\Shell\AutoRun\command - "" = F:\AUTORUN.EXE
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012-10-15 09:02:17 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\All Users\Dane aplikacji\lsass.exe
[2012-10-14 00:33:13 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2012-10-07 02:55:48 | 000,000,000 | ---D | C] -- C:\Program Files\MSXML 4.0
[2012-10-06 19:44:12 | 000,521,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jsdbgui.dll
[2012-10-06 19:44:11 | 001,212,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\urlmon.dll
[2012-09-27 09:06:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Pulpit\Pyskaty - Pysk w Pysk - 2009
[2012-09-27 09:06:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Pulpit\donGURALesko - Totem Lesnych Ludzi - 2010
[2012-09-18 15:04:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\mIRC
[2012-09-18 15:04:53 | 000,000,000 | ---D | C] -- C:\Program Files\mIRC
[2012-09-18 11:31:17 | 000,000,000 | ---D | C] -- C:\Program Files\INTERIAPL
[2012-09-18 11:31:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Menu Start\Programy\INTERIA.PL
[2012-09-16 13:44:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Dane aplikacji\Softonic
[2012-09-16 13:44:06 | 000,000,000 | ---D | C] -- C:\Program Files\Softonic
[2012-09-15 13:37:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Pulpit\Energy 2000 Mix Vol. 37 - Summer Edition 2012
[9 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\dllcache\*.tmp files -> C:\WINDOWS\System32\dllcache\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012-10-15 09:59:04 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012-10-15 09:58:26 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012-10-15 09:17:20 | 083,023,306 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\0tbpw.pad
[2012-10-15 09:06:00 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012-10-15 09:02:20 | 000,001,036 | ---- | M] () -- C:\Documents and Settings\Admin\Menu Start\Programy\Autostart\ctfmon.lnk
[2012-10-15 09:02:17 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\All Users\Dane aplikacji\lsass.exe
[2012-10-15 08:58:58 | 000,000,000 | ---- | M] () -- C:\Program Files\Common Files\userInit.dll
[2012-10-15 08:44:15 | 000,000,930 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2012-10-13 01:32:43 | 001,096,560 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\Skrillex - My Name Is Skrillex.mp3
[2012-10-11 22:03:27 | 000,062,733 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\576498_482814585086698_1242216391_n.jpg
[2012-10-11 17:51:00 | 000,167,822 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\406286_158571227612332_883848771_n.jpg
[2012-10-11 17:50:41 | 000,108,784 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\293262_172243599578428_2062459919_n.jpg
[2012-10-11 17:50:28 | 000,080,550 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\522795_186335978169190_1179367137_n.jpg
[2012-10-11 17:50:23 | 000,070,378 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\65558_186343528168435_1155093243_n.jpg
[2012-10-11 17:50:20 | 000,131,034 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\8138_188034847999303_607056683_n.jpg
[2012-10-11 17:50:17 | 000,088,234 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\560488_188035821332539_275058196_n.jpg
[2012-10-11 17:50:09 | 000,142,001 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\426250_188354917967296_1537021016_n.jpg
[2012-10-10 15:35:08 | 000,515,072 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\Tibiacast Installer.msi
[2012-10-10 15:35:08 | 000,475,520 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\setup.exe
[2012-10-10 15:10:23 | 005,740,305 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\Pezet - Supergirl.mp3
[2012-10-10 14:45:29 | 000,696,760 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2012-10-10 14:45:29 | 000,073,656 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012-10-09 22:17:04 | 000,086,528 | ---- | M] () -- C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-10-08 14:53:07 | 004,722,179 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\Pih - Szatanskie Wersety feat. Slon, Kaczor, Shellerini .mp3
[2012-10-07 22:10:39 | 000,271,784 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012-10-07 16:38:56 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2012-10-07 16:37:51 | 000,494,340 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2012-10-07 16:37:51 | 000,435,774 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012-10-07 16:37:51 | 000,085,498 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2012-10-07 16:37:51 | 000,068,670 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012-10-07 13:16:49 | 005,218,476 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\wsrh - nie przyszlismy tu by przegrac.mp3
[2012-10-07 12:25:11 | 004,739,053 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\WSRH - Nizej Podpisani  skrecze Dj Show prod. Donatan i Pola.mp3
[2012-10-07 12:00:09 | 001,698,918 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\Waldemar Kasta -Łatwopalni.mp3
[2012-10-06 15:54:26 | 000,034,305 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\183318_182268401909281_1726147210_n.jpg
[2012-10-02 11:33:45 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2012-10-02 11:33:45 | 000,000,064 | ---- | M] () -- C:\Documents and Settings\Admin\default.pls
[2012-10-01 22:31:26 | 001,823,328 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\La Roux - Bulletproof (Foamo Dubstep Remix).mp3
[2012-10-01 20:59:23 | 004,587,874 | ---- | M] () -- C:\Documents and Settings\Admin\Moje dokumenty\David Guetta, Sia - She Wolf .mp3
[2012-10-01 20:55:52 | 008,363,364 | ---- | M] () -- C:\Documents and Settings\Admin\Moje dokumenty\Timati & La La Land feat. Timbaland & Grooya - Not All About The Money .mp3
[2012-10-01 20:51:32 | 004,020,136 | ---- | M] () -- C:\Documents and Settings\Admin\Moje dokumenty\The Script feat. Will.I.Am - Hall Of Fame.mp3
[2012-10-01 20:45:46 | 005,045,844 | ---- | M] () -- C:\Documents and Settings\Admin\Moje dokumenty\Gangam STYLE SkitterEdit.mp3
[2012-09-27 12:48:30 | 001,203,975 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\Vizza - Tak Słodka (DJ Sequence Remix).mp3
[2012-09-26 13:06:55 | 013,610,885 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\Jump - Noc Dyskotekowa (Mad Matt Remix) .mp3
[2012-09-26 12:44:16 | 004,941,825 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\Nicki Minaj - Pound The Alarm.mp3
[2012-09-26 12:08:08 | 003,075,597 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\Yeah Yeah Yeahs - Heads Will Roll (A-Trak Remix) [BO Projet X HQ].mp3
[2012-09-25 12:08:02 | 005,890,212 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\Pitbull ft. Shakira - Get It Started.mp3
[2012-09-25 12:03:57 | 013,841,806 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\Megastylez - Take Back the Dancefloor (Club Mix) 4clubbers.pl  KOSMA.mp3
[2012-09-25 11:58:11 | 012,164,787 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\Pulsedriver - Lookout Weekend 2012 (Ti Mo Remix) 4clubbers.pl  KOSMA.mp3
[2012-09-25 11:53:07 | 005,561,294 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\LINKIN PARK - Burn It Down.mp3
[2012-09-25 11:35:34 | 007,566,345 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\Natalia Kills Feat. Far East Movement - Lights Out [4clubbers.pl].mp3
[2012-09-25 11:32:25 | 000,513,109 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\aaaa.wma
[2012-09-25 11:28:28 | 001,929,761 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\V-Unit & Letni, Chamski Podryw - Tylko hit na lato [Dirty Version].mp3
[2012-09-25 11:15:19 | 005,136,907 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\Ewelina Lisowska - Nieodporny Rozum.mp3
[2012-09-21 09:33:52 | 000,000,621 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Gadu-Gadu 10.lnk
[2012-09-18 15:04:54 | 000,000,626 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\mIRC.lnk
[2012-09-18 11:31:17 | 000,000,791 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\CZATeriaKam.lnk
[2012-09-17 20:03:56 | 000,077,038 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\1347814664_cze2we_600.jpg
[2012-09-16 13:44:09 | 000,000,915 | ---- | M] () -- C:\user.js
[2012-09-16 12:06:57 | 002,999,319 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\Metyou & Jake Revan - Jump Jump ( Dj Sequence Remix ) RIP by Damo from RadioParty.pl.mp3
[2012-09-16 12:03:41 | 001,345,455 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\Bonus RPK 04.mp3
[2012-09-16 11:55:19 | 016,533,464 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\08-kimura_and_tube_tonic-love_divided_(original_mix) 4clubbers.pl.mp3
[2012-09-15 13:47:13 | 003,142,293 | ---- | M] () -- C:\Documents and Settings\Admin\Pulpit\01 Rafi - Ciemna Strona Mocy feat. slon (prod. Pantomas).mp3
[9 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\dllcache\*.tmp files -> C:\WINDOWS\System32\dllcache\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012-10-15 09:06:00 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012-10-15 09:02:20 | 000,001,036 | ---- | C] () -- C:\Documents and Settings\Admin\Menu Start\Programy\Autostart\ctfmon.lnk
[2012-10-15 09:02:18 | 083,023,306 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\0tbpw.pad
[2012-10-11 22:03:27 | 000,062,733 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\576498_482814585086698_1242216391_n.jpg
[2012-10-11 17:51:00 | 000,167,822 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\406286_158571227612332_883848771_n.jpg
[2012-10-11 17:50:41 | 000,108,784 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\293262_172243599578428_2062459919_n.jpg
[2012-10-11 17:50:27 | 000,080,550 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\522795_186335978169190_1179367137_n.jpg
[2012-10-11 17:50:23 | 000,070,378 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\65558_186343528168435_1155093243_n.jpg
[2012-10-11 17:50:20 | 000,131,034 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\8138_188034847999303_607056683_n.jpg
[2012-10-11 17:50:17 | 000,088,234 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\560488_188035821332539_275058196_n.jpg
[2012-10-11 17:50:09 | 000,142,001 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\426250_188354917967296_1537021016_n.jpg
[2012-10-10 22:23:55 | 000,515,072 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\Tibiacast Installer.msi
[2012-10-10 22:23:55 | 000,475,520 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\setup.exe
[2012-10-07 16:39:09 | 000,159,136 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat
[2012-10-07 12:03:16 | 004,739,053 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\WSRH - Nizej Podpisani  skrecze Dj Show prod. Donatan i Pola.mp3
[2012-10-07 12:01:09 | 005,218,476 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\wsrh - nie przyszlismy tu by przegrac.mp3
[2012-10-07 12:00:09 | 001,698,918 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\Waldemar Kasta -Łatwopalni.mp3
[2012-10-06 15:54:25 | 000,034,305 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\183318_182268401909281_1726147210_n.jpg
[2012-10-01 22:31:26 | 001,823,328 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\La Roux - Bulletproof (Foamo Dubstep Remix).mp3
[2012-10-01 22:28:01 | 001,096,560 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\Skrillex - My Name Is Skrillex.mp3
[2012-10-01 21:06:11 | 005,740,305 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\Pezet - Supergirl.mp3
[2012-10-01 20:55:59 | 004,587,874 | ---- | C] () -- C:\Documents and Settings\Admin\Moje dokumenty\David Guetta, Sia - She Wolf .mp3
[2012-10-01 20:51:46 | 008,363,364 | ---- | C] () -- C:\Documents and Settings\Admin\Moje dokumenty\Timati & La La Land feat. Timbaland & Grooya - Not All About The Money .mp3
[2012-10-01 20:48:27 | 004,020,136 | ---- | C] () -- C:\Documents and Settings\Admin\Moje dokumenty\The Script feat. Will.I.Am - Hall Of Fame.mp3
[2012-10-01 20:45:01 | 005,045,844 | ---- | C] () -- C:\Documents and Settings\Admin\Moje dokumenty\Gangam STYLE SkitterEdit.mp3
[2012-09-21 09:33:52 | 000,000,621 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Gadu-Gadu 10.lnk
[2012-09-21 09:33:22 | 000,000,511 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Gadu-Gadu 10.lnk
[2012-09-18 15:04:54 | 000,000,626 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\mIRC.lnk
[2012-09-18 11:31:17 | 000,000,791 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\CZATeriaKam.lnk
[2012-09-17 20:03:55 | 000,077,038 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\1347814664_cze2we_600.jpg
[2012-09-16 20:57:22 | 004,722,179 | ---- | C] () -- C:\Documents and Settings\Admin\Pulpit\Pih - Szatanskie Wersety feat. Slon, Kaczor, Shellerini .mp3
[2012-08-31 12:27:38 | 001,006,448 | ---- | C] () -- C:\WINDOWS\System32\dmwu.exe
[2012-08-31 12:27:38 | 000,028,160 | ---- | C] () -- C:\WINDOWS\System32\ImHttpComm.dll
[2012-08-25 13:14:15 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Admin\1332775497_shaggyfeat.eve-girlsjustwannahavefunremadyremix.mp3
[2012-08-25 13:09:19 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Admin\IMG_20120824_175639.jpg
[2012-08-24 00:57:59 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Admin\tio.jpg
[2012-08-24 00:57:48 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Admin\LAFOT Studio - demo.lnk
[2012-08-24 00:40:53 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Admin\ohn333.jpg
[2012-08-24 00:40:49 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Admin\xcvxcv222.jpg
[2012-08-24 00:32:14 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Admin\bleble1111.jpg
[2012-08-24 00:32:08 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Admin\fddxc.jpg
[2012-07-06 14:47:55 | 000,004,767 | ---- | C] () -- C:\WINDOWS\Irremote.ini
[2012-06-29 14:37:14 | 000,000,064 | ---- | C] () -- C:\Documents and Settings\Admin\default.pls
[2012-06-29 14:37:05 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2012-06-29 14:35:18 | 000,001,024 | ---- | C] () -- C:\Documents and Settings\Admin\.rnd
[2012-05-13 11:41:39 | 000,040,960 | ---- | C] () -- C:\WINDOWS\uneng.exe
[2012-04-29 18:49:00 | 000,444,283 | ---- | C] () -- C:\Program Files\Common Files\WinPcapNmap.exe
[2012-04-23 21:39:19 | 000,175,616 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2012-04-21 15:51:15 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Admin\EK SPHERE - KING SPIRYT.rbp
[2012-04-21 15:48:27 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Admin\RedbotPro_3.exe
[2012-04-20 18:35:39 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Admin\RedbotPro.exe
[2012-04-08 07:55:28 | 000,000,000 | ---- | C] () -- C:\Program Files\Common Files\userInit.dll
[2012-04-08 00:41:50 | 000,027,958 | ---- | C] () -- C:\Program Files\Common Files\logonInit.dll
[2012-04-02 13:11:22 | 000,024,576 | R--- | C] () -- C:\WINDOWS\System32\RunSetup.dll
[2012-04-02 13:11:19 | 000,049,152 | R--- | C] () -- C:\WINDOWS\amcap.exe
[2012-03-23 12:03:52 | 000,294,024 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2012-03-23 12:03:52 | 000,294,024 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2012-03-23 12:03:52 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin
[2012-03-23 12:03:40 | 002,784,050 | ---- | C] () -- C:\WINDOWS\System32\nvdata.data
[2012-03-22 23:09:15 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2012-03-22 23:08:04 | 000,271,784 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012-03-22 22:24:15 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2012-03-22 22:18:12 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2012-03-22 20:08:01 | 000,000,161 | R--- | C] () -- C:\WINDOWS\DSLSetup.ini
[2012-03-22 20:08:00 | 000,684,265 | R--- | C] () -- C:\WINDOWS\System32\drivers\torususb.sys
[2012-03-22 20:08:00 | 000,036,864 | R--- | C] () -- C:\WINDOWS\System32\stmclean.exe
[2012-03-22 20:08:00 | 000,000,902 | R--- | C] () -- C:\WINDOWS\System32\setup.ini
[2012-03-22 19:56:44 | 000,041,068 | ---- | C] () -- C:\WINDOWS\System32\ActPanel.dll
[2012-03-22 19:48:32 | 000,086,528 | ---- | C] () -- C:\Documents and Settings\Admin\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-03-22 16:11:36 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012-03-22 15:47:29 | 000,000,090 | ---- | C] () -- C:\WINDOWS\wincmd.ini
[2011-02-10 01:00:00 | 000,080,416 | ---- | C] () -- C:\WINDOWS\System32\RtNicProp32.dll
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2012-03-23 11:55:05 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2008-04-15 14:00:00 | 001,499,136 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009-02-09 12:53:44 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008-04-15 14:00:00 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2012-09-14 16:03:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\Audacity
[2012-04-29 18:47:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\Babylon
[2012-05-13 13:35:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\BabylonToolbar
[2012-04-01 13:17:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\Gadu-Gadu 10
[2012-06-25 15:24:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\Incredibar.com
[2012-04-27 19:29:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\Publish Providers
[2012-09-16 13:44:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\Softonic
[2012-04-27 19:29:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\Sony
[2012-08-31 16:18:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\Tibia
[2012-03-23 15:12:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\Tibiacast
[2012-03-23 11:47:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\TibiaInternContent
[2012-06-06 15:28:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\TS3Client
[2012-10-14 20:54:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\uTorrent
[2012-03-23 17:24:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Dane aplikacji\VDownloader
[2012-03-22 15:47:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AVAST Software
[2012-04-29 18:47:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Babylon
[2012-03-22 20:23:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10
[2012-04-27 19:26:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Sony
[2012-04-29 18:47:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Tarma Installer
[2012-04-11 20:11:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP

< End of report >