OTL logfile created on: 2012-12-18 12:48:35 - Run 2 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Basia\Moje dokumenty\Pobieranie Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 503,36 Mb Total Physical Memory | 319,79 Mb Available Physical Memory | 63,53% Memory free 1,20 Gb Paging File | 0,97 Gb Available in Paging File | 81,32% Paging File free Paging file location(s): C:\pagefile.sys 756 1512 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 37,26 Gb Total Space | 16,43 Gb Free Space | 44,09% Space Free | Partition Type: NTFS Computer Name: BARBARA | User Name: Basia | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-12-18 09:40:38 | 000,170,408 | ---- | M] (Oracle Corporation) -- C:\Program Files\Java\jre7\bin\jqs.exe PRC - [2012-12-17 21:26:38 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Basia\Moje dokumenty\Pobieranie\OTL.exe PRC - [2008-04-14 18:21:16 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2006-11-03 19:20:12 | 000,866,584 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\MSASCui.exe PRC - [2006-11-03 19:19:58 | 000,013,592 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\MsMpEng.exe PRC - [2005-07-21 21:52:02 | 000,278,528 | R--- | M] (Conexant Systems, Inc.) -- C:\Program Files\ZTE Corporation\ZXDSL852\CnxDslTb.exe PRC - [2004-12-03 12:24:20 | 000,290,816 | ---- | M] (Hewlett-Packard ) -- C:\Program Files\HPQ\Quick Launch Buttons\eabservr.exe PRC - [2004-10-14 08:11:10 | 001,388,544 | ---- | M] (Analog Devices, Inc.) -- C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe PRC - [2002-09-20 13:50:10 | 000,045,056 | ---- | M] (Analog Devices, Inc.) -- C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2004-06-01 10:39:56 | 000,094,274 | ---- | M] () -- C:\WINDOWS\system32\HPBHEALR.DLL [color=#E56717]========== Services (SafeList) ==========[/color] SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ) SRV - File not found [On_Demand | Stopped] -- %SystemRoot%\System32\appmgmts.dll -- (AppMgmt) SRV - [2012-12-18 09:40:38 | 000,170,408 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\Program Files\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService) SRV - [2012-10-28 16:41:52 | 000,115,168 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2006-11-03 19:19:58 | 000,013,592 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend) SRV - [2005-08-02 22:18:49 | 000,086,016 | ---- | M] (CACE Technologies) [On_Demand | Stopped] -- C:\Program Files\WinPcap\rpcapd.exe -- (rpcapd) SRV - [2002-09-20 13:50:10 | 000,045,056 | ---- | M] (Analog Devices, Inc.) [Auto | Running] -- C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe -- (SoundMAX Agent Service (default) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - [2008-04-13 19:56:06 | 000,088,320 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnkipx.sys -- (NwlnkIpx) DRV - [2008-04-13 19:53:09 | 000,040,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmnt.sys -- (nm) DRV - [2005-10-19 15:11:16 | 000,024,209 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ftdibus.sys -- (FTDIBUS) DRV - [2005-08-25 16:15:54 | 000,368,896 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\semwl5.SYS -- (SEM43XX) DRV - [2005-08-25 16:15:54 | 000,114,944 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\GCXX.sys -- (SEMWModem) DRV - [2005-08-25 16:15:54 | 000,053,248 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\GCXXNet.sys -- (SEMWWNIC) DRV - [2005-08-25 16:15:54 | 000,021,888 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\GCXXSC.sys -- (Sony_EricssonWWSC) DRV - [2005-08-02 22:10:13 | 000,032,512 | ---- | M] (CACE Technologies) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\npf.sys -- (NPF) DRV - [2005-05-25 04:24:48 | 000,022,760 | R--- | M] (USB World Technology Inc. http://www.usbworld.net) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usb2vcom.sys -- (usb2vcom) DRV - [2005-05-20 19:28:04 | 000,052,736 | R--- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CnxTgNW.sys -- (CnxTgNW) DRV - [2005-05-20 19:27:58 | 000,618,112 | R--- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CnxEtU.sys -- (CnxEtU) DRV - [2005-05-20 19:27:54 | 000,131,072 | R--- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CnxEtP.sys -- (CnxEtP) DRV - [2005-05-02 17:13:46 | 003,222,784 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\w29n51.sys -- (w29n51) DRV - [2005-04-14 11:15:20 | 000,055,448 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB) DRV - [2005-04-04 17:25:36 | 000,160,768 | ---- | M] (Texas Instruments) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\tifm21.sys -- (tifm21) DRV - [2004-12-21 08:52:58 | 000,082,768 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\slabser.sys -- (slabser) DRV - [2004-12-21 08:52:58 | 000,051,040 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\slabbus.sys -- (slabbus) DRV - [2004-11-22 12:33:52 | 000,190,592 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\b57xp32.sys -- (b57w2k) DRV - [2004-09-24 02:01:02 | 000,044,928 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\bcm4sbxp.sys -- (bcm4sbxp) DRV - [2004-08-24 12:20:08 | 001,268,204 | ---- | M] (Agere Systems) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem) DRV - [2004-08-04 09:00:00 | 000,063,232 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnknb.sys -- (NwlnkNb) DRV - [2004-08-04 09:00:00 | 000,055,936 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnkspx.sys -- (NwlnkSpx) DRV - [2004-06-16 10:19:58 | 000,046,080 | ---- | M] (SMSC) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\smcirda.sys -- (SMCIRDA) DRV - [2004-05-03 18:26:16 | 000,080,384 | ---- | M] (Texas Instruments) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\gtipci21.sys -- (GTIPCI21) DRV - [2004-04-14 06:36:50 | 000,007,432 | ---- | M] (Hewlett-Packard Company) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\eabfiltr.sys -- (eabfiltr) DRV - [2004-02-20 09:35:28 | 000,059,044 | R--- | M] (Hewlett-Packard) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\clntmgmt.sys -- (ClntMgmt.sys) DRV - [2003-06-06 10:46:16 | 000,005,220 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\EabUsb.sys -- (eabusb) DRV - [2002-04-09 17:44:22 | 000,039,552 | ---- | M] (Prolific Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ser2pl.sys -- (Ser2pl) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1436348166-476258708-435744061-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://szukaj.wp.pl IE - HKU\S-1-5-21-1436348166-476258708-435744061-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://onet.pl/ IE - HKU\S-1-5-21-1436348166-476258708-435744061-1006\..\URLSearchHook: {08C06D61-F1F3-4799-86F8-BE1A89362C85} - No CLSID value found IE - HKU\S-1-5-21-1436348166-476258708-435744061-1006\..\SearchScopes,DefaultScope = {C5033EF8-C28B-455C-BEF6-5336B658C5EA} IE - HKU\S-1-5-21-1436348166-476258708-435744061-1006\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC IE - HKU\S-1-5-21-1436348166-476258708-435744061-1006\..\SearchScopes\{C5033EF8-C28B-455C-BEF6-5336B658C5EA}: "URL" = http://www.google.com/search?hl=pl&q={searchTerms} IE - HKU\S-1-5-21-1436348166-476258708-435744061-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "www.onet.pl" FF - prefs.js..extensions.enabledAddons: adblockpopups@jessehakanen.net:0.5 FF - prefs.js..extensions.enabledAddons: {73a6fe31-595d-460b-a920-fcc0f8843232}:2.6.4.1 FF - prefs.js..extensions.enabledAddons: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20120926 FF - prefs.js..extensions.enabledAddons: donottrackplus@abine.com:2.2.5.1205 FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.10.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.10.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.0.61118.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-10-28 16:41:54 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-10-28 16:41:30 | 000,000,000 | ---D | M] [2008-12-08 13:11:30 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Basia\Dane aplikacji\Mozilla\Extensions [2012-12-17 21:24:30 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Basia\Dane aplikacji\Mozilla\Firefox\Profiles\pb53hlu0.default\extensions [2012-12-17 21:07:11 | 000,000,000 | ---D | M] (WOT) -- C:\Documents and Settings\Basia\Dane aplikacji\Mozilla\Firefox\Profiles\pb53hlu0.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2012-12-17 21:24:30 | 000,000,000 | ---D | M] (DoNotTrackMe) -- C:\Documents and Settings\Basia\Dane aplikacji\Mozilla\Firefox\Profiles\pb53hlu0.default\extensions\donottrackplus@abine.com [2012-11-02 14:14:19 | 000,000,000 | ---D | M] (Ghostery) -- C:\Documents and Settings\Basia\Dane aplikacji\Mozilla\Firefox\Profiles\pb53hlu0.default\extensions\firefox@ghostery.com [2012-12-17 21:07:07 | 000,124,993 | ---- | M] () (No name found) -- C:\Documents and Settings\Basia\Dane aplikacji\Mozilla\Firefox\Profiles\pb53hlu0.default\extensions\adblockpopups@jessehakanen.net.xpi [2012-12-17 21:07:11 | 000,532,971 | ---- | M] () (No name found) -- C:\Documents and Settings\Basia\Dane aplikacji\Mozilla\Firefox\Profiles\pb53hlu0.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2012-12-17 21:03:51 | 000,804,627 | ---- | M] () (No name found) -- C:\Documents and Settings\Basia\Dane aplikacji\Mozilla\Firefox\Profiles\pb53hlu0.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-12-05 16:11:56 | 000,007,919 | ---- | M] () (No name found) -- C:\Documents and Settings\Basia\Dane aplikacji\Mozilla\Firefox\Profiles\pb53hlu0.default\extensions\donottrackplus@abine.com\chrome\content\ff\view_expiry.js [2012-10-28 16:41:21 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2012-10-28 16:41:53 | 000,261,600 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2010-07-12 17:33:56 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll [2012-02-14 12:24:49 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2012-02-14 12:24:49 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2012-02-14 12:24:49 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2012-02-14 12:24:49 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2012-02-14 12:24:49 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2012-02-14 12:24:49 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - homepage: http://www.google.com/ CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms} CHR - homepage: http://www.google.com/ CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\23.0.1271.95\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll CHR - plugin: Shockwave for Director (Enabled) = C:\WINDOWS\system32\Adobe\Director\np32dsw.dll CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\23.0.1271.95\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\23.0.1271.95\pdf.dll CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Acrobat 7.0\Reader\Browser\nppdf32.dll CHR - plugin: Winamp Application Detector (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npwachk.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll CHR - plugin: Default Plug-in (Enabled) = default_plugin O1 HOSTS File: ([2004-08-04 09:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (DriveLetterAccess) - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll (Sonic Solutions) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O3 - HKU\S-1-5-21-1436348166-476258708-435744061-1006\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found. O4 - HKLM..\Run: [CnxDslTaskBar] "c:\program files\zte corporation\zxdsl852\CnxDslTb.exe" "ZTE Corporation\ZXDSL852" File not found O4 - HKLM..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe (Hewlett-Packard ) O4 - HKLM..\Run: [PTHOSTTR] C:\Program Files\HPQ\HP ProtectTools Security Manager\PTHOSTTR.EXE (Hewlett-Packard Development Company, L.P.) O4 - HKLM..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe (Analog Devices, Inc.) O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) O4 - Startup: C:\Documents and Settings\Basia\Menu Start\Programy\Autostart\ctfmon.lnk = C:\Documents and Settings\All Users\Dane aplikacji\lsass.exe (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1436348166-476258708-435744061-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation) O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://windowsupdate.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1355775407562 (WUWebControl Class) O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1355825073437 (MUWebControl Class) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.179.1.62 62.179.1.63 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4373AAF3-62CC-4043-8407-43D76AB25995}: DhcpNameServer = 62.179.1.62 62.179.1.63 O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\Basia\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Basia\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O28 - HKLM ShellExecuteHooks: {091EB208-39DD-417D-A5DD-7E2C2D8FB9CB} - C:\Program Files\Windows Defender\MpShHook.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-12-18 11:38:42 | 000,014,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsg.dll [2012-12-18 11:37:15 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Media Connect 2 [2012-12-18 11:32:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\UMDF [2012-12-18 11:29:41 | 000,000,000 | -HSD | C] -- C:\Config.Msi [2012-12-18 10:50:42 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Basia\Recent [2012-12-18 09:42:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Sun [2012-12-18 09:42:31 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java [2012-12-18 09:41:18 | 000,143,872 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javacpl.cpl [2012-12-18 09:41:14 | 000,779,704 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\deployJava1.dll [2012-12-18 09:41:13 | 000,859,072 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\npDeployJava1.dll [2012-12-18 09:41:12 | 000,260,528 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javaws.exe [2012-12-18 09:41:03 | 000,093,640 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\WindowsAccessBridge.dll [2012-12-18 09:41:02 | 000,174,000 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javaw.exe [2012-12-18 09:41:02 | 000,173,992 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\java.exe [2012-12-18 09:40:18 | 000,000,000 | ---D | C] -- C:\Program Files\Java [2012-12-18 01:40:19 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Basia\IECompatCache [2012-12-18 01:38:25 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Basia\PrivacIE [2012-12-18 01:25:47 | 000,237,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MpSigStub.exe [2012-12-18 01:23:13 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Basia\IETldCache [2012-12-18 01:19:47 | 000,521,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jsdbgui.dll [2012-12-18 01:18:12 | 000,000,000 | ---D | C] -- C:\WINDOWS\ie8updates [2012-12-18 01:17:41 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeedsbs.dll [2012-12-18 01:17:40 | 002,000,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iertutil.dll [2012-12-18 01:17:40 | 000,630,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeeds.dll [2012-12-18 01:17:37 | 011,111,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieframe.dll [2012-12-18 01:17:37 | 000,743,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iedvtool.dll [2012-12-18 01:16:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\WBEM [2012-12-18 01:14:56 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ie8 [2012-12-18 01:01:43 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Defender [2012-12-18 00:27:32 | 000,954,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mfc40.dll [2012-12-18 00:27:31 | 000,953,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mfc40u.dll [2012-12-18 00:24:25 | 000,617,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comctl32.dll [2012-12-18 00:17:34 | 000,139,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rdpwd.sys [2012-12-18 00:17:28 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ndproxy.sys [2012-12-18 00:16:11 | 000,536,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msado15.dll [2012-12-18 00:13:25 | 000,105,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mup.sys [2012-12-18 00:10:13 | 000,759,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\VGX.dll [2012-12-18 00:08:41 | 000,010,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ndistapi.sys [2012-12-18 00:04:11 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wab.exe [2012-12-17 23:54:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\COMODO [2012-12-17 23:51:43 | 000,024,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wucltui.dll.mui [2012-12-17 23:51:42 | 000,015,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuapi.dll.mui [2012-12-17 23:18:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch [2012-12-17 23:15:57 | 002,194,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntoskrnl.exe [2012-12-17 23:15:50 | 000,732,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lsasrv.dll [2012-12-17 23:15:46 | 002,150,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrnlmp.exe [2012-12-17 23:15:44 | 002,029,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrpamp.exe [2012-12-17 23:15:27 | 000,337,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\netapi32.dll [2012-12-17 23:01:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\pl-pl [2012-12-17 23:01:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\l2schemas [2012-12-17 23:01:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\pl [2012-12-17 23:01:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\bits [2012-12-17 22:45:02 | 000,000,000 | ---D | C] -- C:\WINDOWS\network diagnostic [2012-12-17 22:38:39 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$NtServicePackUninstall$ [2012-12-17 22:38:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\EHome [2012-12-17 22:13:11 | 000,025,471 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\watv10nt.sys [2012-12-17 22:13:11 | 000,011,871 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv09nt.sys [2012-12-17 22:13:11 | 000,011,295 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv08nt.sys [2012-12-17 22:13:01 | 000,404,990 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slntamr.sys [2012-12-17 22:13:01 | 000,129,535 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slnt7554.sys [2012-12-17 22:13:01 | 000,095,424 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slnthal.sys [2012-12-17 22:13:01 | 000,013,240 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slwdmsup.sys [2012-12-17 22:12:59 | 000,166,912 | ---- | C] (S3 Graphics, Inc.) -- C:\WINDOWS\System32\drivers\s3gnbm.sys [2012-12-17 22:12:58 | 000,013,776 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\recagent.sys [2012-12-17 22:12:55 | 000,180,360 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\ntmtlfax.sys [2012-12-17 22:12:53 | 001,309,184 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\mtlstrm.sys [2012-12-17 22:05:26 | 000,052,224 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinraxx.sys [2012-12-17 22:05:26 | 000,013,824 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinttxx.sys [2012-12-17 22:05:25 | 000,063,663 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1rvxx.sys [2012-12-17 22:05:25 | 000,029,455 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1xbxx.sys [2012-12-17 22:05:25 | 000,026,367 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1snxx.sys [2012-12-17 22:05:25 | 000,021,343 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1ttxx.sys [2012-12-17 22:05:25 | 000,014,336 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinpdxx.sys [2012-12-17 22:05:25 | 000,013,824 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinmdxx.sys [2012-12-17 22:05:25 | 000,012,047 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1pdxx.sys [2012-12-17 22:05:25 | 000,011,615 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1mdxx.sys [2012-12-17 20:52:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Dane aplikacji\GeekBuddyRSP [2012-12-17 20:22:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\CPA_VA [2012-12-17 20:21:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dokumenty\COMODO [2012-12-17 20:17:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Comodo [2012-12-17 20:17:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Basia\Ustawienia lokalne\Dane aplikacji\COMODO [2012-12-17 20:16:44 | 001,700,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\gdiplus.dll [2012-12-17 20:16:36 | 000,000,000 | ---D | C] -- C:\Program Files\COMODO [2012-12-17 19:45:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Defraggler [2012-12-17 19:45:34 | 000,000,000 | ---D | C] -- C:\Program Files\Defraggler [2012-12-17 19:35:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\CCleaner [2012-12-17 19:35:14 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner [2012-12-05 10:37:44 | 000,273,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bthport.sys [2012-12-05 10:35:23 | 000,357,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srv.sys [2012-12-05 10:10:47 | 000,456,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mrxsmb.sys [2012-12-05 10:10:34 | 000,471,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aclayers.dll [2012-12-05 10:09:34 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\t2embed.dll [2012-12-05 10:09:34 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fontsub.dll [2012-12-05 10:09:10 | 003,558,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\moviemk.exe [2012-12-05 10:08:25 | 000,203,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rmcast.sys [2012-12-05 10:08:11 | 000,331,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadce.dll [2012-12-05 10:07:27 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\browserchoice.exe [2012-12-05 10:06:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\ServicePackFiles [2012-12-04 20:31:09 | 000,744,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\helpsvc.exe [2012-12-04 20:28:18 | 002,066,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstscax.dll [2012-11-17 14:47:20 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\All Users\Dane aplikacji\lsass.exe [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-12-18 12:32:13 | 000,000,330 | -H-- | M] () -- C:\WINDOWS\tasks\MP Scheduled Scan.job [2012-12-18 12:29:35 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2012-12-18 12:29:04 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2012-12-18 12:29:03 | 527,880,192 | -HS- | M] () -- C:\hiberfil.sys [2012-12-18 11:38:30 | 000,001,393 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2012-12-18 11:38:15 | 000,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb [2012-12-18 11:38:15 | 000,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb [2012-12-18 11:32:54 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\UMDF\MsftWdf_user_01_00_00.Wdf [2012-12-18 11:30:11 | 000,001,000 | ---- | M] () -- C:\WINDOWS\System32\InstallUtil.InstallLog [2012-12-18 11:00:07 | 000,002,525 | ---- | M] () -- C:\Documents and Settings\Basia\Pulpit\Microsoft Word.lnk [2012-12-18 09:40:38 | 000,093,640 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\WindowsAccessBridge.dll [2012-12-18 09:40:35 | 000,859,072 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\npDeployJava1.dll [2012-12-18 09:40:35 | 000,779,704 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\deployJava1.dll [2012-12-18 09:40:35 | 000,260,528 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javaws.exe [2012-12-18 09:40:35 | 000,174,000 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javaw.exe [2012-12-18 09:40:35 | 000,173,992 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\java.exe [2012-12-18 09:40:35 | 000,143,872 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javacpl.cpl [2012-12-18 01:22:59 | 000,114,176 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2012-12-18 00:51:08 | 000,436,560 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2012-12-18 00:51:08 | 000,380,684 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2012-12-18 00:51:08 | 000,067,496 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2012-12-18 00:51:08 | 000,053,098 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2012-12-18 00:47:57 | 000,861,969 | ---- | M] () -- C:\WINDOWS\System32\drivers\sfi.dat [2012-12-17 23:46:44 | 095,023,320 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\0tbpw.pad [2012-12-17 23:19:49 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx [2012-12-17 22:44:00 | 000,251,152 | -HS- | M] () -- C:\NTLDR [2012-12-17 20:16:44 | 001,700,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\gdiplus.dll [2012-12-17 20:10:42 | 000,002,596 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT [2012-12-17 19:49:40 | 000,001,034 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2012-12-17 19:49:39 | 000,001,030 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2012-12-17 19:45:53 | 000,001,580 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Defraggler.lnk [2012-12-17 19:35:52 | 000,000,682 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\CCleaner.lnk [2012-11-24 12:19:42 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-12-18 11:32:54 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\UMDF\MsftWdf_user_01_00_00.Wdf [2012-12-18 11:32:45 | 000,001,393 | ---- | C] () -- C:\WINDOWS\imsins.BAK [2012-12-18 01:04:59 | 000,000,330 | -H-- | C] () -- C:\WINDOWS\tasks\MP Scheduled Scan.job [2012-12-18 01:01:46 | 000,001,017 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Windows Defender.lnk [2012-12-18 00:08:18 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll [2012-12-18 00:08:18 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\dllcache\iacenc.dll [2012-12-17 23:47:26 | 000,577,048 | ---- | C] () -- C:\WINDOWS\System32\wuapi.dll.wusetup.1259515.new [2012-12-17 22:12:27 | 000,129,045 | ---- | C] () -- C:\WINDOWS\System32\drivers\cxthsfs2.cty [2012-12-17 20:21:20 | 000,861,969 | ---- | C] () -- C:\WINDOWS\System32\drivers\sfi.dat [2012-12-17 19:45:53 | 000,001,580 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Defraggler.lnk [2012-12-17 19:35:51 | 000,000,682 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\CCleaner.lnk [2012-11-24 12:19:19 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat [2012-11-17 14:47:23 | 095,023,320 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\0tbpw.pad [2006-08-22 13:24:09 | 000,000,139 | ---- | C] () -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [2006-02-03 17:26:31 | 000,016,615 | ---- | C] () -- C:\Documents and Settings\Basia\Ustawienia lokalne\Dane aplikacji\top.jpg [2006-02-03 17:26:31 | 000,002,021 | ---- | C] () -- C:\Documents and Settings\Basia\Ustawienia lokalne\Dane aplikacji\HPInfoCenter.js [2006-02-03 17:26:31 | 000,001,209 | ---- | C] () -- C:\Documents and Settings\Basia\Ustawienia lokalne\Dane aplikacji\HPInfoContent.html [2006-02-03 17:26:31 | 000,000,741 | ---- | C] () -- C:\Documents and Settings\Basia\Ustawienia lokalne\Dane aplikacji\HPInfoCenter.css [2006-02-03 17:26:31 | 000,000,282 | ---- | C] () -- C:\Documents and Settings\Basia\Ustawienia lokalne\Dane aplikacji\bottom.gif [2006-02-03 17:26:31 | 000,000,157 | ---- | C] () -- C:\Documents and Settings\Basia\Ustawienia lokalne\Dane aplikacji\hpinfocenter.html [2006-01-22 21:29:29 | 000,019,968 | ---- | C] () -- C:\Documents and Settings\Basia\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2006-01-17 15:29:04 | 000,000,130 | ---- | C] () -- C:\Documents and Settings\Basia\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [color=#E56717]========== ZeroAccess Check ==========[/color] [2004-09-20 09:23:48 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shdocvw.dll -- [2012-10-31 12:32:21 | 001,510,400 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009-02-09 11:53:44 | 000,473,600 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008-04-14 18:20:57 | 000,273,920 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [color=#E56717]========== LOP Check ==========[/color] [2012-12-17 20:22:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\CPA_VA [2006-03-29 13:20:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Basia\Dane aplikacji\DataLayer [2011-02-02 00:28:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Basia\Dane aplikacji\InterVideo [2007-01-18 20:14:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Basia\Dane aplikacji\iPlus [2006-01-26 23:40:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Basia\Dane aplikacji\Leadertech [2006-03-29 13:21:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Basia\Dane aplikacji\Nokia [2006-03-29 13:25:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Basia\Dane aplikacji\Nokia Multimedia Player [2006-03-29 13:09:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Basia\Dane aplikacji\PC Suite [2012-12-17 20:52:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\GeekBuddyRSP [color=#E56717]========== Purity Check ==========[/color] < End of report >