OTL logfile created on: 2012-12-26 15:20:56 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = D:\INSTALLE Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,87 Gb Total Physical Memory | 1,25 Gb Available Physical Memory | 43,57% Memory free 5,74 Gb Paging File | 3,70 Gb Available in Paging File | 64,41% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 117,58 Gb Total Space | 70,44 Gb Free Space | 59,91% Space Free | Partition Type: NTFS Drive D: | 115,21 Gb Total Space | 84,49 Gb Free Space | 73,34% Space Free | Partition Type: NTFS Drive F: | 14,53 Gb Total Space | 12,69 Gb Free Space | 87,34% Space Free | Partition Type: FAT32 Drive G: | 29,67 Gb Total Space | 22,39 Gb Free Space | 75,46% Space Free | Partition Type: FAT32 Computer Name: X-KOMPUTER | User Name: x | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-12-26 15:17:43 | 000,602,112 | ---- | M] (OldTimer Tools) -- D:\INSTALLE\OTL.exe PRC - [2012-12-04 17:38:13 | 000,997,320 | ---- | M] () -- C:\Program Files\AVG Secure Search\vprot.exe PRC - [2012-11-28 18:23:22 | 005,453,656 | ---- | M] (Pokki) -- C:\Users\x\AppData\Local\Pokki\v0.260.8.396\pokki.exe PRC - [2012-11-08 20:20:23 | 000,711,112 | ---- | M] () -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\13.2.0\ToolbarUpdater.exe PRC - [2012-11-06 19:00:32 | 003,143,800 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2013\avgui.exe PRC - [2012-11-02 00:08:48 | 001,340,976 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2013\avgfws.exe PRC - [2012-10-30 04:59:56 | 000,726,648 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2013\avgrsx.exe PRC - [2012-10-22 13:05:08 | 000,196,664 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2013\avgwdsvc.exe PRC - [2012-10-22 13:04:32 | 001,116,792 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2013\avgnsx.exe PRC - [2012-10-22 13:03:52 | 000,796,792 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2013\avgemcx.exe PRC - [2012-10-22 13:03:46 | 000,440,440 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2013\avgcsrvx.exe PRC - [2012-09-23 20:43:34 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2011-02-25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2009-08-03 13:03:08 | 000,832,856 | ---- | M] (TOSHIBA Corporation.) -- C:\Program Files\Toshiba\HDMICtrlMan\HDMICtrlMan.exe PRC - [2009-03-17 13:36:12 | 000,144,752 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012-12-04 17:38:13 | 000,997,320 | ---- | M] () -- C:\Program Files\AVG Secure Search\vprot.exe MOD - [2012-11-28 18:21:42 | 001,168,216 | ---- | M] () -- C:\Users\x\AppData\Local\Pokki\ocdeskband_0.dll MOD - [2012-11-28 18:21:02 | 000,061,952 | ---- | M] () -- C:\Users\x\AppData\Local\Pokki\v0.260.8.396\chrome.dll MOD - [2012-11-28 04:43:17 | 000,460,904 | ---- | M] () -- C:\Users\x\AppData\Local\Google\Chrome\Application\23.0.1271.95\ppGoogleNaClPluginChrome.dll MOD - [2012-11-28 04:43:16 | 012,456,040 | ---- | M] () -- C:\Users\x\AppData\Local\Google\Chrome\Application\23.0.1271.95\PepperFlash\pepflashplayer.dll MOD - [2012-11-28 04:43:15 | 004,008,040 | ---- | M] () -- C:\Users\x\AppData\Local\Google\Chrome\Application\23.0.1271.95\pdf.dll MOD - [2012-11-28 04:42:30 | 000,587,880 | ---- | M] () -- C:\Users\x\AppData\Local\Google\Chrome\Application\23.0.1271.95\libglesv2.dll MOD - [2012-11-28 04:42:29 | 000,124,520 | ---- | M] () -- C:\Users\x\AppData\Local\Google\Chrome\Application\23.0.1271.95\libegl.dll MOD - [2012-11-28 04:42:22 | 000,157,304 | ---- | M] () -- C:\Users\x\AppData\Local\Google\Chrome\Application\23.0.1271.95\avutil-51.dll MOD - [2012-11-28 04:42:21 | 002,168,952 | ---- | M] () -- C:\Users\x\AppData\Local\Google\Chrome\Application\23.0.1271.95\avcodec-54.dll MOD - [2012-11-28 04:42:21 | 000,275,576 | ---- | M] () -- C:\Users\x\AppData\Local\Google\Chrome\Application\23.0.1271.95\avformat-54.dll MOD - [2012-11-08 20:20:23 | 000,566,728 | ---- | M] () -- C:\Program Files\Common Files\AVG Secure Search\DNTInstaller\13.2.0\avgdttbx.dll MOD - [2012-11-08 20:20:23 | 000,134,600 | ---- | M] () -- C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\13.2.0\SiteSafety.dll MOD - [2012-10-26 20:09:50 | 000,184,846 | ---- | M] () -- C:\Users\x\AppData\Local\Pokki\v0.260.8.396\avformat-53.dll MOD - [2012-10-26 20:09:46 | 001,093,646 | ---- | M] () -- C:\Users\x\AppData\Local\Pokki\v0.260.8.396\avcodec-53.dll MOD - [2012-10-26 20:09:46 | 000,117,262 | ---- | M] () -- C:\Users\x\AppData\Local\Pokki\v0.260.8.396\avutil-51.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV - [2012-12-16 21:02:13 | 000,250,808 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2012-11-08 20:20:23 | 000,711,112 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\13.2.0\ToolbarUpdater.exe -- (vToolbarUpdater13.2.0) SRV - [2012-11-02 00:08:48 | 001,340,976 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG2013\avgfws.exe -- (avgfws) SRV - [2012-10-22 13:05:08 | 000,196,664 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG2013\avgwdsvc.exe -- (avgwd) SRV - [2012-09-23 20:43:34 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2012-05-31 23:54:35 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc) SRV - [2012-05-14 12:20:22 | 000,884,608 | ---- | M] () [Disabled | Stopped] -- C:\Program Files\Ashampoo\Ashampoo WinOptimizer 9\LiveTunerService.exe -- (WO_LiveService) SRV - [2009-07-14 02:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc) SRV - [2009-07-14 02:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2009-03-17 13:36:12 | 000,144,752 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2012-11-08 20:20:23 | 000,026,984 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgtpx86.sys -- (avgtp) DRV - [2012-10-22 13:02:46 | 000,179,936 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgidsdriverx.sys -- (AVGIDSDriver) DRV - [2012-10-15 03:48:52 | 000,055,776 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\avgidshx.sys -- (AVGIDSHX) DRV - [2012-10-05 03:32:50 | 000,093,536 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\System32\drivers\avgmfx86.sys -- (Avgmfx86) DRV - [2012-10-02 03:30:38 | 000,159,712 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgldx86.sys -- (Avgldx86) DRV - [2012-09-21 03:46:06 | 000,164,832 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgtdix.sys -- (Avgtdix) DRV - [2012-09-21 03:46:00 | 000,177,376 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\avglogx.sys -- (Avglogx) DRV - [2012-09-21 03:45:54 | 000,019,936 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgidsshimx.sys -- (AVGIDSShim) DRV - [2012-09-14 03:05:20 | 000,035,552 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\System32\drivers\avgrkx86.sys -- (Avgrkx86) DRV - [2012-09-04 10:39:32 | 000,050,296 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgfwd6x.sys -- (Avgfwfd) DRV - [2012-05-31 13:39:40 | 000,239,168 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01) DRV - [2012-05-30 16:04:52 | 000,017,488 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\gdrv.sys -- (gdrv) DRV - [2012-05-24 15:34:59 | 000,039,016 | ---- | M] (RapidSolution Software AG) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tbhsd.sys -- (tbhsd) DRV - [2011-03-08 06:01:06 | 000,012,696 | ---- | M] () [Kernel | Auto | Running] -- C:\Program Files\Ashampoo\Ashampoo WinOptimizer 9\LiveTunerProcessMonitor32.sys -- (LiveTunerPM) DRV - [2010-11-20 11:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV - [2009-09-21 16:58:28 | 001,218,048 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr) DRV - [2009-09-15 03:30:08 | 000,038,400 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rixdptsk.sys -- (rismxdp) DRV - [2009-09-15 02:36:18 | 000,044,544 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimsptsk.sys -- (rimsptsk) DRV - [2009-09-07 08:00:28 | 000,048,128 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimmptsk.sys -- (rimmptsk) DRV - [2009-07-13 23:13:48 | 001,035,776 | ---- | M] (LSI Corp) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AGRSM.sys -- (AgereSoftModem) DRV - [2009-07-10 05:44:52 | 000,122,880 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\IntcHdmi.sys -- (IntcHdmiAddService) DRV - [2009-03-23 16:28:24 | 000,054,272 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TosRfSnd.sys -- (TosRfSnd) DRV - [2009-03-19 13:07:32 | 000,043,264 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tosrfusb.sys -- (Tosrfusb) DRV - [2009-03-12 10:33:08 | 000,016,128 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tosrfnds.sys -- (tosrfnds) DRV - [2009-03-05 10:03:16 | 000,074,368 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Tosrfhid.sys -- (Tosrfhid) DRV - [2009-03-03 14:42:56 | 000,036,864 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tosrfbnp.sys -- (tosrfbnp) DRV - [2009-02-19 15:20:10 | 000,063,872 | ---- | M] (TOSHIBA Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\tosrfcom.sys -- (Tosrfcom) DRV - [2008-10-06 16:56:38 | 000,137,984 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tosrfbd.sys -- (tosrfbd) DRV - [2008-03-25 12:54:02 | 000,041,472 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tosporte.sys -- (tosporte) DRV - [2007-11-09 04:00:52 | 000,023,640 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\TVALZ_O.SYS -- (TVALZ) DRV - [2006-11-19 21:11:14 | 000,007,168 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\FwLnk.sys -- (FwLnk) DRV - [2006-10-23 15:32:20 | 000,009,216 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tosrfec.sys -- (tosrfec) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = IE - HKLM\..\URLSearchHook: {1392b8d2-5c05-419f-a8f6-b9f15a596612} - No CLSID value found IE - HKLM\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.) IE - HKLM\..\URLSearchHook: {d43723ae-1ae1-4a25-a6a4-bf0929273cab} - C:\Program Files\Ashampoo_PO\prxtbAsha.dll (Conduit Ltd.) IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD22}: "URL" = http://dts.search-results.com/sr?src=ieb&appid=329&systemid=2&sr=0&q={searchTerms} IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD24}: "URL" = http://dts.search-results.com/sr?src=ieb&appid=126&systemid=4&sr=0&q={searchTerms} IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2475029 IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&crg=3.1010000&st=18&q={searchTerms}&barid={4C51C543-CE51-11E1-97DA-002258E22656} IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-91784625-659246694-3654467853-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.tvn24.pl/ IE - HKU\S-1-5-21-91784625-659246694-3654467853-1000\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - No CLSID value found IE - HKU\S-1-5-21-91784625-659246694-3654467853-1000\..\URLSearchHook: {1392b8d2-5c05-419f-a8f6-b9f15a596612} - No CLSID value found IE - HKU\S-1-5-21-91784625-659246694-3654467853-1000\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.) IE - HKU\S-1-5-21-91784625-659246694-3654467853-1000\..\URLSearchHook: {93a3111f-4f74-4ed8-895e-d9708497629e} - No CLSID value found IE - HKU\S-1-5-21-91784625-659246694-3654467853-1000\..\URLSearchHook: {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - No CLSID value found IE - HKU\S-1-5-21-91784625-659246694-3654467853-1000\..\URLSearchHook: {d43723ae-1ae1-4a25-a6a4-bf0929273cab} - C:\Program Files\Ashampoo_PO\prxtbAsha.dll (Conduit Ltd.) IE - HKU\S-1-5-21-91784625-659246694-3654467853-1000\..\SearchScopes,DefaultScope = {AE5B9717-76F1-4C20-862D-3F9FC068F781} IE - HKU\S-1-5-21-91784625-659246694-3654467853-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=110819&tl=gcn33201&tt=3012_8&babsrc=SP_ss&mntrId=e23711e9000000000000002258e22656 IE - HKU\S-1-5-21-91784625-659246694-3654467853-1000\..\SearchScopes\{663A13EF-34AC-4150-A7F8-43FFC2112DCE}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=kw&q={searchTerms}&locale=en_US&apn_ptnrs=U3&apn_dtid=OSJ000YYPL&apn_uid=DBA9821B-6EED-4AF2-9405-35D936C2A8A0&apn_sauid=04109329-8DE4-4E79-9288-461671688F9F IE - HKU\S-1-5-21-91784625-659246694-3654467853-1000\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.com/search?cid={32EF2722-DF76-49A3-8B41-B18FABEC7073}&mid=0213e6b8e7c247d0b6dcd1577544abbf-b4c56da0f1873af84458869cc671ddfd960d69e1&lang=pl&ds=AVG&pr=pr&d=2012-12-04 12:05:07&v=13.2.0.4&sap=dsp&q={searchTerms} IE - HKU\S-1-5-21-91784625-659246694-3654467853-1000\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD22}: "URL" = http://dts.search-results.com/sr?src=ieb&appid=329&systemid=2&sr=0&q={searchTerms} IE - HKU\S-1-5-21-91784625-659246694-3654467853-1000\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD24}: "URL" = http://dts.search-results.com/sr?src=ieb&appid=126&systemid=4&sr=0&q={searchTerms} IE - HKU\S-1-5-21-91784625-659246694-3654467853-1000\..\SearchScopes\{A9EAACFA-E4A7-4079-8E0C-277F4AC5F3DA}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050 IE - HKU\S-1-5-21-91784625-659246694-3654467853-1000\..\SearchScopes\{AE5B9717-76F1-4C20-862D-3F9FC068F781}: "URL" = http://www.google.com/search?hl=pl&q={searchTerms}&rlz=1I7GGNI_plPL486 IE - HKU\S-1-5-21-91784625-659246694-3654467853-1000\..\SearchScopes\{cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8}: "URL" = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=HJxdm007YYpl&ptnrS=HJxdm007YYpl&si=CJi-pMz5l7ICFcgm3godUloA2g&ptb=0EE3C6E3-A10C-4A87-A4AD-E555CD3DEF27&ind=2012090218&n=77ee0f6a&psa=&st=sb&searchfor={searchTerms} IE - HKU\S-1-5-21-91784625-659246694-3654467853-1000\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&crg=3.1010000&st=18&q={searchTerms}&barid={4C51C543-CE51-11E1-97DA-002258E22656} IE - HKU\S-1-5-21-91784625-659246694-3654467853-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_278.dll () FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\13.2.0\\npsitesafety.dll () FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.6.14: c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.6.14: c:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.6.14: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.6.14: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=15.0.6.14: c:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@VideoDownloadConverter_4z.com/Plugin: C:\Program Files\VideoDownloadConverter_4z\bar\5.bin\NP4zStub.dll File not found FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\x\AppData\Local\Google\Update\1.3.21.124\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\x\AppData\Local\Google\Update\1.3.21.124\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\opencandy.com/Ignite: C:\Users\x\AppData\Local\Ignite\npOCDM.1.1.4.0.dll (OpenCandy, Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@toolbar: C:\ProgramData\AVG Secure Search\FireFoxExt\13.2.0.5 [2012-11-08 20:20:41 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\4zffxtbr@VideoDownloadConverter_4z.com: C:\Program Files\VideoDownloadConverter_4z\bar\5.bin [2012-12-24 16:11:24 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{0153E448-190B-4987-BDE1-F256CADA672F}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012-11-01 00:59:02 | 000,000,000 | ---D | M] [2012-07-27 21:27:49 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [color=#E56717]========== Chrome ==========[/color] CHR - homepage: http://www.tvn24.pl/ CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}&sugkey={google:suggestAPIKeyParameter}, CHR - homepage: http://www.tvn24.pl/ CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Users\x\AppData\Local\Google\Chrome\Application\23.0.1271.95\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\x\AppData\Local\Google\Chrome\Application\23.0.1271.95\pdf.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Users\x\AppData\Local\Google\Chrome\Application\23.0.1271.95\gcswf32.dll CHR - plugin: AVG Internet Security (Enabled) = C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.2161_0\plugins/avgnpss.dll CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll CHR - plugin: AVG SiteSafety plugin (Enabled) = C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\11.1.0\\npsitesafety.dll CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll CHR - plugin: Java(TM) Platform SE 7 U5 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll CHR - plugin: Java Deployment Toolkit 7.0.50.255 (Enabled) = C:\Windows\system32\npDeployJava1.dll CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll CHR - Extension: YouTube = C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: Szukaj w Google = C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\ CHR - Extension: Complitly plugin for chrome = C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda\1.1_0\ CHR - Extension: DealPly = C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\gaiilaahiahdejapggenmdmafpmbipje\3.0.7.2_0\ CHR - Extension: Twojanuta.pl = C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\golpmdddnmkckjiopggcbempclljlbjk\1.2_0\ CHR - Extension: SweetIM for Facebook = C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.1.0.1_0\ CHR - Extension: Billiard Blitz 2 = C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\jckbmmeoejnnbdingknbkeobiipbhhph\1.0.3_0\ CHR - Extension: RealPlayer HTML5Video Downloader Extension = C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0\ CHR - Extension: Ashampoo PO = C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\jinihaffgdhejchgkogpfkdmpldnmnji\10.13.20.29_0\ CHR - Extension: AVG Secure Search = C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\13.2.0.5_0\ CHR - Extension: Snooker = C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\obmhhniiehjjflbbbndjacddmjognlde\1.1_0\ CHR - Extension: SweetPacks Chrome Extension = C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj\1.1.0.1_0\ CHR - Extension: Gmail = C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ CHR - Extension: Yann Arthus-Bertrand = C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\plaekpceeonanmjojailaojkconcgofc\3_0\ CHR - Extension: DVDVideoSoftTB = C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\plmlpkfpkijnlijgalnjaacllnjmoamo\10.13.20.29_0\ CHR - Extension: YouTube = C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: Szukaj w Google = C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\ CHR - Extension: Complitly plugin for chrome = C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda\1.1_0\ CHR - Extension: DealPly = C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\gaiilaahiahdejapggenmdmafpmbipje\3.0.7.2_0\ CHR - Extension: Twojanuta.pl = C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\golpmdddnmkckjiopggcbempclljlbjk\1.2_0\ CHR - Extension: SweetIM for Facebook = C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.1.0.1_0\ CHR - Extension: Billiard Blitz 2 = C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\jckbmmeoejnnbdingknbkeobiipbhhph\1.0.3_0\ CHR - Extension: RealPlayer HTML5Video Downloader Extension = C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0\ CHR - Extension: Ashampoo PO = C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\jinihaffgdhejchgkogpfkdmpldnmnji\10.13.20.29_0\ CHR - Extension: AVG Secure Search = C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\13.2.0.5_0\ CHR - Extension: Snooker = C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\obmhhniiehjjflbbbndjacddmjognlde\1.1_0\ CHR - Extension: SweetPacks Chrome Extension = C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj\1.1.0.1_0\ CHR - Extension: Gmail = C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ CHR - Extension: Yann Arthus-Bertrand = C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\plaekpceeonanmjojailaojkconcgofc\3_0\ CHR - Extension: DVDVideoSoftTB = C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\plmlpkfpkijnlijgalnjaacllnjmoamo\10.13.20.29_0\ O1 HOSTS File: ([2007-06-13 12:39:44 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (TinyBHO Class) - {00e71626-0bef-11dc-8314-0800200c9a66} - C:\Users\x\AppData\Roaming\DownloaderGold\ieplug.dll () O2 - BHO: (TinyBHO Class) - {00e71626-0bef-11dc-8314-0864264c9a64} - C:\Users\x\AppData\Roaming\DownloaderGold\ieplug.dll () O2 - BHO: (Complitly) - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Users\x\AppData\Roaming\Complitly\Complitly.dll (SimplyGen) O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer) O2 - BHO: (no name) - {312f84fb-8970-4fd3-bddb-7012eac4afc9} - No CLSID value found. O2 - BHO: (YoutubeMP3ConverterBHO Class) - {6F0B6B9B-6342-4E2F-ABF5-C40B94320622} - C:\Program Files\YoutubeMP3Converter\yt2convmp3.dll (2conv@hotger.com) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.) O2 - BHO: (Wincore MediaBar) - {9a95b751-bf3e-4ea8-a938-2d4d84cd4964} - C:\Program Files\Lphant Applications\MediaBar\Datamngr\ToolBar\lpdtxmltbpi.dll () O2 - BHO: (DealPly) - {A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} - C:\Program Files\DealPly\DealPlyIE.dll (DealPly Technologies Ltd) O2 - BHO: (Wincore Mediabar) - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - C:\Program Files\BearShare Applications\MediaBar\Datamngr\ToolBar\wincorebsdtx.dll () O2 - BHO: (no name) - {c547c6c2-561b-4169-a2a5-20ba771ca93b} - No CLSID value found. O2 - BHO: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found. O2 - BHO: (Ashampoo PO Toolbar) - {d43723ae-1ae1-4a25-a6a4-bf0929273cab} - C:\Program Files\Ashampoo_PO\prxtbAsha.dll (Conduit Ltd.) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (SweetPacks Browser Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O3 - HKLM\..\Toolbar: (no name) - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - No CLSID value found. O3 - HKLM\..\Toolbar: (no name) - {48586425-6bb7-4f51-8dc6-38c88e3ebb58} - No CLSID value found. O3 - HKLM\..\Toolbar: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Wincore MediaBar) - {9a95b751-bf3e-4ea8-a938-2d4d84cd4964} - C:\Program Files\Lphant Applications\MediaBar\Datamngr\ToolBar\lpdtxmltbpi.dll () O3 - HKLM\..\Toolbar: (Wincore Mediabar) - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - C:\Program Files\BearShare Applications\MediaBar\Datamngr\ToolBar\wincorebsdtx.dll () O3 - HKLM\..\Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found. O3 - HKLM\..\Toolbar: (Ashampoo PO Toolbar) - {d43723ae-1ae1-4a25-a6a4-bf0929273cab} - C:\Program Files\Ashampoo_PO\prxtbAsha.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (SweetPacks Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found. O3 - HKU\S-1-5-21-91784625-659246694-3654467853-1000\..\Toolbar\WebBrowser: (no name) - {1392B8D2-5C05-419F-A8F6-B9F15A596612} - No CLSID value found. O3 - HKU\S-1-5-21-91784625-659246694-3654467853-1000\..\Toolbar\WebBrowser: (no name) - {30F9B915-B755-4826-820B-08FBA6BD249D} - No CLSID value found. O3 - HKU\S-1-5-21-91784625-659246694-3654467853-1000\..\Toolbar\WebBrowser: (no name) - {48586425-6BB7-4F51-8DC6-38C88E3EBB58} - No CLSID value found. O3 - HKU\S-1-5-21-91784625-659246694-3654467853-1000\..\Toolbar\WebBrowser: (DVDVideoSoftTB Toolbar) - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} - C:\Program Files\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.) O3 - HKU\S-1-5-21-91784625-659246694-3654467853-1000\..\Toolbar\WebBrowser: (Ashampoo PO Toolbar) - {D43723AE-1AE1-4A25-A6A4-BF0929273CAB} - C:\Program Files\Ashampoo_PO\prxtbAsha.dll (Conduit Ltd.) O3 - HKU\S-1-5-21-91784625-659246694-3654467853-1000\..\Toolbar\WebBrowser: (SweetPacks Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O4 - HKLM..\Run: [AVG_UI] C:\Program Files\AVG\AVG2013\avgui.exe (AVG Technologies CZ, s.r.o.) O4 - HKLM..\Run: [HDMICtrlMan] C:\Program Files\Toshiba\HDMICtrlMan\HDMICtrlMan.exe (TOSHIBA Corporation.) O4 - HKLM..\Run: [vProt] C:\Program Files\AVG Secure Search\vprot.exe () O4 - HKU\S-1-5-21-91784625-659246694-3654467853-1000..\Run: [UIWatcher] C:\Program Files\Ashampoo\Ashampoo Magical UnInstall\UIWatcher.exe File not found O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoPropertiesMyComputer = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewContextMenu = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFileAssociate = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoClose = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: StartMenuLogoff = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispCPL = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispBackgroundPage = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispSettingsPage = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispScrSavPage = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O8 - Extra context menu item: Free YouTube Download - C:\Users\x\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm () O8 - Extra context menu item: Translate this web page with Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/ActionTU.htm File not found O8 - Extra context menu item: Translate with Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Action.htm File not found O9 - Extra Button: ArcaVir >> - {40525A66-DB98-480D-BCF9-7AF88C1AF438} - Reg Error: Key error. File not found O9 - Extra 'Tools' menuitem : ArcaVir >> - {40525A66-DB98-480D-BCF9-7AF88C1AF438} - Reg Error: Key error. File not found O9 - Extra Button: Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/ActionTU.htm File not found O9 - Extra 'Tools' menuitem : Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/ActionTU.htm File not found O13 - gopher Prefix: missing O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{36DBDCD1-9C6D-4CF6-AFC9-36DDB9040EB8}: DhcpNameServer = 192.168.1.1 192.168.1.1 O18 - Protocol\Handler\linkscanner - No CLSID value found O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\13.2.0\ViProtocol.dll () O20 - AppInit_DLLs: (C:\PROGRA~1\BearShare Applications\MediaBar\Datamngr\datamngr.dll) - File not found O20 - AppInit_DLLs: (C:\PROGRA~1\BearShare Applications\MediaBar\Datamngr\IEBHO.dll) - C:\Program Files\BearShare Applications\MediaBar\Datamngr\IEBHO.dll (MusicLab, LLC) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-06-10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{f968b3df-ab1c-11e1-be6e-001e33a0424c}\Shell - "" = AutoRun O33 - MountPoints2\{f968b3df-ab1c-11e1-be6e-001e33a0424c}\Shell\AutoRun\command - "" = H:\SETUP.EXE O33 - MountPoints2\{f968b3df-ab1c-11e1-be6e-001e33a0424c}\Shell\configure\command - "" = H:\SETUP.EXE O33 - MountPoints2\{f968b3df-ab1c-11e1-be6e-001e33a0424c}\Shell\install\command - "" = H:\SETUP.EXE O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-12-25 17:37:20 | 000,000,000 | ---D | C] -- C:\Users\x\Desktop\2XX [2012-12-25 10:31:43 | 000,295,424 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll [2012-12-25 10:31:43 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll [2012-12-25 10:31:21 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{5B3C9534-50F6-4496-8BD5-31CABCE0CE92} [2012-12-24 18:26:04 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{2FAC3C9D-0608-418F-928F-57AFEDCEACE6} [2012-12-23 14:47:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live [2012-12-23 14:14:18 | 000,000,000 | -HSD | C] -- C:\Config.Msi [2012-12-23 13:42:20 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{4886335F-6510-4AB7-A761-37AD6B1607D4} [2012-12-22 20:18:35 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{21329C2F-0B75-4C70-830E-1D0433ABB597} [2012-12-22 00:06:59 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{01EDFAA2-17AE-4450-B0D8-C99F20507544} [2012-12-20 16:56:18 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Roaming\UDP Software [2012-12-20 15:50:01 | 000,000,000 | ---D | C] -- C:\Users\x\Desktop\Kzyś [2012-12-20 09:31:36 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{F638EF1C-AD39-458A-8351-44D17D629A7D} [2012-12-19 19:43:14 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{D1E21EC1-55D7-4DAF-B48B-1BBF04607394} [2012-12-18 12:42:36 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{25CA440D-3A5A-4C87-BD45-61C033E7284B} [2012-12-17 18:48:22 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{2C5FD9CA-219C-4A6B-9EA8-F800A0C3FA7A} [2012-12-16 22:12:15 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{AC6ACF5B-FD2D-4737-A35E-D366C8CDB409} [2012-12-16 18:14:13 | 000,000,000 | R--D | C] -- C:\Users\x\Desktop\PL.FILM [2012-12-16 15:31:25 | 000,000,000 | ---D | C] -- C:\Users\x\Documents\REWIE ŚWIATA [2012-12-16 01:48:13 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2012-12-16 01:48:12 | 000,607,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2012-12-16 01:48:12 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2012-12-16 01:48:12 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2012-12-16 01:48:12 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2012-12-16 01:48:11 | 001,800,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll [2012-12-16 01:48:11 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll [2012-12-16 01:48:10 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2012-12-15 19:50:20 | 002,345,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys [2012-12-15 19:50:12 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe [2012-12-15 19:50:12 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll [2012-12-15 19:50:12 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll [2012-12-15 19:50:12 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll [2012-12-15 19:50:12 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll [2012-12-15 19:50:12 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll [2012-12-15 19:50:12 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll [2012-12-15 19:50:12 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll [2012-12-15 19:50:12 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll [2012-12-15 19:50:12 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll [2012-12-15 19:50:12 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll [2012-12-15 19:50:12 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll [2012-12-15 19:50:12 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll [2012-12-15 19:50:12 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll [2012-12-15 19:50:12 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll [2012-12-15 19:50:12 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll [2012-12-15 19:50:12 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll [2012-12-15 19:50:12 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll [2012-12-15 19:50:12 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll [2012-12-15 19:50:12 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll [2012-12-15 19:50:12 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll [2012-12-15 19:50:12 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll [2012-12-15 19:50:12 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll [2012-12-15 19:50:12 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll [2012-12-15 19:50:12 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll [2012-12-15 19:50:12 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll [2012-12-15 19:50:12 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll [2012-12-15 19:50:12 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll [2012-12-15 19:50:12 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll [2012-12-15 19:50:12 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll [2012-12-15 19:49:57 | 000,376,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpnet.dll [2012-12-15 19:49:50 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll [2012-12-13 10:19:50 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{08DFBFBE-76AB-464F-9CD3-FC91CC2B05D5} [2012-12-12 18:26:49 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Roaming\Systweak [2012-12-12 18:26:48 | 000,015,544 | ---- | C] (Systweak Inc., (www.systweak.com)) -- C:\Windows\System32\roboot.exe [2012-12-12 18:24:03 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\Programs [2012-12-12 16:22:45 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{EBAEF41E-C88F-4620-9561-2FC5063E2431} [2012-12-11 22:43:36 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{664DCAA1-F8AA-4C9E-9F4E-95957C932484} [2012-12-10 18:25:51 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{9E8A0372-3DE2-4916-8D29-B6AD96BB4730} [2012-12-09 17:23:09 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{53369B41-9F6D-48A1-B76A-E6E97091F900} [2012-12-09 16:06:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG [2012-12-08 13:37:48 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{F38C7B23-5775-48EB-BC3B-C12871923D38} [2012-12-07 21:43:13 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{6ED4FEF5-78B2-4653-AA18-6212B4AA1AA5} [2012-12-06 10:49:12 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokki [2012-12-06 10:49:09 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\Pokki [2012-12-06 10:47:50 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\Ignite [2012-12-06 10:44:00 | 000,000,000 | ---D | C] -- C:\Program Files\DVDVideoSoftTB [2012-12-06 10:43:46 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Roaming\DVDVideoSoftIEHelpers [2012-12-06 10:42:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft [2012-12-06 10:41:11 | 000,000,000 | ---D | C] -- C:\Program Files\DVDVideoSoft [2012-12-06 10:41:02 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Roaming\OpenCandy [2012-12-06 10:41:01 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DVDVideoSoft [2012-12-05 22:33:38 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{EFB63D10-6317-4AFD-A09F-469770FA63E3} [2012-12-04 18:35:13 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{241F260F-8A6B-4D71-A9BB-7A5E9FBC725E} [2012-12-04 12:57:41 | 000,000,000 | -HSD | C] -- C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} [2012-12-04 12:05:04 | 000,000,000 | ---D | C] -- C:\Program Files\AVG Secure Search [2012-12-03 22:30:42 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR [2012-12-03 22:30:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR [2012-12-03 12:29:39 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{BB2012E2-6421-46E9-9634-E904870CD358} [2012-12-02 19:35:33 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{21857C94-5FDA-491E-A890-71115155A465} [2012-11-30 22:58:06 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{B66DA945-CBCE-4B85-B4DF-5E5B7BE21FF1} [2012-11-29 21:22:42 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{025BBF6D-C3AB-457F-A3CB-FB3F7C0FF23D} [2012-11-29 01:17:00 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{F837C2F9-9B5A-4047-B094-BC8F396C5337} [2012-11-28 12:51:24 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{D7768E55-4469-452E-8919-8653BABECDCD} [2012-11-27 18:57:59 | 000,000,000 | ---D | C] -- C:\Users\x\Desktop\CIEKAWE YOU-TUBE [2012-11-27 13:28:09 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{7FB0171A-C49E-4893-B47E-6FE573F835B9} [2012-11-27 01:25:38 | 000,000,000 | ---D | C] -- C:\Users\x\AppData\Local\{337F11A4-9C7F-425A-AB72-45204030D654} [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-12-26 15:15:34 | 000,014,240 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012-12-26 15:15:33 | 000,014,240 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012-12-26 15:08:06 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012-12-25 20:25:43 | 000,003,417 | ---- | M] () -- C:\Users\x\Desktop\#video=xuzf0e.url [2012-12-25 18:37:40 | 000,003,987 | ---- | M] () -- C:\Users\x\Desktop\Dailymotion - Watch, publish, share videos.url [2012-12-25 17:54:29 | 000,005,094 | ---- | M] () -- C:\Users\x\Desktop\Ukryta Kamera TV - SexTV 1.pl - sex filmy porno, telewizja, 24h sex tv.url [2012-12-25 14:12:23 | 000,001,153 | ---- | M] () -- C:\Users\x\Desktop\muzyka.lnk [2012-12-25 10:34:51 | 000,455,304 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2012-12-24 12:56:54 | 000,003,198 | ---- | M] () -- C:\Users\x\Desktop\Jak zrobić pyszną kapustę z grochem - potrawy wigilijne (cz.2) - Gotowanie - Porady Zaradni.pl.url [2012-12-23 17:06:42 | 000,000,353 | ---- | M] () -- C:\Users\x\Desktop\Do siego roku 2013 ! Niosę radość dla każdego z Was - Andrzej Cierniewski - YouTube.url [2012-12-23 01:08:07 | 095,023,320 | ---- | M] () -- C:\ProgramData\dsgsdgdsgdsgw.pad [2012-12-21 23:26:26 | 000,003,488 | ---- | M] () -- C:\bootsqm.dat [2012-12-21 20:03:37 | 000,000,252 | ---- | M] () -- C:\Users\x\Desktop\Tłumacz Google.url [2012-12-21 01:56:55 | 000,000,036 | ---- | M] () -- C:\Windows\avgui.INI [2012-12-20 23:54:22 | 000,001,033 | ---- | M] () -- C:\Users\x\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\runctf.lnk [2012-12-18 22:43:15 | 000,002,287 | ---- | M] () -- C:\Users\x\Desktop\Gotan Project - Erase Una Vez - YouTube.url [2012-12-18 20:46:24 | 000,000,000 | ---- | M] () -- C:\MSDOS.SYS [2012-12-18 20:46:24 | 000,000,000 | ---- | M] () -- C:\IO.SYS [2012-12-18 17:17:32 | 000,000,526 | ---- | M] () -- C:\Users\x\Desktop\kulinarni.pl.url [2012-12-18 00:38:31 | 000,000,510 | ---- | M] () -- C:\Users\x\Desktop\Kuleczki ziemniaczane - Przekąski - Przystawki - przepisy - Gotujmy.pl.url [2012-12-16 23:16:37 | 000,005,418 | ---- | M] () -- C:\Users\x\Desktop\Blues — Radio internetowe Tuba.FM. Muzyka, MP3, Piosenki..url [2012-12-16 21:02:14 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2012-12-16 21:02:11 | 000,697,272 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe [2012-12-16 21:02:11 | 000,073,656 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl [2012-12-16 15:13:28 | 000,295,424 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll [2012-12-16 15:13:20 | 000,034,304 | ---- | M] (Adobe Systems) -- C:\Windows\System32\atmlib.dll [2012-12-08 13:48:43 | 000,001,097 | ---- | M] () -- C:\Users\x\Desktop\Wyrób wędlin sposobem domowym reduktory do maszynki#302712.url [2012-12-07 01:28:00 | 000,001,026 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2012-12-07 01:15:00 | 000,001,042 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-91784625-659246694-3654467853-1000UA.job [2012-12-07 00:28:00 | 000,001,022 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2012-12-06 21:15:00 | 000,000,990 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-91784625-659246694-3654467853-1000Core.job [2012-12-06 14:19:05 | 000,000,332 | ---- | M] () -- C:\Users\x\Desktop\ubijaczka, maszyny cukiernicze (2829277284) - Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..url [2012-12-06 10:44:14 | 000,000,009 | ---- | M] () -- C:\END [2012-12-06 10:43:39 | 000,001,205 | ---- | M] () -- C:\Users\x\Desktop\Soft Free Studio.lnk [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-12-25 20:25:43 | 000,003,417 | ---- | C] () -- C:\Users\x\Desktop\#video=xuzf0e.url [2012-12-25 18:37:39 | 000,003,987 | ---- | C] () -- C:\Users\x\Desktop\Dailymotion - Watch, publish, share videos.url [2012-12-25 17:54:29 | 000,005,094 | ---- | C] () -- C:\Users\x\Desktop\Ukryta Kamera TV - SexTV 1.pl - sex filmy porno, telewizja, 24h sex tv.url [2012-12-24 12:56:54 | 000,003,198 | ---- | C] () -- C:\Users\x\Desktop\Jak zrobić pyszną kapustę z grochem - potrawy wigilijne (cz.2) - Gotowanie - Porady Zaradni.pl.url [2012-12-23 17:06:42 | 000,000,353 | ---- | C] () -- C:\Users\x\Desktop\Do siego roku 2013 ! Niosę radość dla każdego z Was - Andrzej Cierniewski - YouTube.url [2012-12-21 23:26:26 | 000,003,488 | ---- | C] () -- C:\bootsqm.dat [2012-12-21 20:03:37 | 000,000,252 | ---- | C] () -- C:\Users\x\Desktop\Tłumacz Google.url [2012-12-21 01:56:55 | 000,000,036 | ---- | C] () -- C:\Windows\avgui.INI [2012-12-20 23:54:22 | 000,001,033 | ---- | C] () -- C:\Users\x\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\runctf.lnk [2012-12-20 23:54:07 | 095,023,320 | ---- | C] () -- C:\ProgramData\dsgsdgdsgdsgw.pad [2012-12-18 22:43:15 | 000,002,287 | ---- | C] () -- C:\Users\x\Desktop\Gotan Project - Erase Una Vez - YouTube.url [2012-12-18 20:46:24 | 000,000,000 | ---- | C] () -- C:\MSDOS.SYS [2012-12-18 20:46:24 | 000,000,000 | ---- | C] () -- C:\IO.SYS [2012-12-18 17:17:32 | 000,000,526 | ---- | C] () -- C:\Users\x\Desktop\kulinarni.pl.url [2012-12-18 00:38:31 | 000,000,510 | ---- | C] () -- C:\Users\x\Desktop\Kuleczki ziemniaczane - Przekąski - Przystawki - przepisy - Gotujmy.pl.url [2012-12-16 23:16:37 | 000,005,418 | ---- | C] () -- C:\Users\x\Desktop\Blues — Radio internetowe Tuba.FM. Muzyka, MP3, Piosenki..url [2012-12-08 13:48:43 | 000,001,097 | ---- | C] () -- C:\Users\x\Desktop\Wyrób wędlin sposobem domowym reduktory do maszynki#302712.url [2012-12-06 14:19:05 | 000,000,332 | ---- | C] () -- C:\Users\x\Desktop\ubijaczka, maszyny cukiernicze (2829277284) - Allegro.pl - Więcej niż aukcje. Najlepsze oferty na największej platformie handlowej..url [2012-12-06 10:49:37 | 000,001,318 | ---- | C] () -- C:\Users\x\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\YouTube.lnk [2012-12-06 10:43:39 | 000,001,205 | ---- | C] () -- C:\Users\x\Desktop\Soft Free Studio.lnk [2012-10-14 13:55:06 | 000,000,429 | ---- | C] () -- C:\Users\x\efaktura.properties [2012-08-26 11:13:17 | 000,000,017 | ---- | C] () -- C:\Users\x\AppData\Local\resmon.resmoncfg [2012-06-25 20:53:51 | 000,004,608 | ---- | C] () -- C:\Users\x\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-06-04 23:31:15 | 000,001,176 | ---- | C] () -- C:\Users\x\obrazy.lnk [2012-05-30 16:19:18 | 000,175,616 | ---- | C] () -- C:\Windows\System32\unrar.dll [2012-05-30 16:19:17 | 000,650,752 | ---- | C] () -- C:\Windows\System32\xvidcore.dll [2012-05-30 16:19:17 | 000,243,200 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll [2012-05-30 16:19:17 | 000,079,360 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll [2012-05-30 16:07:55 | 000,140,288 | ---- | C] () -- C:\Windows\System32\igfxtvcx.dll [2012-05-30 16:05:54 | 000,134,592 | ---- | C] () -- C:\Windows\System32\igfcg500.bin [2012-05-30 16:04:50 | 000,000,010 | ---- | C] () -- C:\Windows\GSetup.ini [2011-06-10 05:34:52 | 000,080,416 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll [2011-02-11 17:40:40 | 000,004,096 | ---- | C] ( ) -- C:\Windows\System32\IGFXDEVLib.dll [2011-02-11 17:38:44 | 000,000,151 | ---- | C] () -- C:\Windows\System32\GfxUI.exe.config [color=#E56717]========== ZeroAccess Check ==========[/color] [2009-07-14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2012-06-09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = %systemroot%\system32\wbem\wbemess.dll -- [2009-07-14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [color=#E56717]========== LOP Check ==========[/color] [2012-11-08 20:25:05 | 000,000,000 | ---D | M] -- C:\Users\Default\AppData\Roaming\TuneUp Software [2012-11-08 20:25:05 | 000,000,000 | ---D | M] -- C:\Users\Default User\AppData\Roaming\TuneUp Software [2012-05-31 18:31:04 | 000,000,000 | ---D | M] -- C:\Users\x\AppData\Roaming\Ashampoo [2012-07-23 09:39:49 | 000,000,000 | ---D | M] -- C:\Users\x\AppData\Roaming\AVG [2012-11-04 11:06:39 | 000,000,000 | ---D | M] -- C:\Users\x\AppData\Roaming\AVG2013 [2012-07-29 19:51:28 | 000,000,000 | ---D | M] -- C:\Users\x\AppData\Roaming\Babylon [2012-06-25 20:33:25 | 000,000,000 | ---D | M] -- C:\Users\x\AppData\Roaming\BearShare [2012-07-29 19:51:29 | 000,000,000 | ---D | M] -- C:\Users\x\AppData\Roaming\Complitly [2012-06-04 00:08:51 | 000,000,000 | ---D | M] -- C:\Users\x\AppData\Roaming\DAEMON Tools Lite [2012-07-29 19:53:51 | 000,000,000 | ---D | M] -- C:\Users\x\AppData\Roaming\DownloaderGold [2012-12-06 10:43:46 | 000,000,000 | ---D | M] -- C:\Users\x\AppData\Roaming\DVDVideoSoft [2012-12-06 11:19:29 | 000,000,000 | ---D | M] -- C:\Users\x\AppData\Roaming\DVDVideoSoftIEHelpers [2012-07-29 17:00:35 | 000,000,000 | ---D | M] -- C:\Users\x\AppData\Roaming\Easy MP3 Recorder [2012-07-15 09:05:37 | 000,000,000 | ---D | M] -- C:\Users\x\AppData\Roaming\KastorTubeToMp3 [2012-07-29 19:53:46 | 000,000,000 | ---D | M] -- C:\Users\x\AppData\Roaming\KastorYoutubeToMp3 [2012-06-25 20:33:25 | 000,000,000 | ---D | M] -- C:\Users\x\AppData\Roaming\MusicNet [2012-12-06 10:41:02 | 000,000,000 | ---D | M] -- C:\Users\x\AppData\Roaming\OpenCandy [2012-12-12 20:54:48 | 000,000,000 | ---D | M] -- C:\Users\x\AppData\Roaming\Systweak [2012-12-04 12:58:50 | 000,000,000 | ---D | M] -- C:\Users\x\AppData\Roaming\TuneUp Software [2012-12-20 16:56:18 | 000,000,000 | ---D | M] -- C:\Users\x\AppData\Roaming\UDP Software [2012-06-02 08:55:48 | 000,000,000 | ---D | M] -- C:\Users\x\AppData\Roaming\WinBatch [2012-06-02 10:22:28 | 000,000,000 | ---D | M] -- C:\Users\x\AppData\Roaming\Windows Live Writer [2012-07-29 19:53:46 | 000,000,000 | ---D | M] -- C:\Users\x\AppData\Roaming\WinParam [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 741 bytes -> C:\Users\x\Documents\e-faktura 10_2012.eml:OECustomProperty @Alternate Data Stream - 133 bytes -> C:\ProgramData\TEMP:0B4227B4 @Alternate Data Stream - 1029 bytes -> C:\Users\x\Documents\[ANSWER]Brakuje 2 szt_głośników PS-RC6730W.eml:OECustomProperty < End of report >