OTL logfile created on: 2012-12-29 15:40:58 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\1\Desktop
Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6001.18000)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
3,00 Gb Total Physical Memory | 1,17 Gb Available Physical Memory | 39,19% Memory free
6,19 Gb Paging File | 3,98 Gb Available in Paging File | 64,21% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 224,75 Gb Total Space | 69,65 Gb Free Space | 30,99% Space Free | Partition Type: NTFS
Drive D: | 8,13 Gb Total Space | 1,55 Gb Free Space | 19,12% Space Free | Partition Type: NTFS
Drive F: | 18,78 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
 
Computer Name: 1-PC | User Name: 1 | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-12-29 15:08:43 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\1\Desktop\OTL.exe
PRC - [2012-12-14 16:49:28 | 000,824,232 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
PRC - [2012-10-05 10:14:56 | 002,203,160 | ---- | M] () -- C:\ProgramData\Browser Manager\2.3.765.24\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe
PRC - [2012-01-17 10:07:58 | 000,505,736 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Common Files\Java\Java Update\jucheck.exe
PRC - [2011-01-13 09:47:34 | 003,396,624 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
PRC - [2011-01-13 09:47:33 | 000,040,384 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2010-05-08 12:48:36 | 000,229,376 | ---- | M] () -- C:\ProgramData\DatacardService\DCService.exe
PRC - [2010-05-08 12:48:26 | 000,241,664 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\ProgramData\DatacardService\DCSHelper.exe
PRC - [2008-12-22 17:33:06 | 000,114,688 | ---- | M] () -- C:\Program Files\PLAY ONLINE\PLAY ONLINE.exe
PRC - [2008-10-29 07:29:41 | 002,927,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2008-04-15 19:18:38 | 000,221,239 | ---- | M] (IDT, Inc.) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_030ac640\stacsv.exe
PRC - [2008-04-15 19:17:24 | 000,442,433 | ---- | M] (IDT, Inc.) -- C:\Program Files\IDT\WDM\sttray.exe
PRC - [2008-04-15 16:54:42 | 000,354,840 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
PRC - [2008-04-15 16:54:40 | 000,178,712 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
PRC - [2008-03-26 17:27:52 | 000,595,248 | ---- | M] (Validity Sensors, Inc.) -- C:\Windows\System32\vfsFPService.exe
PRC - [2008-03-26 14:26:56 | 000,341,328 | ---- | M] () -- C:\Windows\SMINST\BLService.exe
PRC - [2008-03-12 18:24:52 | 000,302,144 | ---- | M] (DigitalPersona, Inc.) -- C:\Program Files\DigitalPersona\Bin\DpHostW.exe
PRC - [2008-02-12 21:05:54 | 000,073,728 | ---- | M] (Andrea Electronics Corporation) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_030ac640\AEstSrv.exe
PRC - [2008-01-21 03:24:43 | 000,151,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\schtasks.exe
PRC - [2008-01-21 03:23:32 | 001,008,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\MSASCui.exe
PRC - [2008-01-16 16:56:50 | 001,624,616 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
PRC - [2008-01-16 16:56:50 | 000,727,592 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2012-12-05 02:15:15 | 012,456,040 | ---- | M] () -- C:\Users\1\AppData\Local\Google\Chrome\Application\23.0.1271.97\PepperFlash\pepflashplayer.dll
MOD - [2012-12-05 02:15:15 | 000,460,904 | ---- | M] () -- C:\Users\1\AppData\Local\Google\Chrome\Application\23.0.1271.97\ppGoogleNaClPluginChrome.dll
MOD - [2012-12-05 02:15:14 | 004,008,040 | ---- | M] () -- C:\Users\1\AppData\Local\Google\Chrome\Application\23.0.1271.97\pdf.dll
MOD - [2012-12-05 02:14:29 | 000,587,880 | ---- | M] () -- C:\Users\1\AppData\Local\Google\Chrome\Application\23.0.1271.97\libglesv2.dll
MOD - [2012-12-05 02:14:28 | 000,124,520 | ---- | M] () -- C:\Users\1\AppData\Local\Google\Chrome\Application\23.0.1271.97\libegl.dll
MOD - [2012-12-05 02:14:21 | 000,157,304 | ---- | M] () -- C:\Users\1\AppData\Local\Google\Chrome\Application\23.0.1271.97\avutil-51.dll
MOD - [2012-12-05 02:14:20 | 000,275,576 | ---- | M] () -- C:\Users\1\AppData\Local\Google\Chrome\Application\23.0.1271.97\avformat-54.dll
MOD - [2012-12-05 02:14:19 | 002,168,952 | ---- | M] () -- C:\Users\1\AppData\Local\Google\Chrome\Application\23.0.1271.97\avcodec-54.dll
MOD - [2012-10-08 15:42:36 | 000,073,728 | ---- | M] () -- C:\Users\1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgafcinpmmpklohkojmllohdhomoefph\1.0_0\spext.dll
MOD - [2012-10-05 10:14:56 | 002,203,160 | ---- | M] () -- C:\ProgramData\Browser Manager\2.3.765.24\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe
MOD - [2012-10-05 10:14:15 | 002,106,392 | ---- | M] () -- c:\ProgramData\Browser Manager\2.3.765.24\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.dll
MOD - [2009-12-10 11:52:38 | 000,192,512 | ---- | M] () -- C:\Program Files\PLAY ONLINE\DeviceMgrUIPlugin.dll
MOD - [2009-12-10 11:51:36 | 000,114,688 | ---- | M] () -- C:\Program Files\PLAY ONLINE\DeviceMgrPlugin.dll
MOD - [2009-12-10 11:40:20 | 000,991,232 | ---- | M] () -- C:\Program Files\PLAY ONLINE\NDISAPI.dll
MOD - [2009-10-13 09:28:42 | 000,159,744 | ---- | M] () -- C:\Program Files\PLAY ONLINE\SMSPlugin.dll
MOD - [2009-10-13 09:28:42 | 000,061,440 | ---- | M] () -- C:\Program Files\PLAY ONLINE\XCodec.dll
MOD - [2009-10-13 09:28:40 | 000,557,056 | ---- | M] () -- C:\Program Files\PLAY ONLINE\atcomm.dll
MOD - [2009-10-13 09:28:40 | 000,155,648 | ---- | M] () -- C:\Program Files\PLAY ONLINE\DetectDev.dll
MOD - [2009-10-13 09:28:40 | 000,139,264 | ---- | M] () -- C:\Program Files\PLAY ONLINE\LocaleMgrPlugin.dll
MOD - [2009-10-13 09:28:40 | 000,090,112 | ---- | M] () -- C:\Program Files\PLAY ONLINE\FileManager.dll
MOD - [2009-10-13 09:28:40 | 000,090,112 | ---- | M] () -- C:\Program Files\PLAY ONLINE\DialUpPlugin.dll
MOD - [2009-10-13 09:28:40 | 000,061,440 | ---- | M] () -- C:\Program Files\PLAY ONLINE\DeviceOperate.dll
MOD - [2009-10-13 09:28:40 | 000,057,344 | ---- | M] () -- C:\Program Files\PLAY ONLINE\ConfigFilePlugin.dll
MOD - [2009-10-13 09:28:40 | 000,032,768 | ---- | M] () -- C:\Program Files\PLAY ONLINE\NotifyServicePlugin.dll
MOD - [2009-10-13 09:28:40 | 000,014,848 | ---- | M] () -- C:\Program Files\PLAY ONLINE\isaputrace.dll
MOD - [2009-09-19 11:21:06 | 000,139,264 | ---- | M] () -- C:\Program Files\PLAY ONLINE\NetInfoPlugin.dll
MOD - [2008-12-22 17:33:06 | 000,114,688 | ---- | M] () -- C:\Program Files\PLAY ONLINE\PLAY ONLINE.exe
MOD - [2008-04-23 22:51:56 | 000,345,384 | ---- | M] () -- C:\Program Files\HP\QuickPlay\Kernel\TV\CLTinyDB.dll
MOD - [2008-04-23 22:51:40 | 000,120,200 | ---- | M] () -- C:\Program Files\HP\QuickPlay\Kernel\TV\CLSchMgr.dll
MOD - [2008-04-23 22:51:40 | 000,038,184 | ---- | M] () -- C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvcps.dll
MOD - [2008-04-23 22:51:30 | 000,259,472 | ---- | M] () -- C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapEngine.dll
MOD - [2008-04-23 22:51:28 | 000,066,856 | ---- | M] () -- C:\Program Files\HP\QuickPlay\Kernel\common\MCEMediaStatus.dll
MOD - [2008-01-16 16:51:00 | 000,126,976 | ---- | M] () -- C:\Program Files\WIDCOMM\Bluetooth Software\BTKeyInd.dll
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV - File not found [Auto | Stopped] -- C:\Program Files\Common Files\YDP\UserAccessManager\useraccess.exe -- (UserAccess)
SRV - [2012-10-05 10:14:56 | 002,203,160 | ---- | M] () [Auto | Running] -- C:\ProgramData\Browser Manager\2.3.765.24\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe -- (Browser Manager)
SRV - [2012-01-18 13:38:28 | 000,155,320 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion)
SRV - [2011-01-13 09:47:33 | 000,040,384 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2010-05-08 12:48:36 | 000,229,376 | ---- | M] () [Auto | Running] -- C:\ProgramData\DatacardService\DCService.exe -- (DCService.exe)
SRV - [2008-04-15 19:18:38 | 000,221,239 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_030ac640\stacsv.exe -- (STacSV)
SRV - [2008-04-15 16:54:42 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON)
SRV - [2008-03-26 17:27:52 | 000,595,248 | ---- | M] (Validity Sensors, Inc.) [Auto | Running] -- C:\Windows\System32\vfsFPService.exe -- (vfsFPService)
SRV - [2008-03-26 14:26:56 | 000,341,328 | ---- | M] () [Auto | Running] -- C:\Windows\SMINST\BLService.exe -- (Recovery Service for Windows)
SRV - [2008-03-12 18:24:52 | 000,302,144 | ---- | M] (DigitalPersona, Inc.) [Auto | Running] -- C:\Program Files\DigitalPersona\Bin\DpHostW.exe -- (DpHost)
SRV - [2008-02-12 21:05:54 | 000,073,728 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_030ac640\AEstSrv.exe -- (AESTFilters)
SRV - [2008-01-21 03:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - [2012-12-29 11:39:14 | 000,040,776 | ---- | M] (Malwarebytes Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\mbamswissarmy.sys -- (MBAMSwissArmy)
DRV - [2011-01-13 09:41:16 | 000,294,608 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2011-01-13 09:40:16 | 000,047,440 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2011-01-13 09:37:30 | 000,023,632 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2011-01-13 09:37:19 | 000,051,280 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2011-01-13 09:37:09 | 000,017,744 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2010-06-01 14:07:14 | 000,116,736 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ewusbnet.sys -- (ewusbnet)
DRV - [2010-05-22 14:48:20 | 000,070,656 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ew_jubusenum.sys -- (huawei_enumerator)
DRV - [2010-04-03 11:02:54 | 000,240,608 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\Windows\System32\drivers\RsFx0150.sys -- (RsFx0150)
DRV - [2010-03-25 10:08:38 | 000,105,984 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2010-03-20 11:56:04 | 000,101,504 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ew_hwusbdev.sys -- (ew_hwusbdev)
DRV - [2009-05-25 10:49:10 | 000,086,568 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s1029bus.sys -- (s1029bus)
DRV - [2009-05-25 10:49:08 | 000,114,472 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s1029mdm.sys -- (s1029mdm)
DRV - [2009-05-25 10:49:08 | 000,109,480 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s1029unic.sys -- (s1029unic)
DRV - [2009-05-25 10:49:08 | 000,108,200 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s1029mgmt.sys -- (s1029mgmt)
DRV - [2009-05-25 10:49:08 | 000,104,488 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s1029obex.sys -- (s1029obex)
DRV - [2009-05-25 10:49:08 | 000,026,024 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s1029nd5.sys -- (s1029nd5)
DRV - [2009-05-25 10:49:08 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s1029mdfl.sys -- (s1029mdfl)
DRV - [2009-02-03 16:36:58 | 000,059,000 | ---- | M] (Protection Technology (StarForce)) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sfdrv01.sys -- (sfdrv01)
DRV - [2008-10-21 09:22:48 | 000,114,600 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s0017mdm.sys -- (s0017mdm)
DRV - [2008-10-21 09:22:48 | 000,109,736 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s0017unic.sys -- (s0017unic)
DRV - [2008-10-21 09:22:48 | 000,108,328 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s0017mgmt.sys -- (s0017mgmt)
DRV - [2008-10-21 09:22:48 | 000,104,616 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s0017obex.sys -- (s0017obex)
DRV - [2008-10-21 09:22:48 | 000,086,824 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s0017bus.sys -- (s0017bus)
DRV - [2008-10-21 09:22:48 | 000,026,024 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s0017nd5.sys -- (s0017nd5)
DRV - [2008-10-21 09:22:48 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s0017mdfl.sys -- (s0017mdfl)
DRV - [2008-05-23 04:29:00 | 007,494,976 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2008-05-23 04:29:00 | 000,043,552 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvhda32v.sys -- (NVHDA)
DRV - [2008-04-15 19:19:54 | 000,378,368 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\stwrt.sys -- (STHDA)
DRV - [2008-04-15 11:05:08 | 000,118,784 | ---- | M] (Realtek Corporation                                            ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)
DRV - [2008-04-01 12:14:10 | 000,081,296 | ---- | M] (JMicron Technology Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\jmcr.sys -- (JMCR)
DRV - [2008-03-27 11:12:12 | 000,024,424 | ---- | M] (Hewlett-Packard Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\hpdskflt.sys -- (hpdskflt)
DRV - [2008-03-27 11:11:34 | 000,034,664 | ---- | M] (Hewlett-Packard Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Accelerometer.sys -- (Accelerometer)
DRV - [2008-03-26 17:28:08 | 000,040,752 | ---- | M] (Validity Sensors, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\vfs101x.sys -- (vfs101x)
DRV - [2008-01-24 14:23:12 | 000,052,736 | ---- | M] (ENE TECHNOLOGY INC.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\enecir.sys -- (enecir)
DRV - [2007-07-11 09:30:22 | 000,007,168 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\HpqRemHid.sys -- (HpqRemHid)
DRV - [2007-06-18 16:12:04 | 000,016,768 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HpqKbFiltr.sys -- (HpqKbFiltr)
DRV - [2007-02-08 18:44:43 | 000,083,320 | ---- | M] (Protection Technology (StarForce)) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sfvfs02.sys -- (sfvfs02)
DRV - [2006-11-02 08:30:56 | 000,429,056 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvm60x32.sys -- (NVENETFD)
DRV - [2006-07-10 17:19:58 | 000,027,032 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sfsync02.sys -- (sfsync02)
DRV - [2006-06-14 15:56:56 | 000,013,680 | ---- | M] (Protection Technology (StarForce)) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sfhlp02.sys -- (sfhlp02)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=pl_pl&c=83&bd=Pavilion&pf=cnnb
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://startsear.ch/?aff=1&cf=5c877a00-dbde-11e0-aef4-ffb535bafc98
IE - HKLM\..\SearchScopes,DefaultScope = {C00616CF-AFC0-4A22-8A72-306AF067ACC2}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKLM\..\SearchScopes\{C00616CF-AFC0-4A22-8A72-306AF067ACC2}: "URL" = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1602&query={searchTerms}&invocationType=tb50hpcnnbie7-pl-pl
IE - HKLM\..\SearchScopes\{C44477B6-DB24-4838-800C-EB76959CB7C4}: "URL" = http://startsear.ch/?aff=1&q={searchTerms}
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-304574289-274476457-33642466-1000\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www.google.pl/
IE - HKU\S-1-5-21-304574289-274476457-33642466-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=pl_pl&c=83&bd=Pavilion&pf=cnnb
IE - HKU\S-1-5-21-304574289-274476457-33642466-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://startsear.ch/?aff=1&cf=5c877a00-dbde-11e0-aef4-ffb535bafc98
IE - HKU\S-1-5-21-304574289-274476457-33642466-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 2
IE - HKU\S-1-5-21-304574289-274476457-33642466-1000\..\SearchScopes,bProtectorDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKU\S-1-5-21-304574289-274476457-33642466-1000\..\SearchScopes,DefaultScope = {F7AB5185-080C-4CC7-A5C0-8A87737C03A7}
IE - HKU\S-1-5-21-304574289-274476457-33642466-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKU\S-1-5-21-304574289-274476457-33642466-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=110824&tt=071012_17_4112_3&babsrc=SP_ss&mntrId=6fda951e000000000000000000000000
IE - HKU\S-1-5-21-304574289-274476457-33642466-1000\..\SearchScopes\{808FBA88-F618-4AFA-B9DD-6CA230505C3A}: "URL" = http://www.google.pl/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
IE - HKU\S-1-5-21-304574289-274476457-33642466-1000\..\SearchScopes\{C00616CF-AFC0-4A22-8A72-306AF067ACC2}: "URL" = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1602&query={searchTerms}&invocationType=tb50hpcnnbie7-pl-pl
IE - HKU\S-1-5-21-304574289-274476457-33642466-1000\..\SearchScopes\{C44477B6-DB24-4838-800C-EB76959CB7C4}: "URL" = http://startsear.ch/?aff=1&q={searchTerms}
IE - HKU\S-1-5-21-304574289-274476457-33642466-1000\..\SearchScopes\{F7AB5185-080C-4CC7-A5C0-8A87737C03A7}: "URL" = http://startsear.ch/?aff=1&src=sp&cf=5c877a00-dbde-11e0-aef4-ffb535bafc98&q={searchTerms}
IE - HKU\S-1-5-21-304574289-274476457-33642466-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.startup.homepage: "http://startsear.ch/?aff=1&cf=5c877a00-dbde-11e0-aef4-ffb535bafc98"
FF - prefs.js..keyword.URL: "http://startsear.ch/?aff=1&q="
FF - prefs.js..browser.search.defaultenginename: "Web Search"
FF - prefs.js..browser.search.selectedEngine: ""
FF - prefs.js..browser.search.order.1: "Web Search"
FF - prefs.js..browser.search.defaultenginename: "SweetIM Search"
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: ""
FF - prefs.js..browser.search.selectedEngine: "SweetIM Search"
FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: ""
FF - prefs.js..browser.search.defaulturl: ""
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@canon.com/EPPEX: C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.1: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1: C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.1.13: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.1.13: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.1.13: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.1.13: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=15.0.1.13: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\1\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\1\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.24\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-12-29 13:57:04 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.24\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-12-29 13:57:04 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{b64982b1-d112-42b5-b1e4-d3867c4533f8}: C:\ProgramData\Browser Manager\2.3.765.24\{16cdff19-861d-48e3-a751-d99a27784753}\FirefoxExtension [2012-10-08 11:54:12 | 000,000,000 | ---D | M]
 
[2010-10-29 18:52:09 | 000,000,000 | ---D | M] (No name found) -- C:\Users\1\AppData\Roaming\mozilla\Extensions
[2009-02-25 20:07:46 | 000,000,000 | ---D | M] (No name found) -- C:\Users\1\AppData\Roaming\mozilla\Firefox\extensions
[2009-02-25 20:07:46 | 000,000,000 | ---D | M] ("Ask Toolbar for Firefox") -- C:\Users\1\AppData\Roaming\mozilla\Firefox\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}
[2012-12-29 15:10:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\1\AppData\Roaming\mozilla\Firefox\Profiles\dhanzheh.default\extensions
[2012-02-21 16:52:02 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\1\AppData\Roaming\mozilla\Firefox\Profiles\dhanzheh.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2012-10-08 11:37:51 | 000,000,000 | ---D | M] (SweetPacks Toolbar for Firefox) -- C:\Users\1\AppData\Roaming\mozilla\Firefox\Profiles\dhanzheh.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}
[2012-10-08 11:54:12 | 000,002,546 | ---- | M] () -- C:\Users\1\AppData\Roaming\mozilla\firefox\profiles\dhanzheh.default\searchplugins\browsemngr.xml
[2012-03-27 21:18:45 | 000,000,792 | ---- | M] () -- C:\Users\1\AppData\Roaming\mozilla\firefox\profiles\dhanzheh.default\searchplugins\startsear.xml
[2012-10-18 18:12:31 | 000,003,983 | ---- | M] () -- C:\Users\1\AppData\Roaming\mozilla\firefox\profiles\dhanzheh.default\searchplugins\sweetim.xml
[2012-06-28 19:00:12 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2010-12-14 17:52:48 | 000,000,000 | ---D | M] (Skype extension) -- C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2011-04-08 12:07:21 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011-09-02 23:26:28 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2012-10-08 11:53:26 | 000,002,359 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml
[2011-09-02 23:26:28 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2011-09-02 23:26:28 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2011-09-02 23:26:28 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2011-09-02 23:26:28 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2011-09-02 23:26:28 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - homepage: http://search.babylon.com/?affID=110824&tt=071012_17_4112_3&babsrc=HP_ss&mntrId=6fda951e000000000000000000000000
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}&sugkey={google:suggestAPIKeyParameter}
CHR - homepage: http://search.babylon.com/?affID=110824&tt=071012_17_4112_3&babsrc=HP_ss&mntrId=6fda951e000000000000000000000000
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\1\AppData\Local\Google\Chrome\Application\23.0.1271.97\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\1\AppData\Local\Google\Chrome\Application\23.0.1271.97\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\1\AppData\Local\Google\Chrome\Application\23.0.1271.97\gcswf32.dll
CHR - plugin: Shockwave Flash (Disabled) = C:\Users\1\AppData\Local\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll
CHR - plugin: Java Deployment Toolkit 6.0.310.5 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U31 (Enabled) = C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll
CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit)  (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nppl3260.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nprpjplug.dll
CHR - plugin: RealPlayer(tm) HTML5VideoShim Plug-In (32-bit)  (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nprjplug.dll
CHR - plugin: StartSearch Video plug-in (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npvsharetvplg.dll
CHR - plugin: CANON iMAGE GATEWAY Album Plugin Utility (Enabled) = C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL
CHR - plugin: RealNetworks(tm) Chrome Background Extension Plug-In (32-bit)  (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll
CHR - plugin: Google Update (Enabled) = C:\Users\1\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\4.0.50917.0\npctrl.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - Extension: YouTube = C:\Users\1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_1\
CHR - Extension: Szukaj w Google = C:\Users\1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_1\
CHR - Extension: Settings Protector = C:\Users\1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgafcinpmmpklohkojmllohdhomoefph\1.0_0\
CHR - Extension: Gmail = C:\Users\1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
CHR - Extension: YouTube = C:\Users\1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_1\
CHR - Extension: Szukaj w Google = C:\Users\1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_1\
CHR - Extension: Settings Protector = C:\Users\1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgafcinpmmpklohkojmllohdhomoefph\1.0_0\
CHR - Extension: Gmail = C:\Users\1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
 
O1 HOSTS File: ([2006-09-18 22:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll File not found
O2 - BHO: (Canon Easy-WebPrint EX BHO) - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (IE5BarLauncherBHO Class) - {78F3A323-798E-4AEA-9A57-88F4B05FD5DD} - C:\Program Files\vShare.tv plugin\BarLcher.dll File not found
O2 - BHO: (AOL Toolbar BHO) - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\Pasek narzędzi AOL 5.0\aoltb.dll (AOL LLC)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - No CLSID value found.
O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\ProgramData\Gadu-Gadu 10\_userdata\ggbho.2.dll (GG Network S.A.)
O3 - HKLM\..\Toolbar: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O3 - HKLM\..\Toolbar: (VShareToolBar) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files\vShare.tv plugin\BarLcher.dll File not found
O3 - HKLM\..\Toolbar: (AOL Toolbar) - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\Pasek narzędzi AOL 5.0\aoltb.dll (AOL LLC)
O3 - HKU\S-1-5-21-304574289-274476457-33642466-1000\..\Toolbar\WebBrowser: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O3 - HKU\S-1-5-21-304574289-274476457-33642466-1000\..\Toolbar\WebBrowser: (VShareToolBar) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files\vShare.tv plugin\BarLcher.dll File not found
O3 - HKU\S-1-5-21-304574289-274476457-33642466-1000\..\Toolbar\WebBrowser: (AOL Toolbar) - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\Pasek narzędzi AOL 5.0\aoltb.dll (AOL LLC)
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe (Hewlett-Packard)
O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray.exe (IDT, Inc.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKLM..\RunOnce: [Malwarebytes Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O8 - Extra context menu item: &Wyszukiwarka na pasku narzędzi AOL - C:\ProgramData\AOL\ieToolbar\resources\pl-PL\local\search.html ()
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Wyślij obraz do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Wyślij stronę do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2iexp.dll ()
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Java Plug-in 10.5.1)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Java Plug-in 1.6.0_05)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Java Plug-in 10.5.1)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{53310B5C-4628-4F04-BF54-476EACAF8BCB}: DhcpNameServer = 192.168.1.20
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9186C365-4DB0-44A7-89BE-C2FD4433F49F}: NameServer = 89.108.195.20 89.108.202.20
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - AppInit_DLLs: (c:\progra~2\browse~1\23765~1.24\{16cdf~1\browse~1.dll) - c:\ProgramData\Browser Manager\2.3.765.24\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.dll ()
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\1\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O24 - Desktop BackupWallPaper: C:\Users\1\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006-09-18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2010-05-10 12:48:36 | 000,126,976 | R--- | M] () - F:\AutoRun.exe -- [ CDFS ]
O32 - AutoRun File - [2008-03-07 01:34:52 | 000,000,047 | R--- | M] () - F:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\{1ce08177-fc6c-11de-8a92-002186bd8184}\Shell - "" = AutoRun
O33 - MountPoints2\{1ce08177-fc6c-11de-8a92-002186bd8184}\Shell\AutoRun\command - "" = F:\Startme.exe
O33 - MountPoints2\{31e5021b-cde9-11dd-9f17-002186bd8184}\Shell - "" = AutoRun
O33 - MountPoints2\{31e5021b-cde9-11dd-9f17-002186bd8184}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2010-05-10 12:48:36 | 000,126,976 | R--- | M] ()
O33 - MountPoints2\{3363a2f2-c741-11e0-a5ca-00238b0d9d01}\Shell - "" = AutoRun
O33 - MountPoints2\{3363a2f2-c741-11e0-a5ca-00238b0d9d01}\Shell\AutoRun\command - "" = F:\Startme.exe
O33 - MountPoints2\{4c38e627-10b8-11e2-9f62-ef744d450ddb}\Shell - "" = AutoRun
O33 - MountPoints2\{4c38e627-10b8-11e2-9f62-ef744d450ddb}\Shell\AutoRun\command - "" = H:\Startme.exe
O33 - MountPoints2\{4f712994-0851-11e0-b88e-001e101fb45e}\Shell - "" = AutoRun
O33 - MountPoints2\{4f712994-0851-11e0-b88e-001e101fb45e}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2010-05-10 12:48:36 | 000,126,976 | R--- | M] ()
O33 - MountPoints2\{5635416d-0799-11e0-a5a1-002186bd8184}\Shell - "" = AutoRun
O33 - MountPoints2\{5635416d-0799-11e0-a5a1-002186bd8184}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2010-05-10 12:48:36 | 000,126,976 | R--- | M] ()
O33 - MountPoints2\{5635419a-0799-11e0-a5a1-001e101fb681}\Shell - "" = AutoRun
O33 - MountPoints2\{5635419a-0799-11e0-a5a1-001e101fb681}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2010-05-10 12:48:36 | 000,126,976 | R--- | M] ()
O33 - MountPoints2\{640ba71d-602b-11e0-b694-001e101f2b52}\Shell - "" = AutoRun
O33 - MountPoints2\{640ba71d-602b-11e0-b694-001e101f2b52}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2010-05-10 12:48:36 | 000,126,976 | R--- | M] ()
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2010-05-10 12:48:36 | 000,126,976 | R--- | M] ()
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012-12-29 15:08:35 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\1\Desktop\OTL.exe
[2012-12-29 14:01:45 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2012-12-29 12:10:48 | 000,000,000 | ---D | C] -- C:\ProgramData\WindowsSearch
[2012-12-29 11:39:14 | 000,040,776 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2012-12-29 11:39:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012-12-29 11:39:01 | 000,021,104 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2012-12-28 19:50:48 | 000,000,000 | ---D | C] -- C:\Users\1\Desktop\wigilia '12
[2012-12-28 19:40:51 | 000,000,000 | ---D | C] -- C:\Windows\Registration
[2012-12-28 16:23:34 | 000,000,000 | ---D | C] -- C:\Users\1\AppData\Roaming\Malwarebytes
[2012-12-28 16:22:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012-12-28 16:22:27 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[13 C:\Users\1\Desktop\*.tmp files -> C:\Users\1\Desktop\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012-12-29 15:40:31 | 000,116,791 | ---- | M] () -- C:\ProgramData\nvModes.dat
[2012-12-29 15:40:31 | 000,116,791 | ---- | M] () -- C:\ProgramData\nvModes.001
[2012-12-29 15:08:43 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\1\Desktop\OTL.exe
[2012-12-29 14:52:00 | 000,001,042 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-304574289-274476457-33642466-1000UA.job
[2012-12-29 14:18:38 | 000,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012-12-29 14:18:38 | 000,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012-12-29 11:39:14 | 000,040,776 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2012-12-29 11:39:05 | 000,000,906 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012-12-29 10:24:45 | 000,727,368 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2012-12-29 10:24:45 | 000,652,490 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012-12-29 10:24:45 | 000,151,150 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2012-12-29 10:24:45 | 000,125,492 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012-12-29 10:20:26 | 000,000,832 | ---- | M] () -- C:\Users\Public\Documents\hpqp.ini
[2012-12-29 10:18:26 | 000,000,354 | ---- | M] () -- C:\Windows\tasks\ReclaimerUpdateFiles_1.job
[2012-12-29 10:18:26 | 000,000,350 | ---- | M] () -- C:\Windows\tasks\ReclaimerUpdateXML_1.job
[2012-12-29 10:18:09 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012-12-29 10:18:01 | 3218,296,832 | -HS- | M] () -- C:\hiberfil.sys
[2012-12-28 20:35:37 | 000,004,956 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2012-12-28 20:09:51 | 000,166,912 | ---- | M] () -- C:\Users\1\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-12-28 19:46:19 | 000,000,410 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{2A2C67F8-D684-4219-BC18-B92379343545}.job
[2012-12-28 19:29:20 | 000,008,268 | ---- | M] () -- C:\Users\1\AppData\Local\d3d9caps.dat
[2012-12-28 17:45:53 | 001,018,594 | ---- | M] () -- C:\Users\1\Desktop\1356712925425.jpg
[2012-12-27 17:20:06 | 002,061,663 | ---- | M] () -- C:\Users\1\Desktop\Algebra liniowa z geometria analityczna - Skrypt Jerzego Toppa.pdf
[2012-12-27 17:16:11 | 000,649,138 | ---- | M] () -- C:\Users\1\Desktop\Algebra liniowa skrypt !!!.pdf
[2012-12-21 21:47:49 | 000,001,879 | ---- | M] () -- C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk
[2012-12-20 20:52:01 | 000,000,990 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-304574289-274476457-33642466-1000Core.job
[2012-12-17 19:56:31 | 000,002,022 | ---- | M] () -- C:\Users\1\Desktop\Google Chrome.lnk
[2012-12-14 16:49:28 | 000,021,104 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[13 C:\Users\1\Desktop\*.tmp files -> C:\Users\1\Desktop\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012-12-29 11:39:05 | 000,000,906 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012-12-28 19:41:14 | 000,000,354 | ---- | C] () -- C:\Windows\tasks\ReclaimerUpdateFiles_1.job
[2012-12-28 19:41:11 | 000,000,350 | ---- | C] () -- C:\Windows\tasks\ReclaimerUpdateXML_1.job
[2012-12-28 19:36:56 | 3218,296,832 | -HS- | C] () -- C:\hiberfil.sys
[2012-12-28 17:45:53 | 001,018,594 | ---- | C] () -- C:\Users\1\Desktop\1356712925425.jpg
[2012-12-27 17:20:00 | 002,061,663 | ---- | C] () -- C:\Users\1\Desktop\Algebra liniowa z geometria analityczna - Skrypt Jerzego Toppa.pdf
[2012-12-27 17:16:09 | 000,649,138 | ---- | C] () -- C:\Users\1\Desktop\Algebra liniowa skrypt !!!.pdf
[2012-06-01 15:33:00 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\Tempje5528.html
[2012-05-30 20:03:20 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempEo5696.html
[2012-05-22 16:58:38 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempId3052.html
[2012-05-22 16:58:38 | 000,002,089 | ---- | C] () -- C:\Users\1\AppData\Local\TemptY3052.html
[2012-05-20 19:55:30 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempHj6100.html
[2012-05-17 17:59:55 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempJo4084.html
[2012-05-16 18:59:22 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempqU6508.html
[2012-03-15 17:56:06 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempFo5748.html
[2012-03-15 17:56:06 | 000,002,089 | ---- | C] () -- C:\Users\1\AppData\Local\TempJk5748.html
[2012-02-26 11:16:12 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\Tempzo4244.html
[2012-02-26 11:16:12 | 000,002,089 | ---- | C] () -- C:\Users\1\AppData\Local\TempdT4244.html
[2012-01-17 16:32:42 | 000,000,266 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2011-12-16 17:33:12 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempgU4820.html
[2011-12-02 17:15:02 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\Tempcu4648.html
[2011-11-08 17:39:50 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempNN5944.html
[2011-11-08 17:39:50 | 000,002,089 | ---- | C] () -- C:\Users\1\AppData\Local\Tempnm5944.html
[2011-11-06 20:39:10 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempxQs536.html
[2011-11-06 20:39:10 | 000,002,089 | ---- | C] () -- C:\Users\1\AppData\Local\TempxlM536.html
[2011-11-03 10:35:51 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempNF2904.html
[2011-10-27 13:26:01 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempTF1352.html
[2011-10-18 10:34:11 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempqcR864.html
[2011-10-06 14:04:07 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempWC4860.html
[2011-10-03 11:46:56 | 000,001,454 | ---- | C] () -- C:\Users\1\.recently-used.xbel
[2011-07-31 19:36:32 | 000,000,174 | ---- | C] () -- C:\Users\1\AppData\Roaming\wklnhst.dat
[2011-07-27 17:02:33 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\Tempsa6036.html
[2011-07-27 17:02:33 | 000,002,089 | ---- | C] () -- C:\Users\1\AppData\Local\TempOE6036.html
[2011-07-25 17:57:56 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempSx4600.html
[2011-07-25 17:57:56 | 000,002,089 | ---- | C] () -- C:\Users\1\AppData\Local\Tempet4600.html
[2011-07-13 17:14:13 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempkJ3308.html
[2011-07-13 17:14:13 | 000,002,089 | ---- | C] () -- C:\Users\1\AppData\Local\TempjZ3308.html
[2011-07-06 19:01:33 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempUf2796.html
[2011-06-07 19:13:31 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempOq2304.html
[2011-05-24 19:24:53 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempxK4252.html
[2011-04-19 18:08:38 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempPN4776.html
[2011-04-12 18:53:28 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempSg5460.html
[2011-04-10 10:52:15 | 000,000,297 | ---- | C] () -- C:\Windows\SIERRA.INI
[2011-04-07 16:23:21 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TemppV2084.html
[2011-03-31 18:20:37 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TemptQ2352.html
[2011-03-29 18:30:21 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempZM4512.html
[2011-03-25 21:55:53 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\Tempav5592.html
[2011-03-24 19:03:50 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\Tempzg3864.html
[2011-03-24 19:03:50 | 000,002,089 | ---- | C] () -- C:\Users\1\AppData\Local\Tempor3864.html
[2011-03-23 19:22:49 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempoQ3092.html
[2011-03-22 22:01:43 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\Tempgnr344.html
[2011-03-18 10:55:39 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempWx4648.html
[2011-03-14 12:46:23 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempsG8000.html
[2011-03-07 18:24:33 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\Tempul4988.html
[2011-02-20 21:07:45 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempRy4680.html
[2011-02-08 21:36:06 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempDA4724.html
[2011-02-06 21:57:14 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempNO2792.html
[2011-01-24 16:57:35 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempVF4232.html
[2011-01-24 14:55:41 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempfI5712.html
[2011-01-23 20:25:32 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempUX4528.html
[2011-01-16 13:50:03 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\Tempkh3264.html
[2011-01-05 18:27:29 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempWL6092.html
[2011-01-04 16:05:53 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempmY5396.html
[2011-01-03 21:26:45 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempWQ4280.html
[2010-12-30 21:04:26 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempSH3928.html
[2010-12-30 19:51:11 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\Tempdt5052.html
[2010-12-30 11:58:08 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempXy4200.html
[2010-12-29 22:17:02 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\Tempfl3900.html
[2010-12-26 20:49:34 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TemptM4256.html
[2010-12-26 20:47:34 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempLm5516.html
[2010-12-21 21:25:55 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\Tempyq3136.html
[2010-12-16 10:18:44 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempVD5724.html
[2010-12-15 14:52:46 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempKy3760.html
[2010-12-15 14:52:46 | 000,002,089 | ---- | C] () -- C:\Users\1\AppData\Local\TempOd3760.html
[2010-12-14 17:57:42 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010-12-12 21:23:00 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempJk1828.html
[2010-12-12 21:23:00 | 000,002,089 | ---- | C] () -- C:\Users\1\AppData\Local\TempKk1828.html
[2010-11-29 19:49:56 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempDf6016.html
[2010-11-29 19:49:56 | 000,002,089 | ---- | C] () -- C:\Users\1\AppData\Local\TempIi6016.html
[2010-11-06 19:08:12 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempKB4408.html
[2010-11-06 19:08:12 | 000,002,089 | ---- | C] () -- C:\Users\1\AppData\Local\TempBA4408.html
[2010-10-29 18:51:05 | 008,327,349 | ---- | C] () -- C:\Program Files\Firefox_Setup_3.6.rar
[2010-10-06 07:23:15 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempIX2160.html
[2010-10-06 07:23:15 | 000,002,089 | ---- | C] () -- C:\Users\1\AppData\Local\Tempvl2160.html
[2010-07-18 14:50:17 | 000,002,432 | ---- | C] () -- C:\Users\1\AppData\Local\TempuC3840.html
[2010-07-18 14:50:17 | 000,002,089 | ---- | C] () -- C:\Users\1\AppData\Local\TempcL3840.html
[2010-01-14 18:11:47 | 000,008,268 | ---- | C] () -- C:\Users\1\AppData\Local\d3d9caps.dat
[2009-11-14 11:27:49 | 001,049,719 | ---- | C] () -- C:\Program Files\wrar361pl.exe
[2008-12-19 17:34:01 | 000,166,912 | ---- | C] () -- C:\Users\1\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008-09-27 00:54:43 | 000,116,791 | ---- | C] () -- C:\ProgramData\nvModes.001
[2008-09-27 00:49:56 | 000,116,791 | ---- | C] () -- C:\ProgramData\nvModes.dat
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2006-11-02 13:54:22 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2010-07-26 17:55:26 | 011,581,440 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009-03-03 05:36:24 | 000,615,424 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2008-01-21 03:24:03 | 000,347,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2009-10-04 14:42:58 | 000,000,000 | ---D | M] -- C:\Users\1\AppData\Roaming\Auslogics
[2012-10-08 11:52:59 | 000,000,000 | ---D | M] -- C:\Users\1\AppData\Roaming\Babylon
[2012-01-03 20:23:50 | 000,000,000 | ---D | M] -- C:\Users\1\AppData\Roaming\Canon
[2008-12-11 14:44:58 | 000,000,000 | ---D | M] -- C:\Users\1\AppData\Roaming\DigitalPersona
[2010-06-20 10:51:58 | 000,000,000 | ---D | M] -- C:\Users\1\AppData\Roaming\Gadu-Gadu 10
[2011-10-03 11:46:56 | 000,000,000 | ---D | M] -- C:\Users\1\AppData\Roaming\gtk-2.0
[2009-10-04 14:39:52 | 000,000,000 | ---D | M] -- C:\Users\1\AppData\Roaming\nCleaner
[2009-07-25 10:14:47 | 000,000,000 | ---D | M] -- C:\Users\1\AppData\Roaming\Panasonic
[2011-10-03 11:42:00 | 000,000,000 | ---D | M] -- C:\Users\1\AppData\Roaming\PhotoScape
[2011-07-31 19:36:33 | 000,000,000 | ---D | M] -- C:\Users\1\AppData\Roaming\Template
[2011-11-22 18:05:45 | 000,000,000 | ---D | M] -- C:\Users\1\AppData\Roaming\TheCompany
 
[color=#E56717]========== Purity Check ==========[/color]
 
 

< End of report >