OTL logfile created on: 2013-01-17 21:58:16 - Run 9 OTL by OldTimer - Version 3.2.69.0 Folder = E:\Program Files Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.2180) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1,75 Gb Total Physical Memory | 1,22 Gb Available Physical Memory | 70,01% Memory free 3,60 Gb Paging File | 3,29 Gb Available in Paging File | 91,40% Paging File free Paging file location(s): E:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = E: | %SystemRoot% = E:\WINDOWS | %ProgramFiles% = E:\Program Files Drive C: | 224,61 Gb Total Space | 190,86 Gb Free Space | 84,97% Space Free | Partition Type: NTFS Drive E: | 241,14 Gb Total Space | 230,51 Gb Free Space | 95,59% Space Free | Partition Type: NTFS Computer Name: DOM | User Name: Krzyś | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-09-29 11:10:31 | 000,602,112 | ---- | M] (OldTimer Tools) -- E:\Program Files\OTL.exe PRC - [2012-08-30 21:49:51 | 000,161,768 | ---- | M] (Oracle Corporation) -- E:\Program Files\Java\jre7\bin\jqs.exe PRC - [2012-06-03 09:44:46 | 000,071,096 | ---- | M] () -- E:\Program Files\CDBurnerXP\NMSAccessU.exe PRC - [2009-05-12 22:12:36 | 002,440,632 | ---- | M] (Symantec Corporation) -- E:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe PRC - [2009-05-12 20:55:30 | 001,443,144 | ---- | M] (Symantec Corporation) -- E:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe PRC - [2009-05-12 20:55:28 | 001,803,592 | ---- | M] (Symantec Corporation) -- E:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe PRC - [2009-03-17 00:25:56 | 000,115,560 | ---- | M] (Symantec Corporation) -- E:\Program Files\Common Files\Symantec Shared\ccApp.exe PRC - [2009-03-17 00:25:36 | 000,108,392 | ---- | M] (Symantec Corporation) -- E:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe PRC - [2007-06-11 10:18:00 | 000,537,520 | ---- | M] ( ) -- E:\WINDOWS\system32\lxdjcoms.exe PRC - [2007-06-11 10:17:46 | 000,099,248 | ---- | M] (Lexmark International, Inc.) -- E:\WINDOWS\system32\spool\drivers\w32x86\3\lxdjserv.exe PRC - [2007-04-30 07:19:54 | 000,020,480 | ---- | M] () -- E:\Program Files\Lexmark 1400 Series\lxdjamon.exe PRC - [2007-03-30 17:07:00 | 000,132,656 | ---- | M] (Wacom Technology, Corp.) -- E:\WINDOWS\system32\WTablet\TabUserW.exe PRC - [2007-03-30 17:06:00 | 001,189,424 | ---- | M] (Wacom Technology, Corp.) -- E:\WINDOWS\system32\Tablet.exe PRC - [2004-08-03 23:44:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- E:\WINDOWS\explorer.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012-06-03 09:44:46 | 000,071,096 | ---- | M] () -- E:\Program Files\CDBurnerXP\NMSAccessU.exe MOD - [2011-04-09 14:41:09 | 001,011,712 | ---- | M] () -- E:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\eee9b48577689e92db5a7b5c5de98d9b\System.Configuration.ni.dll MOD - [2011-04-09 12:58:59 | 005,771,264 | ---- | M] () -- E:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\System.Xml.ni.dll MOD - [2011-04-09 12:58:53 | 013,193,216 | ---- | M] () -- E:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll MOD - [2011-04-09 12:58:41 | 001,667,072 | ---- | M] () -- E:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll MOD - [2011-04-09 12:57:41 | 008,265,728 | ---- | M] () -- E:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll MOD - [2011-04-09 12:57:35 | 011,722,752 | ---- | M] () -- E:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll MOD - [2011-04-09 12:55:58 | 000,311,296 | ---- | M] () -- E:\WINDOWS\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pl_b77a5c561934e089\mscorlib.resources.dll MOD - [2011-04-09 12:54:17 | 000,299,008 | ---- | M] () -- E:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll MOD - [2007-05-30 04:12:16 | 000,040,960 | ---- | M] () -- E:\Program Files\Lexmark 1400 Series\App4R.Monitor.Core.dll MOD - [2007-05-30 04:12:16 | 000,028,672 | ---- | M] () -- E:\Program Files\Lexmark 1400 Series\App4R.Monitor.Common.dll MOD - [2007-05-30 04:11:22 | 000,057,344 | ---- | M] () -- E:\Program Files\Lexmark 1400 Series\App4R.DevMons.MCMDevMon.dll MOD - [2007-04-30 07:20:26 | 000,011,776 | ---- | M] () -- E:\Program Files\Lexmark 1400 Series\App4R.DevMons.MCMDevMon.AutoPlayUtil.dll MOD - [2007-04-30 07:19:54 | 000,020,480 | ---- | M] () -- E:\Program Files\Lexmark 1400 Series\lxdjamon.exe MOD - [2007-04-30 07:19:52 | 000,020,480 | ---- | M] () -- E:\Program Files\Lexmark 1400 Series\App4R.DevMons.ScanDevMon.dll MOD - [2007-04-30 07:19:48 | 000,020,480 | ---- | M] () -- E:\Program Files\Lexmark 1400 Series\App4R.DevMons.NetworkCardDevMon.dll MOD - [2007-02-27 04:16:26 | 000,103,936 | ---- | M] () -- E:\WINDOWS\system32\spool\prtprocs\w32x86\lxdjdrpp.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV - [2013-01-10 21:49:49 | 000,115,760 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- E:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2012-08-30 21:49:51 | 000,161,768 | ---- | M] (Oracle Corporation) [Auto | Running] -- E:\Program Files\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService) SRV - [2012-06-03 09:44:46 | 000,071,096 | ---- | M] () [Auto | Running] -- E:\Program Files\CDBurnerXP\NMSAccessU.exe -- (NMSAccess) SRV - [2011-04-09 14:43:06 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- E:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2009-05-12 22:12:36 | 002,440,632 | ---- | M] (Symantec Corporation) [Auto | Running] -- E:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe -- (Symantec AntiVirus) SRV - [2009-05-12 20:55:28 | 001,803,592 | ---- | M] (Symantec Corporation) [Auto | Running] -- E:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe -- (SmcService) SRV - [2009-03-20 18:10:15 | 003,093,880 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- E:\Program Files\Symantec\LiveUpdate\LuComServer_3_3.EXE -- (LiveUpdate) SRV - [2009-03-17 00:25:36 | 000,108,392 | ---- | M] (Symantec Corporation) [Auto | Running] -- E:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccSetMgr) SRV - [2009-03-17 00:25:36 | 000,108,392 | ---- | M] (Symantec Corporation) [Auto | Running] -- E:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccEvtMgr) SRV - [2009-02-01 21:43:02 | 000,320,840 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- E:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE -- (SNAC) SRV - [2007-06-11 10:18:00 | 000,537,520 | ---- | M] ( ) [Auto | Running] -- E:\WINDOWS\system32\lxdjcoms.exe -- (lxdj_device) SRV - [2007-06-11 10:17:46 | 000,099,248 | ---- | M] () [Auto | Running] -- E:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxdjserv.exe -- (lxdjCATSCustConnectService) SRV - [2007-03-30 17:06:00 | 001,189,424 | ---- | M] (Wacom Technology, Corp.) [Auto | Running] -- E:\WINDOWS\system32\Tablet.exe -- (TabletService) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | Disabled | Stopped] -- E:\WINDOWS\System32\Drivers\sptd.sys -- (sptd) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - [2013-01-16 10:00:00 | 001,603,824 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- E:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20130117.003\NAVEX15.SYS -- (NAVEX15) DRV - [2013-01-16 10:00:00 | 000,093,296 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- E:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20130117.003\NAVENG.SYS -- (NAVENG) DRV - [2012-09-27 23:52:20 | 000,174,056 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- E:\WINDOWS\System32\drivers\WpsHelper.sys -- (WpsHelper) DRV - [2012-08-15 09:00:00 | 000,376,480 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- E:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl) DRV - [2012-08-15 09:00:00 | 000,106,656 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- E:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv) DRV - [2012-06-03 09:44:46 | 000,005,504 | ---- | M] () [File_System | Auto | Running] -- E:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen) DRV - [2011-04-09 12:20:54 | 000,123,952 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- E:\WINDOWS\System32\Drivers\SYMEVENT.SYS -- (SymEvent) DRV - [2009-05-12 20:58:06 | 000,091,976 | ---- | M] (Symantec Corporation) [Kernel | Disabled | Stopped] -- E:\WINDOWS\System32\Drivers\SysPlant.sys -- (SysPlant) DRV - [2009-05-12 20:56:32 | 000,042,312 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- E:\WINDOWS\System32\drivers\wpsdrvnt.sys -- (WPS) DRV - [2009-05-08 04:22:28 | 001,358,720 | R--- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- E:\WINDOWS\System32\drivers\viahduaa.sys -- (VIAHdAudAddService) DRV - [2009-03-04 13:07:52 | 000,319,920 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- E:\WINDOWS\System32\Drivers\SRTSPL.SYS -- (SRTSPL) DRV - [2009-03-04 13:07:52 | 000,280,112 | ---- | M] (Symantec Corporation) [File_System | System | Running] -- E:\WINDOWS\System32\Drivers\SRTSP.SYS -- (SRTSP) DRV - [2009-03-04 13:07:52 | 000,043,824 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- E:\WINDOWS\System32\Drivers\SRTSPX.SYS -- (SRTSPX) DRV - [2008-11-18 17:17:08 | 000,023,888 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- E:\WINDOWS\system32\drivers\COH_Mon.sys -- (COH_Mon) DRV - [2008-10-14 11:24:18 | 000,049,536 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- E:\WINDOWS\System32\DRIVERS\teefer2.sys -- (Teefer2) DRV - [2008-09-09 13:54:42 | 000,421,424 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- E:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys -- (SPBBCDrv) DRV - [2008-08-21 10:13:56 | 000,191,536 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- E:\WINDOWS\System32\Drivers\SYMTDI.SYS -- (SYMTDI) DRV - [2008-08-21 10:13:56 | 000,027,696 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- E:\WINDOWS\System32\Drivers\SYMREDRV.SYS -- (SYMREDRV) DRV - [2008-08-18 11:54:24 | 000,145,952 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- E:\WINDOWS\System32\DRIVERS\nvgts.sys -- (nvgts) DRV - [2008-03-25 04:48:08 | 000,022,016 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- E:\WINDOWS\System32\DRIVERS\nvnetbus.sys -- (nvnetbus) DRV - [2008-03-25 04:48:06 | 000,054,400 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- E:\WINDOWS\System32\DRIVERS\NVENETFD.sys -- (NVENETFD) DRV - [2008-02-14 07:12:00 | 001,389,056 | R--- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- E:\WINDOWS\system32\drivers\monfilt.sys -- (monfilt) DRV - [2007-02-16 10:12:00 | 000,011,312 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- E:\WINDOWS\System32\DRIVERS\wacommousefilter.sys -- (wacommousefilter) DRV - [2007-02-16 09:30:00 | 000,012,848 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- E:\WINDOWS\System32\DRIVERS\wacomvhid.sys -- (wacomvhid) DRV - [2007-02-15 15:11:00 | 000,011,440 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- E:\WINDOWS\System32\DRIVERS\WacomVKHid.sys -- (WacomVKHid) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\..\SearchScopes,DefaultScope = IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKCU\..\SearchScopes,DefaultScope = IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:18.0 FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: E:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: E:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: E:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2: E:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: e:\Program Files\Microsoft Silverlight\5.0.61118.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: E:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 18.0\extensions\\Components: E:\Program Files\Mozilla Firefox\components [2013-01-10 21:49:49 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 18.0\extensions\\Plugins: E:\Program Files\Mozilla Firefox\plugins [2013-01-17 17:36:09 | 000,000,000 | ---D | M] [2011-04-09 12:34:24 | 000,000,000 | ---D | M] (No name found) -- E:\Documents and Settings\Krzyś\Dane aplikacji\Mozilla\Extensions [2012-12-05 22:28:17 | 000,000,000 | ---D | M] (No name found) -- E:\Program Files\Mozilla Firefox\extensions [2013-01-10 21:49:49 | 000,262,704 | ---- | M] (Mozilla Foundation) -- E:\Program Files\mozilla firefox\components\browsercomps.dll [2011-09-16 11:57:06 | 000,189,088 | ---- | M] ( ) -- E:\Program Files\mozilla firefox\plugins\npVividasPlayer.dll [2012-09-06 03:57:09 | 000,002,767 | ---- | M] () -- E:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2012-09-06 03:57:10 | 000,001,406 | ---- | M] () -- E:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2012-09-06 03:57:10 | 000,000,858 | ---- | M] () -- E:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2012-09-06 03:57:10 | 000,001,183 | ---- | M] () -- E:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2012-09-06 03:57:09 | 000,001,683 | ---- | M] () -- E:\Program Files\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2001-10-26 18:45:16 | 000,000,742 | ---- | M]) - E:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - E:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O4 - HKLM..\Run: [BluetoothAuthenticationAgent] E:\WINDOWS\System32\bthprops.cpl (Microsoft Corporation) O4 - HKLM..\Run: [ccApp] E:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation) O4 - HKLM..\Run: [lxdjamon] E:\Program Files\Lexmark 1400 Series\lxdjamon.exe () O4 - HKLM..\Run: [NvCplDaemon] E:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] E:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] E:\WINDOWS\System32\nwiz.exe () O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://E:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 File not found O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - E:\Program Files\Bonjour\mdnsNSP.dll (Apple Computer, Inc.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.0.2.2 192.168.0.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{36D2CB52-F571-4FB1-87B5-E130B0178A60}: DhcpNameServer = 192.0.2.2 192.168.0.1 O20 - HKLM Winlogon: Shell - (Explorer.exe) - E:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (E:\WINDOWS\system32\userinit.exe) - E:\WINDOWS\System32\userinit.exe (Microsoft Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: E:\Documents and Settings\Krzyś\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: E:\Documents and Settings\Krzyś\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2011-04-09 11:49:24 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2013-01-17 21:47:45 | 000,000,000 | ---D | C] -- E:\Documents and Settings\Krzyś\Pulpit\Stare dane programu Firefox [2013-01-17 18:30:07 | 000,663,128 | ---- | C] (Duplex Secure Ltd.) -- E:\Program Files\SPTDinst-v183-x86.exe [2013-01-17 17:57:35 | 000,000,000 | ---D | C] -- E:\WINDOWS\System32\appmgmt [2013-01-01 16:41:45 | 000,000,000 | ---D | C] -- E:\Documents and Settings\Krzyś\Pulpit\Nowy folder [2013-01-01 15:59:58 | 000,000,000 | ---D | C] -- E:\Documents and Settings\Krzyś\Dane aplikacji\inkscape [2013-01-01 15:57:12 | 000,000,000 | ---D | C] -- E:\Program Files\Inkscape [2012-09-29 11:10:31 | 000,602,112 | ---- | C] (OldTimer Tools) -- E:\Program Files\OTL.exe [2012-09-29 11:10:06 | 000,693,265 | ---- | C] (Farbar) -- E:\Program Files\FSS.exe [2012-03-12 19:30:15 | 000,407,552 | ---- | C] (Embarcadero Technologies, Inc.) -- E:\Documents and Settings\Krzyś\midas.dll [1 E:\Documents and Settings\All Users\*.tmp files -> E:\Documents and Settings\All Users\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2013-01-17 21:57:06 | 000,212,641 | ---- | M] () -- E:\WINDOWS\System32\nvapps.xml [2013-01-17 21:56:13 | 000,002,048 | --S- | M] () -- E:\WINDOWS\bootstat.dat [2013-01-17 21:52:37 | 000,574,677 | ---- | M] () -- E:\Program Files\AdwCleaner.exe [2013-01-17 18:30:07 | 000,663,128 | ---- | M] (Duplex Secure Ltd.) -- E:\Program Files\SPTDinst-v183-x86.exe [2013-01-15 19:22:08 | 000,002,206 | ---- | M] () -- E:\WINDOWS\System32\wpa.dbl [2013-01-01 16:03:23 | 000,000,218 | ---- | M] () -- E:\Documents and Settings\Krzyś\.recently-used.xbel [2012-12-21 19:43:43 | 003,930,892 | ---- | M] () -- E:\Documents and Settings\Krzyś\Pulpit\książki_dla_mamy.zip [1 E:\Documents and Settings\All Users\*.tmp files -> E:\Documents and Settings\All Users\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2013-01-17 21:52:36 | 000,574,677 | ---- | C] () -- E:\Program Files\AdwCleaner.exe [2013-01-01 16:03:23 | 000,000,218 | ---- | C] () -- E:\Documents and Settings\Krzyś\.recently-used.xbel [2012-12-21 19:43:43 | 003,930,892 | ---- | C] () -- E:\Documents and Settings\Krzyś\Pulpit\książki_dla_mamy.zip [2012-09-29 11:30:29 | 000,302,592 | ---- | C] () -- E:\Program Files\28vp6kon.exe [2012-09-29 11:10:48 | 000,881,724 | ---- | C] () -- E:\Program Files\SecurityCheck.exe [2012-09-29 11:09:18 | 000,139,264 | ---- | C] () -- E:\Program Files\SystemLook.exe [2012-09-08 20:38:36 | 000,005,504 | ---- | C] () -- E:\WINDOWS\System32\drivers\StarOpen.sys [2012-08-30 21:54:37 | 000,000,017 | ---- | C] () -- E:\Documents and Settings\Krzyś\.javafx_ping_sent [2012-08-30 21:54:36 | 000,000,000 | ---- | C] () -- E:\Documents and Settings\Krzyś\.javafx_eula_accepted [2012-03-21 18:17:20 | 000,001,428 | ---- | C] () -- E:\Documents and Settings\All Users\lxdj [2011-08-12 16:11:44 | 000,256,000 | ---- | C] () -- E:\WINDOWS\PEV.exe [2011-08-12 16:11:44 | 000,208,896 | ---- | C] () -- E:\WINDOWS\MBR.exe [2011-08-12 16:11:44 | 000,098,816 | ---- | C] () -- E:\WINDOWS\sed.exe [2011-08-12 16:11:44 | 000,080,412 | ---- | C] () -- E:\WINDOWS\grep.exe [2011-08-12 16:11:44 | 000,068,096 | ---- | C] () -- E:\WINDOWS\zip.exe [2011-07-25 11:42:06 | 000,011,264 | ---- | C] () -- E:\Documents and Settings\Krzyś\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-06-23 21:25:43 | 000,000,032 | ---- | C] () -- E:\WINDOWS\CD-Start.INI [2011-04-09 13:45:25 | 000,000,421 | ---- | C] () -- E:\WINDOWS\ODBC.INI [2011-04-09 13:38:56 | 000,175,616 | ---- | C] () -- E:\WINDOWS\System32\unrar.dll [2011-04-09 13:38:55 | 000,000,038 | ---- | C] () -- E:\WINDOWS\avisplitter.ini [2011-04-09 13:38:54 | 000,631,808 | ---- | C] () -- E:\WINDOWS\System32\xvidcore.dll [2011-04-09 13:38:54 | 000,243,200 | ---- | C] () -- E:\WINDOWS\System32\xvidvfw.dll [2011-04-09 13:38:54 | 000,080,896 | ---- | C] () -- E:\WINDOWS\System32\ff_vfw.dll [2011-04-09 13:35:00 | 000,004,293 | ---- | C] () -- E:\WINDOWS\ODBCINST.INI [2011-04-09 13:34:05 | 001,535,104 | ---- | C] () -- E:\WINDOWS\System32\FNTCACHE.DAT [2011-04-09 12:55:23 | 000,064,200 | ---- | C] () -- E:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat [2011-04-09 12:52:42 | 000,040,960 | ---- | C] () -- E:\WINDOWS\System32\lxdjvs.dll [2011-04-09 12:52:41 | 000,348,160 | ---- | C] () -- E:\WINDOWS\System32\lxdjcoin.dll [2011-04-09 12:52:07 | 001,232,896 | ---- | C] ( ) -- E:\WINDOWS\System32\lxdjserv.dll [2011-04-09 12:52:07 | 000,999,424 | ---- | C] ( ) -- E:\WINDOWS\System32\lxdjusb1.dll [2011-04-09 12:52:07 | 000,413,696 | ---- | C] ( ) -- E:\WINDOWS\System32\lxdjinpa.dll [2011-04-09 12:52:07 | 000,397,312 | ---- | C] ( ) -- E:\WINDOWS\System32\lxdjiesc.dll [2011-04-09 12:52:07 | 000,323,584 | ---- | C] ( ) -- E:\WINDOWS\System32\lxdjhcp.dll [2011-04-09 12:52:07 | 000,286,720 | ---- | C] () -- E:\WINDOWS\System32\lxdjinst.dll [2011-04-09 12:52:06 | 000,700,416 | ---- | C] ( ) -- E:\WINDOWS\System32\lxdjhbn3.dll [2011-04-09 12:52:06 | 000,684,032 | ---- | C] ( ) -- E:\WINDOWS\System32\lxdjcomc.dll [2011-04-09 12:52:06 | 000,643,072 | ---- | C] ( ) -- E:\WINDOWS\System32\lxdjpmui.dll [2011-04-09 12:52:06 | 000,585,728 | ---- | C] ( ) -- E:\WINDOWS\System32\lxdjlmpm.dll [2011-04-09 12:52:06 | 000,537,520 | ---- | C] ( ) -- E:\WINDOWS\System32\lxdjcoms.exe [2011-04-09 12:52:06 | 000,425,984 | ---- | C] ( ) -- E:\WINDOWS\System32\lxdjcomm.dll [2011-04-09 12:52:06 | 000,394,160 | ---- | C] ( ) -- E:\WINDOWS\System32\lxdjcfg.exe [2011-04-09 12:52:06 | 000,385,968 | ---- | C] ( ) -- E:\WINDOWS\System32\lxdjih.exe [2011-04-09 12:52:06 | 000,208,896 | ---- | C] () -- E:\WINDOWS\System32\lxdjgrd.dll [2011-04-09 12:52:06 | 000,163,840 | ---- | C] ( ) -- E:\WINDOWS\System32\lxdjprox.dll [2011-04-09 12:52:06 | 000,094,208 | ---- | C] ( ) -- E:\WINDOWS\System32\lxdjpplc.dll [2011-04-09 12:34:21 | 000,000,000 | ---- | C] () -- E:\WINDOWS\nsreg.dat [2011-04-09 12:13:27 | 000,000,664 | ---- | C] () -- E:\WINDOWS\System32\d3d9caps.dat [2011-04-09 11:56:55 | 000,003,948 | R--- | C] () -- E:\WINDOWS\System32\drivers\nvphy.bin [2011-04-09 11:50:53 | 000,002,048 | --S- | C] () -- E:\WINDOWS\bootstat.dat [2011-04-09 11:46:53 | 000,021,856 | ---- | C] () -- E:\WINDOWS\System32\emptyregdb.dat [color=#E56717]========== ZeroAccess Check ==========[/color] [2011-04-09 12:54:09 | 000,000,227 | RHS- | M] () -- E:\WINDOWS\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shdocvw.dll -- [2004-08-03 23:44:10 | 001,483,264 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = E:\WINDOWS\system32\wbem\fastprox.dll -- [2004-08-03 23:43:58 | 000,472,064 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = E:\WINDOWS\system32\wbem\wbemess.dll -- [2004-08-03 23:44:14 | 000,273,920 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [color=#E56717]========== LOP Check ==========[/color] [2012-09-08 20:38:43 | 000,000,000 | ---D | M] -- E:\Documents and Settings\All Users\Dane aplikacji\Canneverbe Limited [2011-06-23 21:25:41 | 000,000,000 | ---D | M] -- E:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite [2011-04-09 13:09:39 | 000,000,000 | ---D | M] -- E:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10 [2012-09-08 20:38:43 | 000,000,000 | ---D | M] -- E:\Documents and Settings\Krzyś\Dane aplikacji\Canneverbe Limited [2011-06-23 21:43:24 | 000,000,000 | ---D | M] -- E:\Documents and Settings\Krzyś\Dane aplikacji\DAEMON Tools Lite [2011-04-10 11:22:38 | 000,000,000 | ---D | M] -- E:\Documents and Settings\Krzyś\Dane aplikacji\Foxit Software [2011-04-10 18:11:32 | 000,000,000 | ---D | M] -- E:\Documents and Settings\Krzyś\Dane aplikacji\Gadu-Gadu 10 [2013-01-01 15:59:58 | 000,000,000 | ---D | M] -- E:\Documents and Settings\Krzyś\Dane aplikacji\inkscape [color=#E56717]========== Purity Check ==========[/color] < End of report >