OTL logfile created on: 2013-04-06 17:25:18 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Administrator\Moje dokumenty Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1022,10 Mb Total Physical Memory | 459,81 Mb Available Physical Memory | 44,99% Memory free 2,40 Gb Paging File | 1,87 Gb Available in Paging File | 78,03% Paging File free Paging file location(s): C:\pagefile.sys 1536 3072 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 48,83 Gb Total Space | 36,89 Gb Free Space | 75,55% Space Free | Partition Type: NTFS Drive D: | 62,95 Gb Total Space | 62,80 Gb Free Space | 99,76% Space Free | Partition Type: NTFS Computer Name: ACER | User Name: Administrator | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 60 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2013-04-06 17:13:03 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Moje dokumenty\OTL.exe PRC - [2013-03-18 03:25:46 | 001,236,336 | ---- | M] (Lavasoft Limited) -- C:\Program Files\Ad-Aware Antivirus\AdAwareService.exe PRC - [2013-03-09 19:52:12 | 000,170,912 | ---- | M] (Oracle Corporation) -- C:\Program Files\Java\jre7\bin\jqs.exe PRC - [2013-03-08 17:22:17 | 000,917,400 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2013-03-07 01:32:44 | 004,767,304 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe PRC - [2013-03-07 01:32:44 | 000,045,248 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe PRC - [2008-04-15 15:00:00 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2006-06-23 22:59:02 | 000,602,112 | ---- | M] (Dritek System Inc.) -- C:\Program Files\Launch Manager\LManager.exe PRC - [2006-01-02 18:41:22 | 000,045,056 | ---- | M] (ATI Technologies Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2013-04-06 10:23:12 | 002,081,792 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\13040600\algo.dll MOD - [2013-03-08 17:22:14 | 003,069,848 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll MOD - [2013-01-28 17:41:02 | 000,237,568 | ---- | M] () -- c:\windows\assembly\gac\mscorlib.resources\1.0.5000.0_pl_b77a5c561934e089\mscorlib.resources.dll MOD - [2013-01-28 17:41:01 | 000,180,224 | ---- | M] () -- c:\windows\assembly\gac\system.windows.forms.resources\1.0.5000.0_pl_b77a5c561934e089\system.windows.forms.resources.dll MOD - [2013-01-27 19:18:12 | 003,391,488 | ---- | M] () -- c:\windows\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_2a2cbf92\mscorlib.dll MOD - [2013-01-27 19:18:07 | 000,843,776 | ---- | M] () -- c:\windows\assembly\nativeimages1_v1.1.4322\system.drawing\1.0.5000.0__b03f5f7f11d50a3a_7e7e53c2\system.drawing.dll MOD - [2013-01-27 19:17:58 | 002,117,632 | ---- | M] () -- c:\windows\assembly\nativeimages1_v1.1.4322\system.xml\1.0.5000.0__b77a5c561934e089_f00b7897\system.xml.dll MOD - [2013-01-27 19:17:51 | 003,035,136 | ---- | M] () -- c:\windows\assembly\nativeimages1_v1.1.4322\system.windows.forms\1.0.5000.0__b77a5c561934e089_c96539a2\system.windows.forms.dll MOD - [2013-01-27 19:17:40 | 001,966,080 | ---- | M] () -- c:\windows\assembly\nativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_3d6ac990\system.dll MOD - [2013-01-27 19:17:24 | 001,232,896 | ---- | M] () -- c:\windows\assembly\gac\system\1.0.5000.0__b77a5c561934e089\system.dll MOD - [2013-01-27 19:17:23 | 001,269,760 | ---- | M] () -- c:\windows\assembly\gac\system.web\1.0.5000.0__b03f5f7f11d50a3a\system.web.dll MOD - [2013-01-27 19:17:23 | 000,471,040 | ---- | M] () -- c:\windows\assembly\gac\system.drawing\1.0.5000.0__b03f5f7f11d50a3a\system.drawing.dll MOD - [2013-01-27 19:17:20 | 002,064,384 | ---- | M] () -- c:\windows\assembly\gac\system.windows.forms\1.0.5000.0__b77a5c561934e089\system.windows.forms.dll MOD - [2013-01-26 17:33:56 | 001,359,872 | ---- | M] () -- c:\windows\assembly\gac\system.xml\1.0.5000.0__b77a5c561934e089\system.xml.dll MOD - [2013-01-26 17:33:56 | 000,372,736 | ---- | M] () -- c:\windows\assembly\gac\system.management\1.0.5000.0__b03f5f7f11d50a3a\system.management.dll MOD - [2013-01-26 17:33:56 | 000,323,584 | ---- | M] () -- c:\windows\assembly\gac\system.runtime.remoting\1.0.5000.0__b77a5c561934e089\system.runtime.remoting.dll MOD - [2008-04-15 15:00:00 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll MOD - [2003-06-07 14:30:08 | 000,057,344 | ---- | M] () -- C:\Program Files\Launch Manager\PowerUtl.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ) SRV - [2013-03-18 03:25:46 | 001,236,336 | ---- | M] (Lavasoft Limited) [Auto | Running] -- C:\Program Files\Ad-Aware Antivirus\AdAwareService.exe -- (Ad-Aware Service) SRV - [2013-03-13 17:56:11 | 000,253,656 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2013-03-09 19:52:12 | 000,170,912 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\Program Files\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService) SRV - [2013-03-08 17:22:15 | 000,115,608 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2013-03-07 01:32:44 | 000,045,248 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus) SRV - [2013-02-28 20:25:34 | 000,161,384 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2012-09-20 05:39:12 | 003,677,000 | ---- | M] (GFI Software) [Auto | Stopped] -- C:\Program Files\Ad-Aware Antivirus\SBAMSvc.exe -- (SBAMSvc) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\UIUSYS.SYS -- (UIUSys) DRV - File not found [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\SBREDrv.sys -- (SBRE) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - [2013-04-02 20:40:13 | 000,013,560 | ---- | M] (GFI Software) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\gfibto.sys -- (gfibto) DRV - [2013-03-07 01:33:24 | 000,765,736 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx) DRV - [2013-03-07 01:33:24 | 000,368,176 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP) DRV - [2013-03-07 01:33:24 | 000,164,736 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\aswVmm.sys -- (aswVmm) DRV - [2013-03-07 01:33:24 | 000,062,376 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi) DRV - [2013-03-07 01:33:24 | 000,049,760 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (AswRdr) DRV - [2013-03-07 01:33:24 | 000,049,248 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\aswRvrt.sys -- (aswRvrt) DRV - [2013-03-07 01:33:23 | 000,066,336 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswMonFlt.sys -- (aswMonFlt) DRV - [2013-03-07 01:33:22 | 000,029,816 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk) DRV - [2012-08-28 21:56:26 | 000,013,616 | ---- | M] (Marvell Semiconductor Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\mvxxmm.sys -- (mvxxmm) DRV - [2012-08-28 21:56:26 | 000,005,632 | ---- | M] (Marvell Semiconductor Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\mv64xxmm.sys -- (mv64xxmm) DRV - [2012-08-28 21:56:24 | 000,013,616 | ---- | M] (Marvell Semiconductor Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\mv61xxmm.sys -- (mv61xxmm) DRV - [2012-08-28 19:01:20 | 000,018,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\irsir.sys -- (irsir) DRV - [2011-09-06 12:10:02 | 000,119,040 | ---- | M] (HID Global Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\cxbu0wdm.sys -- (cxbu0wdm) DRV - [2010-06-30 07:01:10 | 000,011,832 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\amdide.sys -- (amdide) DRV - [2007-09-20 22:26:48 | 001,123,328 | ---- | M] (Broadcom Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\BCMWL5.SYS -- (BCM43XX) DRV - [2007-08-28 20:04:04 | 000,116,264 | ---- | M] (Silicon Image, Inc) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\SI3112r.sys -- (Si3112r) DRV - [2007-08-28 20:04:04 | 000,019,240 | ---- | M] (Silicon Image, Inc) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\SiWinAcc.sys -- (SiFilter) DRV - [2007-04-12 12:46:16 | 000,016,288 | ---- | M] (Hewlett Packard) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hpfxbulk.sys -- (HPFXBULK) DRV - [2006-12-22 12:56:44 | 000,988,800 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_DPV.sys -- (HSF_DPV) DRV - [2006-12-22 12:56:00 | 000,209,664 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSFHWAZL.sys -- (HSFHWAZL) DRV - [2006-12-22 12:55:56 | 000,730,112 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf) DRV - [2006-07-02 00:32:26 | 000,043,520 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8) DRV - [2006-06-30 11:40:40 | 000,775,936 | ---- | M] (Bison Electronics. Inc. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\BisonCam.sys -- (Cam5603D) DRV - [2006-06-16 20:56:38 | 000,083,968 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtnicxp.sys -- (RTL8023xp) DRV - [2006-04-27 10:46:50 | 001,540,096 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag) DRV - [2006-01-17 11:21:52 | 000,328,061 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btaudio.sys -- (btaudio) DRV - [2006-01-17 11:19:46 | 000,023,271 | ---- | M] (Broadcom Corporation.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\btserial.sys -- (BTSERIAL) DRV - [2006-01-17 11:18:22 | 000,850,474 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL) DRV - [2006-01-17 11:15:36 | 000,030,459 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btport.sys -- (BTDriver) DRV - [2006-01-17 11:14:52 | 000,065,688 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB) DRV - [2006-01-17 11:11:56 | 000,148,900 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btwdndis.sys -- (BTWDNDIS) DRV - [2005-12-23 17:13:06 | 000,013,184 | ---- | M] (Dritek System Inc.) [Kernel | Auto | Running] -- C:\Program Files\Launch Manager\DPortIO.sys -- (DritekPortIO) DRV - [2004-12-09 15:54:12 | 000,046,592 | ---- | M] (SMSC) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\smcirda.sys -- (SMCIRDA) DRV - [2000-01-01 02:00:00 | 006,168,208 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) DRV - [2000-01-01 02:00:00 | 001,691,480 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt) DRV - [2000-01-01 02:00:00 | 001,395,800 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt) DRV - [2000-01-01 02:00:00 | 000,081,152 | ---- | M] (ENE Technology Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ESM7SK.sys -- (ESMCR) DRV - [2000-01-01 02:00:00 | 000,066,432 | ---- | M] (ENE Technology Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\EMS7SK.sys -- (EMSCR) DRV - [2000-01-01 02:00:00 | 000,046,080 | ---- | M] (ENE Technology Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ESD7SK.sys -- (ESDCR) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-606747145-1532298954-1417001333-500\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://securesearch.lavasoft.com/?source=f439e2c0&tbp=homepage&toolbarid=adawaretb&v=2_5&u=3FC09D3E67FD28CD1B1BB5515B2660ED IE - HKU\S-1-5-21-606747145-1532298954-1417001333-500\..\SearchScopes,DefaultScope = {654986EF-87A2-4027-BD0A-6BE5D76D121B} IE - HKU\S-1-5-21-606747145-1532298954-1417001333-500\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-21-606747145-1532298954-1417001333-500\..\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}: "URL" = http://lavasoft.blekko.com/ws/?source=f439e2c0&tbp=rbox&toolbarid=adawaretb&u=3FC09D3E67FD28CD1B1BB5515B2660ED&q={searchTerms} IE - HKU\S-1-5-21-606747145-1532298954-1417001333-500\..\SearchScopes\{654986EF-87A2-4027-BD0A-6BE5D76D121B}: "URL" = http://www.google.com/search?hl=pl&q={searchTerms} IE - HKU\S-1-5-21-606747145-1532298954-1417001333-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "http://www.google.pl/" FF - prefs.js..extensions.enabledAddons: wrc%40avast.com:8.0.1483 FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:19.0.2 FF - prefs.js..keyword.URL: "http://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q=" FF - prefs.js..network.proxy.type: 0 FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll () FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.17.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-03-14 17:10:36 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013-04-02 20:42:06 | 000,000,000 | ---D | M] [2013-01-26 20:15:30 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Extensions [2013-04-06 17:22:20 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\hoo1ug9p.default\extensions [2013-04-02 20:41:56 | 000,000,000 | ---D | M] (Lavasoft Search Plugin) -- C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\hoo1ug9p.default\extensions\jid1-yZwVFzbsyfMrqQ@jetpack [2013-03-08 17:21:50 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2013-03-14 17:10:36 | 000,000,000 | ---D | M] (avast! WebRep) -- C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF [2013-03-08 17:22:18 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2013-04-02 20:41:54 | 000,000,628 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\adawaretb.xml [2013-02-19 17:49:56 | 000,002,980 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2013-02-19 17:49:56 | 000,001,619 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2013-02-19 17:49:56 | 000,001,130 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2013-02-19 17:49:56 | 000,001,071 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2013-02-19 17:49:56 | 000,001,396 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2013-02-19 17:49:56 | 000,001,896 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2008-04-15 15:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O4 - HKLM..\Run: [Ad-Aware Antivirus] C:\Program Files\Ad-Aware Antivirus\AdAwareLauncher.exe (Lavasoft Limited) O4 - HKLM..\Run: [ATICCC] C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe () O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software) O4 - HKLM..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [LManager] C:\Program Files\Launch Manager\LManager.exe (Dritek System Inc.) O4 - HKLM..\Run: [SearchProtection] C:\Documents and Settings\All Users\Dane aplikacji\Search Protection\_run.bat File not found O4 - HKLM..\RunOnce: [Del875109] C:\WINDOWS\System32\cmd.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-606747145-1532298954-1417001333-500..\RunOnce: [Del875078] C:\WINDOWS\System32\cmd.exe (Microsoft Corporation) O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149 O7 - HKU\S-1-5-21-606747145-1532298954-1417001333-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: Wyślij do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm () O13 - gopher Prefix: missing O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab (MksSkanerOnline Class) O16 - DPF: {FFB3A759-98B1-446F-BDA9-909C6EB18CC7} http://utilities.pcpitstop.com/da2/PCPitStop2.cab (PCPitstop Exam) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A9083D3E-3F8B-4875-87D6-DB1C21C3DBB3}: DhcpNameServer = 192.168.0.1 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2013-01-26 17:48:39 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 60 Days ==========[/color] [2013-04-06 17:17:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\DealPly [2013-04-06 17:14:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Qtrax [2013-04-06 17:13:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Downloaded Installations [2013-04-06 17:13:05 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Moje dokumenty\OTL.exe [2013-04-02 20:55:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\LavasoftStatistics [2013-04-02 20:43:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Ad-Aware Antivirus [2013-04-02 20:42:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Ad-Aware Antivirus [2013-04-02 20:42:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Lavasoft [2013-04-02 20:42:33 | 000,000,000 | ---D | C] -- C:\Program Files\Ad-Aware Antivirus [2013-04-02 20:42:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Downloaded Installations [2013-04-02 20:41:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\SecureSearch [2013-04-02 20:40:14 | 000,044,424 | ---- | C] (GFI Software) -- C:\WINDOWS\System32\sbbd.exe [2013-04-02 20:40:14 | 000,013,560 | ---- | C] (GFI Software) -- C:\WINDOWS\System32\drivers\gfibto.sys [2013-04-02 20:40:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\Ad-Aware Antivirus [2013-03-30 19:03:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\Skype [2013-03-30 19:02:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Skype [2013-03-30 19:02:43 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype [2013-03-30 19:02:41 | 000,000,000 | R--D | C] -- C:\Program Files\Skype [2013-03-30 19:02:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Skype [2013-03-27 11:51:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\TS3Client [2013-03-27 11:50:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\TeamSpeak 3 Client [2013-03-27 11:50:14 | 000,000,000 | ---D | C] -- C:\Program Files\TeamSpeak 3 Client [2013-03-21 22:12:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\Minidump [2013-03-21 22:08:02 | 001,123,328 | ---- | C] (Broadcom Corp.) -- C:\WINDOWS\System32\bcmwl5.sys [2013-03-21 22:08:02 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\devIA64.exe [2013-03-21 22:08:01 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\devAMD64.exe [2013-03-21 22:08:01 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\devcon.exe [2013-03-21 22:07:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Broadcom [2013-03-21 22:06:46 | 000,000,000 | ---D | C] -- C:\Program Files\Belkin [2013-03-21 22:00:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Microsoft Mouse [2013-03-21 21:59:52 | 000,016,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsgXP_2k3.dll [2013-03-21 21:59:48 | 000,026,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spupdsvc.exe [2013-03-21 21:59:30 | 001,461,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wdfcoinstaller01009.dll [2013-03-21 21:59:03 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft IntelliPoint [2013-03-21 21:52:04 | 000,359,016 | ---- | C] (Realtek Semiconductor Crop.) -- C:\WINDOWS\vncutil.exe [2013-03-21 21:52:00 | 000,129,640 | ---- | C] (Realtek Semiconductor) -- C:\WINDOWS\RtkAudioService.exe [2013-03-21 21:52:00 | 000,067,728 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\RtkCoInstIIXP.dll [2013-03-21 21:52:00 | 000,011,368 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\RtkCoLDRXP.dll [2013-03-21 21:51:56 | 001,395,800 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\drivers\Monfilt.sys [2013-03-21 21:51:47 | 001,691,480 | ---- | C] (Creative) -- C:\WINDOWS\System32\drivers\Ambfilt.sys [2013-03-21 21:33:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Opera [2013-03-21 21:33:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\Opera [2013-03-21 21:32:21 | 000,000,000 | ---D | C] -- C:\Program Files\Opera [2013-03-19 19:54:40 | 000,012,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usb8023x.sys [2013-03-19 19:54:40 | 000,012,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usb8023.sys [2013-03-18 17:06:19 | 000,275,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mucltui.dll [2013-03-18 17:06:19 | 000,018,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mucltui.dll.mui [2013-03-17 20:23:54 | 000,000,000 | ---D | C] -- C:\Program Files\Google [2013-03-17 20:23:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google [2013-03-17 19:39:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Catalyst Control Center [2013-03-17 19:10:54 | 000,303,104 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\ATIDEMGR.dll [2013-03-17 18:57:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\SlimWare Utilities Inc [2013-03-17 18:56:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dokumenty\Downloaded Installers [2013-03-17 18:52:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Microsoft Silverlight [2013-03-17 18:51:51 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight [2013-03-17 18:44:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\DeviceDoctorSoftware [2013-03-17 18:43:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\appmgmt [2013-03-17 18:33:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\PCPitstop [2013-03-17 18:33:29 | 000,000,000 | ---D | C] -- C:\Program Files\PCPitstop [2013-03-17 18:22:42 | 000,000,000 | ---D | C] -- C:\Program Files\AMD [2013-03-17 15:34:10 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\{562E56B7-01AB-4CBC-8066-A04ACCDF387B} [2013-03-17 15:34:01 | 000,000,000 | ---D | C] -- C:\Program Files\SmartTweak Software [2013-03-17 15:34:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\SmartTweak Software [2013-03-17 15:32:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\PackageAware [2013-03-17 14:37:06 | 000,000,000 | ---D | C] -- C:\Program Files\Eusing Free Registry Cleaner [2013-03-14 17:10:41 | 000,066,336 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswMonFlt.sys [2013-03-13 17:06:11 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Administrator\Moje dokumenty\Folder wymiany interfejsu Bluetooth [2013-03-13 17:06:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Bluetooth Software [2013-03-12 22:41:55 | 000,000,000 | ---D | C] -- C:\Program Files\WIDCOMM [2013-03-10 15:14:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\FileZilla [2013-03-09 19:53:03 | 000,262,560 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javaws.exe [2013-03-09 19:53:03 | 000,143,872 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javacpl.cpl [2013-03-09 19:52:39 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javaw.exe [2013-03-09 19:52:39 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\java.exe [2013-03-09 19:52:39 | 000,094,112 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\WindowsAccessBridge.dll [2013-03-08 17:21:47 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox [2013-02-21 20:31:42 | 000,000,000 | ---D | C] -- C:\Program Files\Java [2013-02-20 19:58:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Identities [2013-02-20 19:40:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\OpenOffice.org [2013-02-20 19:35:54 | 000,000,000 | ---D | C] -- C:\Program Files\OpenOffice.org 3 [2013-02-13 14:09:58 | 000,759,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\vgx.dll [2013-02-05 20:33:31 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Administrator\GG dysk [2013-02-05 20:32:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\GG [2013-02-05 20:32:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\GG [2013-02-05 20:31:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\GG [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files - Modified Within 60 Days ==========[/color] [2013-04-06 17:13:03 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Moje dokumenty\OTL.exe [2013-04-06 17:09:13 | 000,640,072 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\OTL(19450).exe [2013-04-06 17:07:05 | 000,000,478 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{63DA5581-890C-4E0D-B29A-E2D7EE3EE873}.job [2013-04-06 17:04:52 | 000,000,316 | -H-- | M] () -- C:\WINDOWS\tasks\avast! Emergency Update.job [2013-04-06 17:03:33 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2013-04-06 16:55:00 | 000,000,930 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job [2013-04-05 17:25:46 | 000,002,267 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk [2013-04-05 17:22:21 | 000,002,184 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2013-04-02 20:56:24 | 000,000,960 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Antivirus Scheduled Scan.job [2013-04-02 20:40:13 | 000,044,424 | ---- | M] (GFI Software) -- C:\WINDOWS\System32\sbbd.exe [2013-04-02 20:40:13 | 000,013,560 | ---- | M] (GFI Software) -- C:\WINDOWS\System32\drivers\gfibto.sys [2013-03-27 11:50:46 | 000,000,837 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\TeamSpeak 3 Client.lnk [2013-03-22 20:37:54 | 000,000,600 | ---- | M] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\PUTTY.RND [2013-03-21 22:12:27 | 000,000,306 | ---- | M] () -- C:\WINDOWS\tasks\Microsoft_Hardware_Launch_IPoint_exe.job [2013-03-21 22:12:09 | 000,149,992 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2013-03-21 22:00:09 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_point32_01009.Wdf [2013-03-21 22:00:02 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf [2013-03-21 21:32:46 | 000,001,492 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Opera.lnk [2013-03-20 04:00:35 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2013-03-17 20:45:33 | 000,001,763 | ---- | M] () -- C:\WINDOWS\ATICIM.INI [2013-03-17 18:22:39 | 000,000,210 | RHS- | M] () -- C:\boot.ini [2013-03-14 17:10:41 | 000,002,596 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT [2013-03-13 17:56:09 | 000,693,976 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe [2013-03-13 17:56:08 | 000,073,432 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl [2013-03-09 19:52:15 | 000,094,112 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\WindowsAccessBridge.dll [2013-03-09 19:52:07 | 000,262,560 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javaws.exe [2013-03-09 19:52:06 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javaw.exe [2013-03-09 19:52:06 | 000,143,872 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javacpl.cpl [2013-03-09 19:52:05 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\java.exe [2013-03-09 19:52:01 | 000,861,088 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\npDeployJava1.dll [2013-03-09 19:52:01 | 000,782,240 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\deployJava1.dll [2013-03-07 17:17:20 | 000,029,256 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\LNAnsatt10343c(1).pdf [2013-03-07 01:33:24 | 000,765,736 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSnx.sys [2013-03-07 01:33:24 | 000,368,176 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSP.sys [2013-03-07 01:33:24 | 000,164,736 | ---- | M] () -- C:\WINDOWS\System32\drivers\aswVmm.sys [2013-03-07 01:33:24 | 000,062,376 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys [2013-03-07 01:33:24 | 000,049,760 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys [2013-03-07 01:33:24 | 000,049,248 | ---- | M] () -- C:\WINDOWS\System32\drivers\aswRvrt.sys [2013-03-07 01:33:23 | 000,066,336 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswMonFlt.sys [2013-03-07 01:33:22 | 000,029,816 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys [2013-03-07 01:32:51 | 000,041,664 | ---- | M] (AVAST Software) -- C:\WINDOWS\avastSS.scr [2013-03-07 01:32:42 | 000,228,600 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe [2013-03-01 04:26:40 | 006,012,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mshtml.dll [2013-02-21 20:30:52 | 000,564,990 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2013-02-21 20:30:51 | 000,501,716 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2013-02-21 20:30:51 | 000,109,292 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2013-02-21 20:30:51 | 000,087,344 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2013-02-20 20:02:11 | 000,014,115 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\Soknad.odt [2013-02-20 19:45:47 | 000,020,181 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\CV Mariusz Zimny.odt [2013-02-12 02:32:23 | 000,012,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usb8023x.sys [2013-02-12 02:32:23 | 000,012,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usb8023.sys [2013-02-12 02:32:23 | 000,012,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usb8023.sys [2013-02-07 18:10:54 | 000,029,249 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\LNAnsatt10343c.pdf [2013-02-06 02:43:22 | 011,112,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieframe.dll [2013-02-05 22:13:38 | 000,920,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wininet.dll [2013-02-05 22:13:37 | 001,215,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\urlmon.dll [2013-02-05 22:13:36 | 000,206,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\occache.dll [2013-02-05 22:13:36 | 000,105,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\url.dll [2013-02-05 22:13:36 | 000,105,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\url.dll [2013-02-05 22:13:35 | 000,611,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\mstime.dll [2013-02-05 22:13:35 | 000,611,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstime.dll [2013-02-05 22:13:34 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mshtmled.dll [2013-02-05 22:13:26 | 000,630,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\msfeeds.dll [2013-02-05 22:13:26 | 000,630,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeeds.dll [2013-02-05 22:13:26 | 000,055,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\msfeedsbs.dll [2013-02-05 22:13:26 | 000,055,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeedsbs.dll [2013-02-05 22:13:26 | 000,043,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\licmgr10.dll [2013-02-05 22:13:26 | 000,043,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\licmgr10.dll [2013-02-05 22:13:26 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\jsproxy.dll [2013-02-05 22:13:26 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jsproxy.dll [2013-02-05 22:13:25 | 001,469,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\inetcpl.cpl [2013-02-05 22:13:25 | 001,469,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetcpl.cpl [2013-02-05 22:13:25 | 000,522,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jsdbgui.dll [2013-02-05 22:13:24 | 002,005,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iertutil.dll [2013-02-05 22:13:22 | 000,184,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\iepeers.dll [2013-02-05 22:13:22 | 000,184,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iepeers.dll [2013-02-05 22:13:13 | 000,743,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iedvtool.dll [2013-02-05 22:13:11 | 000,387,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\iedkcs32.dll [2013-02-05 22:13:11 | 000,387,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iedkcs32.dll [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2013-04-06 17:09:11 | 000,640,072 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\OTL(19450).exe [2013-04-02 20:56:23 | 000,000,960 | ---- | C] () -- C:\WINDOWS\tasks\Ad-Aware Antivirus Scheduled Scan.job [2013-03-30 19:02:44 | 000,002,267 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk [2013-03-27 11:50:46 | 000,000,837 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\TeamSpeak 3 Client.lnk [2013-03-21 22:08:02 | 000,618,706 | ---- | C] () -- C:\WINDOWS\System32\bcmwl5.inf [2013-03-21 22:08:02 | 000,013,277 | ---- | C] () -- C:\WINDOWS\System32\bcm43xx.cat [2013-03-21 22:08:02 | 000,000,088 | ---- | C] () -- C:\WINDOWS\System32\4328_Update32D.BAT [2013-03-21 22:08:02 | 000,000,088 | ---- | C] () -- C:\WINDOWS\System32\4328_Update32C.BAT [2013-03-21 22:08:02 | 000,000,088 | ---- | C] () -- C:\WINDOWS\System32\4318_0312_Update32D.BAT [2013-03-21 22:08:02 | 000,000,088 | ---- | C] () -- C:\WINDOWS\System32\4318_0312_Update32C.BAT [2013-03-21 22:08:02 | 000,000,088 | ---- | C] () -- C:\WINDOWS\System32\4318_0311_Update32D.BAT [2013-03-21 22:08:02 | 000,000,088 | ---- | C] () -- C:\WINDOWS\System32\4318_0311_Update32C.BAT [2013-03-21 22:08:02 | 000,000,088 | ---- | C] () -- C:\WINDOWS\System32\4315_Update32D.BAT [2013-03-21 22:08:02 | 000,000,088 | ---- | C] () -- C:\WINDOWS\System32\4315_Update32C.BAT [2013-03-21 22:08:02 | 000,000,088 | ---- | C] () -- C:\WINDOWS\System32\4311_Update32D.BAT [2013-03-21 22:08:02 | 000,000,088 | ---- | C] () -- C:\WINDOWS\System32\4311_Update32C.BAT [2013-03-21 22:08:02 | 000,000,077 | ---- | C] () -- C:\WINDOWS\System32\4328_Remove32D.BAT [2013-03-21 22:08:02 | 000,000,077 | ---- | C] () -- C:\WINDOWS\System32\4328_Remove32C.BAT [2013-03-21 22:08:02 | 000,000,077 | ---- | C] () -- C:\WINDOWS\System32\4318_0312_Remove32D.BAT [2013-03-21 22:08:02 | 000,000,077 | ---- | C] () -- C:\WINDOWS\System32\4318_0312_Remove32C.BAT [2013-03-21 22:08:02 | 000,000,077 | ---- | C] () -- C:\WINDOWS\System32\4318_0311_Remove32D.BAT [2013-03-21 22:08:02 | 000,000,077 | ---- | C] () -- C:\WINDOWS\System32\4318_0311_Remove32C.BAT [2013-03-21 22:08:02 | 000,000,077 | ---- | C] () -- C:\WINDOWS\System32\4315_Remove32D.BAT [2013-03-21 22:08:02 | 000,000,077 | ---- | C] () -- C:\WINDOWS\System32\4315_Remove32C.BAT [2013-03-21 22:08:02 | 000,000,077 | ---- | C] () -- C:\WINDOWS\System32\4311_Remove32D.BAT [2013-03-21 22:08:02 | 000,000,077 | ---- | C] () -- C:\WINDOWS\System32\4311_Remove32C.BAT [2013-03-21 22:04:40 | 000,000,306 | ---- | C] () -- C:\WINDOWS\tasks\Microsoft_Hardware_Launch_IPoint_exe.job [2013-03-21 22:00:09 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_point32_01009.Wdf [2013-03-21 22:00:02 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf [2013-03-21 21:51:56 | 000,025,816 | ---- | C] () -- C:\WINDOWS\System32\drivers\RTAIODAT.DAT [2013-03-21 21:47:21 | 000,356,352 | ---- | C] () -- C:\WINDOWS\System32\EMCRI.dll [2013-03-21 21:32:46 | 000,001,498 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Opera.lnk [2013-03-21 21:32:44 | 000,001,492 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Opera.lnk [2013-03-17 20:45:33 | 000,001,763 | ---- | C] () -- C:\WINDOWS\ATICIM.INI [2013-03-17 19:10:57 | 000,002,096 | ---- | C] () -- C:\WINDOWS\System32\drivers\ativdkxx.vp [2013-03-17 19:10:53 | 002,515,656 | ---- | C] () -- C:\WINDOWS\System32\ativvaxx.dat [2013-03-17 19:10:53 | 000,014,932 | ---- | C] () -- C:\WINDOWS\System32\atioglgl.xml [2013-03-17 19:10:53 | 000,006,126 | ---- | C] () -- C:\WINDOWS\System32\atifglpf.xml [2013-03-14 17:10:41 | 000,164,736 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswVmm.sys [2013-03-14 17:10:41 | 000,049,248 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswRvrt.sys [2013-03-10 14:28:20 | 000,000,600 | ---- | C] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\PUTTY.RND [2013-03-07 17:17:19 | 000,029,256 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\LNAnsatt10343c(1).pdf [2013-02-20 19:57:17 | 000,014,115 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\Soknad.odt [2013-02-20 19:44:34 | 000,020,181 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\CV Mariusz Zimny.odt [2013-02-07 18:10:53 | 000,029,249 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\LNAnsatt10343c.pdf [2013-01-28 17:39:04 | 000,001,318 | ---- | C] () -- C:\WINDOWS\hpbvnstp.ini [2013-01-28 17:34:47 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\hppapr02.dll [2013-01-28 17:34:47 | 000,000,600 | ---- | C] () -- C:\WINDOWS\System32\hppapr02.dat [2013-01-28 17:24:23 | 000,134,704 | ---- | C] () -- C:\WINDOWS\hppins03.dat [2013-01-28 17:24:23 | 000,001,602 | ---- | C] () -- C:\WINDOWS\hppmdl03.dat [2013-01-27 00:03:21 | 000,000,048 | ---- | C] () -- C:\WINDOWS\System32\drivers\RtkHDAud.dat [2013-01-27 00:03:10 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe [2013-01-26 20:22:24 | 000,178,688 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2013-01-26 20:09:33 | 000,015,190 | ---- | C] () -- C:\WINDOWS\M2000Twn.ini [2013-01-26 18:53:57 | 000,000,138 | ---- | C] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [2013-01-26 18:31:03 | 000,356,352 | ---- | C] () -- C:\WINDOWS\EMCRI.dll [2013-01-26 18:30:01 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2013-01-26 18:29:10 | 000,149,992 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2013-01-26 18:25:46 | 000,000,008 | RHS- | C] () -- C:\WINDOWS\System32\Desktop_.ini [2013-01-26 18:11:17 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat [2013-01-26 18:10:36 | 000,564,990 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat [2013-01-26 18:10:36 | 000,501,716 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat [2013-01-26 18:10:36 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat [2013-01-26 18:10:36 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat [2013-01-26 18:10:36 | 000,109,292 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat [2013-01-26 18:10:36 | 000,087,344 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat [2013-01-26 18:10:36 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat [2013-01-26 18:10:36 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat [2013-01-26 18:10:23 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat [2013-01-26 18:10:19 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin [2013-01-26 18:09:57 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat [2013-01-26 18:07:51 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat [2013-01-26 18:07:48 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin [2013-01-26 18:06:29 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll [2013-01-26 18:05:30 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat [2013-01-26 18:04:44 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin [2013-01-26 17:49:12 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2013-01-26 17:33:26 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [color=#E56717]========== ZeroAccess Check ==========[/color] [2013-01-26 17:33:50 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shdocvw.dll -- [2008-04-15 15:00:00 | 001,499,136 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2012-08-28 18:53:40 | 000,473,600 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008-04-15 14:00:00 | 000,273,920 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [color=#E56717]========== LOP Check ==========[/color] [2013-04-03 16:50:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Ad-Aware Antivirus [2013-04-06 17:17:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\DealPly [2013-03-17 18:44:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\DeviceDoctorSoftware [2013-03-16 17:46:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\FileZilla [2013-02-09 15:52:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\GG [2013-02-20 19:40:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\OpenOffice.org [2013-03-21 21:33:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Opera [2013-04-02 20:41:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\SecureSearch [2013-03-27 16:50:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\TS3Client [2013-04-02 20:43:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Ad-Aware Antivirus [2013-01-26 23:59:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AVAST Software [2013-03-21 22:07:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Broadcom [2013-04-02 20:42:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Downloaded Installations [2013-02-05 20:32:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\GG [2013-03-17 18:34:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PCPitstop [2013-03-17 16:06:31 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{562E56B7-01AB-4CBC-8066-A04ACCDF387B} [color=#E56717]========== Purity Check ==========[/color] < End of report >