OTL logfile created on: 1/15/2013 12:34:33 PM - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = D:\download Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000409 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2.97 Gb Total Physical Memory | 1.73 Gb Available Physical Memory | 58.50% Memory free 5.93 Gb Paging File | 4.59 Gb Available in Paging File | 77.41% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files Drive C: | 225.33 Gb Total Space | 159.81 Gb Free Space | 70.92% Space Free | Partition Type: NTFS Drive D: | 225.33 Gb Total Space | 177.61 Gb Free Space | 78.82% Space Free | Partition Type: NTFS Computer Name: ANNA-KOMPUTER | User Name: Anna | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Quick Scan Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2013/01/15 12:33:50 | 000,602,112 | ---- | M] (OldTimer Tools) -- D:\download\OTL.exe PRC - [2012/12/14 23:06:33 | 000,997,320 | ---- | M] () -- C:\Program Files\AVG Secure Search\vprot.exe PRC - [2012/12/13 23:16:40 | 000,711,112 | ---- | M] () -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\13.2.0\ToolbarUpdater.exe PRC - [2012/11/21 08:20:20 | 002,878,616 | ---- | M] (GamersFirst) -- C:\Users\Anna\AppData\Local\GamersFirst\LIVE!\Live.exe PRC - [2012/11/17 11:14:41 | 002,937,528 | ---- | M] () -- C:\Program Files\Pando Networks\Media Booster\PMB.exe PRC - [2012/09/19 15:50:47 | 000,233,472 | ---- | M] () -- C:\ProgramData\Premium\OptimizerPro\OptimizerPro.exe PRC - [2011/03/14 16:27:28 | 000,271,712 | ---- | M] () -- C:\ProgramData\DatacardService\HWDeviceService.exe PRC - [2011/03/14 16:27:28 | 000,236,384 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\ProgramData\DatacardService\DCSHelper.exe PRC - [2011/02/26 06:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2010/04/20 13:26:44 | 000,300,912 | ---- | M] () -- C:\Program Files\Samsung\Samsung Update Plus\SUPBackGround.exe PRC - [2009/11/04 05:11:48 | 000,835,072 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe PRC - [2009/10/26 12:53:14 | 000,091,136 | ---- | M] (SAMSUNG Electronics) -- C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe PRC - [2009/10/13 11:03:04 | 000,716,800 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe PRC - [2009/10/07 02:31:56 | 002,246,144 | ---- | M] (SEC) -- C:\Program Files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe PRC - [2009/07/14 02:14:42 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe PRC - [2009/06/03 12:59:02 | 000,103,720 | ---- | M] (CyberLink) -- C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe PRC - [2009/04/15 15:52:06 | 000,091,432 | ---- | M] (CyberLink Corp.) -- C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe PRC - [2008/01/15 12:10:28 | 000,042,065 | ---- | M] () -- C:\Users\Anna\AppData\Local\winlogon.exe PRC - [2008/01/15 12:10:28 | 000,042,065 | ---- | M] () -- C:\Users\Anna\AppData\Local\services.exe PRC - [2008/01/15 12:10:28 | 000,042,065 | ---- | M] () -- C:\Users\Anna\AppData\Local\lsass.exe ========== Modules (No Company Name) ========== MOD - [2013/01/08 01:06:22 | 000,460,392 | ---- | M] () -- C:\Users\Anna\AppData\Local\Google\Chrome\Application\24.0.1312.52\ppGoogleNaClPluginChrome.dll MOD - [2013/01/08 01:06:21 | 012,459,624 | ---- | M] () -- C:\Users\Anna\AppData\Local\Google\Chrome\Application\24.0.1312.52\PepperFlash\pepflashplayer.dll MOD - [2013/01/08 01:06:19 | 004,012,648 | ---- | M] () -- C:\Users\Anna\AppData\Local\Google\Chrome\Application\24.0.1312.52\pdf.dll MOD - [2013/01/08 01:05:29 | 000,598,120 | ---- | M] () -- C:\Users\Anna\AppData\Local\Google\Chrome\Application\24.0.1312.52\libglesv2.dll MOD - [2013/01/08 01:05:28 | 000,124,520 | ---- | M] () -- C:\Users\Anna\AppData\Local\Google\Chrome\Application\24.0.1312.52\libegl.dll MOD - [2013/01/08 01:05:25 | 001,553,000 | ---- | M] () -- C:\Users\Anna\AppData\Local\Google\Chrome\Application\24.0.1312.52\ffmpegsumo.dll MOD - [2012/12/14 23:06:33 | 000,997,320 | ---- | M] () -- C:\Program Files\AVG Secure Search\vprot.exe MOD - [2012/12/13 23:16:40 | 000,566,728 | ---- | M] () -- C:\Program Files\Common Files\AVG Secure Search\DNTInstaller\13.2.0\avgdttbx.dll MOD - [2012/12/13 23:16:40 | 000,134,600 | ---- | M] () -- C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\13.2.0\SiteSafety.dll MOD - [2012/11/17 11:14:41 | 002,937,528 | ---- | M] () -- C:\Program Files\Pando Networks\Media Booster\PMB.exe MOD - [2012/10/11 11:54:00 | 000,427,520 | ---- | M] () -- c:\Program Files\MocaFlix\sprotector.dll MOD - [2012/10/03 18:39:00 | 000,355,328 | ---- | M] () -- c:\Program Files\BrowseToSave\sprotector.dll MOD - [2012/04/26 23:38:30 | 020,758,016 | ---- | M] () -- C:\Users\Anna\AppData\Local\GamersFirst\LIVE!\libcef.dll MOD - [2010/04/20 13:26:44 | 000,300,912 | ---- | M] () -- C:\Program Files\Samsung\Samsung Update Plus\SUPBackGround.exe MOD - [2010/04/16 13:11:02 | 000,155,648 | ---- | M] () -- C:\Program Files\Samsung\Samsung Update Plus\HMXML.dll MOD - [2009/06/03 12:59:14 | 000,013,096 | ---- | M] () -- C:\Program Files\CyberLink\Power2Go\CLMLSvcPS.dll MOD - [2009/06/03 12:59:02 | 000,619,816 | ---- | M] () -- C:\Program Files\CyberLink\Power2Go\CLMediaLibrary.dll MOD - [2008/01/15 12:10:28 | 000,042,065 | ---- | M] () -- C:\Users\Anna\AppData\Local\winlogon.exe MOD - [2008/01/15 12:10:28 | 000,042,065 | ---- | M] () -- C:\Users\Anna\AppData\Local\services.exe MOD - [2008/01/15 12:10:28 | 000,042,065 | ---- | M] () -- C:\Users\Anna\AppData\Local\lsass.exe MOD - [2006/08/12 04:48:40 | 000,049,152 | ---- | M] () -- C:\Program Files\Samsung\Easy Display Manager\HookDllPS2.dll ========== Services (SafeList) ========== SRV - [2013/01/13 13:33:01 | 000,115,760 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2013/01/09 13:05:14 | 000,251,400 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2012/12/13 23:16:40 | 000,711,112 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\13.2.0\ToolbarUpdater.exe -- (vToolbarUpdater13.2.0) SRV - [2012/10/19 19:55:18 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc) SRV - [2012/10/19 16:14:08 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2011/03/14 16:27:28 | 000,271,712 | ---- | M] () [Auto | Running] -- C:\ProgramData\DatacardService\HWDeviceService.exe -- (HWDeviceService.exe) SRV - [2009/07/14 02:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc) SRV - [2009/07/14 02:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) ========== Driver Services (SafeList) ========== DRV - [2012/12/13 23:16:40 | 000,026,984 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgtpx86.sys -- (avgtp) DRV - [2011/02/25 17:02:26 | 000,090,368 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ew_jucdcacm.sys -- (huawei_cdcacm) DRV - [2011/01/30 17:19:00 | 000,073,216 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ew_jubusenum.sys -- (huawei_enumerator) DRV - [2011/01/30 17:19:00 | 000,064,384 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ew_jucdcecm.sys -- (huawei_cdcecm) DRV - [2011/01/30 17:19:00 | 000,026,624 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ew_juextctrl.sys -- (huawei_ext_ctrl) DRV - [2010/07/27 08:52:02 | 000,102,784 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ew_hwusbdev.sys -- (ew_hwusbdev) DRV - [2010/03/20 11:06:58 | 000,011,136 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ew_usbenumfilter.sys -- (ew_usbenumfilter) DRV - [2009/11/06 21:53:58 | 001,227,776 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr) DRV - [2009/11/06 05:07:10 | 009,923,624 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm) DRV - [2009/09/28 10:22:00 | 000,315,392 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\yk62x86.sys -- (yukonw7) DRV - [2009/07/14 00:51:11 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb) DRV - [2009/06/27 15:55:12 | 000,066,080 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvhda32v.sys -- (NVHDA) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.certified-toolbar.com?si=41460&tid=2937&bs=true&q= IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.certified-toolbar.com?si=41460&tid=2937&bs=true&q= IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://search.certified-toolbar.com?si=41460&tid=2937&bs=true&q= IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = http://search.certified-toolbar.com?si=41460&home=true&tid=2937 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://websearch.just-browse.info/ IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://search.certified-toolbar.com?si=41460&tid=2937&bs=true&q= IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Search Bar = http://search.certified-toolbar.com?si=41460&tid=2937&bs=true&q= IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = http://search.certified-toolbar.com?si=41460&tid=2937&bs=true&q= IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Default_Page_URL = http://search.certified-toolbar.com?si=41460&home=true&tid=2937 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = http://search.certified-toolbar.com?si=41460&home=true&tid=2937 IE - HKLM\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD22} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD22}: "URL" = http://dts.search-results.com/sr?src=ieb&appid=0&systemid=2&sr=0&q={searchTerms} IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.certified-toolbar.com?si=41460&bs=true&tid=2937&q={searchTerms} IE - HKLM\..\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}: "URL" = http://websearch.just-browse.info/?l=1&q={searchTerms} IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.certified-toolbar.com?si=41460&bs=true&tid=2937&q={searchTerms} IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.certified-toolbar.com?si=41460&tid=2937&bs=true&q= IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.certified-toolbar.com?si=41460&tid=2937&bs=true&q= IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://search.certified-toolbar.com?si=41460&tid=2937&bs=true&q= IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.facebook.com/home.php?ref=hp [binary data] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = http://search.certified-toolbar.com?si=41460&home=true&tid=2937 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://websearch.just-browse.info/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://search.certified-toolbar.com?si=41460&tid=2937&bs=true&q= IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Search Bar = http://search.certified-toolbar.com?si=41460&tid=2937&bs=true&q= IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = http://search.certified-toolbar.com?si=41460&tid=2937&bs=true&q= IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Start Default_Page_URL = http://search.certified-toolbar.com?si=41460&home=true&tid=2937 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = http://search.certified-toolbar.com?si=41460&home=true&tid=2937 IE - HKCU\..\SearchScopes,bProtectorDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} IE - HKCU\..\SearchScopes,DefaultScope = {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=114874&tt=151112_ccp1838_4612_7&babsrc=SP_ss&mntrId=2a936cbf000000000000582c80139263 IE - HKCU\..\SearchScopes\{64476FDD-9DF8-4A08-B603-42521A14A29C}: "URL" = http://search.softonic.com/INF00046/tb_v1?q={searchTerms}&SearchSource=4&cc=&r=106 IE - HKCU\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://search.certified-toolbar.com?si=41460&bs=true&tid=2937&q={searchTerms} IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.com/search?cid={F5D521DC-08A5-416C-8CB2-976C284601F6}&mid=e87d2e49e4464fec85241e6a793ce518-20f572c0ff2910cfb1f78ea8285112bf9578b499&lang=pl&ds=ik011&pr=&d=2012-12-13 23:16:44&v=13.2.0.4&sap=dsp&q={searchTerms} IE - HKCU\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD22}: "URL" = http://dts.search-results.com/sr?src=ieb&appid=0&systemid=2&sr=0&q={searchTerms} IE - HKCU\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.certified-toolbar.com?si=41460&bs=true&tid=2937&q={searchTerms} IE - HKCU\..\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}: "URL" = http://websearch.just-browse.info/?l=1&q={searchTerms} IE - HKCU\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.certified-toolbar.com?si=41460&bs=true&tid=592&q={searchTerms} IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..browser.search.defaultengine: "Web Search" FF - prefs.js..browser.search.defaultenginename: "WebSearch" FF - prefs.js..browser.search.defaultenginename,S: S", "WebSearch" FF - prefs.js..browser.search.defaultthis.engineName: "" FF - prefs.js..browser.search.defaulturl: "http://websearch.just-browse.info/?l=1&q=" FF - prefs.js..browser.search.order.1: "WebSearch" FF - prefs.js..browser.search.order.1,S: S", "WebSearch" FF - prefs.js..browser.search.selectedEngine: "WebSearch" FF - prefs.js..browser.search.selectedEngine,S: S", "WebSearch" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://websearch.just-browse.info/" FF - prefs.js..extensions.enabledAddons: ffxtlbra%40softonic.com:1.6.0 FF - prefs.js..extensions.enabledAddons: %7Bb9db16a4-6edc-47ec-a1f4-b86292ed211d%7D:4.9.13 FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:18.0 FF - prefs.js..keyword.URL: "http://websearch.just-browse.info/?l=1&q=" FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: "" FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: "" FF - prefs.js..browser.startup.homepage: "" FF - prefs.js..sweetim.toolbar.previous.keyword.URL: "" FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF32_11_5_502_146.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\windows\system32\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\13.2.0\\npsitesafety.dll () FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\windows\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.3: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.4: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Anna\AppData\Local\Google\Update\1.3.21.124\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Anna\AppData\Local\Google\Update\1.3.21.124\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@toolbar: C:\ProgramData\AVG Secure Search\FireFoxExt\13.2.0.5 [2012/12/14 23:06:40 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}: C:\Program Files\Common Files\DVDVideoSoft\plugins\ff\ [2012/12/19 16:19:45 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 18.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013/01/13 13:33:01 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 18.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/11/17 11:14:41 | 000,000,204 | ---- | M] () FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 18.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013/01/13 13:33:01 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 18.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/11/17 11:14:41 | 000,000,204 | ---- | M] () [2012/11/04 11:56:23 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Anna\AppData\Roaming\mozilla\Extensions [2013/01/12 17:31:09 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Anna\AppData\Roaming\mozilla\Firefox\Profiles\y32qdsds.default\extensions [2012/10/20 23:31:21 | 000,000,000 | ---D | M] (DownTango Launcher) -- C:\Users\Anna\AppData\Roaming\mozilla\Firefox\Profiles\y32qdsds.default\extensions\{890a3e16-521d-4d00-bdf9-e07218d09c8d} [2013/01/12 17:31:09 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Anna\AppData\Roaming\mozilla\Firefox\Profiles\y32qdsds.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2012/12/16 16:49:56 | 000,000,000 | ---D | M] (Browse2save) -- C:\Users\Anna\AppData\Roaming\mozilla\Firefox\Profiles\y32qdsds.default\extensions\50cb61513546b@50cb6151354a4.com [2013/01/11 17:18:39 | 000,000,000 | ---D | M] (Browse2save) -- C:\Users\Anna\AppData\Roaming\mozilla\Firefox\Profiles\y32qdsds.default\extensions\50e94e91a1d79@50e94e91a1db2.com [2012/12/12 23:32:39 | 000,000,000 | ---D | M] (softonic.com) -- C:\Users\Anna\AppData\Roaming\mozilla\Firefox\Profiles\y32qdsds.default\extensions\ffxtlbra@softonic.com [2012/11/18 14:11:24 | 000,002,551 | ---- | M] () -- C:\Users\Anna\AppData\Roaming\mozilla\firefox\profiles\y32qdsds.default\searchplugins\mngr.xml [2012/11/11 20:22:52 | 000,009,634 | ---- | M] () -- C:\Users\Anna\AppData\Roaming\mozilla\firefox\profiles\y32qdsds.default\searchplugins\my-web-search.xml [2012/11/04 11:43:50 | 000,002,511 | ---- | M] () -- C:\Users\Anna\AppData\Roaming\mozilla\firefox\profiles\y32qdsds.default\searchplugins\Search_Results.xml [2012/12/11 12:35:12 | 000,002,060 | ---- | M] () -- C:\Users\Anna\AppData\Roaming\mozilla\firefox\profiles\y32qdsds.default\searchplugins\softonic.xml [2012/10/20 21:12:22 | 000,003,978 | ---- | M] () -- C:\Users\Anna\AppData\Roaming\mozilla\firefox\profiles\y32qdsds.default\searchplugins\sweetim.xml [2012/11/04 10:40:36 | 000,003,269 | ---- | M] () -- C:\Users\Anna\AppData\Roaming\mozilla\firefox\profiles\y32qdsds.default\searchplugins\Web Search.xml [2013/01/06 10:54:36 | 000,000,556 | ---- | M] () -- C:\Users\Anna\AppData\Roaming\mozilla\firefox\profiles\y32qdsds.default\searchplugins\WebSearch.xml [2013/01/13 13:32:56 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2013/01/13 13:33:01 | 000,262,704 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2012/10/11 03:58:06 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2012/12/14 23:06:35 | 000,003,571 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\avg-secure-search.xml [2012/11/18 14:12:45 | 000,002,364 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml [2012/10/11 03:58:06 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2012/10/11 03:58:06 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2012/10/11 03:58:06 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2012/11/04 11:43:50 | 000,002,511 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\Search_Results.xml [2012/11/04 10:40:36 | 000,003,269 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\Web Search.xml [2012/10/11 03:58:06 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2012/10/11 03:58:06 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml ========== Chrome ========== CHR - homepage: http://google.pl/ CHR - Extension: No name found = C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.2.0.0_0\ CHR - Extension: No name found = C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\miipddolmnknmpiednnbijmeogpdgknp\1_0\ CHR - Extension: No name found = C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj\1.2.0.0_0\ CHR - Extension: No name found = C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.2.0.0_0\ CHR - Extension: No name found = C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\miipddolmnknmpiednnbijmeogpdgknp\1_0\ CHR - Extension: No name found = C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj\1.2.0.0_0\ O1 HOSTS File: ([2009/06/10 22:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O2 - BHO: (Browse2save) - {735E4DBC-FCF4-D601-7920-9F2BF3701397} - C:\ProgramData\Browse2save\50e94e91a1edb.dll () O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\13.2.0.5\AVG Secure Search_toolbar.dll () O2 - BHO: (DownTango Launcher) - {b52d0735-ec19-448a-abde-e01b5bd275d2} - C:\Users\Anna\AppData\Roaming\DownTangoLauncherToolbar\DownTangoLauncherToolbar.dll (Simplytech Ltd.) O2 - BHO: (Browse2save Class) - {CB811517-032C-BE15-5E42-49152D44C240} - C:\ProgramData\Browse2save\50cb61513560d.ocx () O2 - BHO: (Free Download Manager) - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (Softonic Helper Object) - {E87806B5-E908-45FD-AF5E-957D83E58E68} - C:\Program Files\Softonic\Softonic\1.6.7.4\bh\Softonic.dll (Softonic.com) O3 - HKLM\..\Toolbar: (Softonic Toolbar) - {5018CFD2-804D-4C99-9F81-25EAEA2769DE} - C:\Program Files\Softonic\Softonic\1.6.7.4\SoftonicTlbr.dll (Softonic.com) O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\13.2.0.5\AVG Secure Search_toolbar.dll () O3 - HKLM\..\Toolbar: (no name) - {9E131A93-EED7-4BEB-B015-A0ADB30B5646} - No CLSID value found. O3 - HKLM\..\Toolbar: (DownTango Launcher) - {b52d0735-ec19-448a-abde-e01b5bd275d2} - C:\Users\Anna\AppData\Roaming\DownTangoLauncherToolbar\DownTangoLauncherToolbar.dll (Simplytech Ltd.) O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found. O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O4 - HKLM..\Run: [APLangApp] C:\Program Files\AnyPC Client\APLangApp.exe (DoctorSoft) O4 - HKLM..\Run: [CLMLServer] C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe (CyberLink) O4 - HKLM..\Run: [NvCplDaemon] C:\windows\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [PDVD8LanguageShortcut] C:\Program Files\CyberLink\PowerDVD8\Language\Language.exe (CyberLink Corp.) O4 - HKLM..\Run: [RemoteControl8] C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe (CyberLink Corp.) O4 - HKLM..\Run: [ROC_roc_ssl_v12] C:\Program Files\AVG Secure Search\ROC_roc_ssl_v12.exe () O4 - HKLM..\Run: [UpdateLBPShortCut] C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM..\Run: [UpdateP2GoShortCut] C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM..\Run: [UpdatePDRShortCut] C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM..\Run: [UpdatePPShortCut] C:\Program Files\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM..\Run: [UpdatePSTShortCut] C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM..\Run: [vProt] C:\Program Files\AVG Secure Search\vprot.exe () O4 - HKCU..\Run: [Mobile Partner] C:\Program Files\Wi-Fi Modem\Wi-Fi Modem File not found O4 - HKCU..\Run: [Pando Media Booster] C:\Program Files\Pando Networks\Media Booster\PMB.exe () O4 - HKCU..\Run: [Tok-Cirrhatus] C:\Users\Anna\AppData\Local\smss.exe () O4 - Startup: C:\Users\Anna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Empty.pif () O4 - Startup: C:\Users\Anna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GamersFirst LIVE!.lnk = C:\Users\Anna\AppData\Local\GamersFirst\LIVE!\Live.exe (GamersFirst) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O8 - Extra context menu item: Free YouTube Download - C:\Users\Anna\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm () O8 - Extra context menu item: Pobierz plik wideo w FDM - C:\Program Files\Free Download Manager\dlfvideo.htm () O8 - Extra context menu item: Pobierz w FDM - C:\Program Files\Free Download Manager\dllink.htm () O8 - Extra context menu item: Pobierz wszystkie pliki w FDM - C:\Program Files\Free Download Manager\dlall.htm () O8 - Extra context menu item: Pobierz zaznaczone pliki w FDM - C:\Program Files\Free Download Manager\dlselected.htm () O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.21.99.95 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{42BEF7EB-13E5-4D60-BA22-572C7AC8F720}: DhcpNameServer = 62.21.99.95 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{442FB787-B184-4F19-B4B4-DED6569817AA}: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D5F058E3-80EA-40BF-9414-7D8C1337AA38}: DhcpNameServer = 192.168.1.1 192.168.1.1 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\13.2.0\ViProtocol.dll () O20 - AppInit_DLLs: (c:\progra~1\browse~1\sprote~1.dll) - c:\Program Files\BrowseToSave\sprotector.dll () O20 - AppInit_DLLs: (c:\progra~1\mocaflix\sprote~1.dll) - c:\Program Files\MocaFlix\sprotector.dll () O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009/06/10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{01564e30-2e14-11e2-9c0d-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{01564e30-2e14-11e2-9c0d-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{071f0ba8-2b56-11e2-b802-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{071f0ba8-2b56-11e2-b802-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{071f0bbc-2b56-11e2-b802-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{071f0bbc-2b56-11e2-b802-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{565bb29c-2723-11e2-85f0-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{565bb29c-2723-11e2-85f0-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{682a536f-2f4b-11e2-837a-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{682a536f-2f4b-11e2-837a-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{766bf200-29d2-11e2-b83d-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{766bf200-29d2-11e2-b83d-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{79df8cbc-2dc5-11e2-bec6-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{79df8cbc-2dc5-11e2-bec6-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{87208320-2658-11e2-b225-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{87208320-2658-11e2-b225-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{8e8eb74a-3eca-11e2-ae5a-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{8e8eb74a-3eca-11e2-ae5a-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{8e8eb76d-3eca-11e2-ae5a-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{8e8eb76d-3eca-11e2-ae5a-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{8e8eb783-3eca-11e2-ae5a-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{8e8eb783-3eca-11e2-ae5a-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{8eafdd94-3d3d-11e2-85ef-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{8eafdd94-3d3d-11e2-85ef-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{8f040b40-3148-11e2-b9bb-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{8f040b40-3148-11e2-b9bb-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{b11dcdf7-2350-11e2-ae59-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{b11dcdf7-2350-11e2-ae59-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{b11dce19-2350-11e2-ae59-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{b11dce19-2350-11e2-ae59-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{c378949a-34f2-11e2-a248-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{c378949a-34f2-11e2-a248-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{c5a7e27a-3d81-11e2-8577-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{c5a7e27a-3d81-11e2-8577-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{c5a7e2a3-3d81-11e2-8577-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{c5a7e2a3-3d81-11e2-8577-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{d9a5e873-1882-11e2-a70e-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{d9a5e873-1882-11e2-a70e-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{d9a5e879-1882-11e2-a70e-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{d9a5e879-1882-11e2-a70e-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{f8e672e4-38ca-11e2-912a-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{f8e672e4-38ca-11e2-912a-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{fa841d74-397d-11e2-a074-00245465f6f3}\Shell - "" = AutoRun O33 - MountPoints2\{fa841d74-397d-11e2-a074-00245465f6f3}\Shell\AutoRun\command - "" = F:\AutoRun.exe O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ========== Files/Folders - Created Within 30 Days ========== [2013/01/14 23:41:06 | 000,000,000 | ---D | C] -- C:\windows\System32\SPReview [2013/01/13 13:32:55 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox [2013/01/13 03:07:43 | 000,000,000 | ---D | C] -- C:\Users\Anna\.gstreamer-0.10 [2013/01/13 03:07:19 | 000,000,000 | ---D | C] -- C:\Users\Anna\AppData\Local\ChomikBox [2013/01/13 03:06:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Chomikuj.pl [2013/01/13 03:06:57 | 000,000,000 | ---D | C] -- C:\Program Files\ChomikBox [2013/01/11 18:40:43 | 000,000,000 | ---D | C] -- C:\Users\Anna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UltraStar [2013/01/11 18:40:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UltraStar [2013/01/10 06:45:11 | 000,000,000 | ---D | C] -- C:\Program Files\MSN Toolbar [2013/01/09 09:01:12 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Visual Studio [2013/01/09 08:55:10 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Visual Studio 8 [2013/01/09 01:31:23 | 000,000,000 | ---D | C] -- C:\windows\System32\EventProviders [2013/01/09 01:31:21 | 000,000,000 | ---D | C] -- C:\3821bc3cebde19daef [2013/01/09 01:29:44 | 000,000,000 | ---D | C] -- C:\windows\pl [2013/01/09 01:26:46 | 000,000,000 | ---D | C] -- C:\Program Files\Bing Bar Installer [2013/01/09 01:20:47 | 000,000,000 | ---D | C] -- C:\Users\Anna\AppData\Local\Windows Live [2013/01/06 10:54:47 | 000,000,000 | ---D | C] -- C:\ProgramData\WoW Worldwide Software LTD [2013/01/06 10:54:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Premium [2013/01/06 10:20:42 | 000,000,000 | ---D | C] -- C:\Users\Anna\Desktop\Zdjęcia [2013/01/04 16:38:55 | 000,000,000 | ---D | C] -- C:\Users\Anna\Videos [2012/12/29 23:47:57 | 000,000,000 | ---D | C] -- C:\Users\Anna\Desktop\TOM 37 MIASTO STRACHU [2012/12/20 19:55:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Video Converter [2012/12/20 19:55:00 | 000,000,000 | ---D | C] -- C:\Users\Anna\AppData\Roaming\FreeVideoConverter [2012/12/20 19:55:00 | 000,000,000 | ---D | C] -- C:\Program Files\Free Video Converter [2012/12/19 16:19:54 | 000,000,000 | ---D | C] -- C:\Users\Anna\AppData\Roaming\DVDVideoSoftIEHelpers [2012/12/19 16:19:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft [2012/12/19 16:19:37 | 000,000,000 | ---D | C] -- C:\Users\Anna\AppData\Roaming\DVDVideoSoft [2012/12/19 16:19:37 | 000,000,000 | ---D | C] -- C:\Program Files\DVDVideoSoft [2012/12/19 16:19:37 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DVDVideoSoft [2012/12/17 09:14:35 | 000,000,000 | ---D | C] -- C:\Users\Anna\Desktop\Do przegrania ========== Files - Modified Within 30 Days ========== [2013/01/15 12:37:09 | 000,014,736 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2013/01/15 12:37:09 | 000,014,736 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2013/01/15 12:35:56 | 000,012,393 | ---- | M] () -- C:\Users\Anna\AppData\Local\Update.10.Bron.Tok.bin [2013/01/15 12:29:58 | 000,000,404 | -H-- | M] () -- C:\windows\tasks\OptimizerProUpdaterTask{71A846ED-C1AB-4E72-A4F3-E51D59887BE7}.job [2013/01/15 12:29:51 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat [2013/01/15 12:29:45 | 2388,086,784 | -HS- | M] () -- C:\hiberfil.sys [2013/01/15 12:05:01 | 000,000,930 | ---- | M] () -- C:\windows\tasks\Adobe Flash Player Updater.job [2013/01/15 12:01:00 | 000,000,904 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-2789141661-186915839-826018185-1000UA.job [2013/01/14 14:01:04 | 000,000,852 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-2789141661-186915839-826018185-1000Core.job [2013/01/13 18:50:12 | 000,121,046 | ---- | M] () -- C:\Users\Anna\Desktop\307643_487053361332997_1153835274_n.jpg [2013/01/13 17:24:07 | 000,162,236 | ---- | M] () -- C:\Users\Anna\Desktop\16625_463730357019102_1695474520_n.jpg [2013/01/13 03:07:01 | 000,000,632 | ---- | M] () -- C:\Users\Public\Desktop\ChomikBox.lnk [2013/01/13 02:12:36 | 000,742,474 | ---- | M] () -- C:\windows\System32\perfh015.dat [2013/01/13 02:12:36 | 000,656,290 | ---- | M] () -- C:\windows\System32\perfh009.dat [2013/01/13 02:12:36 | 000,157,146 | ---- | M] () -- C:\windows\System32\perfc015.dat [2013/01/13 02:12:36 | 000,123,024 | ---- | M] () -- C:\windows\System32\perfc009.dat [2013/01/11 18:40:43 | 000,000,552 | ---- | M] () -- C:\Users\Anna\Desktop\UltraStar.lnk [2013/01/10 19:04:49 | 000,002,321 | ---- | M] () -- C:\Users\Anna\Desktop\Google Chrome.lnk [2013/01/10 06:42:46 | 000,430,280 | ---- | M] () -- C:\windows\System32\FNTCACHE.DAT [2013/01/09 01:20:16 | 000,000,118 | ---- | M] () -- C:\windows\System32\MRT.INI [2013/01/07 00:32:57 | 018,503,717 | ---- | M] () -- C:\Users\Anna\Desktop\Flower Dance ~ DJ Okawari Cover.mp4 [2012/12/30 23:07:35 | 000,000,655 | ---- | M] () -- C:\Users\Anna\Desktop\download — skrót.lnk [2012/12/26 08:29:22 | 019,324,236 | ---- | M] () -- C:\Users\Anna\Desktop\MusicVideo - Księżniczki bawić się chcą - Księżniczka i Piosenkarka - Barbie.mp4 [2012/12/23 11:17:56 | 303,133,021 | ---- | M] () -- C:\windows\MEMORY.DMP [2012/12/19 16:19:49 | 000,001,197 | ---- | M] () -- C:\Users\Anna\Desktop\DVDVideoSoft Free Studio.lnk [2012/12/18 12:35:00 | 006,402,048 | ---- | M] () -- C:\Users\Anna\Desktop\dj okawari - 02 - flower dance (feat. tabeyellow) - 192k.mp3 ========== Files Created - No Company Name ========== [2013/01/15 12:35:56 | 000,012,393 | ---- | C] () -- C:\Users\Anna\AppData\Local\Update.10.Bron.Tok.bin [2013/01/15 11:54:26 | 000,012,393 | ---- | C] () -- C:\Users\Anna\AppData\Local\Bron.tok.A10.em.bin [2013/01/13 17:18:10 | 000,162,236 | ---- | C] () -- C:\Users\Anna\Desktop\16625_463730357019102_1695474520_n.jpg [2013/01/13 17:15:44 | 000,121,046 | ---- | C] () -- C:\Users\Anna\Desktop\307643_487053361332997_1153835274_n.jpg [2013/01/13 03:07:01 | 000,000,632 | ---- | C] () -- C:\Users\Public\Desktop\ChomikBox.lnk [2013/01/11 18:40:43 | 000,000,552 | ---- | C] () -- C:\Users\Anna\Desktop\UltraStar.lnk [2013/01/09 01:29:03 | 000,001,251 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Movie Maker.lnk [2013/01/09 01:28:46 | 000,001,320 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Photo Gallery.lnk [2013/01/09 01:28:23 | 000,001,404 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk [2013/01/09 01:28:03 | 000,002,432 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk [2013/01/09 01:20:16 | 000,000,118 | ---- | C] () -- C:\windows\System32\MRT.INI [2013/01/07 00:32:40 | 018,503,717 | ---- | C] () -- C:\Users\Anna\Desktop\Flower Dance ~ DJ Okawari Cover.mp4 [2013/01/06 10:54:33 | 000,000,404 | -H-- | C] () -- C:\windows\tasks\OptimizerProUpdaterTask{71A846ED-C1AB-4E72-A4F3-E51D59887BE7}.job [2013/01/05 00:37:18 | 006,402,048 | ---- | C] () -- C:\Users\Anna\Desktop\dj okawari - 02 - flower dance (feat. tabeyellow) - 192k.mp3 [2012/12/30 23:07:35 | 000,000,655 | ---- | C] () -- C:\Users\Anna\Desktop\download — skrót.lnk [2012/12/26 08:29:10 | 019,324,236 | ---- | C] () -- C:\Users\Anna\Desktop\MusicVideo - Księżniczki bawić się chcą - Księżniczka i Piosenkarka - Barbie.mp4 [2012/12/25 14:49:00 | 000,001,197 | ---- | C] () -- C:\Users\Anna\Desktop\DVDVideoSoft Free Studio.lnk [2012/10/20 23:31:11 | 000,015,432 | ---- | C] () -- C:\windows\Launcher.exe [2012/10/17 21:21:44 | 000,002,560 | ---- | C] () -- C:\windows\_MSRSTRT.EXE [2010/02/28 13:18:54 | 000,131,368 | ---- | C] () -- C:\ProgramData\FullRemove.exe [2007/06/20 09:10:45 | 000,042,065 | ---- | C] () -- C:\Users\Anna\AppData\Local\winlogon.exe [2007/06/20 09:10:45 | 000,042,065 | ---- | C] () -- C:\Users\Anna\AppData\Local\smss.exe [2007/06/20 09:10:45 | 000,042,065 | ---- | C] () -- C:\Users\Anna\AppData\Local\services.exe [2007/06/20 09:10:45 | 000,042,065 | ---- | C] () -- C:\Users\Anna\AppData\Local\lsass.exe [2007/06/20 09:10:45 | 000,042,065 | ---- | C] () -- C:\Users\Anna\AppData\Local\inetinfo.exe [2007/06/20 09:10:45 | 000,042,065 | ---- | C] () -- C:\Users\Anna\AppData\Local\csrss.exe ========== ZeroAccess Check ========== [2009/07/14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2012/06/09 05:46:56 | 012,868,608 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2009/07/14 02:15:20 | 000,605,696 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = %systemroot%\system32\wbem\wbemess.dll -- [2009/07/14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both ========== LOP Check ========== [2012/11/14 00:33:05 | 000,000,000 | ---D | M] -- C:\Users\Anna\AppData\Roaming\Babylon [2012/10/20 23:31:18 | 000,000,000 | ---D | M] -- C:\Users\Anna\AppData\Roaming\DownTangoLauncherToolbar [2013/01/04 16:39:00 | 000,000,000 | ---D | M] -- C:\Users\Anna\AppData\Roaming\DVDVideoSoft [2012/12/19 16:19:54 | 000,000,000 | ---D | M] -- C:\Users\Anna\AppData\Roaming\DVDVideoSoftIEHelpers [2012/11/11 18:02:31 | 000,000,000 | ---D | M] -- C:\Users\Anna\AppData\Roaming\flightgear.org [2013/01/11 18:20:49 | 000,000,000 | ---D | M] -- C:\Users\Anna\AppData\Roaming\Free Download Manager [2013/01/15 11:19:45 | 000,000,000 | ---D | M] -- C:\Users\Anna\AppData\Roaming\FreeVideoConverter [2012/12/13 22:07:54 | 000,000,000 | ---D | M] -- C:\Users\Anna\AppData\Roaming\kompozer.net [2012/11/04 11:44:20 | 000,000,000 | ---D | M] -- C:\Users\Anna\AppData\Roaming\MusicNet [2012/12/13 23:04:14 | 000,000,000 | ---D | M] -- C:\Users\Anna\AppData\Roaming\Nvu [2012/10/19 21:41:17 | 000,000,000 | ---D | M] -- C:\Users\Anna\AppData\Roaming\Opera [2012/12/13 23:11:05 | 000,000,000 | ---D | M] -- C:\Users\Anna\AppData\Roaming\PerformerSoft [2012/12/13 23:20:59 | 000,000,000 | ---D | M] -- C:\Users\Anna\AppData\Roaming\PhotoFiltre [2012/12/13 22:46:28 | 000,000,000 | ---D | M] -- C:\Users\Anna\AppData\Roaming\PhotoFiltre 7 [2012/10/11 19:46:06 | 000,000,000 | ---D | M] -- C:\Users\Anna\AppData\Roaming\PlayFirst [2012/11/11 18:02:21 | 000,000,000 | ---D | M] -- C:\Users\Anna\AppData\Roaming\Subversion [2012/11/14 00:33:07 | 000,000,000 | ---D | M] -- C:\Users\Anna\AppData\Roaming\VideoConverterPackages ========== Purity Check ========== ========== Alternate Data Streams ========== @Alternate Data Stream - 145 bytes -> C:\ProgramData\Temp:E1F04E8D @Alternate Data Stream - 134 bytes -> C:\ProgramData\Temp:373E1720 @Alternate Data Stream - 130 bytes -> C:\ProgramData\Temp:A42A9F39 @Alternate Data Stream - 128 bytes -> C:\ProgramData\Temp:4CF61E54 @Alternate Data Stream - 124 bytes -> C:\ProgramData\Temp:ABE89FFE < End of report >