OTL logfile created on: 2011-02-14 18:03:49 - Run 8 OTL by OldTimer - Version 3.2.20.6 Folder = C:\Documents and Settings\Konrad\Desktop Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Poland | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 65,00% Memory free 4,00 Gb Paging File | 3,00 Gb Available in Paging File | 83,00% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 25,04 Gb Total Space | 5,33 Gb Free Space | 21,29% Space Free | Partition Type: NTFS Drive D: | 41,39 Gb Total Space | 15,78 Gb Free Space | 38,12% Space Free | Partition Type: NTFS Drive E: | 39,27 Gb Total Space | 10,87 Gb Free Space | 27,69% Space Free | Partition Type: NTFS Computer Name: WS-2 | User Name: Konrad | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-02-14 18:03:36 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Konrad\Desktop\OTL.exe PRC - [2011-02-12 23:44:51 | 000,943,472 | ---- | M] (Opera Software) -- C:\Program Files\Opera\opera.exe PRC - [2011-02-12 12:21:25 | 000,138,240 | RHS- | M] () -- C:\Documents and Settings\Konrad\raiilu.exe PRC - [2010-11-30 13:20:36 | 000,997,408 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\msseces.exe PRC - [2010-11-11 12:26:40 | 000,011,736 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe PRC - [2008-04-14 05:42:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2007-10-19 13:19:22 | 000,141,848 | ---- | M] (Logitech Inc.) -- C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe PRC - [2007-10-19 13:17:28 | 000,186,904 | ---- | M] (Logitech Inc.) -- C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe PRC - [2007-10-08 13:27:02 | 000,794,624 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Wireless\Bin\EvtEng.exe PRC - [2007-10-08 13:15:50 | 000,356,352 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Wireless\Bin\WLKEEPER.exe PRC - [2007-10-08 13:09:26 | 000,659,456 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe PRC - [2007-10-08 13:06:44 | 001,183,744 | ---- | M] (Intel Corporation ) -- C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe PRC - [2007-10-08 13:01:54 | 000,483,328 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe PRC - [2007-05-10 09:22:32 | 000,405,504 | ---- | M] (SigmaTel, Inc.) -- C:\Program Files\Sigmatel\C-Major Audio\WDM\stsystra.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2011-02-14 18:03:36 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Konrad\Desktop\OTL.exe MOD - [2010-08-23 17:12:02 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll MOD - [2007-10-19 13:19:10 | 000,109,080 | ---- | M] (Logitech Inc.) -- C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcInj.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Disabled | Stopped] -- -- (HidServ) SRV - File not found [Disabled | Stopped] -- -- (gupdate) Usługa Google Update (gupdate) SRV - [2010-11-11 12:26:40 | 000,011,736 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe -- (MsMpSvc) SRV - [2010-08-13 08:13:32 | 000,066,112 | ---- | M] (NOS Microsystems Ltd.) [On_Demand | Stopped] -- C:\Program Files\NOS\bin\getPlus_Helper_3004.dll -- (nosGetPlusHelper) getPlus(R) SRV - [2010-03-18 15:47:22 | 000,035,160 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe -- (aspnet_state) SRV - [2010-03-18 12:16:28 | 000,753,504 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe -- (WPFFontCache_v0400) SRV - [2010-03-18 12:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2010-03-18 12:16:28 | 000,124,240 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe -- (NetTcpPortSharing) SRV - [2008-04-07 09:17:30 | 000,430,592 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2007-10-19 13:21:16 | 000,141,848 | ---- | M] (Logitech Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe -- (LVSrvLauncher) SRV - [2007-10-19 13:19:22 | 000,141,848 | ---- | M] (Logitech Inc.) [Auto | Running] -- C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe -- (LVPrcSrv) SRV - [2007-10-19 13:17:28 | 000,186,904 | ---- | M] (Logitech Inc.) [Auto | Running] -- C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe -- (LVCOMSer) SRV - [2007-10-08 13:27:02 | 000,794,624 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Wireless\Bin\EvtEng.exe -- (EvtEng) Intel(R) SRV - [2007-10-08 13:15:50 | 000,356,352 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Wireless\Bin\WLKEEPER.exe -- (WLANKEEPER) Intel(R) SRV - [2007-10-08 13:06:44 | 001,183,744 | ---- | M] (Intel Corporation ) [Auto | Running] -- C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe -- (S24EventMonitor) Intel(R) SRV - [2007-10-08 13:01:54 | 000,483,328 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe -- (RegSrvc) Intel(R) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2011-02-14 17:18:06 | 000,028,752 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{56DEF162-62F7-4B06-9F48-BBD37929623F}\MpKsle1d8ab83.sys -- (MpKsle1d8ab83) DRV - [2010-06-16 12:21:35 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd) DRV - [2010-05-02 12:57:24 | 000,002,208 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nxsIO32.sys -- (nxsIO32) DRV - [2010-03-25 20:06:30 | 000,099,728 | ---- | M] (Sun Microsystems, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\VBoxNetAdp.sys -- (VBoxNetAdp) DRV - [2010-03-25 20:06:26 | 000,031,824 | ---- | M] (Sun Microsystems, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\VBoxUSB.sys -- (VBoxUSB) DRV - [2010-02-23 10:51:14 | 000,013,192 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\epmntdrv.sys -- (epmntdrv) DRV - [2010-02-23 10:51:14 | 000,008,456 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\EuGdiDrv.sys -- (EuGdiDrv) DRV - [2009-10-14 18:08:32 | 000,032,000 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\tap0901.sys -- (tap0901) DRV - [2009-03-31 09:39:36 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\FsUsbExDisk.Sys -- (FsUsbExDisk) DRV - [2008-04-14 00:15:14 | 000,060,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbaudio.sys -- (usbaudio) USB Audio Driver (WDM) DRV - [2008-04-13 22:06:06 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus) DRV - [2007-10-19 13:16:30 | 002,109,976 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Lvckap.sys -- (LVcKap) DRV - [2007-10-12 03:00:42 | 000,041,752 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LVUSBSta.sys -- (LVUSBSta) DRV - [2007-10-12 02:55:58 | 001,279,000 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LV302V32.SYS -- (PID_PEPI) Logitech QuickCam IM(PID_PEPI) DRV - [2007-10-12 02:55:58 | 000,013,848 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lv302af.sys -- (pepifilter) DRV - [2007-10-11 18:59:24 | 000,025,624 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LVPr2Mon.sys -- (LVPr2Mon) DRV - [2007-10-11 18:59:02 | 002,142,488 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LVMVdrv.sys -- (LVMVDrv) DRV - [2007-09-26 05:01:32 | 002,236,032 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NETw4x32.sys -- (NETw4x32) Sterownik karty Intel(R) DRV - [2007-09-17 15:53:26 | 000,021,632 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2007-08-27 10:10:36 | 000,012,288 | ---- | M] (Intel Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\s24trans.sys -- (s24trans) DRV - [2007-05-10 09:24:34 | 001,222,840 | ---- | M] (SigmaTel, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\sthda.sys -- (STHDA) DRV - [2006-09-24 14:28:46 | 000,005,248 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | Boot | Running] -- C:\WINDOWS\system32\speedfan.sys -- (speedfan) DRV - [2006-03-08 12:35:10 | 000,191,872 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SynTP.sys -- (SynTP) DRV - [2005-08-05 22:32:16 | 000,045,312 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\bcm4sbxp.sys -- (bcm4sbxp) DRV - [2005-07-22 09:02:12 | 001,035,008 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_DPV.sys -- (HSF_DPV) DRV - [2005-07-22 09:01:08 | 000,201,600 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSFHWAZL.sys -- (HSFHWAZL) DRV - [2005-07-22 09:01:00 | 000,717,952 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf) DRV - [1996-04-03 20:33:26 | 000,005,248 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\giveio.sys -- (giveio) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/?pc=AVBR IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKCU\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll (SweetIM Technologies Ltd.) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultenginename: "SweetIM Search" FF - prefs.js..browser.search.defaulturl: "" FF - prefs.js..browser.search.selectedEngine: "SweetIM Search" FF - prefs.js..browser.startup.homepage: "google.pl" FF - prefs.js..extensions.enabledItems: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1.6.2.90 FF - prefs.js..extensions.enabledItems: vshare@toolbar:1.0.0 FF - prefs.js..extensions.enabledItems: {c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}:3.6 FF - prefs.js..extensions.enabledItems: {EEE6C361-6118-11DC-9C72-001320C79847}:1.1.0.2 FF - prefs.js..keyword.URL: "http://search.sweetim.com/search.asp?src=2&q=" FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: "" FF - prefs.js..sweetim.toolbar.previous.browser.search.defaulturl: "" FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: "" FF - prefs.js..browser.startup.homepage: "" FF - prefs.js..sweetim.toolbar.previous.keyword.URL: "chrome://browser-region/locale/region.properties" FF - HKLM\software\mozilla\Firefox\extensions\\jqs@sun.com: C:\Program Files\Java\jre6\lib\deploy\jqs\ff FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-02-12 21:32:57 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-02-12 21:32:57 | 000,000,000 | ---D | M] [2010-08-08 11:08:41 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Konrad\Application Data\mozilla\Extensions [2010-04-30 18:54:36 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Konrad\Application Data\mozilla\Extensions\{92650c4d-4b8e-4d2a-b7eb-24ecf4f6b63a} [2011-02-12 22:18:39 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Konrad\Application Data\mozilla\Firefox\Profiles\1tiyvoie.default\extensions [2010-08-26 11:34:08 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Konrad\Application Data\mozilla\Firefox\Profiles\1tiyvoie.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010-11-11 22:18:30 | 000,000,000 | ---D | M] (Easy Youtube Video Downloader) -- C:\Documents and Settings\Konrad\Application Data\mozilla\Firefox\Profiles\1tiyvoie.default\extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b} [2010-08-30 15:30:04 | 000,000,000 | ---D | M] (Adobe DLM (powered by getPlus(R))) -- C:\Documents and Settings\Konrad\Application Data\mozilla\Firefox\Profiles\1tiyvoie.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7} [2011-01-17 15:44:48 | 000,000,000 | ---D | M] (SweetIM Toolbar for Firefox) -- C:\Documents and Settings\Konrad\Application Data\mozilla\Firefox\Profiles\1tiyvoie.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847} [2011-02-13 21:36:32 | 000,000,000 | ---D | M] (vShare Plugin) -- C:\Documents and Settings\Konrad\Application Data\mozilla\Firefox\Profiles\1tiyvoie.default\extensions\vshare@toolbar [2010-04-30 18:54:36 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Konrad\Application Data\mozilla\SeaMonkey\Profiles\4qamp3l7.default\extensions [2011-01-17 15:44:44 | 000,003,915 | ---- | M] () -- C:\Documents and Settings\Konrad\Application Data\Mozilla\Firefox\Profiles\1tiyvoie.default\searchplugins\sweetim.xml [2010-06-13 16:36:30 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2011-01-25 14:11:35 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml [2011-01-25 14:11:35 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml [2011-01-25 14:11:35 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml [2011-01-25 14:11:35 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml [2011-01-25 14:11:35 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml [2011-01-25 14:11:35 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2010-06-02 14:56:16 | 000,000,734 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (vShare Plugin) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files\vShare\vshare_toolbar.dll () O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - No CLSID value found. O2 - BHO: (no name) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - No CLSID value found. O2 - BHO: (SweetIM Toolbar Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O3 - HKLM\..\Toolbar: (vShare Plugin) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files\vShare\vshare_toolbar.dll () O3 - HKLM\..\Toolbar: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O3 - HKCU\..\Toolbar\WebBrowser: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O4 - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation) O4 - HKLM..\Run: [SigmatelSysTrayApp] C:\Program Files\Sigmatel\C-Major Audio\WDM\stsystra.exe (SigmaTel, Inc.) O4 - HKCU..\Run: [raiilu] C:\Documents and Settings\Konrad\raiilu.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallVisualStyle = C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles (Microsoft) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallTheme = C:\WINDOWS\Resources\Themes\Royale.theme () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoInternetOpenWith = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - File not found O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - File not found O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Reg Error: Key error.) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 0.0.0.0 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\vsharechrome {3F3A4B8A-86FC-43A4-BB00-6D7EBE9D4484} - C:\Program Files\vShare\vshare_toolbar.dll () O20 - AppInit_DLLs: (? ??d) - File not found O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\avldr: DllName - Reg Error: Value error. - Reg Error: Value error. File not found O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation) O24 - Desktop WallPaper: C:\Documents and Settings\Konrad\Local Settings\Application Data\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Konrad\Local Settings\Application Data\Microsoft\Wallpaper1.bmp O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-12-21 00:52:48 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\D\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL poradnik\index.html O34 - HKLM BootExecute: (autocheck autochk *) - File not found O34 - HKLM BootExecute: (MACHINE BootExecut) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011-02-14 18:03:32 | 000,602,624 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Konrad\Desktop\OTL.exe [2011-02-13 21:36:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Konrad\Application Data\vShare [2011-02-13 21:36:21 | 000,000,000 | ---D | C] -- C:\Program Files\vShare [2011-02-12 23:44:50 | 000,000,000 | ---D | C] -- C:\Program Files\Opera [2011-02-12 21:37:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Konrad\Start Menu\Programs\Google Chrome [2011-02-12 10:17:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\PDFCreator [2011-02-12 10:17:13 | 001,071,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSCOMCTL.OCX [2011-02-12 10:17:13 | 000,662,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSCOMCT2.OCX [2011-02-12 10:17:13 | 000,137,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSMAPI32.OCX [2011-02-12 10:17:09 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSMPIDE.DLL [2011-02-12 10:17:09 | 000,000,000 | ---D | C] -- C:\Program Files\PDFCreator [2011-02-07 17:35:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Konrad\Desktop\CXMB [2011-02-07 17:14:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Konrad\Desktop\PSP Firmware 6.35 [2011-02-06 14:51:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Konrad\Desktop\src [2011-02-06 14:51:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Konrad\Desktop\bin [2011-02-05 12:30:45 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Konrad\Recent [2011-01-26 07:36:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Konrad\My Documents\Pobieranie [2011-01-25 15:26:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Konrad\My Documents\GTA San Andreas User Files [2011-01-23 21:08:38 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Konrad\My Documents\My Music [2011-01-23 19:02:46 | 000,000,000 | ---D | C] -- C:\WINDOWS\OY7GPY7GPY7GPY7G [2011-01-21 15:44:37 | 000,439,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shimgvw.dll [2011-01-20 20:26:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Konrad\Start Menu\Programs\Revo Uninstaller [2011-01-17 15:44:27 | 000,000,000 | ---D | C] -- C:\Program Files\SweetIM [2011-01-17 15:44:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\SweetIM [2011-01-15 21:17:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Konrad\My Documents\Downloads [3 C:\Documents and Settings\All Users\Application Data\*.tmp files -> C:\Documents and Settings\All Users\Application Data\*.tmp -> ] [2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011-02-14 18:03:36 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Konrad\Desktop\OTL.exe [2011-02-14 17:21:00 | 000,001,132 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-436374069-1454471165-682003330-1003UA.job [2011-02-14 17:11:01 | 000,000,424 | -H-- | M] () -- C:\WINDOWS\tasks\MP Scheduled Scan.job [2011-02-14 17:04:14 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2011-02-14 17:04:12 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2011-02-13 21:36:04 | 001,111,120 | ---- | M] () -- C:\Documents and Settings\Konrad\Desktop\vshare-plugin.exe [2011-02-12 23:44:56 | 000,001,510 | ---- | M] () -- C:\Documents and Settings\Konrad\Application Data\Microsoft\Internet Explorer\Quick Launch\Opera.lnk [2011-02-12 23:44:56 | 000,001,492 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Opera.lnk [2011-02-12 21:37:30 | 000,002,293 | ---- | M] () -- C:\Documents and Settings\Konrad\Desktop\Google Chrome.lnk [2011-02-12 21:37:30 | 000,002,271 | ---- | M] () -- C:\Documents and Settings\Konrad\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk [2011-02-12 21:19:02 | 000,002,267 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Skype.lnk [2011-02-12 13:21:00 | 000,001,080 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-436374069-1454471165-682003330-1003Core.job [2011-02-12 12:21:25 | 000,138,240 | RHS- | M] () -- C:\Documents and Settings\Konrad\raiilu.exe [2011-02-12 10:23:08 | 000,003,180 | ---- | M] () -- C:\Documents and Settings\Konrad\Desktop\Testowe.pdf [2011-02-12 10:22:28 | 000,009,216 | ---- | M] () -- C:\Documents and Settings\Konrad\Desktop\Testowe.doc [2011-02-12 10:17:21 | 000,000,706 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\PDFCreator.lnk [2011-02-11 22:18:59 | 000,070,144 | ---- | M] () -- C:\Documents and Settings\Konrad\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-02-10 15:00:21 | 000,126,912 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2011-02-09 22:37:42 | 000,001,355 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2011-01-26 07:56:12 | 000,042,098 | ---- | M] () -- C:\Documents and Settings\Konrad\Desktop\pko_trans_details_110126_075611.pdf [2011-01-26 07:55:22 | 000,042,279 | ---- | M] () -- C:\Documents and Settings\Konrad\Desktop\pko_trans_details_110126_075520.pdf [2011-01-21 15:44:37 | 008,462,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shell32.dll [2011-01-21 15:44:37 | 000,439,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shimgvw.dll [2011-01-20 20:26:51 | 000,000,917 | ---- | M] () -- C:\Documents and Settings\Konrad\Desktop\Revo Uninstaller.lnk [3 C:\Documents and Settings\All Users\Application Data\*.tmp files -> C:\Documents and Settings\All Users\Application Data\*.tmp -> ] [2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-02-13 21:35:54 | 001,111,120 | ---- | C] () -- C:\Documents and Settings\Konrad\Desktop\vshare-plugin.exe [2011-02-12 23:44:56 | 000,001,510 | ---- | C] () -- C:\Documents and Settings\Konrad\Application Data\Microsoft\Internet Explorer\Quick Launch\Opera.lnk [2011-02-12 23:44:56 | 000,001,498 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Opera.lnk [2011-02-12 23:44:56 | 000,001,492 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Opera.lnk [2011-02-12 21:37:30 | 000,002,293 | ---- | C] () -- C:\Documents and Settings\Konrad\Desktop\Google Chrome.lnk [2011-02-12 21:37:30 | 000,002,271 | ---- | C] () -- C:\Documents and Settings\Konrad\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk [2011-02-12 12:31:02 | 023,004,070 | ---- | C] () -- C:\Documents and Settings\Konrad\Desktop\Zwody_i_Tricki_do_PES6_by_LukaszNT_btgigs.rar [2011-02-12 12:30:40 | 000,061,248 | ---- | C] () -- C:\Documents and Settings\Konrad\Desktop\Karolina Koń PROJEKT!!!!.docx [2011-02-12 12:30:32 | 150,000,000 | ---- | C] () -- C:\Documents and Settings\Konrad\Desktop\pes6.arabic.myegy.com.part01.rar [2011-02-12 12:21:24 | 000,138,240 | RHS- | C] () -- C:\Documents and Settings\Konrad\raiilu.exe [2011-02-12 10:23:07 | 000,003,180 | ---- | C] () -- C:\Documents and Settings\Konrad\Desktop\Testowe.pdf [2011-02-12 10:22:25 | 000,009,216 | ---- | C] () -- C:\Documents and Settings\Konrad\Desktop\Testowe.doc [2011-02-12 10:17:21 | 000,000,706 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\PDFCreator.lnk [2011-02-12 10:17:13 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll [2011-02-09 22:34:27 | 000,001,355 | ---- | C] () -- C:\WINDOWS\imsins.BAK [2011-01-26 07:56:16 | 000,042,098 | ---- | C] () -- C:\Documents and Settings\Konrad\Desktop\pko_trans_details_110126_075611.pdf [2011-01-26 07:55:35 | 000,042,279 | ---- | C] () -- C:\Documents and Settings\Konrad\Desktop\pko_trans_details_110126_075520.pdf [2010-12-21 16:50:03 | 001,970,176 | ---- | C] () -- C:\WINDOWS\System32\d3dx9.dll [2010-07-06 19:11:23 | 000,139,152 | ---- | C] () -- C:\Documents and Settings\Konrad\Application Data\PnkBstrK.sys [2010-06-16 12:21:34 | 000,691,696 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys [2010-06-13 12:07:04 | 000,014,848 | ---- | C] () -- C:\WINDOWS\System32\EuEpmGdi.dll [2010-06-13 12:07:04 | 000,013,192 | ---- | C] () -- C:\WINDOWS\System32\epmntdrv.sys [2010-06-13 12:07:04 | 000,008,456 | ---- | C] () -- C:\WINDOWS\System32\EuGdiDrv.sys [2010-06-07 06:05:30 | 000,001,336 | ---- | C] () -- C:\WINDOWS\wininit.ini [2010-05-02 12:57:24 | 000,002,208 | ---- | C] () -- C:\WINDOWS\System32\drivers\nxsIO32.sys [2010-02-26 14:18:58 | 000,131,058 | ---- | C] () -- C:\WINDOWS\System32\DellPM.ini [2010-02-10 23:11:32 | 000,059,500 | ---- | C] () -- C:\WINDOWS\System32\lvcoinst.ini [2010-01-08 20:48:54 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll [2010-01-08 20:48:54 | 000,036,608 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys [2010-01-08 20:47:57 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\Konrad\Application Data\$_hpcst$.hpc [2009-12-24 23:48:32 | 000,070,144 | ---- | C] () -- C:\Documents and Settings\Konrad\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-12-23 06:48:59 | 000,000,129 | ---- | C] () -- C:\Documents and Settings\Konrad\Local Settings\Application Data\fusioncache.dat [2009-12-23 05:32:06 | 000,176,235 | ---- | C] () -- C:\WINDOWS\System32\Primomonnt.dll [2009-12-23 05:32:05 | 000,000,129 | ---- | C] () -- C:\WINDOWS\primopdf.ini [2009-12-23 05:26:17 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2009-12-21 01:11:19 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2007-10-25 17:26:10 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys [2007-10-11 18:59:24 | 000,025,624 | ---- | C] () -- C:\WINDOWS\System32\drivers\LVPr2Mon.sys [2007-09-27 09:51:02 | 000,020,698 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini [2007-09-27 09:48:48 | 000,030,628 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini [2007-09-27 09:48:28 | 000,031,698 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini [2005-08-05 14:01:54 | 000,235,008 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll [2005-02-15 18:23:18 | 000,524,288 | ---- | C] () -- C:\WINDOWS\System32\vspxcore.dll [2004-08-10 13:00:00 | 001,291,264 | ---- | C] () -- C:\WINDOWS\System32\quartz(3).dll [2004-08-10 13:00:00 | 001,291,264 | ---- | C] () -- C:\WINDOWS\System32\quartz(2).dll [2004-08-10 13:00:00 | 000,059,904 | ---- | C] () -- C:\WINDOWS\System32\devenum(2).dll [2004-08-10 13:00:00 | 000,014,336 | ---- | C] () -- C:\WINDOWS\System32\msdmo(2).dll [1996-04-03 20:33:26 | 000,005,248 | ---- | C] () -- C:\WINDOWS\System32\giveio.sys [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 101 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:364682BC < End of report >