OTL logfile created on: 2014-05-04 19:09:18 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Halina\Pulpit\Nowy folder Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 1,43 Gb Available Physical Memory | 71,45% Memory free 3,85 Gb Paging File | 3,39 Gb Available in Paging File | 88,06% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 22,54 Gb Total Space | 13,17 Gb Free Space | 58,45% Space Free | Partition Type: NTFS Drive D: | 14,71 Gb Total Space | 12,26 Gb Free Space | 83,34% Space Free | Partition Type: NTFS Drive E: | 1,84 Gb Total Space | 1,79 Gb Free Space | 97,60% Space Free | Partition Type: FAT32 Computer Name: MAMAPC | User Name: Halina | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2014-05-04 19:04:40 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Halina\Pulpit\Nowy folder\OTL.exe PRC - [2014-05-03 14:09:49 | 003,873,704 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe PRC - [2014-05-03 14:09:49 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe PRC - [2014-05-02 23:08:05 | 002,557,976 | ---- | M] () -- C:\Program Files\AVG SafeGuard toolbar\vprot.exe PRC - [2014-05-02 23:08:02 | 001,801,240 | ---- | M] (AVG Secure Search) -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\ToolbarUpdater.exe PRC - [2014-05-02 23:08:00 | 000,159,768 | ---- | M] () -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\loggingserver.exe PRC - [2014-05-02 14:21:08 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2013-11-01 22:11:20 | 000,067,584 | ---- | M] (PasswordBox, Inc.) -- C:\Program Files\PasswordBox\pbbtnService.exe PRC - [2013-07-26 20:21:17 | 000,459,008 | ---- | M] () -- C:\Program Files\4G Hostless Modem\PLAY ONLINE\CheckNDISPort_df.exe PRC - [2013-07-26 20:21:17 | 000,446,208 | ---- | M] () -- C:\Program Files\4G Hostless Modem\PLAY ONLINE\CancelAutoPlay_df.exe PRC - [2010-11-16 15:37:38 | 000,264,704 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\DatacardService\HWDeviceService.exe PRC - [2009-04-14 21:28:46 | 000,110,592 | R--- | M] (Huawei Technologies Co., Ltd.) -- C:\Documents and Settings\Halina\Dane aplikacji\PLAY ONLINE\ouc.exe PRC - [2008-04-15 00:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2007-07-24 09:22:02 | 000,185,624 | ---- | M] (Infineon Technologies AG) -- C:\Program Files\Hewlett-Packard\Embedded Security Software\PSDrt.exe PRC - [2007-07-24 09:21:48 | 000,140,568 | ---- | M] (Infineon Technologies AG) -- C:\WINDOWS\system32\IfxPsdSv.exe PRC - [2006-02-27 18:02:06 | 000,581,693 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe PRC - [2006-02-27 18:00:58 | 001,265,748 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2014-05-04 12:58:27 | 002,252,800 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\14050400\algo.dll MOD - [2014-05-03 14:09:52 | 019,336,120 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll MOD - [2014-05-02 23:08:07 | 000,519,704 | ---- | M] () -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\log4cplusU.dll MOD - [2014-05-02 23:08:05 | 002,557,976 | ---- | M] () -- C:\Program Files\AVG SafeGuard toolbar\vprot.exe MOD - [2014-05-02 23:08:00 | 000,159,768 | ---- | M] () -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\loggingserver.exe MOD - [2014-05-02 14:21:07 | 003,845,232 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll MOD - [2013-11-01 22:11:20 | 000,090,624 | ---- | M] () -- C:\Program Files\PasswordBox\libwebsocketswin32.dll MOD - [2013-07-26 20:21:17 | 000,459,008 | ---- | M] () -- C:\Program Files\4G Hostless Modem\PLAY ONLINE\CheckNDISPort_df.exe MOD - [2013-07-26 20:21:17 | 000,446,208 | ---- | M] () -- C:\Program Files\4G Hostless Modem\PLAY ONLINE\CancelAutoPlay_df.exe MOD - [2010-11-16 15:37:38 | 000,264,704 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\DatacardService\HWDeviceService.exe MOD - [2006-02-27 18:03:28 | 000,053,248 | ---- | M] () -- C:\Program Files\WIDCOMM\Bluetooth Software\BTKeyInd.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ) SRV - [2014-05-03 14:09:49 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus) SRV - [2014-05-02 23:08:02 | 001,801,240 | ---- | M] (AVG Secure Search) [Auto | Running] -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\ToolbarUpdater.exe -- (vToolbarUpdater18.1.0) SRV - [2014-05-02 14:21:07 | 000,119,408 | ---- | M] (Mozilla Foundation) [Disabled | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2014-05-02 09:07:46 | 000,257,712 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2013-11-01 22:11:20 | 000,067,584 | ---- | M] (PasswordBox, Inc.) [Auto | Running] -- C:\Program Files\PasswordBox\pbbtnService.exe -- (PasswordBox) SRV - [2013-10-23 09:15:08 | 000,172,192 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2010-11-16 15:37:38 | 000,264,704 | ---- | M] () [Auto | Running] -- C:\Documents and Settings\All Users\Dane aplikacji\DatacardService\HWDeviceService.exe -- (HWDeviceService.exe) SRV - [2007-07-24 09:21:48 | 000,140,568 | ---- | M] (Infineon Technologies AG) [Auto | Running] -- C:\WINDOWS\system32\IfxPsdSv.exe -- (PersonalSecureDriveService) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - [2014-05-03 14:09:53 | 000,776,976 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\aswSnx.sys -- (aswSnx) DRV - [2014-05-03 14:09:53 | 000,411,552 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\aswSP.sys -- (aswSP) DRV - [2014-05-03 14:09:53 | 000,180,632 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\aswVmm.sys -- (aswVmm) DRV - [2014-05-03 14:09:53 | 000,067,824 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswMonFlt.sys -- (aswMonFlt) DRV - [2014-05-03 14:09:53 | 000,057,672 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswTdi.sys -- (aswTdi) DRV - [2014-05-03 14:09:53 | 000,054,832 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswRdr.sys -- (AswRdr) DRV - [2014-05-03 14:09:53 | 000,049,944 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\aswRvrt.sys -- (aswRvrt) DRV - [2014-05-03 14:09:53 | 000,024,184 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\aswHwid.sys -- (aswHwid) DRV - [2014-05-02 23:08:07 | 000,042,272 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgtpx86.sys -- (avgtp) DRV - [2010-10-09 14:48:36 | 000,072,576 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ew_jubusenum.sys -- (huawei_enumerator) DRV - [2010-08-27 13:53:32 | 000,117,504 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ewusbnet.sys -- (ewusbnet) DRV - [2010-08-07 17:48:30 | 000,106,496 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ewusbmdm.sys -- (hwdatacard) DRV - [2010-07-27 09:52:02 | 000,102,784 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ew_hwusbdev.sys -- (ew_hwusbdev) DRV - [2008-07-04 03:33:34 | 003,230,720 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag) DRV - [2007-12-14 10:21:56 | 000,290,816 | ---- | M] (Texas Instruments) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\tifm21.sys -- (tifm21) DRV - [2007-10-31 11:23:20 | 002,236,544 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NETw4x32.sys -- (NETw4x32) DRV - [2007-08-28 16:47:36 | 000,146,560 | ---- | M] (AuthenTec, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\atswpdrv.sys -- (ATSWPDRV) DRV - [2007-07-24 09:21:52 | 000,038,816 | ---- | M] (Infineon Technologies AG) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\psd.sys -- (PersonalSecureDrive) DRV - [2007-07-24 09:21:46 | 000,041,216 | ---- | M] (Infineon Technologies AG) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ifxtpm.sys -- (IFXTPM) DRV - [2007-06-18 17:12:04 | 000,016,768 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HpqKbFiltr.sys -- (HpqKbFiltr) DRV - [2007-05-09 14:27:00 | 000,097,280 | ---- | M] (Texas Instruments) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gtipci21.sys -- (GTIPCI21) DRV - [2006-08-28 15:40:48 | 001,160,320 | ---- | M] (Agere Systems) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem) DRV - [2006-06-28 10:54:00 | 000,009,472 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\CPQBttn.sys -- (HBtnKey) DRV - [2006-02-27 17:48:20 | 000,401,664 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btaudio.sys -- (btaudio) DRV - [2006-02-27 17:45:48 | 001,342,602 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL) DRV - [2006-02-27 17:43:44 | 000,030,363 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btport.sys -- (BTDriver) DRV - [2006-02-27 17:43:06 | 000,057,096 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB) DRV - [2006-02-27 17:40:16 | 000,148,168 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwdndis.sys -- (BTWDNDIS) DRV - [2005-10-26 11:01:02 | 000,142,720 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\b57xp32.sys -- (b57w2k) DRV - [2001-10-26 19:07:38 | 000,036,425 | ---- | M] (SMC) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\smcirda.sys -- (SMCIRDA) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2492}: "URL" = http://www.default-search.net/search?sid=492&aid=109&itype=n&ver=12283&tm=335&src=ds&p={searchTerms} IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.default-search.net?sid=492&aid=109&itype=n&ver=12283&tm=335&src=hmp IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://www2.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=348B001B7760F6AE&affID=119357&tsp=4993 IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://mysearch.avg.com/search?cid={132B494E-341E-4E01-A097-94D281F7DE88}&mid=5b189cfecc9247d3b5add15231841f5d-988eb7d3456cffc0241c6d4465c84aea379dff90&lang=en&ds=co011&pr=sa&d=2013-06-21 18:36:56&v=15.2.0.5&pid=safeguard&sg=0&sap=dsp&q={searchTerms} IE - HKCU\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2492}: "URL" = http://www.default-search.net/search?sid=492&aid=109&itype=n&ver=12283&tm=335&src=ds&p={searchTerms} IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:13930 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.order.1: "default-search.net" FF - prefs.js..browser.startup.homepage: "http://www.google.pl/" FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:29.0 FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_13_0_0_206.dll () FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\18.1.0\\npsitesafety.dll File not found FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_37: C:\WINDOWS\system32\npdeployJava1.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Documents and Settings\Halina\Ustawienia lokalne\Dane aplikacji\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-05-03 14:09:54 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\avg@toolbar: C:\Documents and Settings\All Users\Dane aplikacji\AVG SafeGuard toolbar\FireFoxExt\18.1.0.443 [2014-05-02 23:08:48 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\firefox@passwordbox.com: C:\Program Files\PasswordBox\Firefox [2013-11-22 04:35:18 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 29.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 29.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.8\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2013-08-15 21:33:33 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.8\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{8E3C10E3-9B89-B515-883F-0A45FF62B29F}: C:\Program Files\BlockAndSurf-soft\161.xpi [2013-12-05 13:21:15 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Halina\Dane aplikacji\Mozilla\Extensions [2014-05-03 22:53:42 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Halina\Dane aplikacji\Mozilla\Firefox\Profiles\tq0b88ze.default\extensions [2014-05-02 08:55:46 | 000,000,000 | ---D | M] (Settings Manager) -- C:\Documents and Settings\Halina\Dane aplikacji\Mozilla\Firefox\Profiles\tq0b88ze.default\extensions\{3EF01F35-3026-3C46-EC85-35802BA08797} [2014-05-02 14:20:53 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions [2014-05-02 14:21:11 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}, CHR - plugin: Error reading preferences file CHR - Extension: AVG SafeGuard = C:\Documents and Settings\Halina\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\17.3.0.49_0\ CHR - Extension: Google Wallet = C:\Documents and Settings\Halina\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\ O1 HOSTS File: ([2001-10-26 20:45:16 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O2 - BHO: (AVG SafeGuard toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG SafeGuard toolbar\18.1.0.443\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search) O3 - HKLM\..\Toolbar: (AVG SafeGuard toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG SafeGuard toolbar\18.1.0.443\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search) O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found. O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software) O4 - HKLM..\Run: [CancelAutoPlay_df] C:\Program Files\4G Hostless Modem\PLAY ONLINE\CancelAutoPlay_df.exe () O4 - HKLM..\Run: [CheckNDISPortF0acD2] C:\Program Files\4G Hostless Modem\PLAY ONLINE\CheckNDISPort_df.exe () O4 - HKLM..\Run: [PTHOSTTR] C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE (Hewlett-Packard Development Company, L.P.) O4 - HKLM..\Run: [vProt] C:\Program Files\AVG SafeGuard toolbar\vprot.exe () O4 - HKCU..\Run: [GG] C:\Documents and Settings\Halina\Ustawienia lokalne\Dane aplikacji\GG\Application\gghub.exe (GG Network S.A.) O4 - HKCU..\Run: [HW_OPENEYE_OUC_PLAY ONLINE] C:\Program Files\PLAY ONLINE\UpdateDog\ouc.exe (Huawei Technologies Co., Ltd.) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\BTTray.lnk = C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.) O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: Wyślij do interfejsu &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm () O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra 'Tools' menuitem : @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab (Java Plug-in 1.6.0_37) O16 - DPF: {CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab (Java Plug-in 1.6.0_37) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab (Java Plug-in 1.6.0_37) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2405C95C-F194-4FB0-A898-1F9B5B583845}: DhcpNameServer = 89.108.202.20 89.108.195.20 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8A79BD8A-0FE5-4B35-92B0-508F7A8050DB}: DhcpNameServer = 192.168.0.1 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.0\ViProtocol.dll (AVG Secure Search) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\Halina\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Halina\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O27 - HKLM IFEO\bitguard.exe: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\bprotect.exe: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\bpsvc.exe: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\browserdefender.exe: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\browserprotect.exe: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\browsersafeguard.exe: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\dprotectsvc.exe: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\jumpflip: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\protectedsearch.exe: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\searchinstaller.exe: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\searchprotection.exe: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\searchprotector.exe: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\searchsettings.exe: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\searchsettings64.exe: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\snapdo.exe: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\stinst32.exe: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\stinst64.exe: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\umbrella.exe: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\utiljumpflip.exe: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\volaro: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\vonteera: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\websteroids.exe: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O27 - HKLM IFEO\websteroidsservice.exe: Debugger - C:\WINDOWS\System32\tasklist.exe (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2012-12-05 19:37:35 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{3059d8ee-c569-11e2-9609-001b7760f6ae}\Shell - "" = AutoRun O33 - MountPoints2\{3059d8ee-c569-11e2-9609-001b7760f6ae}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{4184c57e-bcaa-11e2-9607-001b7760f6ae}\Shell - "" = AutoRun O33 - MountPoints2\{4184c57e-bcaa-11e2-9607-001b7760f6ae}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{4184c581-bcaa-11e2-9607-001b7760f6ae}\Shell - "" = AutoRun O33 - MountPoints2\{4184c581-bcaa-11e2-9607-001b7760f6ae}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{b80ab035-7af5-11e3-9670-364b50b7ef2d}\Shell - "" = AutoRun O33 - MountPoints2\{b80ab035-7af5-11e3-9670-364b50b7ef2d}\Shell\AutoRun\command - "" = E:\AutoRun.exe O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O36 - AppCertDlls: x64 - (c:\program files\settings manager\systemk\x64\sysapcrt.dll) - File not found O36 - AppCertDlls: x86 - (C:\Program Files\Settings Manager\systemk\sysapcrt.dll) - File not found O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2014-05-04 19:08:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Halina\Pulpit\Nowy folder [2014-05-04 18:07:16 | 000,000,000 | ---D | C] -- D:\Moje dokumenty\Downloads [2014-05-04 17:29:06 | 000,107,736 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys [2014-05-04 17:28:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes [2014-05-04 17:28:20 | 017,305,616 | ---- | C] (Malwarebytes Corporation ) -- D:\Moje dokumenty\mbam-setup-2.0.1.1004.exe [2014-05-04 12:59:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Halina\Pulpit\programy [2014-05-03 21:59:00 | 000,000,000 | ---D | C] -- C:\Program Files\Eassos Recovery [2014-05-03 21:51:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Google Chrome [2014-05-03 21:50:03 | 000,000,000 | ---D | C] -- C:\Program Files\Google [2014-05-03 21:50:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Halina\Ustawienia lokalne\Dane aplikacji\Google [2014-05-03 21:48:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Halina\Dane aplikacji\AVAST Software [2014-05-03 20:04:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Halina\Pulpit\Patrycja [2014-05-03 16:08:08 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Halina\GG dysk [2014-05-03 16:05:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Halina\Dane aplikacji\GG [2014-05-03 16:05:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Halina\Ustawienia lokalne\Dane aplikacji\OpenFM [2014-05-03 16:05:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Halina\Ustawienia lokalne\Dane aplikacji\GG [2014-05-03 15:55:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Halina\Dane aplikacji\Unity [2014-05-03 14:21:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Halina\Ustawienia lokalne\Dane aplikacji\Unity [2014-05-03 14:09:53 | 000,043,152 | ---- | C] (AVAST Software) -- C:\WINDOWS\avastSS.scr [2014-05-02 23:08:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\AVG Secure Search [2014-05-02 17:00:59 | 000,306,688 | ---- | C] (InstallShield Software Corporation) -- C:\WINDOWS\IsUninst.exe [2014-05-02 14:20:52 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox [2014-05-02 13:19:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\LogFiles [2014-05-02 09:02:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\_ISTMP1.DIR [2014-05-02 08:56:02 | 000,000,000 | ---D | C] -- C:\Program Files\Linkey [2014-05-02 08:55:41 | 000,000,000 | ---D | C] -- C:\Program Files\Settings Manager [2014-05-02 08:55:23 | 001,728,322 | ---- | C] (AnyProtect.com) -- C:\Documents and Settings\Halina\Ustawienia lokalne\Dane aplikacji\AnyProtectScannerSetup.exe [3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [2 C:\Documents and Settings\Halina\Ustawienia lokalne\Dane aplikacji\*.tmp files -> C:\Documents and Settings\Halina\Ustawienia lokalne\Dane aplikacji\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2014-05-04 19:07:00 | 000,000,930 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job [2014-05-04 19:05:00 | 000,000,364 | -H-- | M] () -- C:\WINDOWS\tasks\avast! Emergency Update.job [2014-05-04 19:02:10 | 000,001,036 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2014-05-04 18:59:54 | 000,001,032 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2014-05-04 18:59:37 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2014-05-04 17:43:17 | 000,107,736 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys [2014-05-04 17:28:20 | 017,305,616 | ---- | M] (Malwarebytes Corporation ) -- D:\Moje dokumenty\mbam-setup-2.0.1.1004.exe [2014-05-04 17:27:23 | 000,702,752 | ---- | M] () -- C:\Documents and Settings\Halina\Pulpit\Malwarebytes-AntiMalware(13117).exe [2014-05-04 17:16:28 | 005,001,508 | ---- | M] () -- C:\Documents and Settings\Halina\Pulpit\100_2464.MOV [2014-05-04 13:10:30 | 012,967,167 | ---- | M] () -- C:\Documents and Settings\Halina\Pulpit\101_0260.MOV [2014-05-03 21:51:18 | 000,001,828 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk [2014-05-03 21:46:35 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2014-05-03 14:09:53 | 000,776,976 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSnx.sys [2014-05-03 14:09:53 | 000,411,552 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSP.sys [2014-05-03 14:09:53 | 000,271,264 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe [2014-05-03 14:09:53 | 000,180,632 | ---- | M] () -- C:\WINDOWS\System32\drivers\aswVmm.sys [2014-05-03 14:09:53 | 000,067,824 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswMonFlt.sys [2014-05-03 14:09:53 | 000,057,672 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys [2014-05-03 14:09:53 | 000,054,832 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys [2014-05-03 14:09:53 | 000,049,944 | ---- | M] () -- C:\WINDOWS\System32\drivers\aswRvrt.sys [2014-05-03 14:09:53 | 000,043,152 | ---- | M] (AVAST Software) -- C:\WINDOWS\avastSS.scr [2014-05-03 14:09:53 | 000,024,184 | ---- | M] () -- C:\WINDOWS\System32\drivers\aswHwid.sys [2014-05-03 13:56:42 | 000,002,596 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT [2014-05-03 08:58:00 | 000,000,366 | ---- | M] () -- C:\WINDOWS\tasks\APSnotifierPP2.job [2014-05-02 23:08:48 | 000,003,738 | ---- | M] () -- C:\Program Files\Mozilla Firefoxsafeguard-secure-search.xml [2014-05-02 23:08:07 | 000,042,272 | ---- | M] (AVG Technologies) -- C:\WINDOWS\System32\drivers\avgtpx86.sys [2014-05-02 09:18:00 | 000,000,368 | ---- | M] () -- C:\WINDOWS\tasks\APSnotifierPP1.job [2014-05-02 09:07:44 | 000,692,400 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe [2014-05-02 09:07:44 | 000,070,832 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl [2014-05-02 08:58:08 | 000,000,366 | ---- | M] () -- C:\WINDOWS\tasks\APSnotifierPP3.job [2014-05-02 08:58:06 | 000,000,328 | ---- | M] () -- C:\Documents and Settings\Halina\Dane aplikacji\aps.uninstall.scan.results [2014-05-02 08:56:02 | 000,000,472 | RHS- | M] () -- C:\Documents and Settings\All Users\ntuser.pol [2014-04-30 12:07:16 | 001,728,322 | ---- | M] (AnyProtect.com) -- C:\Documents and Settings\Halina\Ustawienia lokalne\Dane aplikacji\AnyProtectScannerSetup.exe [3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [2 C:\Documents and Settings\Halina\Ustawienia lokalne\Dane aplikacji\*.tmp files -> C:\Documents and Settings\Halina\Ustawienia lokalne\Dane aplikacji\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2014-05-04 17:27:20 | 000,702,752 | ---- | C] () -- C:\Documents and Settings\Halina\Pulpit\Malwarebytes-AntiMalware(13117).exe [2014-05-04 17:16:20 | 005,001,508 | ---- | C] () -- C:\Documents and Settings\Halina\Pulpit\100_2464.MOV [2014-05-04 13:10:13 | 012,967,167 | ---- | C] () -- C:\Documents and Settings\Halina\Pulpit\101_0260.MOV [2014-05-03 21:51:18 | 000,001,828 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk [2014-05-03 21:50:10 | 000,001,036 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2014-05-03 21:50:09 | 000,001,032 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2014-05-03 16:05:55 | 000,001,158 | ---- | C] () -- C:\Documents and Settings\Halina\Menu Start\Programy\GG.lnk [2014-05-03 16:05:46 | 000,001,197 | ---- | C] () -- C:\Documents and Settings\Halina\Menu Start\Programy\OpenFM.lnk [2014-05-03 14:10:00 | 000,024,184 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswHwid.sys [2014-05-02 17:01:19 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\vusetup.dll [2014-05-02 08:58:08 | 000,000,366 | ---- | C] () -- C:\WINDOWS\tasks\APSnotifierPP3.job [2014-05-02 08:58:07 | 000,000,366 | ---- | C] () -- C:\WINDOWS\tasks\APSnotifierPP2.job [2014-05-02 08:58:06 | 000,000,368 | ---- | C] () -- C:\WINDOWS\tasks\APSnotifierPP1.job [2014-05-02 08:57:55 | 000,000,328 | ---- | C] () -- C:\Documents and Settings\Halina\Dane aplikacji\aps.uninstall.scan.results [2014-05-02 08:56:02 | 000,000,472 | RHS- | C] () -- C:\Documents and Settings\All Users\ntuser.pol [2013-06-21 18:42:55 | 000,178,688 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2013-06-21 18:36:43 | 000,003,738 | ---- | C] () -- C:\Program Files\Mozilla Firefoxsafeguard-secure-search.xml [2013-03-25 11:50:31 | 000,180,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswVmm.sys [2013-03-25 11:50:31 | 000,049,944 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswRvrt.sys [2012-12-05 20:30:44 | 000,000,421 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2012-12-05 19:58:47 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin [2012-12-05 19:40:03 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2012-12-05 19:34:45 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [color=#E56717]========== ZeroAccess Check ==========[/color] [2012-12-05 19:56:22 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shdocvw.dll -- [2008-04-15 00:50:48 | 001,499,136 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2008-04-15 00:50:32 | 000,472,064 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008-04-15 00:50:58 | 000,273,920 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [color=#E56717]========== LOP Check ==========[/color] [2014-05-03 13:57:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AVAST Software [2014-01-15 03:25:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AVG SafeGuard toolbar [2014-05-02 23:08:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AVG Secure Search [2013-09-02 09:37:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Babylon [2013-06-21 18:31:40 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Common Files [2013-05-14 17:27:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DatacardService [2012-12-05 22:11:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Infineon [2013-06-21 18:41:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Halina\Dane aplikacji\0D1F1S1C1P0P1C1F1N1C1T1H2UtF1E1I [2014-05-03 21:48:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Halina\Dane aplikacji\AVAST Software [2013-06-21 18:36:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Halina\Dane aplikacji\AVG SafeGuard toolbar [2013-09-02 09:37:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Halina\Dane aplikacji\Babylon [2012-12-05 20:58:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Halina\Dane aplikacji\Foxit Reader [2013-12-04 14:09:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Halina\Dane aplikacji\Foxit Software [2014-05-04 19:02:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Halina\Dane aplikacji\GG [2012-12-05 22:11:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Halina\Dane aplikacji\Infineon [2012-12-05 20:59:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Halina\Dane aplikacji\pdfforge [2013-06-02 17:24:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Halina\Dane aplikacji\PLAY ONLINE [2013-06-05 23:02:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Halina\Dane aplikacji\Thunderbird [2014-05-03 15:55:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Halina\Dane aplikacji\Unity [color=#E56717]========== Purity Check ==========[/color] < End of report >