OTL logfile created on: 2014-09-02 17:32:36 - Run 4 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Artur\Moje dokumenty\Pobrane\Nowy folder Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.5512) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1022,79 Mb Total Physical Memory | 598,60 Mb Available Physical Memory | 58,53% Memory free 1,88 Gb Paging File | 1,46 Gb Available in Paging File | 77,81% Paging File free Paging file location(s): C:\pagefile.sys 1000 1536 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 74,52 Gb Total Space | 18,10 Gb Free Space | 24,30% Space Free | Partition Type: NTFS Computer Name: KRZYCHO-B625ADA | User Name: Artur | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2014-08-10 23:41:19 | 004,085,896 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\avastui.exe PRC - [2014-08-10 23:40:28 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe PRC - [2014-08-10 23:40:21 | 000,106,488 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\afwServ.exe PRC - [2014-07-31 22:40:02 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Artur\Moje dokumenty\Pobrane\Nowy folder\OTL.exe PRC - [2014-07-23 00:11:17 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2014-03-16 18:31:56 | 000,182,696 | ---- | M] (Oracle Corporation) -- C:\Program Files\Java\jre7\bin\jqs.exe PRC - [2008-04-14 23:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2004-02-26 14:43:16 | 000,962,661 | ---- | M] () -- C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2014-08-29 19:04:43 | 002,804,736 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\14082901\algo.dll MOD - [2014-08-10 23:40:36 | 019,329,904 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll MOD - [2014-08-10 23:40:30 | 000,301,152 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\aswProperty.dll MOD - [2014-07-23 00:11:13 | 003,800,688 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll MOD - [2004-02-26 14:43:16 | 000,962,661 | ---- | M] () -- C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe MOD - [2003-06-06 08:59:18 | 000,081,920 | ---- | M] () -- C:\Program Files\SAGEM\SAGEM F@st 800-840\languages\english.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ) SRV - File not found [On_Demand | Stopped] -- %SystemRoot%\System32\appmgmts.dll -- (AppMgmt) SRV - [2014-08-10 23:40:28 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus) SRV - [2014-08-10 23:40:21 | 000,106,488 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\afwServ.exe -- (avast! Firewall) SRV - [2014-07-23 00:11:14 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2014-03-16 18:31:56 | 000,182,696 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\Program Files\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService) SRV - [2013-02-22 19:33:22 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - File not found [Kernel | On_Demand | Unknown] -- C:\DOCUME~1\Artur\USTAWI~1\Temp\afrdqfob.sys -- (afrdqfob) DRV - [2014-08-10 23:41:17 | 000,414,520 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\aswsp.sys -- (aswSP) DRV - [2014-08-10 23:40:38 | 000,779,536 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\aswSnx.sys -- (aswSnx) DRV - [2014-08-10 23:40:38 | 000,192,352 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\aswVmm.sys -- (aswVmm) DRV - [2014-08-10 23:40:38 | 000,067,824 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswMonFlt.sys -- (aswMonFlt) DRV - [2014-08-10 23:40:38 | 000,057,800 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswTdi.sys -- (aswTdi) DRV - [2014-08-10 23:40:38 | 000,055,112 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswRdr.sys -- (aswRdr) DRV - [2014-08-10 23:40:38 | 000,049,944 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\aswRvrt.sys -- (aswRvrt) DRV - [2014-08-10 23:40:38 | 000,024,184 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\aswHwid.sys -- (aswHwid) DRV - [2014-08-10 23:40:26 | 000,026,136 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswKbd.sys -- (aswKbd) DRV - [2014-08-10 23:40:21 | 000,252,872 | ---- | M] (AVAST Software) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\aswNdis2.sys -- (aswNdis2) DRV - [2014-08-10 23:40:21 | 000,012,112 | ---- | M] (ALWIL Software) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\aswNdis.sys -- (aswNdis) DRV - [2004-08-04 00:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) DRV - [2003-07-17 16:48:44 | 000,046,167 | ---- | M] (Analog Deivces) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\adildr.sys -- (ADILOADER) DRV - [2003-06-24 13:55:56 | 000,127,497 | ---- | M] (Analog Devices Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\adiusbaw.sys -- (adiusbaw) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-57989841-413027322-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.wp.pl/ IE - HKU\S-1-5-21-57989841-413027322-725345543-1004\..\URLSearchHook: {08C06D61-F1F3-4799-86F8-BE1A89362C85} - SOFTWARE\Classes\CLSID\{08C06D61-F1F3-4799-86F8-BE1A89362C85}\InprocServer32 File not found IE - HKU\S-1-5-21-57989841-413027322-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:31.0 FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll () FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.51.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.51.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.4: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-08-10 23:40:42 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 31.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 31.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2013-02-26 16:38:10 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Artur\Dane aplikacji\Mozilla\Extensions [2014-07-17 00:48:40 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Artur\Dane aplikacji\Mozilla\Firefox\Profiles\o2hqphc0.default\extensions [2014-07-23 00:10:38 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions [2014-07-23 00:11:18 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} O1 HOSTS File: ([2004-08-04 14:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software) O4 - HKLM..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd File not found O4 - HKLM..\Run: [CM-SmWizard] C:\WINDOWS\system\SmWizard.exe (C-Media Electronics Inc.) O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe () O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe () O4 - Startup: C:\Documents and Settings\Artur\Menu Start\Programy\Autostart\Rejestrowanie produktów Corela.lnk = File not found O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-57989841-413027322-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 95 00 00 00 [binary data] O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{68B93FA9-4A15-434A-9171-2A669833139C}: NameServer = 194.204.152.34 194.204.159.1 O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2013-01-17 14:19:09 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2014-09-02 12:38:31 | 000,000,000 | ---D | C] -- C:\FRST [2014-08-11 01:14:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Artur\Ustawienia lokalne\Dane aplikacji\Temp [2014-08-10 23:42:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Artur\Dane aplikacji\AVAST Software [2014-08-10 23:41:55 | 000,000,000 | ---D | C] -- C:\WINDOWS\jumpshot.com [2014-08-10 23:41:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Avast [2014-08-10 23:40:53 | 000,779,536 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSnx.sys [2014-08-10 23:40:53 | 000,057,800 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys [2014-08-10 23:40:52 | 000,414,520 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswsp.sys [2014-08-10 23:40:52 | 000,067,824 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswMonFlt.sys [2014-08-10 23:40:51 | 000,055,112 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys [2014-08-10 23:40:49 | 000,026,136 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswKbd.sys [2014-08-10 23:40:48 | 000,252,872 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswNdis2.sys [2014-08-10 23:40:43 | 000,276,432 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe [2014-08-10 23:40:37 | 000,043,152 | ---- | C] (AVAST Software) -- C:\WINDOWS\avastSS.scr [2014-08-10 23:40:21 | 000,012,112 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswNdis.sys [2014-08-10 23:37:14 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software [4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2014-09-02 13:18:17 | 000,000,362 | -H-- | M] () -- C:\WINDOWS\tasks\avast! Emergency Update.job [2014-09-02 13:12:19 | 000,177,348 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml [2014-09-02 13:12:08 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2014-09-02 13:12:07 | 1072,549,888 | -HS- | M] () -- C:\hiberfil.sys [2014-09-01 18:44:09 | 000,195,468 | ---- | M] () -- C:\Documents and Settings\Artur\Pulpit\skan1.pdf [2014-08-31 12:08:12 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2014-08-24 15:10:27 | 000,238,880 | ---- | M] () -- C:\Documents and Settings\Artur\Pulpit\skan.pdf [2014-08-21 13:57:22 | 000,767,453 | ---- | M] () -- C:\Documents and Settings\Artur\Pulpit\IMAG0206.jpg [2014-08-21 13:56:52 | 000,755,316 | ---- | M] () -- C:\Documents and Settings\Artur\Pulpit\IMAG0205.jpg [2014-08-21 13:56:02 | 000,774,128 | ---- | M] () -- C:\Documents and Settings\Artur\Pulpit\IMAG0204.jpg [2014-08-21 13:54:54 | 000,746,533 | ---- | M] () -- C:\Documents and Settings\Artur\Pulpit\IMAG0203.jpg [2014-08-21 13:54:22 | 000,640,560 | ---- | M] () -- C:\Documents and Settings\Artur\Pulpit\IMAG0202.jpg [2014-08-21 13:53:32 | 000,707,926 | ---- | M] () -- C:\Documents and Settings\Artur\Pulpit\IMAG0201.jpg [2014-08-10 23:41:47 | 000,001,799 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\avast! SafeZone.lnk [2014-08-10 23:41:47 | 000,001,739 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\avast! Internet Security.lnk [2014-08-10 23:41:17 | 000,414,520 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswsp.sys [2014-08-10 23:40:38 | 000,779,536 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSnx.sys [2014-08-10 23:40:38 | 000,192,352 | ---- | M] () -- C:\WINDOWS\System32\drivers\aswVmm.sys [2014-08-10 23:40:38 | 000,067,824 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswMonFlt.sys [2014-08-10 23:40:38 | 000,057,800 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys [2014-08-10 23:40:38 | 000,055,112 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys [2014-08-10 23:40:38 | 000,049,944 | ---- | M] () -- C:\WINDOWS\System32\drivers\aswRvrt.sys [2014-08-10 23:40:38 | 000,024,184 | ---- | M] () -- C:\WINDOWS\System32\drivers\aswHwid.sys [2014-08-10 23:40:37 | 000,276,432 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe [2014-08-10 23:40:37 | 000,043,152 | ---- | M] (AVAST Software) -- C:\WINDOWS\avastSS.scr [2014-08-10 23:40:26 | 000,026,136 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswKbd.sys [2014-08-10 23:40:21 | 000,252,872 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswNdis2.sys [2014-08-10 23:40:21 | 000,012,112 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswNdis.sys [4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2014-09-01 18:44:08 | 000,195,468 | ---- | C] () -- C:\Documents and Settings\Artur\Pulpit\skan1.pdf [2014-08-24 15:10:26 | 000,238,880 | ---- | C] () -- C:\Documents and Settings\Artur\Pulpit\skan.pdf [2014-08-21 15:40:08 | 000,774,128 | ---- | C] () -- C:\Documents and Settings\Artur\Pulpit\IMAG0204.jpg [2014-08-21 15:40:08 | 000,755,316 | ---- | C] () -- C:\Documents and Settings\Artur\Pulpit\IMAG0205.jpg [2014-08-21 15:40:07 | 000,767,453 | ---- | C] () -- C:\Documents and Settings\Artur\Pulpit\IMAG0206.jpg [2014-08-21 15:40:07 | 000,746,533 | ---- | C] () -- C:\Documents and Settings\Artur\Pulpit\IMAG0203.jpg [2014-08-21 15:40:07 | 000,707,926 | ---- | C] () -- C:\Documents and Settings\Artur\Pulpit\IMAG0201.jpg [2014-08-21 15:40:07 | 000,640,560 | ---- | C] () -- C:\Documents and Settings\Artur\Pulpit\IMAG0202.jpg [2014-08-10 23:41:47 | 000,001,799 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\avast! SafeZone.lnk [2014-08-10 23:41:47 | 000,001,739 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\avast! Internet Security.lnk [2014-08-10 23:41:11 | 000,000,362 | -H-- | C] () -- C:\WINDOWS\tasks\avast! Emergency Update.job [2014-08-10 23:40:53 | 000,192,352 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswVmm.sys [2014-08-10 23:40:52 | 000,049,944 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswRvrt.sys [2014-08-10 23:40:51 | 000,024,184 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswHwid.sys [2014-07-31 15:28:11 | 000,274,718 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-System.dat [2014-07-30 19:17:32 | 000,000,021 | ---- | C] () -- C:\WINDOWS\kit.ini [2014-03-17 23:43:36 | 000,000,427 | ---- | C] () -- C:\Documents and Settings\Artur\.drjava [2014-03-07 20:32:30 | 000,002,516 | -HS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\KGyGaAvL.sys [2014-03-07 20:32:30 | 000,000,088 | RHS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\D52FCB75D8.sys [2014-03-01 22:47:47 | 000,112,688 | ---- | C] () -- C:\WINDOWS\System32\shw32.dll [2014-03-01 22:47:47 | 000,039,095 | ---- | C] () -- C:\WINDOWS\iccsigs.dat [2014-02-24 13:41:21 | 000,707,504 | ---- | C] () -- C:\Documents and Settings\Artur\Ustawienia lokalne\Dane aplikacji\unins000.exe [2013-09-16 21:46:47 | 000,000,154 | ---- | C] () -- C:\WINDOWS\adidsl.ini [2013-09-16 21:46:47 | 000,000,021 | ---- | C] () -- C:\WINDOWS\Fast800.ini [2013-09-16 21:46:41 | 001,531,904 | ---- | C] () -- C:\WINDOWS\adiras.exe [2013-09-16 21:46:40 | 000,127,456 | ---- | C] () -- C:\WINDOWS\System32\ipdetect.exe [2013-09-16 21:46:37 | 000,126,976 | ---- | C] () -- C:\WINDOWS\System32\coclassfast.dll [2013-09-16 21:46:37 | 000,046,892 | ---- | C] () -- C:\WINDOWS\System32\adadix16.dll [2013-09-16 21:46:35 | 000,143,360 | ---- | C] () -- C:\WINDOWS\autoclk.exe [2013-09-16 21:46:35 | 000,022,395 | ---- | C] () -- C:\WINDOWS\System32\drivers\fpga.bin [2013-09-16 14:35:20 | 000,000,998 | ---- | C] () -- C:\WINDOWS\adiras.ini [2013-05-07 17:36:14 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI [2013-02-25 20:43:00 | 000,011,761 | ---- | C] () -- C:\Documents and Settings\Artur\Ustawienia lokalne\Dane aplikacji\unins000.msg [2013-02-25 20:42:59 | 000,006,970 | ---- | C] () -- C:\Documents and Settings\Artur\Ustawienia lokalne\Dane aplikacji\unins000.dat [2013-02-22 18:39:20 | 000,000,049 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2013-02-14 13:28:48 | 000,039,240 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat [2013-01-24 22:55:54 | 000,014,848 | ---- | C] () -- C:\Documents and Settings\Artur\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2013-01-19 11:19:45 | 000,233,472 | R--- | C] () -- C:\WINDOWS\System32\cmirmdrv.exe [2013-01-19 11:19:45 | 000,028,672 | R--- | C] () -- C:\WINDOWS\System32\cmirmdrv.dll [2013-01-17 15:09:29 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2013-01-17 15:08:22 | 000,272,576 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2013-01-17 14:21:11 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2013-01-17 14:16:49 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [color=#E56717]========== ZeroAccess Check ==========[/color] [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shdocvw.dll -- [2008-04-14 23:50:48 | 001,499,136 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2008-04-14 23:50:32 | 000,472,064 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008-04-14 23:50:58 | 000,273,920 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [color=#E56717]========== LOP Check ==========[/color] [2014-08-10 23:37:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AVAST Software [2013-04-13 19:06:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Babylon [2014-07-30 20:30:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ESET [2013-02-14 13:34:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\IsolatedStorage [2014-08-01 12:30:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Rosetta Stone [2013-11-02 14:01:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\ACD Systems [2013-03-11 12:59:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\AnvSoft [2014-08-10 23:42:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\AVAST Software [2013-04-13 19:06:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\Babylon [2014-04-14 19:46:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\e-Deklaracje [2014-04-14 19:46:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1 [2013-03-11 13:49:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\eDownload [2013-01-17 15:13:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\ESET [2013-02-14 13:34:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\IsolatedStorage [2014-03-17 14:56:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\Notepad++ [2013-01-17 15:01:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\Opera [2013-01-17 15:55:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\PowerISO [2014-08-18 15:40:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Artur\Dane aplikacji\uTorrent [color=#E56717]========== Purity Check ==========[/color] < End of report >