OTL logfile created on: 2012-12-12 21:12:48 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Laco.DOM-E8608E9AF82\Pulpit Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 7.0.5730.13) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 767,30 Mb Total Physical Memory | 75,01 Mb Available Physical Memory | 9,78% Memory free 1,83 Gb Paging File | 1,12 Gb Available in Paging File | 61,25% Paging File free Paging file location(s): C:\pagefile.sys 1152 2304 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 19,53 Gb Total Space | 1,31 Gb Free Space | 6,69% Space Free | Partition Type: NTFS Drive D: | 54,99 Gb Total Space | 2,95 Gb Free Space | 5,37% Space Free | Partition Type: NTFS Computer Name: DOM-E8608E9AF82 | User Name: Laco | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-12-12 10:31:41 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Pulpit\OTL.exe PRC - [2012-12-10 17:29:44 | 001,435,568 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe PRC - [2012-12-09 20:10:56 | 000,916,960 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2012-07-05 21:07:00 | 000,161,704 | ---- | M] (Oracle Corporation) -- C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe PRC - [2011-06-17 18:33:04 | 000,272,528 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee Security Scan\3.0.207\SSScheduler.exe PRC - [2011-04-07 11:34:04 | 008,882,688 | ---- | M] (Creative Team S.A.) -- C:\Program Files\WapSter\WapSter AQQ\AQQ.exe PRC - [2009-02-06 13:23:36 | 000,727,720 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe PRC - [2009-01-08 06:36:42 | 002,521,464 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\Updater6\Adobe_Updater.exe PRC - [2008-07-05 14:25:37 | 003,158,016 | ---- | M] (SRS Labs, Inc.) -- C:\Program Files\SRS Labs\Audio Sandbox\SRSSSC.exe PRC - [2008-04-14 21:51:18 | 000,977,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2007-03-18 23:05:02 | 000,630,784 | ---- | M] () -- C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe PRC - [2007-03-06 09:35:02 | 000,198,168 | ---- | M] (InterVideo Inc.) -- C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe PRC - [2007-03-03 12:48:28 | 000,067,056 | ---- | M] (Ulead Systems, Inc.) -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe PRC - [2006-10-27 00:47:42 | 000,031,016 | ---- | M] (Microsoft Corporation) -- D:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012-12-09 20:10:55 | 002,397,152 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll MOD - [2011-11-07 22:45:41 | 008,522,400 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll MOD - [2011-04-07 11:33:30 | 000,890,368 | ---- | M] () -- C:\Program Files\WapSter\WapSter AQQ\System\Shared\Plugins\GGNet.dll MOD - [2011-01-15 19:59:24 | 000,338,944 | ---- | M] () -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\WapSter\AQQ Folder\Profiles\Laco\Plugins\Archeolog.dll MOD - [2010-12-22 10:24:48 | 000,574,464 | ---- | M] () -- C:\Program Files\WapSter\WapSter AQQ\System\Shared\Plugins\SMS.dll MOD - [2010-08-25 10:41:20 | 000,304,640 | ---- | M] () -- C:\Program Files\WapSter\WapSter AQQ\System\Shared\Plugins\Contact.dll MOD - [2009-02-27 18:04:20 | 000,311,296 | ---- | M] () -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\pdfshell.POL MOD - [2008-04-14 21:50:38 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll MOD - [2007-03-18 23:05:02 | 000,630,784 | ---- | M] () -- C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe MOD - [2007-03-18 23:04:22 | 000,069,632 | ---- | M] () -- C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.dll MOD - [2005-09-18 01:32:02 | 000,005,376 | ---- | M] () -- C:\WINDOWS\system32\antiwpa.dll MOD - [2005-04-19 19:02:58 | 000,069,632 | ---- | M] () -- C:\Program Files\ATI Technologies\ATI.ACE\atiacmxx.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ) SRV - [2012-12-10 17:29:44 | 001,435,568 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc) SRV - [2012-12-09 20:10:55 | 000,115,168 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2012-07-05 21:07:00 | 000,161,704 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe -- (JavaQuickStarterService) SRV - [2011-06-17 18:33:04 | 000,237,008 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\3.0.207\McCHSvc.exe -- (McComponentHostService) SRV - [2009-02-06 13:27:06 | 000,020,680 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe -- (EhttpSrv) SRV - [2009-02-06 13:23:36 | 000,727,720 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -- (ekrn) SRV - [2007-10-29 13:00:00 | 000,003,584 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\WINDOWS\System32\regedt32.exe -- (.EsetTrialReset) SRV - [2007-03-06 09:35:02 | 000,198,168 | ---- | M] (InterVideo Inc.) [Auto | Running] -- C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe -- (Capture Device Service) SRV - [2007-03-03 12:48:28 | 000,067,056 | ---- | M] (Ulead Systems, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper) SRV - [2006-10-27 00:47:54 | 000,065,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- D:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - File not found [Kernel | On_Demand | Unknown] -- -- (ax82tgte) DRV - [2012-07-16 11:08:54 | 000,025,200 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ggsemc.sys -- (ggsemc) DRV - [2012-07-16 11:08:54 | 000,012,400 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ggflt.sys -- (ggflt) DRV - [2011-03-29 14:31:06 | 000,812,448 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\ESLWireACD.sys -- (ESLWireAC) DRV - [2010-10-13 12:19:54 | 000,024,504 | ---- | M] (Turtle Entertainment GmbH) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ESLvnic.sys -- (ESLvnic1) DRV - [2010-05-31 09:08:47 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sptd.sys -- (sptd) DRV - [2009-09-23 09:41:58 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi) DRV - [2009-03-25 16:48:00 | 000,114,728 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018mdm.sys -- (s1018mdm) DRV - [2009-03-25 16:48:00 | 000,109,864 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018unic.sys -- (s1018unic) DRV - [2009-03-25 16:48:00 | 000,106,208 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018mgmt.sys -- (s1018mgmt) DRV - [2009-03-25 16:48:00 | 000,104,744 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018obex.sys -- (s1018obex) DRV - [2009-03-25 16:48:00 | 000,086,824 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018bus.sys -- (s1018bus) DRV - [2009-03-25 16:48:00 | 000,026,024 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018nd5.sys -- (s1018nd5) DRV - [2009-03-25 16:48:00 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018mdfl.sys -- (s1018mdfl) DRV - [2009-03-15 11:25:46 | 000,056,268 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\scdemu.sys -- (SCDEmu) DRV - [2009-02-06 13:24:24 | 000,093,336 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\epfwtdir.sys -- (epfwtdir) DRV - [2009-02-06 13:23:18 | 000,106,208 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ehdrv.sys -- (ehdrv) DRV - [2009-02-06 13:19:52 | 000,113,448 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\eamon.sys -- (eamon) DRV - [2008-04-14 01:15:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum) DRV - [2008-04-13 23:05:40 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) DRV - [2008-01-09 12:28:34 | 000,027,632 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\seehcri.sys -- (seehcri) DRV - [2007-12-10 14:22:22 | 000,110,120 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s3017unic.sys -- (s3017unic) DRV - [2007-12-10 14:22:22 | 000,100,648 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s3017obex.sys -- (s3017obex) DRV - [2007-12-10 14:22:20 | 000,104,616 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s3017mgmt.sys -- (s3017mgmt) DRV - [2007-12-10 14:22:20 | 000,025,512 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s3017nd5.sys -- (s3017nd5) DRV - [2007-12-10 14:22:18 | 000,110,632 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s3017mdm.sys -- (s3017mdm) DRV - [2007-12-10 14:22:18 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s3017mdfl.sys -- (s3017mdfl) DRV - [2007-12-10 14:22:14 | 000,083,880 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s3017bus.sys -- (s3017bus) DRV - [2007-07-26 09:25:12 | 000,039,808 | R--- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SRS_SSCFilter_i386.sys -- (SRS_SSCFilter) DRV - [2005-08-04 04:10:18 | 001,273,344 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag) DRV - [2005-06-16 17:24:24 | 002,324,160 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM) DRV - [2004-07-28 08:15:38 | 000,012,928 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus) DRV - [2004-07-28 08:15:36 | 000,033,024 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD) DRV - [2004-06-03 03:40:46 | 000,079,360 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\nvatabus.sys -- (nvatabus) DRV - [2003-12-17 09:50:00 | 000,070,801 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LMouFlt2.Sys -- (LMouFlt2) DRV - [2003-12-17 09:50:00 | 000,051,729 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\L8042pr2.Sys -- (L8042pr2) DRV - [2003-10-29 06:02:00 | 000,021,120 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\nv_agp.SYS -- (nv_agp) DRV - [2001-08-17 23:00:04 | 000,002,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\msmpu401.sys -- (ms_mpu401) DRV - [2001-08-17 21:02:32 | 000,008,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hidgame.sys -- (hidgame) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\..\SearchScopes,DefaultScope = {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKLM\..\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420}: "URL" = http://toolbar.ask.com/toolbarv/askRedirect?o=13925&gct=&gc=1&q={searchTerms}&crm=1 IE - HKLM\..\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: "URL" = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&query={searchTerms}&invocationType=tb50winampie7 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://search.bearshare.com/ [binary data] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://mystart.incredimail.com/mb68?u=92541903009311374 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKCU\..\URLSearchHook: {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files\IncrediMail_MediaBar_2\prxtbInc0.dll (Conduit Ltd.) IE - HKCU\..\URLSearchHook: {F3FEE66E-E034-436a-86E4-9690573BEE8A} - SOFTWARE\Classes\CLSID\{F3FEE66E-E034-436a-86E4-9690573BEE8A}\InprocServer32 File not found IE - HKCU\..\SearchScopes,DefaultScope = {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKCU\..\SearchScopes\{0F31B13C-9827-481F-8144-4B2988F8B968}: "URL" = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=867034&p={searchTerms} IE - HKCU\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=SPC2&o=15000&src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=PV&apn_dtid=&apn_uid=3CCE4616-F644-47BD-85EF-CEF3C5EF4DDE&apn_sauid=1E60B807-CEB7-4882-A327-2A28C4083326 IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={sear IE - HKCU\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69}: "URL" = http://search.bearshare.com/webResults.html?src=ieb&q={searchTerms} IE - HKCU\..\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}: "URL" = http://www.daemon-search.com/search/web?q={searchTerms} IE - HKCU\..\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420}: "URL" = http://toolbar.ask.com/toolbarv/askRedirect?o=13925&gct=&gc=1&q={searchTerms}&crm=1 IE - HKCU\..\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}: "URL" = http://mystart.incredimail.com/mb68/?search={searchTerms}&loc=search_box&u=92541903009311374 IE - HKCU\..\SearchScopes\{D9293F41-F8D5-468B-8611-27949CC386F5}: "URL" = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 IE - HKCU\..\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: "URL" = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&query={searchTerms}&invocationType=tb50winampie7 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultengine: "Ask.com" FF - prefs.js..browser.search.defaultenginename: "Ask.com" FF - prefs.js..browser.search.defaulturl: "http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&invocationType=tb50ffwinampie7&query=" FF - prefs.js..browser.search.order.1: "Ask.com" FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=867034" FF - prefs.js..browser.search.selectedEngine: "Ask.com" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.daemon-search.com/startpage|http://www.ask.com?o=15003&l=dis" FF - prefs.js..extensions.enabledAddons: %7Bb9db16a4-6edc-47ec-a1f4-b86292ed211d%7D:4.9.12 FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:17.0.1 FF - prefs.js..extensions.enabledItems: YoutubeDownloader@PeterOlayev.com:1.1 FF - prefs.js..extensions.enabledItems: {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}:5.6.0.8442 FF - prefs.js..extensions.enabledItems: wtxpcom@mybrowserbar.com:4.3 FF - prefs.js..extensions.enabledItems: youtubedownloader@mybrowserbar.com:4.3 FF - prefs.js..keyword.URL: "http://websearch.ask.com/redirect?client=ff&src=kw&tb=SPC2&o=15000&locale=en_US&apn_uid=3CCE4616-F644-47BD-85EF-CEF3C5EF4DDE&apn_ptnrs=PV&apn_sauid=1E60B807-CEB7-4882-A327-2A28C4083326&apn_dtid=&q=" FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.1: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1: C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2852: C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.46: C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1662: C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.46: C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 17.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-12-09 20:10:57 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 17.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-12-09 20:10:32 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 2.0.0.24\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2010-04-25 12:14:21 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 2.0.0.24\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2012-05-06 18:55:43 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2012-12-05 20:26:46 | 000,000,000 | ---D | M] [2009-04-22 09:09:17 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\Mozilla\Extensions [2012-12-09 21:44:38 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\Mozilla\Firefox\Profiles\dte9rx7y.default\extensions [2012-12-09 21:44:38 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\Mozilla\Firefox\Profiles\dte9rx7y.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2009-12-13 21:35:23 | 000,000,000 | ---D | M] (1-Click YouTube Video Downloader) -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\Mozilla\Firefox\Profiles\dte9rx7y.default\extensions\YoutubeDownloader@PeterOlayev.com [2012-11-17 21:42:54 | 002,307,149 | ---- | M] () (No name found) -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\Mozilla\Firefox\Profiles\dte9rx7y.default\extensions\nasanightlaunch@example.com.xpi [2012-11-20 21:15:59 | 000,243,496 | ---- | M] () (No name found) -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\Mozilla\Firefox\Profiles\dte9rx7y.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2009-06-26 14:01:57 | 000,000,681 | ---- | M] () -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\Mozilla\Firefox\Profiles\dte9rx7y.default\searchplugins\ask.xml [2012-04-11 20:28:23 | 000,002,563 | ---- | M] () -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\Mozilla\Firefox\Profiles\dte9rx7y.default\searchplugins\askcom.xml [2009-07-18 00:02:48 | 000,002,476 | ---- | M] () -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\Mozilla\Firefox\Profiles\dte9rx7y.default\searchplugins\BearShareWebSearch.xml [2010-05-31 09:08:56 | 000,002,059 | ---- | M] () -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\Mozilla\Firefox\Profiles\dte9rx7y.default\searchplugins\daemon-search.xml [2009-07-25 22:34:03 | 000,001,196 | ---- | M] () -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\Mozilla\Firefox\Profiles\dte9rx7y.default\searchplugins\winamp-search.xml [2009-05-23 18:12:51 | 000,000,963 | ---- | M] () -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\Mozilla\Firefox\Profiles\dte9rx7y.default\searchplugins\wyszukiwanie-filmw-wideo-w-youtube.xml [2012-12-09 20:10:26 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2012-12-09 20:10:26 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2012-12-09 20:10:56 | 000,262,112 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2009-05-19 08:24:10 | 000,120,296 | ---- | M] ( ) -- C:\Program Files\mozilla firefox\plugins\npganymedenet.dll [2012-11-08 10:01:20 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2009-07-18 00:02:48 | 000,002,476 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\BearShareWebSearch.xml [2012-11-08 10:01:20 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2012-11-08 10:01:20 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2012-11-08 10:01:20 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2012-11-08 10:01:20 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2012-11-08 10:01:20 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms} CHR - homepage: http://www.google.com O1 HOSTS File: ([2012-12-05 16:39:35 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation) O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (IncrediMail MediaBar 2 Toolbar) - {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files\IncrediMail_MediaBar_2\prxtbInc0.dll (Conduit Ltd.) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (YouTube Downloader Toolbar) - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - Reg Error: Value error. File not found O3 - HKLM\..\Toolbar: (IncrediMail MediaBar 2 Toolbar) - {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files\IncrediMail_MediaBar_2\prxtbInc0.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (YouTube Downloader Toolbar) - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - Reg Error: Value error. File not found O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (IncrediMail MediaBar 2 Toolbar) - {D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0} - C:\Program Files\IncrediMail_MediaBar_2\prxtbInc0.dll (Conduit Ltd.) O4 - HKLM..\Run: [GrooveMonitor] D:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Corporation) O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.) O4 - HKCU..\Run: [AQQ] C:\Program Files\WapSter\WapSter AQQ\AQQ.exe (Creative Team S.A.) O4 - HKCU..\Run: [IPLA!] C:\Program Files\ipla\ipla.exe (Redefine Sp z o.o.) O4 - HKCU..\Run: [RocketDock] C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe () O4 - HKCU..\Run: [SRS Audio Sandbox] C:\Program Files\SRS Labs\Audio Sandbox\SRSSSC.exe (SRS Labs, Inc.) O4 - Startup: C:\Documents and Settings\All Users.WINDOWS\Menu Start\Programy\Autostart\McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.0.207\SSScheduler.exe (McAfee, Inc.) O4 - Startup: C:\Documents and Settings\Laco.DOM-E8608E9AF82\Menu Start\Programy\Autostart\RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.) O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - D:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB (Reg Error: Key error.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18) O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3E23CB47-714F-4432-BCEA-16CF6E27A1A1}: DhcpNameServer = 192.168.0.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3E23CB47-714F-4432-BCEA-16CF6E27A1A1}: NameServer = 213.120.62.103,213.120.62.104 O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O18 - Protocol\Handler\vnd.ms.radio {3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020} - C:\Program Files\No1 Video Converter\msdxm.ocx (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O20 - Winlogon\Notify\Antiwpa: DllName - (antiwpa.dll) - C:\WINDOWS\System32\antiwpa.dll () O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\Laco.DOM-E8608E9AF82\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Laco.DOM-E8608E9AF82\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No CLSID value found. O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - D:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-03-21 14:43:03 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2010-07-30 13:19:54 | 000,004,791 | ---- | M] () - C:\AutoMapaSetupLog.txt -- [ NTFS ] O33 - MountPoints2\{82a8a01e-4c06-11e0-ad2e-0018f377d8da}\Shell - "" = AutoRun O33 - MountPoints2\{82a8a01e-4c06-11e0-ad2e-0018f377d8da}\Shell\AutoRun\command - "" = G:\Startme.exe O33 - MountPoints2\{bb1647e8-131a-11df-ab78-0018f377d8da}\Shell\AutoRun\command - "" = F:\Launcher.exe O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-12-12 10:31:41 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Pulpit\OTL.exe [2012-12-12 10:09:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Menu Start\Programy\LogMeIn Hamachi [2012-12-12 10:09:51 | 000,000,000 | ---D | C] -- C:\Program Files\LogMeIn Hamachi [2012-12-09 21:47:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\dwhelper [2012-12-09 20:10:20 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox [2012-12-05 21:42:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Pulpit\Kinga muzyka [2012-12-05 20:26:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Menu Start\Programy\ESET [2012-12-05 20:26:34 | 000,000,000 | --SD | C] -- C:\32788R22FWJFW [2012-12-05 20:26:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\WINDOWS [2012-12-05 20:26:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\URTTemp [2012-12-05 20:26:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\PriceGong [2012-12-05 17:20:44 | 000,000,000 | ---D | C] -- C:\Config.Msi [2012-12-05 16:25:25 | 000,000,000 | ---D | C] -- C:\cmdcons [2012-12-04 23:33:18 | 000,000,000 | ---D | C] -- C:\Qoobox [2012-12-04 23:33:11 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Menu Start\Programy\Narzędzia administracyjne [2012-12-04 23:32:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\erdnt [2012-11-23 22:40:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\TS3Client [2012-11-23 22:39:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS\Menu Start\Programy\TeamSpeak 3 Client [2012-11-23 22:39:31 | 000,000,000 | ---D | C] -- C:\Program Files\TeamSpeak 3 Client [2012-11-23 22:38:22 | 031,435,208 | ---- | C] (TeamSpeak Systems GmbH) -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Pulpit\TeamSpeak3-Client-win32-3.0.9.2.exe [2012-11-18 09:28:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Pulpit\Praca Licencjacka [2012-11-15 13:25:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Pulpit\Morawska [3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-12-12 20:28:13 | 000,001,032 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2012-12-12 10:40:09 | 000,540,743 | ---- | M] () -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Pulpit\AdwCleaner_www.INSTALKI.pl.exe [2012-12-12 10:31:41 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Pulpit\OTL.exe [2012-12-12 10:08:53 | 000,001,028 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2012-12-12 10:08:45 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2012-12-11 13:34:46 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat [2012-12-11 13:34:43 | 095,023,320 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\0tbpw.pad [2012-12-11 11:51:50 | 000,002,278 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2012-12-09 21:47:32 | 002,115,429 | ---- | M] () -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Pulpit\MS_W8_Northern_Lenka_30_PO_PRE-ROLL.flv [2012-12-05 21:24:15 | 009,502,345 | ---- | M] () -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Pulpit\Weekend - Ona Tańczy Dla Mnie.mp3 [2012-12-05 20:46:20 | 000,767,609 | ---- | M] () -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Pulpit\Weekend-onataczydlamnie.mp3 [2012-12-05 17:24:57 | 000,485,082 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2012-12-05 17:24:57 | 000,428,032 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2012-12-05 17:24:57 | 000,081,812 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2012-12-05 17:24:57 | 000,066,434 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2012-12-05 16:39:35 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts [2012-12-04 23:31:33 | 000,021,578 | ---- | M] () -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Moje dokumenty\cc_20121204_233120.reg [2012-12-02 21:52:03 | 000,013,049 | ---- | M] () -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Pulpit\bez tytułu.JPG [2012-12-02 21:51:57 | 000,475,374 | ---- | M] () -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Pulpit\bez tytułu.bmp [2012-11-23 22:39:48 | 000,000,837 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS\Pulpit\TeamSpeak 3 Client.lnk [2012-11-23 22:38:44 | 031,435,208 | ---- | M] (TeamSpeak Systems GmbH) -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Pulpit\TeamSpeak3-Client-win32-3.0.9.2.exe [3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-12-12 10:40:07 | 000,540,743 | ---- | C] () -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Pulpit\AdwCleaner_www.INSTALKI.pl.exe [2012-12-09 21:47:16 | 002,115,429 | ---- | C] () -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Pulpit\MS_W8_Northern_Lenka_30_PO_PRE-ROLL.flv [2012-12-05 21:23:33 | 009,502,345 | ---- | C] () -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Pulpit\Weekend - Ona Tańczy Dla Mnie.mp3 [2012-12-05 20:41:04 | 000,767,609 | ---- | C] () -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Pulpit\Weekend-onataczydlamnie.mp3 [2012-12-05 20:08:28 | 095,023,320 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\0tbpw.pad [2012-12-05 16:25:33 | 000,000,211 | ---- | C] () -- C:\Boot.bak [2012-12-05 16:25:28 | 000,262,400 | RHS- | C] () -- C:\cmldr [2012-12-04 23:31:24 | 000,021,578 | ---- | C] () -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Moje dokumenty\cc_20121204_233120.reg [2012-12-02 21:52:02 | 000,013,049 | ---- | C] () -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Pulpit\bez tytułu.JPG [2012-12-02 21:51:56 | 000,475,374 | ---- | C] () -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Pulpit\bez tytułu.bmp [2012-11-23 22:39:48 | 000,000,837 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Pulpit\TeamSpeak 3 Client.lnk [2011-03-30 16:17:21 | 000,000,004 | RHS- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\sysqcl1129139270.dat [2010-11-25 15:00:43 | 000,000,030 | ---- | C] () -- C:\Program Files\Exiferupdate.ini [2009-07-07 15:32:02 | 000,000,041 | -HS- | C] () -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\.zreglib [2009-04-25 12:46:23 | 000,167,424 | ---- | C] () -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-04-21 15:02:40 | 000,000,145 | ---- | C] () -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [2009-03-22 10:35:24 | 000,065,440 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat [color=#E56717]========== ZeroAccess Check ==========[/color] [2009-04-21 14:52:37 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shdocvw.dll -- [2008-04-14 21:50:48 | 001,778,688 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2008-04-14 21:50:32 | 000,472,064 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = %systemroot%\system32\wbem\wbemess.dll -- [2008-04-14 21:50:58 | 000,273,920 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [color=#E56717]========== LOP Check ==========[/color] [2011-04-12 10:17:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\AlawarWrapper [2009-11-21 18:21:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Azureus [2010-05-31 09:08:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\DAEMON Tools Lite [2009-04-21 14:58:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\ESET [2010-11-17 22:35:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\ESL Wire [2011-11-23 11:05:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\IM [2011-11-23 11:04:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\IncrediMail [2010-04-06 20:30:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\InterVideo [2012-11-30 11:09:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\ipla [2012-10-28 19:41:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\RDRM [2010-03-30 12:08:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\SlySoft [2009-04-21 15:05:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\SRS Labs [2010-11-17 15:59:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\TrackMania [2010-04-06 20:35:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Ulead Systems [2009-07-17 12:02:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\aerix [2012-07-04 21:10:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\Azureus [2010-05-31 09:24:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\DAEMON Tools Lite [2009-06-30 15:04:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\DeepBurner [2010-07-23 17:50:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\EurekaLog [2012-12-05 22:58:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\foobar2000 [2010-09-19 16:24:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\FreeAudioPack [2011-08-01 13:48:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\GameRanger [2009-09-03 17:12:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\GanymedeNet [2010-07-18 18:05:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\GetRightToGo [2012-12-12 10:08:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\ipla [2011-04-13 18:34:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\Magnet's Story [2010-08-09 22:32:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\MyPhoneExplorer [2010-01-09 10:43:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\Nowe Gadu-Gadu [2009-04-21 14:36:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\Opera [2012-07-16 21:14:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\Oracle [2012-07-18 20:46:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\PhotoScape [2012-12-11 13:14:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\PriceGong [2011-01-24 16:06:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\RDRM [2011-03-09 09:51:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\Search Settings [2009-05-06 21:02:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\Soldat [2011-11-23 11:03:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\SumatraPDF [2009-04-30 21:04:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\TeamViewer [2009-06-28 10:02:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\Thunderbird [2012-11-23 23:35:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\TS3Client [2010-04-06 20:48:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\Ulead Systems [2012-07-04 21:10:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\uTorrent [2012-10-02 19:03:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\VSO [2011-03-30 16:09:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Laco.DOM-E8608E9AF82\Dane aplikacji\YouTube Downloader [color=#E56717]========== Purity Check ==========[/color] < End of report >