Skan avastem i malwarebytes nic nie wykazal. Ponizej log z OTL
- Kod: Zaznacz wszystko
OTL logfile created on: 2011-12-28 15:17:45 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\fluid\Desktop
Professional (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
1,87 Gb Total Physical Memory | 0,98 Gb Available Physical Memory | 52,63% Memory free
3,74 Gb Paging File | 2,57 Gb Available in Paging File | 68,72% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 116,29 Gb Total Space | 62,72 Gb Free Space | 53,94% Space Free | Partition Type: NTFS
Drive D: | 115,13 Gb Total Space | 76,58 Gb Free Space | 66,51% Space Free | Partition Type: NTFS
Drive G: | 27,31 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Computer Name: FLUID-KOMPUTER | User Name: fluid | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
[color=#E56717]========== Processes (SafeList) ==========[/color]
PRC - [2011-12-28 15:11:19 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\fluid\Desktop\OTL.exe
PRC - [2011-12-24 17:50:18 | 000,652,872 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2011-12-24 17:50:18 | 000,460,872 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2011-12-12 20:03:17 | 000,949,104 | ---- | M] (Opera Software) -- C:\Program Files\Opera\opera.exe
PRC - [2011-11-28 19:01:24 | 003,744,552 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
PRC - [2011-11-28 19:01:23 | 000,044,768 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2011-08-23 04:34:34 | 024,182,896 | ---- | M] (Dropbox, Inc.) -- C:\Users\fluid\AppData\Roaming\Dropbox\bin\Dropbox.exe
PRC - [2011-05-03 14:57:28 | 000,253,952 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Program Files\blueconnect\DataCardMonitor.exe
PRC - [2011-05-03 14:57:28 | 000,114,688 | ---- | M] () -- C:\Program Files\blueconnect\blueconnect.exe
PRC - [2010-08-19 09:52:04 | 000,229,376 | ---- | M] () -- C:\ProgramData\DatacardService\DCService.exe
PRC - [2009-12-31 13:13:52 | 000,110,592 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Users\fluid\AppData\Roaming\blueconnect\ouc.exe
PRC - [2009-11-12 13:48:56 | 000,071,096 | ---- | M] () -- C:\Program Files\CDBurnerXP\NMSAccessU.exe
PRC - [2009-07-14 02:14:42 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2009-07-14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009-05-14 16:07:14 | 000,759,048 | ---- | M] (ABBYY) -- C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
PRC - [2008-03-20 11:04:46 | 002,127,296 | ---- | M] (Gadu-Gadu S.A.) -- C:\Program Files\Gadu-Gadu\gg.exe
[color=#E56717]========== Modules (No Company Name) ==========[/color]
MOD - [2011-05-03 14:57:28 | 000,114,688 | ---- | M] () -- C:\Program Files\blueconnect\blueconnect.exe
MOD - [2010-09-26 15:20:42 | 000,159,744 | ---- | M] () -- C:\Program Files\blueconnect\SMSPlugin.dll
MOD - [2010-09-25 14:25:48 | 000,122,880 | ---- | M] () -- C:\Program Files\blueconnect\DeviceMgrPlugin.dll
MOD - [2010-09-25 14:25:38 | 000,237,568 | ---- | M] () -- C:\Program Files\blueconnect\DeviceMgrUIPlugin.dll
MOD - [2010-09-25 14:23:18 | 001,019,904 | ---- | M] () -- C:\Program Files\blueconnect\NDISAPI.dll
MOD - [2010-06-28 14:41:34 | 000,155,648 | ---- | M] () -- C:\Program Files\blueconnect\DetectDev.dll
MOD - [2010-01-14 18:04:08 | 000,065,536 | ---- | M] () -- C:\Program Files\blueconnect\SpeedManagerPlugin.dll
MOD - [2009-12-21 14:29:50 | 000,090,112 | ---- | M] () -- C:\Program Files\blueconnect\DialUpPlugin.dll
MOD - [2009-12-21 12:22:52 | 000,065,536 | ---- | M] () -- C:\Program Files\blueconnect\ConfigFilePlugin.dll
MOD - [2009-12-21 11:31:36 | 000,139,264 | ---- | M] () -- C:\Program Files\blueconnect\NetInfoPlugin.dll
MOD - [2009-08-16 17:06:02 | 000,141,312 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll
MOD - [2009-05-23 10:02:32 | 000,061,440 | R--- | M] () -- C:\Program Files\blueconnect\XCodec.dll
MOD - [2009-05-23 10:02:30 | 000,061,440 | R--- | M] () -- C:\Program Files\blueconnect\DeviceOperate.dll
MOD - [2009-05-23 10:02:24 | 000,557,056 | R--- | M] () -- C:\Program Files\blueconnect\atcomm.dll
MOD - [2009-01-09 10:31:54 | 000,139,264 | ---- | M] () -- C:\Program Files\blueconnect\LocaleMgrPlugin.dll
MOD - [2009-01-09 10:30:38 | 000,032,768 | ---- | M] () -- C:\Program Files\blueconnect\NotifyServicePlugin.dll
MOD - [2008-11-08 09:52:10 | 000,090,112 | R--- | M] () -- C:\Program Files\blueconnect\FileManager.dll
MOD - [2008-11-08 09:52:08 | 000,014,848 | R--- | M] () -- C:\Program Files\blueconnect\isaputrace.dll
MOD - [2008-03-20 10:17:48 | 000,106,496 | ---- | M] () -- C:\Program Files\Gadu-Gadu\libiax2.dll
MOD - [2008-03-20 10:17:44 | 000,061,440 | ---- | M] () -- C:\Program Files\Gadu-Gadu\libjb.dll
MOD - [2008-02-06 15:42:08 | 000,042,496 | ---- | M] () -- C:\Program Files\ReaConverter 5.5 Pro\context.dll
MOD - [2007-10-25 12:51:16 | 000,198,656 | ---- | M] () -- C:\Program Files\Gadu-Gadu\libcurl.dll
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
SRV - [2011-12-24 17:50:18 | 000,652,872 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2011-11-28 19:01:23 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2010-08-19 09:52:04 | 000,229,376 | ---- | M] () [Auto | Running] -- C:\ProgramData\DatacardService\DCService.exe -- (DCService.exe)
SRV - [2009-11-12 13:48:56 | 000,071,096 | ---- | M] () [Auto | Running] -- C:\Program Files\CDBurnerXP\NMSAccessU.exe -- (NMSAccessU)
SRV - [2009-07-14 02:16:15 | 000,016,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\StorSvc.dll -- (StorSvc)
SRV - [2009-07-14 02:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009-07-14 02:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009-07-14 02:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2009-07-14 02:15:21 | 000,308,224 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\inetsrv\ftpsvc.dll -- (ftpsvc)
SRV - [2009-05-14 16:07:14 | 000,759,048 | ---- | M] (ABBYY) [Auto | Running] -- C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe -- (ABBYY.Licensing.FineReader.Sprint.9.0)
SRV - [2007-11-30 11:27:22 | 000,558,592 | ---- | M] (ReaSoft) [On_Demand | Stopped] -- C:\Program Files\ReaConverter 5.5 Pro\rcp_scheduler.exe -- (rcp_service)
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
DRV - [2011-12-10 15:24:06 | 000,020,464 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2011-11-28 18:53:53 | 000,435,032 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2011-11-28 18:53:35 | 000,314,456 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2011-11-28 18:52:19 | 000,034,392 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2011-11-28 18:52:16 | 000,052,952 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2011-11-28 18:52:07 | 000,055,128 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2011-11-28 18:51:50 | 000,020,568 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2010-10-10 12:02:56 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\sptd.sys -- (sptd)
DRV - [2010-04-09 14:24:18 | 000,069,504 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ew_jucdcacm.sys -- (huawei_cdcacm)
DRV - [2010-04-09 14:24:12 | 000,063,616 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ew_jubusenum.sys -- (huawei_enumerator)
DRV - [2010-03-20 10:56:04 | 000,101,504 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ew_hwusbdev.sys -- (ew_hwusbdev)
DRV - [2009-11-12 13:48:56 | 000,007,168 | ---- | M] () [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\StarOpen.sys -- (StarOpen)
DRV - [2009-09-28 01:02:42 | 000,016,472 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files\PeerBlock\pbfilter.sys -- (pbfilter)
DRV - [2009-07-14 02:19:10 | 000,175,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\vmbus.sys -- (vmbus)
DRV - [2009-07-14 02:19:10 | 000,040,896 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\vmstorfl.sys -- (storflt)
DRV - [2009-07-14 02:19:10 | 000,028,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\storvsc.sys -- (storvsc)
DRV - [2009-07-14 00:51:11 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2009-07-14 00:28:47 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\vms3cap.sys -- (s3cap)
DRV - [2009-07-14 00:28:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\VMBusHID.sys -- (VMBusHID)
DRV - [2009-07-13 23:02:46 | 001,096,704 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2004-04-16 12:57:58 | 000,010,368 | ---- | M] (Padus, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\pfc.sys -- (pfc)
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
[color=#E56717]========== Internet Explorer ==========[/color]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
[color=#E56717]========== FireFox ==========[/color]
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.450: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.10\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2011-07-12 13:20:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.10\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins
[2011-04-29 07:29:51 | 000,000,000 | ---D | M] (No name found) -- C:\Users\fluid\AppData\Roaming\mozilla\Extensions
[2011-04-29 07:29:51 | 000,000,000 | ---D | M] (No name found) -- C:\Users\fluid\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
O1 HOSTS File: ([2011-12-04 10:14:44 | 000,000,851 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [DataCardMonitor] C:\Program Files\blueconnect\DataCardMonitor.exe (Huawei Technologies Co., Ltd.)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKCU..\Run: [EPSON SX125 Series] C:\Windows\System32\spool\DRIVERS\W32X86\3\E_FATIGGE.EXE (SEIKO EPSON CORPORATION)
O4 - HKCU..\Run: [HW_OPENEYE_OUC_blueconnect] C:\Program Files\blueconnect\UpdateDog\ouc.exe (Huawei Technologies Co., Ltd.)
O4 - HKLM..\RunOnce: [Malwarebytes Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - Startup: C:\Users\fluid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\fluid\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 95
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: emigo.biz ([nepentes] https in Zaufane witryny)
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.5.7.cab (DLM Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8E8DFC8A-1F5E-497E-AAB8-9244F5B9E767}: NameServer = 213.158.199.1 213.158.199.5
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9D699C36-EEFC-45D6-8F1F-9B8D46C71724}: DhcpNameServer = 217.30.129.149 217.30.137.200 62.233.128.18 217.30.129.149 194.204.152.34
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BC77EE25-0F00-4741-8D58-E41E481C406A}: DhcpNameServer = 212.76.34.50 212.76.34.49
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) -C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-06-10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2010-08-19 17:49:08 | 000,126,976 | R--- | M] () - G:\AutoRun.exe -- [ CDFS ]
O32 - AutoRun File - [2009-05-05 02:59:04 | 000,000,045 | R--- | M] () - G:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\{1e7a40bd-9be4-11e0-9b18-001e33d64f55}\Shell - "" = AutoRun
O33 - MountPoints2\{1e7a40bd-9be4-11e0-9b18-001e33d64f55}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2010-08-19 17:49:08 | 000,126,976 | R--- | M] ()
O33 - MountPoints2\{4b66f8bc-a419-11e0-9922-001e33d64f55}\Shell - "" = AutoRun
O33 - MountPoints2\{4b66f8bc-a419-11e0-9922-001e33d64f55}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2010-08-19 17:49:08 | 000,126,976 | R--- | M] ()
O33 - MountPoints2\{d138a35a-758c-11e0-bc77-001e33d64f55}\Shell - "" = AutoRun
O33 - MountPoints2\{d138a35a-758c-11e0-bc77-001e33d64f55}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2010-08-19 17:49:08 | 000,126,976 | R--- | M] ()
O33 - MountPoints2\{d138a374-758c-11e0-bc77-001e33d64f55}\Shell - "" = AutoRun
O33 - MountPoints2\{d138a374-758c-11e0-bc77-001e33d64f55}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2010-08-19 17:49:08 | 000,126,976 | R--- | M] ()
O33 - MountPoints2\{ed0e8352-d78f-11de-bbb0-001e33d64f55}\Shell - "" = AutoRun
O33 - MountPoints2\{ed0e8352-d78f-11de-bbb0-001e33d64f55}\Shell\AutoRun\command - "" = H:\LaunchU3.exe -a
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\LaunchU3.exe -a
O33 - MountPoints2\G\Shell - "" = AutoRun
O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2010-08-19 17:49:08 | 000,126,976 | R--- | M] ()
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
[2011-12-28 15:11:13 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\fluid\Desktop\OTL.exe
[2011-12-28 15:05:19 | 000,000,000 | ---D | C] -- C:\Users\fluid\AppData\Roaming\Malwarebytes
[2011-12-28 15:04:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011-12-28 15:04:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011-12-28 15:04:47 | 000,020,464 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2011-12-28 15:04:47 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2011-12-28 15:01:07 | 010,847,608 | ---- | C] (Malwarebytes Corporation ) -- C:\Users\fluid\Desktop\mbam-setup-1.60.0.1800.exe
[2011-12-27 15:00:24 | 000,000,000 | ---D | C] -- C:\Users\fluid\Desktop\mp3
[2011-12-27 13:47:22 | 000,000,000 | ---D | C] -- C:\Users\fluid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Łasuch
[2011-12-27 13:47:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Łasuch
[2011-12-27 13:46:59 | 000,000,000 | ---D | C] -- C:\Program Files\Łasuch
[2011-12-23 15:29:07 | 000,000,000 | ---D | C] -- C:\Users\fluid\.gstreamer-0.10
[2011-12-23 15:28:02 | 000,000,000 | ---D | C] -- C:\Users\fluid\AppData\Local\ChomikBox
[2011-12-23 15:27:38 | 000,000,000 | ---D | C] -- C:\Program Files\ChomikBox
[2011-12-23 15:27:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Chomikuj.pl
[2011-12-13 11:59:35 | 000,000,000 | ---D | C] -- C:\Users\fluid\Desktop\Anti scabies
[2011-12-04 10:17:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CesarFTP
[2011-12-04 10:17:52 | 000,000,000 | ---D | C] -- C:\Program Files\CesarFTP
[2011-12-04 10:14:07 | 000,000,000 | ---D | C] -- C:\wamp
[2011-12-04 10:06:22 | 000,000,000 | ---D | C] -- C:\inetpub
[2011-12-04 10:06:22 | 000,000,000 | ---D | C] -- C:\Windows\System32\BestPractices
[2011-12-02 20:33:07 | 000,000,000 | ---D | C] -- C:\Users\fluid\Desktop\kwejk
[2011-12-02 13:51:52 | 000,608,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\COMCTL32.OCX
[2011-12-02 13:51:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rzeźnik
[2011-12-02 13:51:52 | 000,000,000 | ---D | C] -- C:\Program Files\MGrenda
[2011-12-01 19:15:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun
[2011-12-01 19:15:35 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2011-12-01 19:15:19 | 000,472,808 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\deployJava1.dll
[2011-12-01 19:15:19 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaws.exe
[2011-12-01 19:15:19 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaw.exe
[2011-12-01 19:15:19 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\java.exe
[2011-12-01 19:15:03 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
[2011-12-28 15:11:19 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\fluid\Desktop\OTL.exe
[2011-12-28 14:10:19 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011-12-28 12:00:37 | 000,014,032 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011-12-28 12:00:37 | 000,014,032 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011-12-28 11:53:03 | 1506,803,712 | -HS- | M] () -- C:\hiberfil.sys
[2011-12-24 17:25:50 | 000,740,828 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2011-12-24 17:25:50 | 000,654,552 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011-12-24 17:25:50 | 000,155,392 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2011-12-24 17:25:50 | 000,121,424 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011-12-23 15:27:45 | 000,000,632 | ---- | M] () -- C:\Users\Public\Desktop\ChomikBox.lnk
[2011-12-22 22:20:45 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt
[2011-12-14 11:55:30 | 000,001,025 | ---- | M] () -- C:\Users\fluid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
[2011-12-10 15:24:06 | 000,020,464 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2011-12-04 11:00:45 | 731,364,334 | ---- | M] () -- C:\Users\fluid\Desktop\Teatr TV - P. Quilter - Boska 2011.avi
[2011-12-03 21:28:10 | 000,000,095 | ---- | M] () -- C:\Windows\winamp.ini
[2011-12-01 19:15:07 | 000,157,472 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaws.exe
[2011-12-01 19:15:07 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaw.exe
[2011-12-01 19:15:07 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\java.exe
[2011-12-01 19:15:06 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\deployJava1.dll
[2011-11-28 21:21:01 | 000,414,368 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2011-11-28 19:01:25 | 000,041,184 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
[2011-11-28 19:01:23 | 000,199,816 | ---- | M] (AVAST Software) -- C:\Windows\System32\aswBoot.exe
[2011-11-28 18:53:53 | 000,435,032 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswSnx.sys
[2011-11-28 18:53:35 | 000,314,456 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswSP.sys
[2011-11-28 18:52:19 | 000,034,392 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswRdr.sys
[2011-11-28 18:52:16 | 000,052,952 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswTdi.sys
[2011-11-28 18:52:07 | 000,055,128 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswMonFlt.sys
[2011-11-28 18:51:50 | 000,020,568 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswFsBlk.sys
[color=#E56717]========== Files Created - No Company Name ==========[/color]
[2011-12-28 15:04:55 | 000,001,063 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2011-12-27 13:47:25 | 000,001,783 | ---- | C] () -- C:\Users\fluid\Desktop\Łasuch.lnk
[2011-12-27 13:40:27 | 066,004,873 | ---- | C] () -- C:\Users\fluid\Desktop\Łasuch.exe
[2011-12-23 15:27:45 | 000,000,632 | ---- | C] () -- C:\Users\Public\Desktop\ChomikBox.lnk
[2011-12-22 09:29:52 | 000,161,684 | ---- | C] () -- C:\Users\fluid\Desktop\Merry Christmas.PDF
[2011-12-21 21:46:13 | 000,123,364 | R--- | C] () -- C:\Users\fluid\Desktop\Seasons Greetings.pdf
[2011-12-14 11:55:30 | 000,001,025 | ---- | C] () -- C:\Users\fluid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
[2011-12-04 10:29:00 | 731,364,334 | ---- | C] () -- C:\Users\fluid\Desktop\Teatr TV - P. Quilter - Boska 2011.avi
[2011-06-23 12:12:12 | 000,000,095 | ---- | C] () -- C:\Windows\winamp.ini
[2011-04-29 07:29:51 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2010-12-17 08:45:34 | 000,005,120 | ---- | C] () -- C:\Users\fluid\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-12-06 14:58:56 | 002,496,715 | ---- | C] () -- C:\Windows\System32\abgx360.exe
[2010-10-10 12:07:45 | 000,080,384 | ---- | C] () -- C:\Windows\System32\mkzlib.dll
[2010-10-10 12:07:44 | 000,024,576 | ---- | C] () -- C:\Windows\System32\mkunicode.dll
[2010-10-10 12:01:28 | 000,258,048 | ---- | C] () -- C:\Windows\System32\libFLAC.dll
[2010-10-02 16:24:28 | 000,000,000 | ---- | C] () -- C:\Windows\MSYS.INI
[2010-02-04 09:24:49 | 000,007,168 | ---- | C] () -- C:\Windows\System32\drivers\StarOpen.sys
[2010-01-14 08:23:24 | 000,056,320 | ---- | C] () -- C:\Windows\System32\iyvu9_32.dll
[2009-07-14 09:07:57 | 000,740,828 | ---- | C] () -- C:\Windows\System32\perfh015.dat
[2009-07-14 09:07:57 | 000,337,158 | ---- | C] () -- C:\Windows\System32\perfi015.dat
[2009-07-14 09:07:57 | 000,155,392 | ---- | C] () -- C:\Windows\System32\perfc015.dat
[2009-07-14 09:07:57 | 000,038,710 | ---- | C] () -- C:\Windows\System32\perfd015.dat
[2009-07-14 05:57:37 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009-07-14 05:33:53 | 000,366,760 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2009-07-14 03:05:48 | 000,654,552 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2009-07-14 03:05:48 | 000,291,294 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2009-07-14 03:05:48 | 000,121,424 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2009-07-14 03:05:48 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2009-07-14 03:05:05 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2009-07-14 03:04:11 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2009-07-14 01:19:49 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2009-07-14 00:55:01 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009-07-14 00:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll
[2009-07-14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
[2009-07-13 23:09:19 | 000,982,196 | ---- | C] () -- C:\Windows\System32\igkrng500.bin
[2009-07-13 23:09:19 | 000,417,344 | ---- | C] () -- C:\Windows\System32\igcompkrng500.bin
[2009-07-13 23:09:19 | 000,139,824 | ---- | C] () -- C:\Windows\System32\igfcg500.bin
[2009-07-13 23:09:19 | 000,097,448 | ---- | C] () -- C:\Windows\System32\igfcg500m.bin
[2009-06-10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2007-08-22 02:35:46 | 003,596,288 | ---- | C] () -- C:\Windows\System32\qt-dx331.dll
[2007-08-22 02:09:04 | 000,012,288 | ---- | C] () -- C:\Windows\System32\DivXWMPExtType.dll
[2005-04-04 13:52:42 | 000,180,224 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2005-04-04 13:35:24 | 000,790,528 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[color=#E56717]========== LOP Check ==========[/color]
[2011-10-14 19:03:06 | 000,000,000 | ---D | M] -- C:\Users\fluid\AppData\Roaming\abgx360
[2011-10-18 13:26:03 | 000,000,000 | ---D | M] -- C:\Users\fluid\AppData\Roaming\AnyPic JPG to PDF Converter
[2011-05-03 15:15:49 | 000,000,000 | ---D | M] -- C:\Users\fluid\AppData\Roaming\blueconnect
[2010-02-04 09:25:08 | 000,000,000 | ---D | M] -- C:\Users\fluid\AppData\Roaming\Canneverbe Limited
[2010-10-10 12:45:09 | 000,000,000 | ---D | M] -- C:\Users\fluid\AppData\Roaming\DAEMON Tools Lite
[2010-05-04 17:16:34 | 000,000,000 | ---D | M] -- C:\Users\fluid\AppData\Roaming\DiskAid
[2011-12-28 11:54:36 | 000,000,000 | ---D | M] -- C:\Users\fluid\AppData\Roaming\Dropbox
[2011-10-20 15:23:10 | 000,000,000 | ---D | M] -- C:\Users\fluid\AppData\Roaming\EPSON
[2011-11-18 12:36:23 | 000,000,000 | ---D | M] -- C:\Users\fluid\AppData\Roaming\Foxit Software
[2010-11-20 09:26:48 | 000,000,000 | ---D | M] -- C:\Users\fluid\AppData\Roaming\Gadu-Gadu
[2010-12-13 13:57:49 | 000,000,000 | ---D | M] -- C:\Users\fluid\AppData\Roaming\GHISLER
[2010-10-10 09:54:22 | 000,000,000 | ---D | M] -- C:\Users\fluid\AppData\Roaming\HdO Adventure
[2011-04-29 11:00:16 | 000,000,000 | ---D | M] -- C:\Users\fluid\AppData\Roaming\ICAClient
[2009-11-23 16:13:33 | 000,000,000 | ---D | M] -- C:\Users\fluid\AppData\Roaming\ImgBurn
[2011-12-01 12:47:50 | 000,000,000 | ---D | M] -- C:\Users\fluid\AppData\Roaming\IrfanView
[2011-09-27 18:21:16 | 000,000,000 | ---D | M] -- C:\Users\fluid\AppData\Roaming\OpenOffice.org
[2011-01-27 20:02:34 | 000,000,000 | ---D | M] -- C:\Users\fluid\AppData\Roaming\Opera
[2011-01-06 11:34:14 | 000,000,000 | ---D | M] -- C:\Users\fluid\AppData\Roaming\Pixmantec
[2011-10-18 13:29:55 | 000,000,000 | ---D | M] -- C:\Users\fluid\AppData\Roaming\RCP 5
[2010-01-06 19:16:02 | 000,000,000 | ---D | M] -- C:\Users\fluid\AppData\Roaming\Thinstall
[2011-04-29 07:29:51 | 000,000,000 | ---D | M] -- C:\Users\fluid\AppData\Roaming\Thunderbird
[2011-12-13 22:23:41 | 000,000,000 | ---D | M] -- C:\Users\fluid\AppData\Roaming\uTorrent
[2011-11-30 18:31:34 | 000,032,604 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[color=#E56717]========== Purity Check ==========[/color]
< End of report >
extras
- Kod: Zaznacz wszystko
OTL Extras logfile created on: 2011-12-28 15:17:48 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\fluid\Desktop
Professional (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
1,87 Gb Total Physical Memory | 0,98 Gb Available Physical Memory | 52,63% Memory free
3,74 Gb Paging File | 2,57 Gb Available in Paging File | 68,72% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 116,29 Gb Total Space | 62,72 Gb Free Space | 53,94% Space Free | Partition Type: NTFS
Drive D: | 115,13 Gb Total Space | 76,58 Gb Free Space | 66,51% Space Free | Partition Type: NTFS
Drive G: | 27,31 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Computer Name: FLUID-KOMPUTER | User Name: fluid | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
[color=#E56717]========== Extra Registry (SafeList) ==================== Extra Registry (SafeList) ==========[/color]
[color=#E56717]========== File Associations ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = Opera.HTML] -- C:\Program Files\Opera\Opera.exe (Opera Software)
[color=#E56717]========== Shell Spawning ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Opera\Opera.exe" "%1" (Opera Software)
https [open] -- "C:\Program Files\Opera\Opera.exe" "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [Browse with &IrfanView] -- "C:\Program Files\IrfanView\i_view32.exe" "%1 /thumbs" (Irfan Skiljan)
Directory [ChomikBox.Upload] -- "C:\Program Files\ChomikBox\\ChomikBox.exe" -u"%1" ( )
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\Winamp.exe" /BOOKMARK "%1" (Nullsoft)
Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\Winamp.exe" /ADD "%1" (Nullsoft)
Directory [Winamp.Play] -- "C:\Program Files\Winamp\Winamp.exe" "%1" (Nullsoft)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
[color=#E56717]========== Security Center Settings ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[color=#E56717]========== Firewall Settings ==========[/color]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[color=#E56717]========== Authorized Applications List ==========[/color]
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{015C5B35-B678-451C-9AEE-821E8D69621C}_is1" = PeerBlock 1.0.0 (r181)
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{237CCB62-8454-43E3-B158-3ACD0134852E}" = High-Definition Video Playback 10
"{2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}" = Nero Core Components 10
"{26A24AE4-039D-4CA4-87B4-2F83216029FF}" = Java(TM) 6 Update 29
"{277C1559-4CF7-44FF-8D07-98AA9C13AABD}" = Nero Multimedia Suite 10
"{29ED20C9-5E15-4969-9279-25BF3727A3DA}" = iTunes
"{321320E1-0E5A-36CB-9E52-F3B201B8C4D4}" = Microsoft .NET Framework 4 Client Profile PLK Language Pack
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{5C19E2DC-4CCF-3114-B40A-6E565987025F}" = Microsoft .NET Framework 4 Extended PLK Language Pack
"{63AA3EAB-23BB-48B2-9AD0-44F878075604}" = Nero 10 Menu TemplatePack Basic
"{6DFB899F-17A2-48F0-A533-ED8D6866CF38}" = Nero Control Center 10
"{70550193-1C22-445C-8FA4-564E155DB1A7}" = Nero Express 10
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{7A5D731D-B4B3-490E-B339-75685712BAAB}" = Nero Burning ROM 10
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8ECEC853-5C3D-4B10-B5C7-FF11FF724807}" = Nero Recode 10
"{90120000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2007
"{90120000-0015-0415-0000-0000000FF1CE}_ENTERPRISE_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007
"{90120000-0016-0415-0000-0000000FF1CE}_ENTERPRISE_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007
"{90120000-0018-0415-0000-0000000FF1CE}_ENTERPRISE_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2007
"{90120000-0019-0415-0000-0000000FF1CE}_ENTERPRISE_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2007
"{90120000-001A-0415-0000-0000000FF1CE}_ENTERPRISE_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007
"{90120000-001B-0415-0000-0000000FF1CE}_ENTERPRISE_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{A0516415-ED61-419A-981D-93596DA74165}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007
"{90120000-001F-0415-0000-0000000FF1CE}_ENTERPRISE_{E9EA2604-8AC9-47D2-8F4B-6BF60787A357}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2007
"{90120000-0044-0415-0000-0000000FF1CE}_ENTERPRISE_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007
"{90120000-006E-0415-0000-0000000FF1CE}_ENTERPRISE_{D45F91DE-F0FC-4D5F-9A0C-FDE5B251AAC6}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2007
"{90120000-00A1-0415-0000-0000000FF1CE}_ENTERPRISE_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-00B2-0409-0000-0000000FF1CE}" = Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office programs
"{90120000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2007
"{90120000-00BA-0415-0000-0000000FF1CE}_ENTERPRISE_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{92EC1A84-7FFC-42DF-A8F6-79C21C4765A5}" = Nero DiscCopy Gadget 10
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9A4297F3-2A51-4ED9-92CA-4BCB8380947E}" = Nero Vision 10
"{A00B9A50-3090-4CFF-9CDA-82DA0BEDAA21}" = Apple Mobile Device Support
"{A83279FD-CA4B-4206-9535-90974DE76654}" = Apple Application Support
"{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5
"{AC76BA86-7AD7-1033-7B44-A94000000001}" = Adobe Reader 9.4.6
"{ADD050EC-6B50-437F-807B-FF9F29216FA5}_is1" = AnyPic JPG to PDF Converter 1.1.1
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{BE82A297-272E-48E3-BD1F-E15E6597E5F5}_is1" = ConvertGenius 3.6
"{C3580AC4-C827-4332-B935-9A282ED5BB97}" = Nero Dolby Files 10
"{C3C538E5-524C-4253-AA74-0EEEF34990EA}" = DiscJuggler
"{C49F8E1C-0BAE-4836-A670-AE76BA32BE90}" = ChomikBox
"{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}" = Microsoft Primary Interoperability Assemblies 2005
"{E1EE5339-5D32-458F-BAAB-B19F6301BCE2}" = Nero SoundTrax 10
"{E337E787-CF61-4B7B-B84F-509202A54023}" = Nero RescueAgent 10
"{EB87675F-5281-4767-A54B-31931794C23D}" = OpenOffice.org 3.3
"{EDCDFAD5-DF80-4600-A493-E9DAD6810230}" = Nero WaveEditor 10
"{F5CB822F-B365-43D1-BCC0-4FDA1A2017A7}" = Nero 10 Movie ThemePack Basic
"{F9000000-0018-0000-0000-074957833700}" = ABBYY FineReader 9.0 Sprint
"{FCF00A6E-FB58-477A-ABE9-232907105521}" = Nero CoverDesigner 10
"ABBYY FineReader 9.0 Sprint" = ABBYY FineReader 9.0 Sprint
"abgx360" = abgx360 v1.0.5
"AC3ACM" = AC-3 ACM Codec
"AC3Filter" = AC3Filter (remove only)
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"ALLPlayer_is1" = ALLPlayer V4.X
"avast" = avast! Free Antivirus
"blueconnect" = blueconnect
"CCleaner" = CCleaner
"CDex" = CDex extraction audio
"CesarFTP 0.99g_is1" = CesarFTP 0.99g
"Dzielenie i łączenie plików_is1" = Dzielenie i łączenie plików v1.2.2
"ENTERPRISE" = Microsoft Office Enterprise 2007
"EPSON Scanner" = EPSON Scan
"EPSON SX125 Series" = EPSON SX125 Series Printer Uninstall
"EPSON SX125 Series Manual" = EPSON SX125 Series Podręcznik
"Foxit Reader_is1" = Foxit Reader 5.1
"Gadu-Gadu" = Gadu-Gadu 7.7
"IMAPSize_is1" = IMAPSize 0.3.7
"ImgBurn" = ImgBurn
"Indeo® Software" = Indeo® Software
"IrfanView" = IrfanView (remove only)
"Łasuch" = Łasuch
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware wersja 1.60.0.1800
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Extended
"Mozilla Thunderbird (3.1.10)" = Mozilla Thunderbird (3.1.10)
"NapiProjekt_is1" = NapiProjekt 1.0.6.9
"Opera 11.60.1185" = Opera 11.60
"QuicktimeAlt_is1" = QuickTime Alternative 3.2.2
"ReaConverter 5.5 Pro_is1" = ReaConverter 5.5 Pro
"RealAlt_is1" = Real Alternative 2.0.2 Lite
"Rzeźnik MPEGów 1.1.991_is1" = Rzeźnik MPEGów 1.1.991
"Totalcmd" = Total Commander (Remove or Repair)
"uTorrent" = µTorrent
"VLC media player" = VLC media player 1.0.5
"Winamp" = Winamp (remove only)
"WinRAR archiver" = WinRAR archiver
"XviD_is1" = XviD MPEG-4 Video Codec
[color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
[color=#E56717]========== Last 10 Event Log Errors ==========[/color]
[ Application Events ]
Error - 2011-12-23 07:39:35 | Computer Name = fluid-Komputer | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 587812
Error - 2011-12-23 07:39:35 | Computer Name = fluid-Komputer | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 587812
Error - 2011-12-23 11:55:54 | Computer Name = fluid-Komputer | Source = SideBySide | ID = 16842827
Description = Nie można wygenerować kontekstu aktywacji dla „C:\Program Files\Skype\Toolbars\Internet
Explorer\SkypeIEPluginBroker.exe”. Błąd w pliku manifestu lub w pliku zasad „C:\Program
Files\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe” w wierszu 2. Użycie
wielu elementów requestedPrivileges w manifeście jest niedozwolone.
Error - 2011-12-24 09:55:15 | Computer Name = fluid-Komputer | Source = Application Error | ID = 1000
Description = Nazwa aplikacji powodującej błąd: Explorer.EXE, wersja: 6.1.7600.16385,
sygnatura czasowa: 0x4a5bc60d Nazwa modułu powodującego błąd: DropboxExt.14.dll,
wersja: 1.0.0.14, sygnatura czasowa: 0x4bfd6926 Kod wyjątku: 0xc0000005 Przesunięcie
błędu: 0x0000446c Identyfikator procesu powodującego błąd: 0x594 Godzina uruchomienia
aplikacji powodującej błąd: 0x01ccc24382e1a291 Ścieżka aplikacji powodującej błąd:
C:\Windows\Explorer.EXE Ścieżka modułu powodującego błąd: C:\Users\fluid\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
Identyfikator
raportu: e7c02a25-2e36-11e1-a3f6-001e33d64f55
Error - 2011-12-24 12:25:29 | Computer Name = fluid-Komputer | Source = Application Error | ID = 1000
Description = Nazwa aplikacji powodującej błąd: Explorer.EXE, wersja: 6.1.7600.16385,
sygnatura czasowa: 0x4a5bc60d Nazwa modułu powodującego błąd: DropboxExt.14.dll,
wersja: 1.0.0.14, sygnatura czasowa: 0x4bfd6926 Kod wyjątku: 0xc0000005 Przesunięcie
błędu: 0x0000446c Identyfikator procesu powodującego błąd: 0x5e8 Godzina uruchomienia
aplikacji powodującej błąd: 0x01ccc255b24069ef Ścieżka aplikacji powodującej błąd:
C:\Windows\Explorer.EXE Ścieżka modułu powodującego błąd: C:\Users\fluid\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
Identyfikator
raportu: e44db0c7-2e4b-11e1-a3da-001e33d64f55
Error - 2011-12-26 15:24:12 | Computer Name = fluid-Komputer | Source = Application Error | ID = 1000
Description = Nazwa aplikacji powodującej błąd: Explorer.EXE, wersja: 6.1.7600.16385,
sygnatura czasowa: 0x4a5bc60d Nazwa modułu powodującego błąd: DropboxExt.14.dll,
wersja: 1.0.0.14, sygnatura czasowa: 0x4bfd6926 Kod wyjątku: 0xc0000005 Przesunięcie
błędu: 0x0000446c Identyfikator procesu powodującego błąd: 0x5f0 Godzina uruchomienia
aplikacji powodującej błąd: 0x01ccc400e1ef93c5 Ścieżka aplikacji powodującej błąd:
C:\Windows\Explorer.EXE Ścieżka modułu powodującego błąd: C:\Users\fluid\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
Identyfikator
raportu: 30b22b08-2ff7-11e1-9bef-001e33d64f55
Error - 2011-12-26 15:46:39 | Computer Name = fluid-Komputer | Source = Application Error | ID = 1000
Description = Nazwa aplikacji powodującej błąd: explorer.exe, wersja: 6.1.7600.16385,
sygnatura czasowa: 0x4a5bc60d Nazwa modułu powodującego błąd: DropboxExt.14.dll,
wersja: 1.0.0.14, sygnatura czasowa: 0x4bfd6926 Kod wyjątku: 0xc0000005 Przesunięcie
błędu: 0x0000446c Identyfikator procesu powodującego błąd: 0xb8c Godzina uruchomienia
aplikacji powodującej błąd: 0x01ccc403f97364aa Ścieżka aplikacji powodującej błąd:
C:\Windows\explorer.exe Ścieżka modułu powodującego błąd: C:\Users\fluid\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
Identyfikator
raportu: 539dd883-2ffa-11e1-9bef-001e33d64f55
Error - 2011-12-27 04:35:47 | Computer Name = fluid-Komputer | Source = SideBySide | ID = 16842827
Description = Nie można wygenerować kontekstu aktywacji dla „C:\Program Files\Skype\Toolbars\Internet
Explorer\SkypeIEPluginBroker.exe”. Błąd w pliku manifestu lub w pliku zasad „C:\Program
Files\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe” w wierszu 2. Użycie
wielu elementów requestedPrivileges w manifeście jest niedozwolone.
Error - 2011-12-27 05:31:14 | Computer Name = fluid-Komputer | Source = SideBySide | ID = 16842827
Description = Nie można wygenerować kontekstu aktywacji dla „C:\Program Files\Skype\Toolbars\Internet
Explorer\SkypeIEPluginBroker.exe”. Błąd w pliku manifestu lub w pliku zasad „C:\Program
Files\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe” w wierszu 2. Użycie
wielu elementów requestedPrivileges w manifeście jest niedozwolone.
Error - 2011-12-27 08:46:12 | Computer Name = fluid-Komputer | Source = Application Error | ID = 1000
Description = Nazwa aplikacji powodującej błąd: Explorer.EXE, wersja: 6.1.7600.16385,
sygnatura czasowa: 0x4a5bc60d Nazwa modułu powodującego błąd: DropboxExt.14.dll,
wersja: 1.0.0.14, sygnatura czasowa: 0x4bfd6926 Kod wyjątku: 0xc0000005 Przesunięcie
błędu: 0x0000446c Identyfikator procesu powodującego błąd: 0x5e4 Godzina uruchomienia
aplikacji powodującej błąd: 0x01ccc46d378d1e56 Ścieżka aplikacji powodującej błąd:
C:\Windows\Explorer.EXE Ścieżka modułu powodującego błąd: C:\Users\fluid\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
Identyfikator
raportu: c18a0b06-3088-11e1-a00c-001e33d64f55
[ OSession Events ]
Error - 2011-08-28 12:16:02 | Computer Name = fluid-Komputer | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 3, Application Name: Microsoft Office PowerPoint, Application
Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session
lasted 1163 seconds with 660 seconds of active time. This session ended with a
crash.
< End of report >
