OTL
- Kod: Zaznacz wszystko
OTL Extras logfile created on: 2012-02-22 12:55:44 - Run 1
OTL by OldTimer - Version 3.2.33.2 Folder = H:\Users\Lucky\Desktop
64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
4,00 Gb Total Physical Memory | 2,59 Gb Available Physical Memory | 64,72% Memory free
8,00 Gb Paging File | 6,17 Gb Available in Paging File | 77,18% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = H: | %SystemRoot% = H:\Windows | %ProgramFiles% = H:\Program Files (x86)
Drive C: | 19,44 Gb Total Space | 6,80 Gb Free Space | 34,97% Space Free | Partition Type: NTFS
Drive E: | 129,51 Gb Total Space | 4,65 Gb Free Space | 3,59% Space Free | Partition Type: NTFS
Drive F: | 248,79 Gb Total Space | 0,86 Gb Free Space | 0,34% Space Free | Partition Type: NTFS
Drive H: | 49,30 Gb Total Space | 21,38 Gb Free Space | 43,38% Space Free | Partition Type: NTFS
Drive I: | 100,00 Mb Total Space | 71,63 Mb Free Space | 71,64% Space Free | Partition Type: NTFS
Computer Name: LUCKY-KOMPUTER | User Name: Lucky | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
[color=#E56717]========== File Associations ==========[/color]
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = Opera.HTML] -- H:\Program Files (x86)\Opera\Opera.exe (Opera Software)
.url[@ = InternetShortcut] -- H:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- H:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = Opera.HTML] -- H:\Program Files (x86)\Opera\Opera.exe (Opera Software)
[color=#E56717]========== Shell Spawning ==========[/color]
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] -- "H:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
https [open] -- "H:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "H:\Windows\System32\rundll32.exe" "H:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "H:\Windows\System32\rundll32.exe" "H:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [napiprojekt] -- "c:\Program Files (x86)\NapiProjekt\napisy.exe" "%1" ()
Directory [napiprojekt0] -- "c:\Program Files (x86)\NapiProjekt\napisy.exe" "%1" -pobierz_ang ()
Directory [OneNote.Open] -- C:\PROGRA~1\MICROS~1\Office12\ONENOTE.EXE "%L" (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] -- "H:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
https [open] -- "H:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [napiprojekt] -- "c:\Program Files (x86)\NapiProjekt\napisy.exe" "%1" ()
Directory [napiprojekt0] -- "c:\Program Files (x86)\NapiProjekt\napisy.exe" "%1" -pobierz_ang ()
Directory [OneNote.Open] -- C:\PROGRA~1\MICROS~1\Office12\ONENOTE.EXE "%L" (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
[color=#E56717]========== Security Center Settings ==========[/color]
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
[color=#E56717]========== Firewall Settings ==========[/color]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[color=#E56717]========== Authorized Applications List ==========[/color]
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{266597A9-1664-0000-0100-DCBF2B69166B}" = Autodesk Vault 2012 (Client) Polish Language Pack
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{4E1A54A9-FFB3-4BE6-B59B-3CC94C3B31D2}" = Rozszerzenie Autodesk Inventor Fusion dla programu Inventor 2012 Language Pack
"{4E3B47F2-21EB-4F20-87C8-5A0E4D5F3858}" = Rozszerzenie Autodesk Inventor Fusion dla programu Inventor 2012
"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime
"{5783F2D7-A001-0415-0102-0060B0CE6BBA}" = AutoCAD 2012 - Polski
"{5783F2D7-A001-0415-1102-0060B0CE6BBA}" = AutoCAD 2012 Language Pack - Polski
"{5783F2D7-A028-0409-0100-0060B0CE6BBA}" = DWG TrueView 2012
"{7F4DD591-1664-0409-0000-7107D70F3DB4}" = Autodesk Inventor Professional 2012
"{7F4DD591-1664-0409-0001-7107D70F3DB4}" = Autodesk Inventor Professional 2012 Polski pakiet językowy
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{8E5DA9A6-7A9F-3A6F-BC5C-D6CBCA6A29C7}" = Microsoft .NET Framework 4 Extended PLK Language Pack
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0415-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Polish) 2007
"{9B48B0AC-C813-4174-9042-476A887592C7}" = Windows Live ID Sign-in Assistant
"{9E3B2120-0BD8-9865-0387-E9BAC2A53AD3}" = ccc-utility64
"{A49402DD-2781-3782-B0CF-52BDA349E3F3}" = Microsoft .NET Framework 4 Client Profile PLK Language Pack
"{ABE286AE-C65D-B7DE-C8D1-DF79584169B4}" = AMD Fuel
"{B46DECD1-1664-4EF1-0000-22D71E81877C}" = Autodesk Inventor Content Center Libraries 2012 (Desktop Content)
"{BE882A12-5A45-3DFF-9FD0-306DE65EB8A5}" = AMD Catalyst Install Manager
"{CF526A26-1664-0000-0000-02E95019B628}" = Autodesk Vault 2012 (Client)
"{CFA5BA6D-D6BB-AE1B-E61E-5B1ACFC8F0BB}" = AMD Drag and Drop Transcoding
"{D25FF5C1-1664-469A-9794-69309387C193}" = Narzędzie Quick Uninstall dla oprogramowania Autodesk Inventor 2012
"{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319
"{E027C59C-4C47-4BE8-8078-BCD3D2680EC3}" = Eco Materials Adviser (x64)
"{EF393943-0CCE-9CD9-6181-96DF4E4428EF}" = AMD Media Foundation Decoders
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{FFF5619F-6669-4EC5-A85E-9994F70A9E5D}" = Autodesk Inventor Fusion 2012
"{FFF7F80F-929E-497F-A112-B070DE816128}" = Autodesk Inventor Fusion 2012 Language Pack
"AutoCAD 2012 - Polski" = AutoCAD 2012 - Polski
"Autodesk Inventor Fusion 2012" = Autodesk Inventor Fusion 2012
"Autodesk Inventor Professional 2012" = Autodesk Inventor Professional 2012 Polski
"Bullzip PDF Printer_is1" = Bullzip PDF Printer 7.2.0.1319
"CCleaner" = CCleaner
"DWG TrueView 2012" = DWG TrueView 2012
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Extended
"Rozszerzenie Autodesk Inventor Fusion dla programu Inventor 2012" = Autodesk Inventor Fusion for Inventor 2012 Add-in
"TeamSpeak 3 Client" = TeamSpeak 3 Client
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{086F9A69-CD39-4893-A9FB-D3A0634CE3F7}" = Usługa Autodesk Content Service
"{0D97F8D1-2102-53D2-5633-C992D6086801}" = CCC Help Chinese Traditional
"{0EA00EA7-42C0-ED9C-9110-2C04B8EDBA66}" = CCC Help Italian
"{0EB86B70-91FF-39BF-633C-785DF2218CC6}" = CCC Help French
"{1686C07D-C2BB-A8B2-C5ED-32C4EE1A3E62}" = CCC Help Spanish
"{18B6A9F8-25BC-5978-6B42-A50FA2CABC18}" = CCC Help English
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}" = Microsoft XNA Framework Redistributable 3.1
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F61E0B1-1AB8-F15E-07C4-46D100A1D3F7}" = Borderlands
"{24FF088D-CDCF-480C-8A4B-98F14A54CAA8}" = Autodesk Material Library Low Resolution Image Library 2012
"{26A24AE4-039D-4CA4-87B4-2F83216027FF}" = Java(TM) 6 Update 27
"{298C6691-46B2-2065-0DD7-1E7B3B669A47}" = CCC Help Finnish
"{2ECA81CA-D932-4AD3-AD59-BF5CCF099C83}" = Catalyst Control Center - Branding
"{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}" = NVIDIA PhysX
"{400C5445-1AE8-1A41-CAC6-AB114341F65D}" = CCC Help Swedish
"{41785C66-90F2-40CE-8CB5-1C94BFC97280}" = Microsoft Chart Controls for Microsoft .NET Framework 3.5
"{42442BC6-5A92-4BC2-9E0C-3D359D548A21}_is1" = Pazera Free MP4 to AVI Converter 1.5
"{448B1C6D-02C2-7681-66B2-624E58B25375}" = CCC Help Turkish
"{46EB9D45-FC1A-2635-1693-176E6FA1C672}" = CCC Help Portuguese
"{46EDCFA5-7EDB-46A9-B093-1C6237470CEC}" = 3DMark 11
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{4D53090A-CE35-42BD-B377-831000018301}" = Fable III
"{4D530FA3-9B89-4186-98B7-F51000008100}" = Age of Empires Online
"{5545EEE1-FA36-4F76-B6BE-5696E7F4E2D6}" = VBA (2627.01)
"{651F43AA-3F06-9277-6F1B-8E8155017463}" = CCC Help Polish
"{65420DC9-306E-4371-905F-F4DC3B418E52}" = Autodesk Material Library Base Resolution Image Library 2012
"{68DE32E1-292B-6A02-6A53-935BFAE70C99}" = CCC Help Chinese Standard
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{745D37C2-26F4-4B65-BA13-F9840EBFA75B}" = Might & Magic Heroes VI
"{76285C16-411A-488A-BCE3-C83CB933D8CF}" = Battlefield 3™
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX
"{7E659C5C-4DF1-499B-B802-77BAE9ABE4D4}" = Razer Diamondback 3G
"{818212BA-7F8C-DDF9-64BE-F6D0B6F46D29}" = CCC Help German
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{84F4542C-ED64-28AC-49B3-1A9BAB395AB4}" = CCC Help Hungarian
"{85E0AAB0-5F25-443C-AC06-D24D01629B9D}" = Sacred 2 Złota Edycja
"{88603FC0-6B3C-442D-981E-E3D49F083548}_is1" = NovaBench 3.0.4
"{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{8F0837C2-EE09-4903-88F3-1976FE7FFF4E}" = Autodesk Material Library 2012
"{90120000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2007
"{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007
"{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007
"{90120000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2007
"{90120000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2007
"{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007
"{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2007
"{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007
"{90120000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2007
"{90120000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2007
"{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}" = FARO LS 1.1.406.58
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9C41195F-11B3-8EEC-6634-7183BE6CB1B1}" = CCC Help Japanese
"{A074DE55-29EB-459C-99C9-3F26C5669ECB}" = Ontrack EasyRecovery DataRecovery Trial
"{A0799D71-BC04-43ED-B6A9-01BC78809428}" = Nelprof5
"{A1E13E5C-7B48-4181-88CC-7DACD56BE7C8}}_is1" = Wavin
"{A33A89D0-2F48-FD1C-A243-9073EE0592E0}" = Catalyst Control Center InstallProxy
"{A49BDCBE-590E-43A6-AB77-7C40E499B7C1}" = Autodesk Design Review 2012
"{A66FB6C7-B689-AFD5-21BA-7CAF8E44E6E6}" = Catalyst Control Center Graphics Previews Common
"{AC76BA86-7AD7-1045-7B44-A95000000001}" = Adobe Reader 9.5.0 - Polish
"{AE136F7F-7DC6-600F-9DF9-BFA0DF516135}" = Catalyst Control Center Localization All
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B48E264C-C8CD-4617-B0BE-46E977BAD694}" = ANNO 2070
"{B4CF00AE-2622-7BC6-24EC-4E5A0A8C9135}" = CCC Help Czech
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{BAE1C0A8-634D-CFF1-0E0C-893092427D34}" = CCC Help Danish
"{BEE64C14-BEF1-4610-8A68-A16EAA47B882}" = Futuremark SystemInfo
"{C2DEC505-79A9-E952-32B0-31B67B83E231}" = CCC Help Korean
"{C2FB14FB-DF6B-287D-BDC3-C7BEC86F539E}" = AMD VISION Engine Control Center
"{C40C3C3D-97CF-44B5-836C-766E374464B3}" = 3DMark Vantage
"{CA31F991-DBD2-4DE1-B6D2-30105F23CBBC}" = RapeLay
"{CCEFAE22-4D01-0084-D1CA-AC14AA743A97}" = CCC Help Greek
"{D179B513-AD43-4013-AC50-C16107A0A02D}" = LogMeIn Hamachi
"{DDEDAF6C-488E-4CDA-8276-1CCF5F3C5C32}" = Command & Conquer 3
"{DE460826-5E72-2357-154F-E376F9926008}" = CCC Help Norwegian
"{E21FFD29-D231-3BD3-6941-15710E44BED4}" = CCC Help Dutch
"{E3E313C7-0AE2-7F44-52E8-528D4EDC74B2}" = CCC Help Thai
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{F0A209B7-7F85-4BDD-8F1F-B98EEAD9E04B}" = Wiedźmin 2
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F2508213-9989-4E85-A078-72BE483917EF}" = Microsoft Games for Windows - LIVE Redistributable
"{F9929777-7B6E-F53D-3105-1C06E5120CA1}" = CCC Help Russian
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Alan Wake_is1" = Alan Wake
"AP Tuner 3.08" = AP Tuner 3.08
"AQQ" = WapSter AQQ
"ATITool" = ATITool Overclocking Utility
"Autodesk Design Review 2012" = Autodesk Design Review 2012
"Autodesk Vault 2012 (Client)" = Autodesk Vault 2012 (Client)
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"CzasoWyłącznik 3.0" = CzasoWyłącznik 3.0
"Diablo II" = Diablo II
"Diablo III Beta" = Diablo III Beta
"DiVent" = DiVent 2.7
"ENTERPRISE" = Microsoft Office Enterprise 2007
"GFWL_{4D530FA3-9B89-4186-98B7-F51000008100}" = Age of Empires Online
"GPL Ghostscript 9.04" = GPL Ghostscript
"Guitar Pro 5_is1" = Guitar Pro 5.2
"InstallShield_{A074DE55-29EB-459C-99C9-3F26C5669ECB}" = Ontrack EasyRecovery DataRecovery Trial
"KLiteCodecPack_is1" = K-Lite Codec Pack 7.7.0 (Full)
"LastPass" = LastPass (deinstalacja)
"LogMeIn Hamachi" = LogMeIn Hamachi
"Magicka_is1" = Magicka
"NapiProjekt_is1" = NapiProjekt 2.0.0 (build 1836)
"OCCT_is1" = OCCT Perestroika 3.1.0
"OpenAL" = OpenAL
"Opera 11.61.1250" = Opera 11.61
"Steam App 1250" = Killing Floor
"Steam App 1260" = Killing Floor SDK
"Steam App 35420" = Killing Floor Mod: Defence Alliance 2
"Trine 2_is1" = Trine 2
"Tunngle beta_is1" = Tunngle beta
"TZAC ANTICHEAT" = TZAC ANTICHEAT
"uTorrent" = µTorrent
"WinRAR archiver" = WinRAR 4.01 (32-bitowy)
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
[HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
[HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
[HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
[HKEY_USERS\S-1-5-21-4086880579-2245560418-3349926169-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
[color=#E56717]========== Last 10 Event Log Errors ==========[/color]
Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt!
< End of report >
- Kod: Zaznacz wszystko
OTL logfile created on: 2012-02-22 12:55:44 - Run 1
OTL by OldTimer - Version 3.2.33.2 Folder = H:\Users\Lucky\Desktop
64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
4,00 Gb Total Physical Memory | 2,59 Gb Available Physical Memory | 64,72% Memory free
8,00 Gb Paging File | 6,17 Gb Available in Paging File | 77,18% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = H: | %SystemRoot% = H:\Windows | %ProgramFiles% = H:\Program Files (x86)
Drive C: | 19,44 Gb Total Space | 6,80 Gb Free Space | 34,97% Space Free | Partition Type: NTFS
Drive E: | 129,51 Gb Total Space | 4,65 Gb Free Space | 3,59% Space Free | Partition Type: NTFS
Drive F: | 248,79 Gb Total Space | 0,86 Gb Free Space | 0,34% Space Free | Partition Type: NTFS
Drive H: | 49,30 Gb Total Space | 21,38 Gb Free Space | 43,38% Space Free | Partition Type: NTFS
Drive I: | 100,00 Mb Total Space | 71,63 Mb Free Space | 71,64% Space Free | Partition Type: NTFS
Computer Name: LUCKY-KOMPUTER | User Name: Lucky | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
[color=#E56717]========== Processes (SafeList) ==========[/color]
PRC - [2012-02-22 12:55:07 | 000,583,680 | ---- | M] (OldTimer Tools) -- H:\Users\Lucky\Desktop\OTL.exe
PRC - [2012-01-26 17:19:07 | 000,949,104 | ---- | M] (Opera Software) -- H:\Program Files (x86)\Opera\Opera.exe
PRC - [2011-07-21 11:12:16 | 000,269,480 | ---- | M] (Avira GmbH) -- C:\Avira\AntiVir Desktop\avguard.exe
PRC - [2011-04-21 06:53:48 | 000,136,360 | ---- | M] (Avira GmbH) -- C:\Avira\AntiVir Desktop\sched.exe
PRC - [2011-04-21 06:53:33 | 000,281,768 | ---- | M] (Avira GmbH) -- C:\Avira\AntiVir Desktop\avgnt.exe
PRC - [2011-02-02 13:08:16 | 000,018,656 | ---- | M] () -- H:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
PRC - [2010-04-30 09:36:28 | 000,131,072 | ---- | M] () -- H:\Program Files (x86)\Razer\Diamondback 3G\razertra.exe
PRC - [2010-04-28 16:25:44 | 000,228,352 | ---- | M] () -- H:\Program Files (x86)\Razer\Diamondback 3G\razerhid.exe
PRC - [2010-04-06 01:27:46 | 026,102,056 | R--- | M] (Skype Technologies S.A.) -- C:\Phone\Skype.exe
PRC - [2007-02-14 10:11:18 | 000,163,840 | ---- | M] (Razer Inc.) -- H:\Program Files (x86)\Razer\Diamondback 3G\razerofa.exe
[color=#E56717]========== Modules (No Company Name) ==========[/color]
MOD - [2011-09-06 20:29:11 | 006,277,280 | ---- | M] () -- H:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
MOD - [2010-04-30 09:36:28 | 000,131,072 | ---- | M] () -- H:\Program Files (x86)\Razer\Diamondback 3G\razertra.exe
MOD - [2010-04-28 16:25:44 | 000,228,352 | ---- | M] () -- H:\Program Files (x86)\Razer\Diamondback 3G\razerhid.exe
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
SRV:[b]64bit:[/b] - [2011-12-06 04:11:56 | 000,235,520 | ---- | M] (AMD) [Auto | Running] -- H:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:[b]64bit:[/b] - [2011-12-05 22:15:08 | 000,361,984 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Running] -- H:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service)
SRV:[b]64bit:[/b] - [2011-09-16 09:15:24 | 001,431,888 | ---- | M] (Flexera Software, Inc.) [On_Demand | Stopped] -- H:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64)
SRV:[b]64bit:[/b] - [2009-07-14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- H:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:[b]64bit:[/b] - [2009-07-14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- H:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2012-02-09 20:42:16 | 000,481,064 | ---- | M] (Valve Corporation) [Disabled | Stopped] -- H:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2012-02-07 13:18:30 | 002,343,816 | ---- | M] (LogMeIn Inc.) [Disabled | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2011-12-12 21:35:08 | 000,751,464 | ---- | M] (Tunngle.net GmbH) [Disabled | Stopped] -- c:\Program Files (x86)\Tunngle\TnglCtrl.exe -- (TunngleService)
SRV - [2011-07-21 11:12:16 | 000,269,480 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011-04-21 06:53:48 | 000,136,360 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2011-02-02 13:08:16 | 000,018,656 | ---- | M] () [Auto | Running] -- H:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe -- (Autodesk Content Service)
SRV - [2010-12-08 00:30:00 | 000,848,184 | ---- | M] (Autodesk, Inc.) [Auto | Running] -- C:\Program Files\Autodesk\Inventor 2012\Moldflow\bin\mitsijm.exe -- (mitsijm2012)
SRV - [2010-11-11 13:39:34 | 000,128,928 | ---- | M] (Futuremark Corporation) [On_Demand | Stopped] -- H:\Program Files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe -- (Futuremark SystemInfo Service)
SRV - [2010-03-18 12:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- H:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009-06-10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- H:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2006-10-26 23:47:54 | 000,065,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service)
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
DRV:[b]64bit:[/b] - [2011-12-06 04:45:40 | 010,720,256 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- H:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:[b]64bit:[/b] - [2011-12-06 03:12:14 | 000,327,168 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- H:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:[b]64bit:[/b] - [2011-10-17 18:40:50 | 000,093,712 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- H:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
DRV:[b]64bit:[/b] - [2011-09-10 10:13:23 | 000,270,912 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- H:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:[b]64bit:[/b] - [2011-07-21 11:15:16 | 000,123,784 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- H:\Windows\SysNative\drivers\avipbb.sys -- (avipbb)
DRV:[b]64bit:[/b] - [2011-07-21 11:15:15 | 000,088,288 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- H:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt)
DRV:[b]64bit:[/b] - [2011-06-24 06:31:02 | 000,055,424 | ---- | M] (Advanced Micro Devices) [Kernel | Auto | Running] -- H:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys -- (AODDriver4.01)
DRV:[b]64bit:[/b] - [2010-02-18 08:18:24 | 000,046,136 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- H:\Windows\SysNative\drivers\amdiox64.sys -- (amdiox64)
DRV:[b]64bit:[/b] - [2009-09-16 07:02:42 | 000,031,232 | ---- | M] (Tunngle.net) [Kernel | On_Demand | Running] -- H:\Windows\SysNative\drivers\tap0901t.sys -- (tap0901t) TAP-Win32 Adapter V9 (Tunngle)
DRV:[b]64bit:[/b] - [2009-07-14 02:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- H:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2009-07-14 02:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- H:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2009-07-14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- H:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- H:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009-07-14 02:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- H:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- H:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009-06-10 21:35:42 | 000,187,392 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- H:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:[b]64bit:[/b] - [2009-06-10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- H:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009-06-10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- H:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009-06-10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- H:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009-06-10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- H:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:[b]64bit:[/b] - [2009-03-18 16:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- H:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
DRV:[b]64bit:[/b] - [2007-08-08 17:54:12 | 000,035,624 | ---- | M] () [Kernel | On_Demand | Running] -- H:\Windows\SysNative\drivers\ATITool64.sys -- (ATITool)
DRV:[b]64bit:[/b] - [2005-11-07 13:33:12 | 000,021,120 | ---- | M] (Razer (Asia-Pacific) Pte Ltd) [Kernel | On_Demand | Running] -- H:\Windows\SysNative\drivers\DB3G.sys -- (Razerlow)
DRV - [2011-11-08 20:27:37 | 000,241,848 | ---- | M] () [Kernel | On_Demand | Stopped] -- H:\Users\Lucky\AppData\Roaming\TZAC\tizek64.sys -- (tizekdrv)
DRV - [2009-07-14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- H:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
[color=#E56717]========== Internet Explorer ==========[/color]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = H:\Windows\SysWOW64\blank.htm
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-4086880579-2245560418-3349926169-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: H:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: c:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: c:\Program Files (x86)\DivX\DivX Player\npDivxPlayerPlugin.dll (DivX, Inc)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: H:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
O1 HOSTS File: ([2012-01-31 07:37:45 | 000,000,960 | ---- | M]) - H:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 activation.guitar-pro.com
O1 - Hosts: 127.0.0.1 genuine.microsoft.com
O1 - Hosts: 127.0.0.1 mpa.one.microsoft.com
O1 - Hosts: 127.0.0.1 sls.microsoft.com
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O4 - HKLM..\Run: [avgnt] C:\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [Diamondback] H:\Program Files (x86)\Razer\Diamondback 3G\razerhid.exe ()
O4 - HKLM..\Run: [StartCCC] H:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKU\S-1-5-19..\Run: [Sidebar] H:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] H:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] H:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] H:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O8:[b]64bit:[/b] - Extra context menu item: E&ksportuj do programu MicrosoTeamSpeak 3 Client2010-04-06 01ft Excel - C:\TeamSpeak 3 ClientProgram Files (x86)\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files (x86)\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O16 - DPF: {CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{64D53BA8-77B1-409D-9EA2-A6E5FA5D62BD}: DhcpNameServer = 95.160.170.92 88.156.222.92 82.139.8.40
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8A5832D0-CE09-42FA-84E9-61DBD168E087}: DhcpNameServer = 7.254.254.254
O18:[b]64bit:[/b] - Protocol\Handler\gopher - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - H:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - H:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (H:\Windows\system32\userinit.exe) - H:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - H:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - H:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - H:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{5bc4d8e9-db84-11e0-9253-485b3933b2e0}\Shell - "" = AutoRun
O33 - MountPoints2\{5bc4d8e9-db84-11e0-9253-485b3933b2e0}\Shell\AutoRun\command - "" = D:\Setup.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
[2012-02-22 12:55:07 | 000,583,680 | ---- | C] (OldTimer Tools) -- H:\Users\Lucky\Desktop\OTL.exe
[2012-02-22 11:19:23 | 000,000,000 | -HSD | C] -- H:\Config.Msi
[2012-02-17 08:55:58 | 000,000,000 | ---D | C] -- H:\ProgramData\ATI
[2012-02-17 08:55:56 | 000,000,000 | ---D | C] -- H:\Program Files (x86)\AMD APP
[2012-02-17 08:55:45 | 000,000,000 | ---D | C] -- H:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD VISION Engine Control Center
[2012-02-17 08:52:26 | 000,000,000 | ---D | C] -- H:\AMD
[2012-02-16 18:41:44 | 000,000,000 | ---D | C] -- H:\Users\Lucky\Documents\Remedy
[2012-02-16 17:57:06 | 000,000,000 | ---D | C] -- H:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remedy Entertainment
[2012-02-10 21:06:12 | 000,000,000 | ---D | C] -- H:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
[2012-02-09 21:02:50 | 000,000,000 | ---D | C] -- H:\Users\Lucky\AppData\Local\ElevatedDiagnostics
[2012-02-07 17:53:55 | 000,000,000 | ---D | C] -- H:\Users\Lucky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LastPass
[2012-02-07 17:53:54 | 000,000,000 | ---D | C] -- H:\ProgramData\Microsoft\Windows\Start Menu\Programs\LastPass
[2012-02-07 17:53:54 | 000,000,000 | ---D | C] -- H:\Program Files (x86)\LastPass
[2012-02-07 09:36:21 | 000,033,856 | -H-- | C] (LogMeIn, Inc.) -- H:\Windows\SysNative\hamachi.sys
[2012-02-06 09:50:10 | 000,000,000 | ---D | C] -- H:\BDS
[2012-02-05 18:37:36 | 000,000,000 | ---D | C] -- H:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paradox Interactive
[2012-01-31 07:37:46 | 000,410,624 | ---- | C] (Microsoft Corporation) -- H:\Windows\SysWow64\systemcpl.dll
[2012-01-31 07:37:46 | 000,001,536 | ---- | C] (Microsoft Corporation) -- H:\Windows\SysWow64\sppcomapi.dll
[2012-01-30 00:50:06 | 000,000,000 | ---D | C] -- H:\Users\Lucky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CzasoWyłącznik 3.0
[2012-01-28 19:49:25 | 000,000,000 | ---D | C] -- H:\Users\Lucky\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LIMBO
[2012-01-28 19:43:12 | 000,000,000 | ---D | C] -- H:\rc
[2012-01-28 16:44:10 | 000,306,688 | ---- | C] (InstallShield Software Corporation) -- H:\Windows\IsUninst.exe
[4 H:\Windows\SysWow64\*.tmp files -> H:\Windows\SysWow64\*.tmp -> ]
[1 H:\Windows\*.tmp files -> H:\Windows\*.tmp -> ]
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
[2012-02-22 12:57:12 | 000,302,592 | ---- | M] () -- H:\Users\Lucky\Desktop\090jc3fg.exe
[2012-02-22 12:55:07 | 000,583,680 | ---- | M] (OldTimer Tools) -- H:\Users\Lucky\Desktop\OTL.exe
[2012-02-22 12:23:28 | 000,009,584 | -H-- | M] () -- H:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012-02-22 12:23:28 | 000,009,584 | -H-- | M] () -- H:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012-02-22 11:23:00 | 000,067,584 | --S- | M] () -- H:\Windows\bootstat.dat
[2012-02-22 11:22:54 | 3220,525,056 | -HS- | M] () -- H:\hiberfil.sys
[2012-02-16 17:57:06 | 000,001,027 | ---- | M] () -- H:\Users\Public\Desktop\Alan Wake.lnk
[2012-02-16 14:30:59 | 001,662,996 | ---- | M] () -- H:\Windows\SysNative\PerfStringBackup.INI
[2012-02-16 14:30:59 | 000,737,844 | ---- | M] () -- H:\Windows\SysNative\perfh015.dat
[2012-02-16 14:30:59 | 000,652,052 | ---- | M] () -- H:\Windows\SysNative\perfh009.dat
[2012-02-16 14:30:59 | 000,154,532 | ---- | M] () -- H:\Windows\SysNative\perfc015.dat
[2012-02-16 14:30:59 | 000,120,984 | ---- | M] () -- H:\Windows\SysNative\perfc009.dat
[2012-02-07 09:44:31 | 000,000,638 | ---- | M] () -- H:\Users\Public\Desktop\Tunngle beta.lnk
[2012-02-06 23:18:40 | 000,000,000 | ---- | M] () -- H:\Windows\SysWow64\Access.dat
[2012-02-06 23:09:27 | 000,001,673 | ---- | M] () -- H:\Users\Lucky\Desktop\Borderlands.lnk
[2012-02-05 18:37:36 | 000,000,997 | ---- | M] () -- H:\Users\Public\Desktop\Magicka.lnk
[2012-01-31 21:01:28 | 000,364,173 | ---- | M] () -- H:\Users\Lucky\Documents\Bez_nazwy.wma
[2012-01-31 07:37:51 | 000,002,048 | ---- | M] () -- H:\Windows\SysWow64\winver.exe
[2012-01-31 07:37:49 | 000,410,624 | ---- | M] (Microsoft Corporation) -- H:\Windows\SysWow64\systemcpl.dll
[2012-01-31 07:37:48 | 000,001,536 | ---- | M] (Microsoft Corporation) -- H:\Windows\SysWow64\sppcomapi.dll
[2012-01-31 07:37:46 | 000,113,543 | ---- | M] () -- H:\Windows\SysWow64\slmgr.vbs
[2012-01-30 00:50:06 | 000,000,501 | ---- | M] () -- H:\Users\Lucky\Desktop\CzasoWyłącznik 3.0.lnk
[2012-01-28 19:49:25 | 000,000,683 | ---- | M] () -- H:\Users\Lucky\Desktop\LIMBO.lnk
[4 H:\Windows\SysWow64\*.tmp files -> H:\Windows\SysWow64\*.tmp -> ]
[1 H:\Windows\*.tmp files -> H:\Windows\*.tmp -> ]
[color=#E56717]========== Files Created - No Company Name ==========[/color]
[2012-02-16 17:57:06 | 000,001,027 | ---- | C] () -- H:\Users\Public\Desktop\Alan Wake.lnk
[2012-02-06 23:09:27 | 000,001,673 | ---- | C] () -- H:\Users\Lucky\Desktop\Borderlands.lnk
[2012-02-05 18:37:36 | 000,000,997 | ---- | C] () -- H:\Users\Public\Desktop\Magicka.lnk
[2012-01-31 21:01:28 | 000,364,173 | ---- | C] () -- H:\Users\Lucky\Documents\Bez_nazwy.wma
[2012-01-31 07:37:46 | 000,113,543 | ---- | C] () -- H:\Windows\SysWow64\slmgr.vbs
[2012-01-31 07:37:46 | 000,002,048 | ---- | C] () -- H:\Windows\SysWow64\winver.exe
[2012-01-30 00:50:06 | 000,000,501 | ---- | C] () -- H:\Users\Lucky\Desktop\CzasoWyłącznik 3.0.lnk
[2012-01-28 19:49:25 | 000,000,683 | ---- | C] () -- H:\Users\Lucky\Desktop\LIMBO.lnk
[2012-01-28 16:45:54 | 000,007,052 | ---- | C] () -- H:\Program Files (x86)\TbC.nfo
[2011-12-06 03:35:10 | 000,204,960 | ---- | C] () -- H:\Windows\SysWow64\ativvsvl.dat
[2011-12-06 03:35:10 | 000,157,152 | ---- | C] () -- H:\Windows\SysWow64\ativvsva.dat
[2011-12-05 22:04:00 | 000,059,904 | ---- | C] () -- H:\Windows\SysWow64\OpenVideo.dll
[2011-12-05 22:03:52 | 000,054,784 | ---- | C] () -- H:\Windows\SysWow64\OVDecode.dll
[2011-09-28 20:11:23 | 000,000,043 | ---- | C] () -- H:\Windows\gswin32.ini
[2011-09-28 08:32:27 | 000,207,940 | -H-- | C] () -- H:\Windows\SysWow64\mlfcache.dat
[2011-09-16 09:15:52 | 000,000,153 | ---- | C] () -- H:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
[2011-09-16 09:10:46 | 001,637,518 | ---- | C] () -- H:\Windows\SysWow64\PerfStringBackup.INI
[2011-09-13 00:06:16 | 000,003,917 | ---- | C] () -- H:\Windows\SysWow64\atipblag.dat
[2011-09-11 10:18:20 | 000,027,817 | ---- | C] () -- H:\Windows\DIIUnin.dat
[2011-09-10 21:36:44 | 000,021,840 | ---- | C] () -- H:\Windows\SysWow64\SIntfNT.dll
[2011-09-10 21:36:44 | 000,017,212 | ---- | C] () -- H:\Windows\SysWow64\SIntf32.dll
[2011-09-10 21:36:44 | 000,012,067 | ---- | C] () -- H:\Windows\SysWow64\SIntf16.dll
[2011-09-10 10:55:22 | 000,000,000 | ---- | C] () -- H:\Windows\SysWow64\Access.dat
[2011-09-07 16:49:09 | 000,175,616 | ---- | C] () -- H:\Windows\SysWow64\unrar.dll
[2011-09-07 16:49:08 | 000,650,752 | ---- | C] () -- H:\Windows\SysWow64\xvidcore.dll
[2011-09-07 16:49:08 | 000,243,200 | ---- | C] () -- H:\Windows\SysWow64\xvidvfw.dll
[2011-09-07 16:49:08 | 000,074,752 | ---- | C] () -- H:\Windows\SysWow64\ff_vfw.dll
[2011-09-07 16:49:08 | 000,000,038 | ---- | C] () -- H:\Windows\avisplitter.ini
[2011-09-06 18:24:43 | 000,000,000 | ---- | C] () -- H:\Windows\ativpsrm.bin
[2011-04-09 17:55:28 | 000,179,261 | ---- | C] () -- H:\Windows\SysWow64\xlive.dll.cat
[color=#E56717]========== LOP Check ==========[/color]
[2011-09-29 22:36:31 | 000,000,000 | ---D | M] -- H:\Users\Lucky\AppData\Roaming\.minecraft
[2011-09-30 10:17:06 | 000,000,000 | ---D | M] -- H:\Users\Lucky\AppData\Roaming\Autodesk
[2011-09-13 17:05:03 | 000,000,000 | ---D | M] -- H:\Users\Lucky\AppData\Roaming\Babylon
[2011-09-11 13:47:47 | 000,000,000 | ---D | M] -- H:\Users\Lucky\AppData\Roaming\Command & Conquer 3 Wojny o tyberium
[2012-02-22 11:17:33 | 000,000,000 | ---D | M] -- H:\Users\Lucky\AppData\Roaming\DAEMON Tools Lite
[2011-09-16 12:47:59 | 000,000,000 | ---D | M] -- H:\Users\Lucky\AppData\Roaming\Day 1 Studios
[2011-12-28 10:30:58 | 000,000,000 | ---D | M] -- H:\Users\Lucky\AppData\Roaming\EurekaLog
[2011-11-05 19:58:56 | 000,000,000 | ---D | M] -- H:\Users\Lucky\AppData\Roaming\fltk.org
[2012-02-21 22:50:30 | 000,000,000 | ---D | M] -- H:\Users\Lucky\AppData\Roaming\foobar2000
[2011-09-30 15:59:54 | 000,000,000 | ---D | M] -- H:\Users\Lucky\AppData\Roaming\Guitar Pro 6
[2011-10-14 06:38:08 | 000,000,000 | ---D | M] -- H:\Users\Lucky\AppData\Roaming\Kalypso Media
[2011-09-10 15:22:05 | 000,000,000 | ---D | M] -- H:\Users\Lucky\AppData\Roaming\Lionhead Studios
[2011-09-07 14:02:03 | 000,000,000 | ---D | M] -- H:\Users\Lucky\AppData\Roaming\LolClient
[2011-10-23 08:01:56 | 000,000,000 | ---D | M] -- H:\Users\Lucky\AppData\Roaming\Might & Magic Heroes VI
[2011-09-10 13:19:54 | 000,000,000 | ---D | M] -- H:\Users\Lucky\AppData\Roaming\My Battle for Middle-earth(tm) II Files
[2011-10-27 19:38:06 | 000,000,000 | ---D | M] -- H:\Users\Lucky\AppData\Roaming\NapiProjekt
[2011-09-06 15:57:43 | 000,000,000 | ---D | M] -- H:\Users\Lucky\AppData\Roaming\Opera
[2011-09-25 17:21:20 | 000,000,000 | ---D | M] -- H:\Users\Lucky\AppData\Roaming\PDF Writer
[2011-09-06 18:42:25 | 000,000,000 | ---D | M] -- H:\Users\Lucky\AppData\Roaming\Rovio
[2011-09-13 17:08:21 | 000,000,000 | ---D | M] -- H:\Users\Lucky\AppData\Roaming\Thinstall
[2011-12-17 17:29:34 | 000,000,000 | ---D | M] -- H:\Users\Lucky\AppData\Roaming\Trine2
[2011-10-08 09:00:26 | 000,000,000 | ---D | M] -- H:\Users\Lucky\AppData\Roaming\TS3Client
[2012-02-07 09:45:56 | 000,000,000 | ---D | M] -- H:\Users\Lucky\AppData\Roaming\Tunngle
[2011-11-08 20:35:39 | 000,000,000 | ---D | M] -- H:\Users\Lucky\AppData\Roaming\TZAC
[2011-11-27 16:24:02 | 000,000,000 | ---D | M] -- H:\Users\Lucky\AppData\Roaming\Ubisoft
[2012-02-22 11:24:09 | 000,000,000 | ---D | M] -- H:\Users\Lucky\AppData\Roaming\uTorrent
[2011-12-23 22:43:17 | 000,032,592 | ---- | M] () -- H:\Windows\Tasks\SCHEDLGU.TXT
[color=#E56717]========== Purity Check ==========[/color]
[color=#E56717]========== Alternate Data Streams ==========[/color]
@Alternate Data Stream - 143 bytes -> H:\ProgramData\TEMP:63238B95
< End of report >
O21\ProgramData\Microsoft\Windows\Start Menu\Programs\LastPass
() -- H
- Kod: Zaznacz wszystko
GMER 1.0.15.15641 - http://www.gmer.net
Rootkit scan 2012-02-22 15:14:45
Windows 6.1.7600
Running: 090jc3fg.exe
---- Registry - GMER 1.0.15 ----
Reg HKLM\SYSTEM\CurrentControlSet\services\rdyboost\Parameters@ReadyBootPlanAge 1
Reg HKLM\SYSTEM\CurrentControlSet\services\rdyboost\Parameters@LastBootPlanUserTime ??r?, ?lut ?22 ?12, 11:24:38????????????u??????????????????????
Reg HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@E:\3D cenzura-spam 2.055.001 OxS \xae\3D cenzura-spam 2.055.001 OxS!\xae.exe 1
---- Files - GMER 1.0.15 ----
File H:\Users\Lucky\AppData\Local\Opera\Opera\cache\g_0000\opr02T6L.tmp 0 bytes
File H:\Users\Lucky\AppData\Local\Opera\Opera\cache\g_0000\opr02T7E.tmp 0 bytes
---- EOF - GMER 1.0.15 ----
Jak przyśpiszyć maksymalnie ten komputer? - Protocol\Handler\gopher - No CLSID value found
O18
