Sprawdzenia loga z hijacka

**Posty:** 7 · przez **Ninka46** 20 Gru 2011, 21:39

Prosze o s sprawdzenie loga.Komputer ma system od 2007 r i ostatnio coś zwolnił.To znaczy są momenty jakby eis zawieszał(zastanawiał

) na jakiś czas i nie reaguje, a potem znów normalnie

Kod: Zaznacz wszystko: Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 20:16:35, on 2011-12-20 Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\AVAST Software\Avast\AvastSvc.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Ashampoo\Ashampoo WinOptimizer 8\DfsdkS.exe C:\Program Files\Google\Update\GoogleUpdate.exe C:\WINDOWS\system32\lxdicoms.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\CDBurnerXP\NMSAccessU.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Ashampoo\Ashampoo WinOptimizer 8\LiveTunerService.exe C:\WINDOWS\Explorer.EXE C:\Program Files\COMODO\COMODO Internet Security\cfp.exe C:\Program Files\AVAST Software\Avast\avastUI.exe C:\Program Files\Ashampoo\Ashampoo WinOptimizer 8\LiveTuner.exe C:\Program Files\Gadu-Gadu\gg.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\WINDOWS\system32\msiexec.exe C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O1 - Hosts: ˙ţ127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: IE7Pro - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files\IEPro\iepro.dll O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll O3 - Toolbar: Grab Pro - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\IEPro\IEProRecorder.dll O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll O4 - HKLM\..\Run: [LXDICATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXDItime.dll,_RunDLLEntry@16 O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui O4 - HKLM\..\Run: [Ashampoo WinOptimizer Live-Tuner] "C:\Program Files\Ashampoo\Ashampoo WinOptimizer 8\LiveTuner.exe" -TRAY O4 - HKLM\..\Run: [BigDog303] C:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH) O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Free YouTube Download - C:\Documents and Settings\Private\Dane aplikacji\DVDVideoSoftIEHelpers\freeyoutubedownload.htm O8 - Extra context menu item: Funkcja Google Sidewiki - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html O8 - Extra context menu item: Pobierz plik wideo we Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm O8 - Extra context menu item: Pobierz w Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm O8 - Extra context menu item: Pobierz wszystkie pliki w Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm O8 - Extra context menu item: Pobierz zaznaczone w Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm O9 - Extra button: IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files\IEPro\iepro.dll O9 - Extra 'Tools' menuitem: IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files\IEPro\iepro.dll O9 - Extra button: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll O9 - Extra 'Tools' menuitem: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: Zaznaczanie HP Smart - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\WINDOWS\system32\shdocvw.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O15 - Trusted Zone: http://www.mks.com.pl O17 - HKLM\System\CCS\Services\Tcpip\..\{35866813-DF5B-4D9A-84E1-5F49AD61BE57}: NameServer = 10.3.0.1 O20 - AppInit_DLLs: C:\WINDOWS\system32\guard32.dll O22 - SharedTaskScheduler: Moduł wstępnego ładowania interfejsu Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Demon buforu kategorii składników - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe O23 - Service: avast! Firewall - Unknown owner - C:\Program Files\Alwil Software\Avast5\afwServ.exe (file missing) O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe O23 - Service: Defragmentation-Service (DfSdkS) - mst software GmbH, Germany - C:\Program Files\Ashampoo\Ashampoo WinOptimizer 8\DfsdkS.exe O23 - Service: Usługa Google Update (gupdate1c98f7891ea9b80) (gupdate1c98f7891ea9b80) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Usługa Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: lxdi_device - - C:\WINDOWS\system32\lxdicoms.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: NMSAccess - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe O23 - Service: Ashampoo LiveTuner Service (WO_LiveService) - Unknown owner - C:\Program Files\Ashampoo\Ashampoo WinOptimizer 8\LiveTunerService.exe -- End of file - 7817 bytes [quote][quote][quote][/quote][/quote][/quote]

**Posty:** 18165 · przez **wojtas** 20 Gru 2011, 22:05

Proszę zastosować się do obowiązkowych zasad w dziale bezpieczeństwo
- wstaw wymagane logi
- wrzuć logi na forum w tagach code lub na www.wklej.org

**Posty:** 7 · przez **Ninka46** 22 Gru 2011, 14:12

Przepraszam, nie doczytałam, juz sie poprawiam. Komputer tak jak pisałam wyżej,ostatnio coś zwolnił.To znaczy są momenty jakby się zawieszał(zastanawiał

) na jakiś czas i nie reaguje, a potem znów normalnie. System Windows Profesional od 2oo7 z SP 3. Antywirus Avast i firewall Comodo.

Log z Gmera
http://www.wklej.org/hash/7e2224763a8/

OTL.txt

http://www.wklej.org/hash/afc3dfe801f/

OTL Exstras.txt

http://www.wklej.org/hash/a74392cf817/

**Posty:** 18165 · przez **wojtas** 22 Gru 2011, 19:08

dałaś dwa razy ten sam log , potrzebuje jeszcze extras.txt...

Uruchom OTL i w sekcji własne opcje skanowania / skrypt wklej:

:OTL
SRV - File not found [Auto | Stopped] -- -- (avast! Firewall)
FF - prefs.js..browser.search.defaultthis.engineName: "DVDVideoSoftTB Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=3&q={searchTerms}"
[2011-12-07 21:35:10 | 000,000,000 | ---D | M] (Ashampoo PO Community Toolbar) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{d43723ae-1ae1-4a25-a6a4-bf0929273cab}
[2011-11-28 16:12:22 | 000,000,931 | ---- | M] () -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\searchplugins\conduit.xml
CHR - default_search_provider: Conduit (Enabled)
CHR - default_search_provider: search_url = http://search.conduit.com/Results.aspx?q={searchTerms}&hl=en&SelfSearch=1&SearchSource=49&ctid=CT2269050
CHR - default_search_provider: suggest_url = http://search.conduit.com/
O8 - Extra context menu item: Funkcja Google Sidewiki - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html File not found
O8 - Extra context menu item: Pobierz plik wideo we Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm File not found
O8 - Extra context menu item: Pobierz w Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm File not found
O8 - Extra context menu item: Pobierz wszystkie pliki w Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm File not found
O8 - Extra context menu item: Pobierz zaznaczone w Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm File not found
O9 - Extra Button: Zaznaczanie HP Smart - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - Reg Error: Key error. File not found
@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:DFC5A2B2

:Commands
[emptytemp]
[emptyflash]

Kliknij wykonaj skrypt. I potwierdź reset komputera .

daj log z Ad Remover ( opcja Skan )

Następnie uruchamiasz OTL z opcją skanuj. Pokazujesz nowy log OTL.txt, extras.txt oraz raport z czyszczenia (zawartość notatnika, która otworzy się po restarcie).

**Posty:** 7 · przez **Ninka46** 22 Gru 2011, 20:35

Kod: Zaznacz wszystko: OTL logfile created on: 2011-12-22 10:41:10 - Run 1 OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\Private\Pulpit\Antywirusy Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 511,48 Mb Total Physical Memory | 93,84 Mb Available Physical Memory | 18,35% Memory free 2,47 Gb Paging File | 1,95 Gb Available in Paging File | 79,07% Paging File free Paging file location(s): [Binary data over 100 bytes] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 37,25 Gb Total Space | 8,40 Gb Free Space | 22,54% Space Free | Partition Type: NTFS Drive D: | 37,27 Gb Total Space | 34,43 Gb Free Space | 92,37% Space Free | Partition Type: NTFS Drive G: | 29,28 Gb Total Space | 22,25 Gb Free Space | 75,99% Space Free | Partition Type: FAT32 Drive H: | 203,58 Gb Total Space | 94,74 Gb Free Space | 46,54% Space Free | Partition Type: NTFS Computer Name: NN-04FCDEF7E0AE | User Name: Private | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-12-22 09:54:23 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Private\Pulpit\Antywirusy\OTL.exe PRC - [2011-12-21 11:58:03 | 000,912,856 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2011-10-07 18:47:13 | 001,883,328 | ---- | M] (COMODO) -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe PRC - [2011-09-28 09:45:12 | 000,885,160 | ---- | M] () -- C:\Program Files\Ashampoo\Ashampoo WinOptimizer 8\LiveTunerService.exe PRC - [2011-09-28 09:45:10 | 002,656,680 | ---- | M] (Ashampoo Development GmbH & Co. KG) -- C:\Program Files\Ashampoo\Ashampoo WinOptimizer 8\LiveTuner.exe PRC - [2011-08-31 16:00:48 | 000,366,152 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe PRC - [2011-04-18 19:25:12 | 003,460,784 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe PRC - [2011-04-18 19:25:10 | 000,042,184 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe PRC - [2010-03-04 22:38:00 | 000,071,096 | ---- | M] () -- C:\Program Files\CDBurnerXP\NMSAccessU.exe PRC - [2009-08-24 22:16:36 | 000,406,016 | ---- | M] (mst software GmbH, Germany) -- C:\Program Files\Ashampoo\Ashampoo WinOptimizer 8\DfSdkS.exe PRC - [2008-04-14 21:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2008-03-20 11:04:46 | 002,127,296 | ---- | M] (Gadu-Gadu S.A.) -- C:\Program Files\Gadu-Gadu\gg.exe PRC - [2007-03-06 15:45:37 | 000,517,040 | ---- | M] ( ) -- C:\WINDOWS\system32\lxdicoms.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2011-12-22 09:37:50 | 001,656,320 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\11122200\algo.dll MOD - [2011-12-21 11:58:03 | 000,849,368 | ---- | M] () -- C:\Program Files\Mozilla Firefox\js3250.dll MOD - [2011-12-20 00:49:56 | 000,241,528 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\11122200\aswRep.dll MOD - [2011-10-12 09:59:03 | 008,522,400 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll MOD - [2011-09-28 09:45:12 | 000,885,160 | ---- | M] () -- C:\Program Files\Ashampoo\Ashampoo WinOptimizer 8\LiveTunerService.exe MOD - [2011-09-05 18:05:04 | 000,300,544 | ---- | M] () -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.POL MOD - [2010-03-04 22:38:00 | 000,071,096 | ---- | M] () -- C:\Program Files\CDBurnerXP\NMSAccessU.exe MOD - [2008-04-14 21:50:38 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll MOD - [2008-03-20 10:17:48 | 000,106,496 | ---- | M] () -- C:\Program Files\Gadu-Gadu\libiax2.dll MOD - [2008-03-20 10:17:44 | 000,061,440 | ---- | M] () -- C:\Program Files\Gadu-Gadu\libjb.dll MOD - [2007-10-25 12:51:16 | 000,198,656 | ---- | M] () -- C:\Program Files\Gadu-Gadu\libcurl.dll MOD - [2007-03-05 11:31:25 | 000,113,152 | ---- | M] () -- C:\WINDOWS\system32\spool\prtprocs\w32x86\lxdidrpp.dll MOD - [2001-10-28 17:42:30 | 000,116,224 | ---- | M] () -- C:\WINDOWS\system32\pdfcmnnt.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Auto | Stopped] -- -- (avast! Firewall) SRV - [2011-10-07 18:47:13 | 001,883,328 | ---- | M] (COMODO) [Auto | Running] -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe -- (cmdAgent) SRV - [2011-09-28 09:45:12 | 000,885,160 | ---- | M] () [Auto | Running] -- C:\Program Files\Ashampoo\Ashampoo WinOptimizer 8\LiveTunerService.exe -- (WO_LiveService) SRV - [2011-08-31 16:00:48 | 000,366,152 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService) SRV - [2011-04-18 19:25:10 | 000,042,184 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus) SRV - [2010-03-04 22:38:00 | 000,071,096 | ---- | M] () [Auto | Running] -- C:\Program Files\CDBurnerXP\NMSAccessU.exe -- (NMSAccess) SRV - [2009-08-24 22:16:36 | 000,406,016 | ---- | M] (mst software GmbH, Germany) [Auto | Running] -- C:\Program Files\Ashampoo\Ashampoo WinOptimizer 8\DfsdkS.exe -- (DfSdkS) SRV - [2009-04-30 12:23:26 | 000,090,112 | ---- | M] () [Disabled | Stopped] -- C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe -- (OMSI download service) SRV - [2007-03-06 15:45:37 | 000,517,040 | ---- | M] ( ) [Auto | Running] -- C:\WINDOWS\System32\lxdicoms.exe -- (lxdi_device) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2011-10-07 18:48:02 | 000,097,760 | ---- | M] (COMODO) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\inspect.sys -- (Inspect) DRV - [2011-10-07 18:48:01 | 000,031,704 | ---- | M] (COMODO) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\cmdhlp.sys -- (cmdHlp) DRV - [2011-10-07 18:48:00 | 000,492,768 | ---- | M] (COMODO) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\cmdGuard.sys -- (cmdGuard) DRV - [2011-09-06 21:38:54 | 000,111,320 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\aswFW.sys -- (aswFW) DRV - [2011-09-02 07:31:28 | 000,039,192 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LMouFilt.Sys -- (LMouFilt) DRV - [2011-09-02 07:31:20 | 000,041,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LHidFilt.Sys -- (LHidFilt) DRV - [2011-09-02 07:30:58 | 000,012,184 | ---- | M] (Logitech, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\LBeepKE.sys -- (LBeepKE) DRV - [2011-08-31 16:00:50 | 000,022,216 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mbam.sys -- (MBAMProtector) DRV - [2011-04-18 19:17:46 | 000,441,176 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx) DRV - [2011-04-18 19:17:34 | 000,307,288 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP) DRV - [2011-04-18 19:16:18 | 000,049,240 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi) DRV - [2011-04-18 19:16:06 | 000,102,488 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2) DRV - [2011-04-18 19:13:21 | 000,025,432 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr) DRV - [2011-04-18 19:13:02 | 000,030,680 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4) DRV - [2011-04-18 19:12:58 | 000,019,544 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk) DRV - [2011-03-08 06:01:06 | 000,012,696 | ---- | M] () [Kernel | Auto | Running] -- C:\Program Files\Ashampoo\Ashampoo WinOptimizer 8\LiveTunerProcessMonitor32.sys -- (LiveTunerPM) DRV - [2009-11-12 13:48:56 | 000,005,504 | ---- | M] () [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen) DRV - [2009-03-25 17:48:00 | 000,114,728 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018mdm.sys -- (s1018mdm) DRV - [2009-03-25 17:48:00 | 000,109,864 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018unic.sys -- (s1018unic) Sony Ericsson Device 1018 USB Ethernet Emulation (WDM) DRV - [2009-03-25 17:48:00 | 000,106,208 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018mgmt.sys -- (s1018mgmt) Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM) DRV - [2009-03-25 17:48:00 | 000,104,744 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018obex.sys -- (s1018obex) DRV - [2009-03-25 17:48:00 | 000,086,824 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018bus.sys -- (s1018bus) Sony Ericsson Device 1018 driver (WDM) DRV - [2009-03-25 17:48:00 | 000,026,024 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018nd5.sys -- (s1018nd5) Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS) DRV - [2009-03-25 17:48:00 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018mdfl.sys -- (s1018mdfl) DRV - [2008-05-16 12:33:14 | 000,115,752 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016unic.sys -- (s0016unic) Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM) DRV - [2008-05-16 12:33:14 | 000,025,512 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016nd5.sys -- (s0016nd5) Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS) DRV - [2008-05-16 12:33:14 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016mdfl.sys -- (s0016mdfl) DRV - [2008-05-16 12:33:12 | 000,120,744 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016mdm.sys -- (s0016mdm) DRV - [2008-05-16 12:33:12 | 000,114,216 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016mgmt.sys -- (s0016mgmt) Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM) DRV - [2008-05-16 12:33:12 | 000,110,632 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016obex.sys -- (s0016obex) DRV - [2008-05-16 12:33:12 | 000,089,256 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016bus.sys -- (s0016bus) Sony Ericsson Device 0016 driver (WDM) DRV - [2008-04-13 23:15:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum) DRV - [2008-01-09 11:28:34 | 000,027,632 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\seehcri.sys -- (seehcri) DRV - [2007-04-13 19:24:04 | 010,246,144 | ---- | M] (Sonix Co. Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\snpstd3.sys -- (SNPSTD3) USB PC Camera (SNPSTD3) DRV - [2007-03-08 13:34:46 | 004,027,840 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\alcxwdm.sys -- (ALCXWDM) Service for Realtek AC97 Audio (WDM) DRV - [2006-12-01 13:23:58 | 000,392,122 | ---- | M] (Vimicro Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\usbVM303.sys -- (ZSMC303) DRV - [2006-11-30 15:14:22 | 000,090,800 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se45unic.sys -- (se45unic) Sony Ericsson Device 069 USB Ethernet Emulation SEMC45 (WDM) DRV - [2006-11-30 15:14:14 | 000,086,432 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se45obex.sys -- (se45obex) DRV - [2006-11-30 15:14:10 | 000,088,624 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se45mgmt.sys -- (se45mgmt) Sony Ericsson Device 069 USB WMC Device Management Drivers (WDM) DRV - [2006-11-30 15:14:10 | 000,018,704 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se45nd5.sys -- (se45nd5) Sony Ericsson Device 069 USB Ethernet Emulation SEMC45 (NDIS) DRV - [2006-11-30 15:14:04 | 000,097,088 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se45mdm.sys -- (se45mdm) DRV - [2006-11-30 15:14:04 | 000,009,360 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se45mdfl.sys -- (se45mdfl) DRV - [2006-11-30 15:13:56 | 000,061,536 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se45bus.sys -- (se45bus) Sony Ericsson Device 069 driver (WDM) DRV - [2006-04-25 09:57:42 | 000,428,160 | ---- | M] (Vimicro Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\vmfilter303.sys -- (vmfilter303) DRV - [2004-08-03 23:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Sterownik NT karty Realtek RTL8139(A/B/C) DRV - [2001-08-17 22:00:04 | 000,002,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\msmpu401.sys -- (ms_mpu401) DRV - [2001-08-17 21:51:32 | 000,018,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\irsir.sys -- (irsir) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1993962763-113007714-854245398-1003\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1 IE - HKU\S-1-5-21-1993962763-113007714-854245398-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/ IE - HKU\S-1-5-21-1993962763-113007714-854245398-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultthis.engineName: "DVDVideoSoftTB Customized Web Search" FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=3&q={searchTerms}" FF - prefs.js..browser.startup.homepage: "http://pl.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:pl:official" FF - prefs.js..extensions.enabledItems: {53A03D43-5363-4669-8190-99061B2DEBA5}:1.3.7 FF - prefs.js..extensions.enabledItems: jyboy.yy@gmail.com:1.0.4 FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:2.0.1 FF - prefs.js..extensions.enabledItems: {B17C1C5A-04B1-11DB-9804-B622A1EF5492}:1.2.1 FF - prefs.js..extensions.enabledItems: {aff87fa2-a58e-4edd-b852-0a20203c1e17}:0.9 FF - prefs.js..extensions.enabledItems: pl@dictionaries.addons.mozilla.org:1.0.20110621 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA}:7.0.01 FF - prefs.js..extensions.enabledItems: {d43723ae-1ae1-4a25-a6a4-bf0929273cab}:3.8.1.0 FF - prefs.js..extensions.enabledItems: wrc@avast.com:20110101 FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.9.7 FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2011-12-07 23:19:58 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.25\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-12-21 11:58:09 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.25\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-12-21 11:58:09 | 000,000,000 | ---D | M] [2011-05-10 23:09:10 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Extensions [2011-12-22 09:40:56 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions [2011-05-10 23:49:15 | 000,000,000 | ---D | M] (FEBE) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} [2011-05-10 23:16:20 | 000,000,000 | ---D | M] (ScrapBook) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{53A03D43-5363-4669-8190-99061B2DEBA5} [2011-12-07 21:31:23 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} [2011-11-10 09:18:41 | 000,000,000 | ---D | M] (gTranslate) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{aff87fa2-a58e-4edd-b852-0a20203c1e17} [2011-05-10 23:59:19 | 000,000,000 | ---D | M] (Password Exporter) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{B17C1C5A-04B1-11DB-9804-B622A1EF5492} [2011-12-12 19:54:48 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2011-12-07 21:31:19 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}(2) [2011-12-15 10:46:06 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2011-12-07 21:35:10 | 000,000,000 | ---D | M] (Ashampoo PO Community Toolbar) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{d43723ae-1ae1-4a25-a6a4-bf0929273cab} [2011-05-10 23:24:40 | 000,000,000 | ---D | M] (gTranslator) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\jyboy.yy@gmail.com [2011-08-25 00:04:36 | 000,000,000 | ---D | M] (Polski slownik poprawnej pisowni) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\pl@dictionaries.addons.mozilla.org [2011-11-28 16:12:22 | 000,000,931 | ---- | M] () -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\searchplugins\conduit.xml [2011-12-22 00:28:58 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2011-10-30 12:01:35 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA} [2011-12-07 23:19:58 | 000,000,000 | ---D | M] (avast! WebRep) -- C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF [2011-10-30 12:00:28 | 000,611,224 | ---- | M] (Oracle Corporation) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2011-03-19 23:40:49 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2011-03-19 23:40:49 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2011-03-19 23:40:49 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2011-03-19 23:40:49 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2011-03-19 23:40:49 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2011-03-19 23:40:49 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Conduit (Enabled) CHR - default_search_provider: search_url = http://search.conduit.com/Results.aspx?q={searchTerms}&hl=en&SelfSearch=1&SearchSource=49&ctid=CT2269050 CHR - default_search_provider: suggest_url = http://search.conduit.com/ CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\16.0.912.63\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll CHR - plugin: Java Deployment Toolkit 7.0.10.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 7 U1 (Enabled) = C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\16.0.912.63\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\16.0.912.63\pdf.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll CHR - plugin: Default Plug-in (Enabled) = default_plugin CHR - Extension: YouTube = C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.2_0\ CHR - Extension: YouTube = C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2_0\ CHR - Extension: Szukaj w Google = C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.14_0\ CHR - Extension: Szukaj w Google = C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.16_0\ CHR - Extension: avast! WebRep = C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1091_0\ CHR - Extension: Gmail = C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\6.1.3_0\ CHR - Extension: Gmail = C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\6.1.4_0\ O1 HOSTS File: ([2011-10-29 17:45:33 | 000,000,098 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (IE7Pro BHO) - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files\IEPro\IEPro.dll (IE7Pro.com) O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O2 - BHO: (FDMIECookiesBHO Class) - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll () O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O3 - HKLM\..\Toolbar: (Grab Pro) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\IEPro\IEProRecorder.dll () O3 - HKU\S-1-5-21-1993962763-113007714-854245398-1003\..\Toolbar\WebBrowser: (Grab Pro) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\IEPro\IEProRecorder.dll () O4 - HKLM..\Run: [Ashampoo WinOptimizer Live-Tuner] C:\Program Files\Ashampoo\Ashampoo WinOptimizer 8\LiveTuner.exe (Ashampoo Development GmbH & Co. KG) O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software) O4 - HKLM..\Run: [BigDog303] C:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH) File not found O4 - HKLM..\Run: [LXDICATS] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXDItime.DLL (Lexmark International, Inc.) O4 - HKU\S-1-5-21-1993962763-113007714-854245398-1003..\Run: [Gadu-Gadu] C:\Program Files\Gadu-Gadu\gg.exe (Gadu-Gadu S.A.) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1993962763-113007714-854245398-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-1993962763-113007714-854245398-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-21-1993962763-113007714-854245398-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-21-1993962763-113007714-854245398-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\S-1-5-21-1993962763-113007714-854245398-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1 O8 - Extra context menu item: Free YouTube Download - C:\Documents and Settings\Private\Dane aplikacji\DVDVideoSoftIEHelpers\freeyoutubedownload.htm () O8 - Extra context menu item: Funkcja Google Sidewiki - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html File not found O8 - Extra context menu item: Pobierz plik wideo we Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm File not found O8 - Extra context menu item: Pobierz w Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm File not found O8 - Extra context menu item: Pobierz wszystkie pliki w Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm File not found O8 - Extra context menu item: Pobierz zaznaczone w Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm File not found O9 - Extra Button: IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files\IEPro\IEPro.dll (IE7Pro.com) O9 - Extra 'Tools' menuitem : IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files\IEPro\IEPro.dll (IE7Pro.com) O9 - Extra Button: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\IEPro.dll (IE7Pro.com) O9 - Extra 'Tools' menuitem : IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\IEPro.dll (IE7Pro.com) O9 - Extra Button: Zaznaczanie HP Smart - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - Reg Error: Key error. File not found O15 - HKU\S-1-5-21-1993962763-113007714-854245398-1003\..Trusted Domains: mks.com.pl ([www] http in Trusted sites) O15 - HKU\S-1-5-21-1993962763-113007714-854245398-1003\..Trusted Domains: mks.com.pl ([www] https in Trusted sites) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_01-windows-i586.cab (Java Plug-in 1.7.0_01) O16 - DPF: {CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_01-windows-i586.cab (Java Plug-in 1.7.0_01) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_01-windows-i586.cab (Java Plug-in 1.7.0_01) O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{35866813-DF5B-4D9A-84E1-5F49AD61BE57}: NameServer = 10.3.0.1 O20 - AppInit_DLLs: (C:\WINDOWS\system32\guard32.dll) -C:\WINDOWS\system32\guard32.dll (COMODO) O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2007-06-06 14:12:39 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2009-05-28 20:31:29 | 000,000,000 | R--D | M] - C:\autorun.inf -- [ NTFS ] O32 - AutoRun File - [2009-05-28 20:31:30 | 000,000,000 | R--D | M] - D:\autorun.inf -- [ NTFS ] O32 - AutoRun File - [2010-03-04 13:05:12 | 000,000,000 | ---- | M] () - G:\AUTOEXEC.BAT -- [ FAT32 ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011-12-20 09:14:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Skype [2011-12-19 01:04:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Private\Dane aplikacji\pdfforge [2011-12-19 01:04:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\PDFCreator [2011-12-19 01:04:25 | 000,662,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSCOMCT2.OCX [2011-12-19 01:04:25 | 000,137,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSMAPI32.OCX [2011-12-19 01:04:19 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSMPIDE.DLL [2011-12-19 01:04:19 | 000,000,000 | ---D | C] -- C:\Program Files\PDFCreator [2011-12-16 03:57:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Ashampoo [2011-12-16 03:57:18 | 000,028,160 | ---- | C] (mst software GmbH, Germany) -- C:\WINDOWS\System32\DfSdkBt.exe [2011-12-12 20:00:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Private\dwhelper [2011-12-09 04:11:25 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Private\Recent [2011-12-09 04:00:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Google Chrome [2011-12-07 23:20:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\avast! Free Antivirus [2011-12-07 23:20:32 | 000,307,288 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSP.sys [2011-12-07 23:20:32 | 000,019,544 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys [2011-12-07 23:20:29 | 000,025,432 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys [2011-12-07 23:20:28 | 000,441,176 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSnx.sys [2011-12-07 23:20:28 | 000,049,240 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys [2011-12-07 23:20:27 | 000,102,488 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys [2011-12-07 23:20:27 | 000,096,344 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswmon.sys [2011-12-07 23:20:27 | 000,030,680 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys [2011-12-07 23:19:55 | 000,040,112 | ---- | C] (AVAST Software) -- C:\WINDOWS\avastSS.scr [2011-12-07 23:19:54 | 000,199,304 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe [2011-12-07 23:19:35 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software [2011-12-07 22:27:40 | 000,303,104 | R--- | C] (Hewlett-Packard Co.) -- C:\WINDOWS\System32\hpovst15.dll [2011-12-07 22:27:39 | 000,581,632 | R--- | C] (Hewlett-Packard Co.) -- C:\WINDOWS\System32\hpotscl6.dll [2011-12-07 22:27:38 | 000,729,088 | R--- | C] (Hewlett-Packard) -- C:\WINDOWS\System32\hpowiax7.dll [2011-12-07 21:36:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\HP Product Assistant [2011-12-07 21:33:35 | 000,000,000 | -HSD | C] -- C:\RECYCLER [2011-12-07 21:31:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Free Download Manager [2011-12-07 21:31:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\FreeDownloadManager.ORG [2011-12-07 21:31:39 | 000,000,000 | ---D | C] -- C:\Program Files\Free Download Manager [2011-12-07 21:31:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Private\Dane aplikacji\Free Download Manager [2011-12-07 21:31:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\DVDVideoSoft [2011-12-07 21:31:28 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Plasmoo [2011-12-07 21:31:25 | 000,000,000 | ---D | C] -- C:\Program Files\DVDVideoSoft [2011-11-28 21:01:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Private\Moje dokumenty\Downloads [2011-11-27 02:15:31 | 000,000,000 | ---D | C] -- C:\RECYCLER(2) [2011-11-25 23:12:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Private\Moje dokumenty\Originals [2011-11-22 19:32:21 | 000,000,000 | ---D | C] -- C:\Program Files\Ashampoo_PO [2011-11-22 19:30:05 | 000,000,000 | ---D | C] -- C:\Program Files\Ashampoo [2010-08-28 10:57:50 | 000,356,352 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdiinpa.dll [2010-08-28 10:57:50 | 000,339,968 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdiiesc.dll [2010-08-28 10:57:50 | 000,311,296 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdihcp.dll [2010-08-28 10:57:49 | 001,187,840 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdiserv.dll [2010-08-28 10:57:49 | 000,942,080 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdiusb1.dll [2010-08-28 10:57:48 | 000,614,400 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdipmui.dll [2010-08-28 10:57:48 | 000,532,480 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdilmpm.dll [2010-08-28 10:57:48 | 000,053,248 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdiprox.dll [2010-08-28 10:57:48 | 000,053,248 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdipplc.dll [2010-08-28 10:57:47 | 000,320,432 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdiih.exe [2010-08-28 10:57:46 | 000,671,744 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdihbn3.dll [2010-08-28 10:57:44 | 000,761,856 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdicomc.dll [2010-08-28 10:57:44 | 000,517,040 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdicoms.exe [2010-08-28 10:57:44 | 000,360,448 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdicomm.dll [2010-08-28 10:57:43 | 000,340,912 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdicfg.exe [2008-03-17 16:20:26 | 000,172,032 | ---- | C] ( ) -- C:\WINDOWS\System32\rsnpstd3.dll [2008-03-17 16:20:26 | 000,061,440 | ---- | C] ( ) -- C:\WINDOWS\System32\vsnpstd3.dll [2008-03-17 16:20:26 | 000,053,248 | ---- | C] ( ) -- C:\WINDOWS\System32\csnpstd3.dll [2008-03-17 16:20:26 | 000,053,248 | ---- | C] ( ) -- C:\WINDOWS\csnpstd3.dll [2004-07-09 04:08:36 | 000,472,576 | ---- | C] (Microsoft Corporation) -- C:\Program Files\dxsetup.exe [2004-07-09 04:08:34 | 002,242,560 | ---- | C] (Microsoft Corporation) -- C:\Program Files\dsetup32.dll [2004-07-09 03:03:10 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Program Files\DSETUP.dll [1 C:\Documents and Settings\All Users\*.tmp files -> C:\Documents and Settings\All Users\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011-12-22 10:26:24 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2011-12-20 20:14:34 | 000,002,801 | ---- | M] () -- C:\Documents and Settings\Private\Pulpit\HiJackThis.lnk [2011-12-20 15:44:00 | 000,159,544 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2011-12-20 10:42:31 | 000,001,393 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2011-12-20 09:14:17 | 000,001,878 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk [2011-12-19 16:32:05 | 000,148,188 | ---- | M] () -- C:\Documents and Settings\Private\Moje dokumenty\bacchus-sepia4bg12.jpg [2011-12-19 12:17:15 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2011-12-16 03:57:28 | 000,001,863 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\1-Click-Optimizer (WO8).lnk [2011-12-16 03:57:28 | 000,000,865 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Ashampoo WinOptimizer 8.lnk [2011-12-12 20:08:05 | 000,199,680 | ---- | M] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-12-09 13:19:38 | 000,168,545 | ---- | M] () -- C:\WINDOWS\hpoins27.dat [2011-12-09 12:46:51 | 000,169,051 | ---- | M] () -- C:\WINDOWS\hpoins27.dat.temp [2011-12-09 12:21:44 | 000,000,807 | ---- | M] () -- C:\WINDOWS\wininit.ini [2011-12-09 04:16:02 | 000,003,420 | ---- | M] () -- C:\Documents and Settings\Private\Moje dokumenty\cc_20111209_041544.reg [2011-12-09 04:14:55 | 000,015,858 | ---- | M] () -- C:\Documents and Settings\Private\Moje dokumenty\cc_20111209_041448.reg [2011-12-09 03:59:41 | 000,000,682 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\CCleaner.lnk [2011-12-07 23:20:33 | 000,001,689 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\avast! Free Antivirus.lnk [2011-12-07 23:20:28 | 000,002,644 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT [2011-12-05 06:05:08 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\{5733574A-9F20-49E5-A5C3-E885C626FCD3} [2011-12-04 03:42:43 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\{04C910EA-7EF4-4419-A9B1-870C239A0879} [2011-12-02 04:46:57 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\{16F48A82-4D02-4EC4-BBD0-E2E91E5C6FDD} [2011-11-28 20:40:16 | 000,001,088 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1993962763-113007714-854245398-1003Core.job [2011-11-25 23:12:02 | 000,099,820 | ---- | M] () -- C:\Documents and Settings\Private\Moje dokumenty\marij_v2459[1].jpg [2011-11-23 15:40:46 | 001,859,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\win32k.sys [2011-11-23 15:40:46 | 001,859,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\win32k.sys [2011-11-22 19:18:33 | 000,021,038 | ---- | M] () -- C:\Documents and Settings\Private\Moje dokumenty\cc_20110509_231515.reg [2011-11-22 18:44:28 | 000,003,420 | ---- | M] () -- C:\Documents and Settings\Private\Moje dokumenty\cc_20111122_184424.reg [2011-11-22 18:42:48 | 000,040,556 | ---- | M] () -- C:\Documents and Settings\Private\Moje dokumenty\cc_20111122_184240.reg [1 C:\Documents and Settings\All Users\*.tmp files -> C:\Documents and Settings\All Users\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-12-20 20:14:34 | 000,002,801 | ---- | C] () -- C:\Documents and Settings\Private\Pulpit\HiJackThis.lnk [2011-12-20 10:28:13 | 000,001,393 | ---- | C] () -- C:\WINDOWS\imsins.BAK [2011-12-20 09:14:17 | 000,001,878 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk [2011-12-19 16:33:54 | 000,148,188 | ---- | C] () -- C:\Documents and Settings\Private\Moje dokumenty\bacchus-sepia4bg12.jpg [2011-12-19 01:04:24 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll [2011-12-16 03:57:28 | 000,001,863 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\1-Click-Optimizer (WO8).lnk [2011-12-16 03:57:28 | 000,000,865 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Ashampoo WinOptimizer 8.lnk [2011-12-09 04:15:46 | 000,003,420 | ---- | C] () -- C:\Documents and Settings\Private\Moje dokumenty\cc_20111209_041544.reg [2011-12-09 04:14:51 | 000,015,858 | ---- | C] () -- C:\Documents and Settings\Private\Moje dokumenty\cc_20111209_041448.reg [2011-12-09 03:59:40 | 000,000,682 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\CCleaner.lnk [2011-12-07 23:20:33 | 000,001,689 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\avast! Free Antivirus.lnk [2011-12-05 06:05:08 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\{5733574A-9F20-49E5-A5C3-E885C626FCD3} [2011-12-04 03:42:43 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\{04C910EA-7EF4-4419-A9B1-870C239A0879} [2011-12-02 04:46:57 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\{16F48A82-4D02-4EC4-BBD0-E2E91E5C6FDD} [2011-11-28 20:40:16 | 000,001,088 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1993962763-113007714-854245398-1003Core.job [2011-11-25 23:10:18 | 000,099,820 | ---- | C] () -- C:\Documents and Settings\Private\Moje dokumenty\marij_v2459[1].jpg [2011-11-22 20:39:38 | 000,168,545 | ---- | C] () -- C:\WINDOWS\hpoins27.dat [2011-11-22 20:39:38 | 000,000,932 | ---- | C] () -- C:\WINDOWS\hpomdl27.dat [2011-11-22 18:44:26 | 000,003,420 | ---- | C] () -- C:\Documents and Settings\Private\Moje dokumenty\cc_20111122_184424.reg [2011-11-22 18:42:43 | 000,040,556 | ---- | C] () -- C:\Documents and Settings\Private\Moje dokumenty\cc_20111122_184240.reg [2011-11-22 06:44:20 | 000,000,512 | ---- | C] () -- C:\WINDOWS\hpomdl44.dat.temp [2011-11-22 01:21:40 | 000,169,051 | ---- | C] () -- C:\WINDOWS\hpoins27.dat.temp [2011-11-22 01:21:40 | 000,000,932 | ---- | C] () -- C:\WINDOWS\hpomdl27.dat.temp [2011-11-16 06:03:22 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\{13D28CF9-B685-4837-B27B-A51FFC69C6BC} [2011-10-25 18:07:38 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\setupfilter.exe [2011-09-07 09:32:58 | 000,059,904 | ---- | C] () -- C:\WINDOWS\System32\zlib.dll [2011-05-09 21:18:34 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat [2011-04-15 20:52:27 | 000,723,981 | ---- | C] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\unins000.exe [2011-04-15 20:52:26 | 000,002,170 | ---- | C] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\unins000.dat [2011-02-14 00:32:38 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini [2011-02-04 13:05:32 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin [2010-12-08 19:20:29 | 000,005,504 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys [2010-08-28 11:00:24 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\lxdivs.dll [2010-08-28 11:00:16 | 000,344,064 | ---- | C] () -- C:\WINDOWS\System32\lxdicoin.dll [2010-08-28 10:59:31 | 000,692,224 | ---- | C] () -- C:\WINDOWS\System32\lxdidrs.dll [2010-08-28 10:59:31 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\lxdicnv4.dll [2010-08-28 10:59:31 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\lxdicaps.dll [2010-08-28 10:58:08 | 000,000,060 | -H-- | C] () -- C:\WINDOWS\System32\lxdirwrd.ini [2010-08-28 10:57:50 | 000,294,912 | ---- | C] () -- C:\WINDOWS\System32\lxdiinst.dll [2010-08-28 10:57:45 | 000,208,896 | ---- | C] () -- C:\WINDOWS\System32\lxdigrd.dll [2010-02-24 02:52:16 | 000,000,050 | ---- | C] () -- C:\WINDOWS\SW_Win9423X24.DLL [2010-02-24 02:51:57 | 001,220,608 | ---- | C] () -- C:\WINDOWS\System32\pdf2bmp.dll [2010-02-24 02:51:54 | 000,098,304 | ---- | C] () -- C:\WINDOWS\System32\DVM.dll [2010-02-24 02:51:54 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\RegisterExe.exe [2009-12-14 18:35:32 | 000,343,040 | ---- | C] () -- C:\WINDOWS\System32\lffpx7.dll [2009-12-14 18:35:32 | 000,116,736 | ---- | C] () -- C:\WINDOWS\System32\lfkodak.dll [2009-11-25 00:51:17 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2009-11-23 14:36:06 | 000,000,228 | ---- | C] () -- C:\WINDOWS\System32\edacded0.dat [2009-05-24 09:58:43 | 004,471,092 | ---- | C] () -- C:\WINDOWS\System32\libavcodec.dll [2009-05-23 15:05:06 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\mmswitch.dll [2009-05-23 15:04:55 | 000,207,360 | ---- | C] () -- C:\WINDOWS\System32\evrprop.dll [2009-05-23 14:52:48 | 000,108,032 | ---- | C] () -- C:\WINDOWS\System32\avi.dll [2009-05-23 14:52:47 | 000,246,784 | ---- | C] () -- C:\WINDOWS\System32\dxr.dll [2009-05-23 14:52:45 | 000,141,312 | ---- | C] () -- C:\WINDOWS\System32\mp4.dll [2009-05-23 14:52:44 | 000,148,480 | ---- | C] () -- C:\WINDOWS\System32\mkx.dll [2009-05-23 14:52:42 | 000,159,744 | ---- | C] () -- C:\WINDOWS\System32\mmfinfo.dll [2009-05-23 14:52:41 | 000,120,832 | ---- | C] () -- C:\WINDOWS\System32\ogm.dll [2009-05-23 14:52:40 | 000,163,840 | ---- | C] () -- C:\WINDOWS\System32\ts.dll [2009-05-23 14:52:38 | 000,079,360 | ---- | C] () -- C:\WINDOWS\System32\mkzlib.dll [2009-05-23 14:52:37 | 000,023,552 | ---- | C] () -- C:\WINDOWS\System32\mkunicode.dll [2009-05-23 14:52:06 | 001,416,015 | ---- | C] () -- C:\WINDOWS\System32\ffmpegmt.dll [2009-05-23 14:51:55 | 000,557,469 | ---- | C] () -- C:\WINDOWS\System32\libmplayer.dll [2009-05-23 14:51:50 | 000,146,098 | ---- | C] () -- C:\WINDOWS\System32\libmpeg2_ff.dll [2009-05-23 14:51:14 | 000,098,304 | ---- | C] () -- C:\WINDOWS\System32\ff_wmv9.dll [2009-05-23 14:51:13 | 000,113,152 | ---- | C] () -- C:\WINDOWS\System32\ff_unrar.dll [2009-05-23 14:51:12 | 000,183,296 | ---- | C] () -- C:\WINDOWS\System32\ff_samplerate.dll [2009-05-23 14:51:10 | 000,178,688 | ---- | C] () -- C:\WINDOWS\System32\ff_libmad.dll [2009-05-23 14:51:08 | 000,486,400 | ---- | C] () -- C:\WINDOWS\System32\ff_libfaad2.dll [2009-05-23 14:51:04 | 000,257,024 | ---- | C] () -- C:\WINDOWS\System32\ff_libdts.dll [2009-05-23 14:51:01 | 000,142,848 | ---- | C] () -- C:\WINDOWS\System32\ff_liba52.dll [2009-05-23 14:50:39 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\OggDS.dll [2009-05-23 14:50:36 | 000,921,600 | ---- | C] () -- C:\WINDOWS\System32\vorbisenc.dll [2009-05-23 14:50:29 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\vorbis.dll [2009-05-23 14:50:27 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\ogg.dll [2009-05-23 14:50:11 | 000,009,216 | ---- | C] () -- C:\WINDOWS\System32\cpuinf32.dll [2009-05-18 21:36:07 | 025,327,648 | -HS- | C] () -- C:\WINDOWS\System32\drivers\fidbox.dat [2009-05-02 17:48:00 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\LXF3PMON.DLL [2009-05-02 17:48:00 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\LXF3FXPU.DLL [2009-05-02 17:47:40 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\lxf3oem.dll [2009-05-02 17:47:40 | 000,012,288 | ---- | C] () -- C:\WINDOWS\System32\LXF3PMRC.DLL [2009-03-14 20:25:49 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\CNMVS3w.DLL [2008-12-10 23:02:58 | 000,000,000 | ---- | C] () -- C:\WINDOWS\PCSPATS.DAT [2008-12-07 16:53:32 | 000,000,071 | ---- | C] () -- C:\WINDOWS\iltwain.ini [2008-11-22 16:39:53 | 000,000,807 | ---- | C] () -- C:\WINDOWS\wininit.ini [2008-09-28 14:17:48 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe [2008-09-27 00:42:10 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat [2008-05-16 12:38:24 | 000,088,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\snsntfy.dll [2008-03-17 16:20:31 | 000,843,776 | ---- | C] () -- C:\WINDOWS\vsnpstd3.exe [2008-03-17 16:20:30 | 000,015,498 | ---- | C] () -- C:\WINDOWS\snpstd3.ini [2008-03-16 15:31:41 | 000,160,565 | ---- | C] () -- C:\WINDOWS\Sqirlz Water Reflections Uninstaller.exe [2008-03-07 20:40:23 | 000,000,032 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\ezsid.dat [2008-01-03 21:31:02 | 000,000,132 | ---- | C] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [2007-09-01 12:42:46 | 000,199,680 | ---- | C] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2007-07-12 12:33:20 | 000,000,019 | ---- | C] () -- C:\WINDOWS\SMURFED.INI [2007-07-12 12:33:14 | 000,034,800 | ---- | C] () -- C:\WINDOWS\UNWISE.EXE [2007-06-21 21:07:06 | 000,000,346 | ---- | C] () -- C:\WINDOWS\I_VIEW32.INI [2007-06-09 19:31:43 | 000,001,287 | ---- | C] () -- C:\WINDOWS\mozver.dat [2007-06-06 16:37:04 | 000,000,421 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2007-06-06 15:51:44 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2007-06-06 15:50:31 | 000,159,544 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2007-06-06 15:24:50 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll [2007-06-06 14:16:14 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2007-06-06 14:08:49 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2004-08-04 00:56:48 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin [2004-08-02 14:20:40 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat [2004-07-22 10:51:34 | 003,432,656 | ---- | C] () -- C:\Program Files\ManagedDX.CAB [2004-07-19 22:58:36 | 001,156,363 | ---- | C] () -- C:\Program Files\BDANT.cab [2004-07-19 22:53:26 | 000,976,020 | ---- | C] () -- C:\Program Files\BDAXP.cab [2004-07-09 14:17:16 | 013,265,040 | ---- | C] () -- C:\Program Files\dxnt.cab [2004-07-09 09:13:48 | 015,493,481 | ---- | C] () -- C:\Program Files\DirectX.cab [2004-07-09 09:13:46 | 000,703,080 | ---- | C] () -- C:\Program Files\BDA.cab [2001-10-26 17:15:16 | 000,520,106 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat [2001-10-26 17:15:16 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat [2001-10-26 17:15:16 | 000,097,988 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat [2001-10-26 17:15:16 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat [2001-08-23 14:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin [2001-08-23 14:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat [2001-08-17 22:30:24 | 000,459,168 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat [2001-08-17 22:30:24 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat [2001-08-17 22:30:24 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat [2001-08-17 22:30:22 | 000,077,228 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat [2001-08-17 22:15:38 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin [2001-07-21 23:36:48 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat [2001-07-21 23:36:04 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat [2001-07-21 23:24:16 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat [color=#E56717]========== LOP Check ==========[/color] [2011-12-07 23:19:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Alwil Software [2010-12-26 00:40:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\BVRP Software [2010-12-26 13:29:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Canneverbe Limited [2009-05-15 21:27:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DriverScanner [2011-07-25 07:44:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Easybits GO [2011-11-06 20:57:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Edytor Wspomnień [2011-12-07 21:31:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\FreeDownloadManager.ORG [2011-03-03 02:17:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10 [2011-10-20 14:45:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla [2011-08-13 23:55:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM [2010-12-12 23:04:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Pattern Maker for cross stitch [2011-10-20 14:35:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\RDRM [2011-02-02 18:50:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\RH_Backups [2008-02-02 16:16:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SiComponents [2010-08-19 19:18:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP [2011-10-23 17:53:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TuneUp Software [2011-10-10 12:46:32 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16} [2009-05-15 21:25:42 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{66E2F539-12B6-4870-A500-7689CDE75C5E} [2011-11-03 00:50:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Lexmark Imaging Studio [2010-01-20 14:13:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\ArcaMicroScan [2010-08-30 17:03:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\ArcaVirMicroScan [2010-12-08 19:20:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Canneverbe Limited [2010-01-18 12:30:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\ChomikBox [2007-10-21 23:23:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\ContentGuard [2011-12-07 21:32:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\DVDVideoSoft [2011-01-03 20:41:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\DVDVideoSoftIEHelpers [2011-11-26 17:57:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\ElevatedDiagnostics [2011-12-12 19:44:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Free Download Manager [2007-06-23 16:44:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Gadu-Gadu [2011-08-08 20:34:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Gadu-Gadu 10 [2009-01-01 15:49:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\GanymedeNet [2011-07-25 07:43:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\go [2011-04-13 12:53:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\GrabPro [2011-11-18 11:06:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\gtk-2.0 [2011-04-13 12:53:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\IEPro [2011-10-29 12:53:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\ipla [2007-11-05 15:41:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Leadertech [2010-08-28 11:08:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Lexmark Imaging Studio [2011-05-09 21:16:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\MiniDm [2009-03-01 19:34:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Nowe Gadu-Gadu [2009-10-23 21:34:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\OpenFM [2009-04-14 15:03:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\OpenOffice.org [2011-12-19 01:04:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\pdfforge [2011-02-07 21:13:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\PhotoFiltre [2011-02-23 20:32:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\PhotoScape [2008-12-24 20:32:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Printer Info Cache [2008-01-03 21:50:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Teleca [2009-11-24 23:00:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Thunderbird [2011-10-10 12:50:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\TuneUp Software [2010-10-06 23:01:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Uniblue [2011-10-29 12:44:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\VSRevoGroup [2011-11-28 23:06:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\XnView [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:DFC5A2B2 < End of report > [/quote] Przepraszam nie wiem jak to się stało. Czy teraz dobrze ? [i][size=85]Dodano Dzisiaj, 19:26:[/size][/i] Log z AD-remower [code]======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 ======= Updated by TeamXscript on 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com website: http://www.teamxscript.org C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Launched at 19:21:16 on 22/12/2011, Normal boot Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) Private@NN-04FCDEF7E0AE ( ) ============== SEARCH ============== Folder found: C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Conduit Folder found: C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\OpenCandy Folder found: C:\Documents and Settings\Private\Dane aplikacji\pdfforge Key found: HKLM\Software\Classes\Conduit.Engine Key found: HKLM\Software\Classes\Toolbar.CT2269050 Key found: HKCU\Software\PriceGong Key found: HKLM\Software\Canneverbe Limited\OpenCandy Key found: HKLM\Software\ProgSense\OpenCandy Key found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} ============== ADDITIONNAL SCAN ============== **** Mozilla Firefox Version [3.6.25 (pl)] **** Plugins\npdeployJava1.dll (Oracle Corporation) HKLM_MozillaPlugins\Adobe Reader (x) Searchplugins\allegro-pl.xml (hxxp://www.allegro.pl/search.php?string={searchTerms}&sourceid=Mozilla-search) Searchplugins\fbc-pl.xml (hxxp://fbc.pionier.net.pl/owoc/results) Searchplugins\merlin-pl.xml (hxxp://www.merlin.com.pl/frontend/search?sourceid=Mozilla-search&fraza={searchTerms}&skad=crhhxmkohb) Searchplugins\pwn-pl.xml (hxxp://encyklopedia.pwn.pl/szukaj.php?co={searchTerms}) Searchplugins\wikipedia-pl.xml (hxxp://pl.wikipedia.org/wiki/Specjalna:Szukaj) Searchplugins\wp-pl.xml (hxxp://szukaj.wp.pl/szukaj.html?z=T&r=T&szukaj={searchTerms}) Extensions\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA} (Java Console) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\FireFox\Profiles\e1vbo2qi.default -- Extensions\jyboy.yy@gmail.com (gTranslator) Extensions\pl@dictionaries.addons.mozilla.org (Polski slownik poprawnej pisowni) Extensions\{53A03D43-5363-4669-8190-99061B2DEBA5} (ScrapBook) Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} (?) Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}(2) (DownloadHelper) Prefs.js - browser.download.lastDir, H:\\Janina\\Hobby\\Wzory kartek różne Prefs.js - browser.search.defaulturl, Prefs.js - browser.startup.homepage, hxxp://pl.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:pl:official Prefs.js - browser.startup.homepage_override.mstone, rv:1.9.2.25 ======================================== **** Internet Explorer Version [8.0.6001.18702] **** HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU_Main|Start Page - hxxp://www.msn.com/ HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Start Page - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKCU_SearchScopes\Plasmoo - "Plasmoo" (hxxp://plasmoo.com/index.htm?SearchMashine=true&q={searchTerms}) HKCU_SearchScopes\{9927A717-C780-4698-B86B-CEBB5758307E} - "tanio.pl" (hxxp://tanio.pl/szukaj.html?nazwa={searchTerms}) HKCU_SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} - "DVDVideoSoftTB Customized Web Search" (hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT...) HKCU_SearchScopes\{DE2F7E72-C974-45ED-9EDB-DB0DCB405F31} - "szukaj.wp.pl" (hxxp://szukaj.wp.pl/szukaj.html?szukaj={searchTerms}&Submit=Szukaj&z=p&gl_thumb=...) HKCU_SearchScopes\{FEB578A2-07BC-4425-8DFA-CF112892A727} - "wikipedia.wp.pl" (hxxp://wikipedia.wp.pl/search.html?query={searchTerms}) HKCU_Toolbar\WebBrowser|{C55BBCD6-41AD-48AD-9953-3609C48EACC7} (C:\Program Files\IEPro\IEProRecorder.dll) HKLM_Toolbar|{C55BBCD6-41AD-48AD-9953-3609C48EACC7} (C:\Program Files\IEPro\IEProRecorder.dll) HKLM_Toolbar|{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} (C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll) HKLM_ElevationPolicy\6bb0e7ac-df6d-499f-9b64-c6ba8fafdd56 - C:\Program Files\DVDVideoSoftTB\DVDVideoSoftTBToolbarHelper.exe (x) HKLM_ElevationPolicy\{44270ABA-D71B-11DA-8750-001185653D78} - c:\program files\google\googletoolbar1user.exe (x) HKLM_ElevationPolicy\{569591D2-F221-4115-9A89-762956BEB3C0} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\SmartWebPrintExe.exe (x) HKLM_ElevationPolicy\{64374705-AFDE-4dec-AA16-3614F1A53F54} - C:\Program Files\IEPro\IEProCx.exe (IE7Pro.com) HKLM_ElevationPolicy\{646D40CB-9519-4690-8CF8-111F78D5AC5A} - C:\Program Files\IEPro\MiniDM.exe (IE7Pro.com) HKLM_ElevationPolicy\{C8FE2181-CAE7-49EE-9B04-DB7EB4DA544A} - C:\Program Files\Java\jre7\bin\ssvagent.exe (Oracle Corporation) HKLM_ElevationPolicy\{E2C89180-0A05-4d6f-9124-717575FDAD80} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_clipbook.exe (x) HKLM_Extensions\{000002a3-84fe-43f1-b958-f2c3ca804f1a} - "IE7Pro Grab and Drag" (C:\Program Files\IEPro\iepro.dll,309) HKLM_Extensions\{0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - "IE7Pro Preferences" (C:\Program Files\IEPro\iepro.dll,201) HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?) BHO\{00011268-E188-40DF-A514-835FCD78B1BF} - "IE7Pro BHO" (C:\Program Files\IEPro\iepro.dll) BHO\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - "Adobe PDF Reader Link Helper" (C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll) BHO\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - "avast! WebRep" (C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll) BHO\{CC59E0F9-7E43-44FA-9FAA-8377850BF205} - "FDMIECookiesBHO Class" (C:\Program Files\Free Download Manager\iefdm2.dll) ======================================== C:\Program Files\Ad-Remover\Quarantine: 0 File(s) C:\Program Files\Ad-Remover\Backup: 0 File(s) C:\Ad-Report-SCAN[1].txt - 22/12/2011 19:21:31 (4834 Byte(s)) End at: 19:23:03, 22/12/2011 ============== E.O.F ==============

Log z Ad Remover

Kod: Zaznacz wszystko: ======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 ======= Updated by TeamXscript on 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com website: http://www.teamxscript.org C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Launched at 19:21:16 on 22/12/2011, Normal boot Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) Private@NN-04FCDEF7E0AE ( ) ============== SEARCH ============== Folder found: C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Conduit Folder found: C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\OpenCandy Folder found: C:\Documents and Settings\Private\Dane aplikacji\pdfforge Key found: HKLM\Software\Classes\Conduit.Engine Key found: HKLM\Software\Classes\Toolbar.CT2269050 Key found: HKCU\Software\PriceGong Key found: HKLM\Software\Canneverbe Limited\OpenCandy Key found: HKLM\Software\ProgSense\OpenCandy Key found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} ============== ADDITIONNAL SCAN ============== **** Mozilla Firefox Version [3.6.25 (pl)] **** Plugins\npdeployJava1.dll (Oracle Corporation) HKLM_MozillaPlugins\Adobe Reader (x) Searchplugins\allegro-pl.xml (hxxp://www.allegro.pl/search.php?string={searchTerms}&sourceid=Mozilla-search) Searchplugins\fbc-pl.xml (hxxp://fbc.pionier.net.pl/owoc/results) Searchplugins\merlin-pl.xml (hxxp://www.merlin.com.pl/frontend/search?sourceid=Mozilla-search&fraza={searchTerms}&skad=crhhxmkohb) Searchplugins\pwn-pl.xml (hxxp://encyklopedia.pwn.pl/szukaj.php?co={searchTerms}) Searchplugins\wikipedia-pl.xml (hxxp://pl.wikipedia.org/wiki/Specjalna:Szukaj) Searchplugins\wp-pl.xml (hxxp://szukaj.wp.pl/szukaj.html?z=T&r=T&szukaj={searchTerms}) Extensions\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA} (Java Console) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\FireFox\Profiles\e1vbo2qi.default -- Extensions\jyboy.yy@gmail.com (gTranslator) Extensions\pl@dictionaries.addons.mozilla.org (Polski slownik poprawnej pisowni) Extensions\{53A03D43-5363-4669-8190-99061B2DEBA5} (ScrapBook) Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} (?) Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}(2) (DownloadHelper) Prefs.js - browser.download.lastDir, H:\\Janina\\Hobby\\Wzory kartek różne Prefs.js - browser.search.defaulturl, Prefs.js - browser.startup.homepage, hxxp://pl.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:pl:official Prefs.js - browser.startup.homepage_override.mstone, rv:1.9.2.25 ======================================== **** Internet Explorer Version [8.0.6001.18702] **** HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU_Main|Start Page - hxxp://www.msn.com/ HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Start Page - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKCU_SearchScopes\Plasmoo - "Plasmoo" (hxxp://plasmoo.com/index.htm?SearchMashine=true&q={searchTerms}) HKCU_SearchScopes\{9927A717-C780-4698-B86B-CEBB5758307E} - "tanio.pl" (hxxp://tanio.pl/szukaj.html?nazwa={searchTerms}) HKCU_SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} - "DVDVideoSoftTB Customized Web Search" (hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT...) HKCU_SearchScopes\{DE2F7E72-C974-45ED-9EDB-DB0DCB405F31} - "szukaj.wp.pl" (hxxp://szukaj.wp.pl/szukaj.html?szukaj={searchTerms}&Submit=Szukaj&z=p&gl_thumb=...) HKCU_SearchScopes\{FEB578A2-07BC-4425-8DFA-CF112892A727} - "wikipedia.wp.pl" (hxxp://wikipedia.wp.pl/search.html?query={searchTerms}) HKCU_Toolbar\WebBrowser|{C55BBCD6-41AD-48AD-9953-3609C48EACC7} (C:\Program Files\IEPro\IEProRecorder.dll) HKLM_Toolbar|{C55BBCD6-41AD-48AD-9953-3609C48EACC7} (C:\Program Files\IEPro\IEProRecorder.dll) HKLM_Toolbar|{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} (C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll) HKLM_ElevationPolicy\6bb0e7ac-df6d-499f-9b64-c6ba8fafdd56 - C:\Program Files\DVDVideoSoftTB\DVDVideoSoftTBToolbarHelper.exe (x) HKLM_ElevationPolicy\{44270ABA-D71B-11DA-8750-001185653D78} - c:\program files\google\googletoolbar1user.exe (x) HKLM_ElevationPolicy\{569591D2-F221-4115-9A89-762956BEB3C0} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\SmartWebPrintExe.exe (x) HKLM_ElevationPolicy\{64374705-AFDE-4dec-AA16-3614F1A53F54} - C:\Program Files\IEPro\IEProCx.exe (IE7Pro.com) HKLM_ElevationPolicy\{646D40CB-9519-4690-8CF8-111F78D5AC5A} - C:\Program Files\IEPro\MiniDM.exe (IE7Pro.com) HKLM_ElevationPolicy\{C8FE2181-CAE7-49EE-9B04-DB7EB4DA544A} - C:\Program Files\Java\jre7\bin\ssvagent.exe (Oracle Corporation) HKLM_ElevationPolicy\{E2C89180-0A05-4d6f-9124-717575FDAD80} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_clipbook.exe (x) HKLM_Extensions\{000002a3-84fe-43f1-b958-f2c3ca804f1a} - "IE7Pro Grab and Drag" (C:\Program Files\IEPro\iepro.dll,309) HKLM_Extensions\{0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - "IE7Pro Preferences" (C:\Program Files\IEPro\iepro.dll,201) HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?) BHO\{00011268-E188-40DF-A514-835FCD78B1BF} - "IE7Pro BHO" (C:\Program Files\IEPro\iepro.dll) BHO\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - "Adobe PDF Reader Link Helper" (C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll) BHO\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - "avast! WebRep" (C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll) BHO\{CC59E0F9-7E43-44FA-9FAA-8377850BF205} - "FDMIECookiesBHO Class" (C:\Program Files\Free Download Manager\iefdm2.dll) ======================================== C:\Program Files\Ad-Remover\Quarantine: 0 File(s) C:\Program Files\Ad-Remover\Backup: 0 File(s) C:\Ad-Report-SCAN[1].txt - 22/12/2011 19:21:31 (4834 Byte(s)) End at: 19:23:03, 22/12/2011 ============== E.O.F ==============

Dodano Dzisiaj, 22:34:
OTL txt ze skanowania po skrypcie

Kod: Zaznacz wszystko: OTL logfile created on: 2011-12-22 21:59:32 - Run 2 OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\Private\Pulpit\Antywirusy Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 511,48 Mb Total Physical Memory | 160,43 Mb Available Physical Memory | 31,37% Memory free 2,47 Gb Paging File | 1,81 Gb Available in Paging File | 73,40% Paging File free Paging file location(s): [Binary data over 100 bytes] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 37,25 Gb Total Space | 8,53 Gb Free Space | 22,90% Space Free | Partition Type: NTFS Drive D: | 37,27 Gb Total Space | 34,43 Gb Free Space | 92,37% Space Free | Partition Type: NTFS Drive G: | 29,28 Gb Total Space | 22,25 Gb Free Space | 75,99% Space Free | Partition Type: FAT32 Drive H: | 203,58 Gb Total Space | 94,73 Gb Free Space | 46,53% Space Free | Partition Type: NTFS Computer Name: NN-04FCDEF7E0AE | User Name: Private | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-12-22 09:54:23 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Private\Pulpit\Antywirusy\OTL.exe PRC - [2011-12-21 11:58:03 | 000,912,856 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2011-10-07 18:47:13 | 001,883,328 | ---- | M] (COMODO) -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe PRC - [2011-09-28 09:45:12 | 000,885,160 | ---- | M] () -- C:\Program Files\Ashampoo\Ashampoo WinOptimizer 8\LiveTunerService.exe PRC - [2011-09-28 09:45:10 | 002,656,680 | ---- | M] (Ashampoo Development GmbH & Co. KG) -- C:\Program Files\Ashampoo\Ashampoo WinOptimizer 8\LiveTuner.exe PRC - [2011-08-31 16:00:48 | 000,366,152 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe PRC - [2011-04-18 19:25:12 | 003,460,784 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe PRC - [2011-04-18 19:25:10 | 000,042,184 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe PRC - [2010-03-04 22:38:00 | 000,071,096 | ---- | M] () -- C:\Program Files\CDBurnerXP\NMSAccessU.exe PRC - [2009-08-24 22:16:36 | 000,406,016 | ---- | M] (mst software GmbH, Germany) -- C:\Program Files\Ashampoo\Ashampoo WinOptimizer 8\DfSdkS.exe PRC - [2008-04-14 21:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2008-03-20 11:04:46 | 002,127,296 | ---- | M] (Gadu-Gadu S.A.) -- C:\Program Files\Gadu-Gadu\gg.exe PRC - [2007-03-06 15:45:37 | 000,517,040 | ---- | M] ( ) -- C:\WINDOWS\system32\lxdicoms.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2011-12-22 09:37:50 | 001,656,320 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\11122200\algo.dll MOD - [2011-12-21 11:58:03 | 000,849,368 | ---- | M] () -- C:\Program Files\Mozilla Firefox\js3250.dll MOD - [2011-12-20 00:49:56 | 000,241,528 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\11122200\aswRep.dll MOD - [2011-10-12 09:59:03 | 008,522,400 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll MOD - [2011-09-28 09:45:12 | 000,885,160 | ---- | M] () -- C:\Program Files\Ashampoo\Ashampoo WinOptimizer 8\LiveTunerService.exe MOD - [2011-09-05 18:05:04 | 000,300,544 | ---- | M] () -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.POL MOD - [2010-03-04 22:38:00 | 000,071,096 | ---- | M] () -- C:\Program Files\CDBurnerXP\NMSAccessU.exe MOD - [2008-04-14 21:50:38 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll MOD - [2008-03-20 10:17:48 | 000,106,496 | ---- | M] () -- C:\Program Files\Gadu-Gadu\libiax2.dll MOD - [2008-03-20 10:17:44 | 000,061,440 | ---- | M] () -- C:\Program Files\Gadu-Gadu\libjb.dll MOD - [2007-10-25 12:51:16 | 000,198,656 | ---- | M] () -- C:\Program Files\Gadu-Gadu\libcurl.dll MOD - [2007-03-05 11:31:25 | 000,113,152 | ---- | M] () -- C:\WINDOWS\system32\spool\prtprocs\w32x86\lxdidrpp.dll MOD - [2001-10-28 17:42:30 | 000,116,224 | ---- | M] () -- C:\WINDOWS\system32\pdfcmnnt.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Auto | Stopped] -- -- (avast! Firewall) SRV - [2011-10-07 18:47:13 | 001,883,328 | ---- | M] (COMODO) [Auto | Running] -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe -- (cmdAgent) SRV - [2011-09-28 09:45:12 | 000,885,160 | ---- | M] () [Auto | Running] -- C:\Program Files\Ashampoo\Ashampoo WinOptimizer 8\LiveTunerService.exe -- (WO_LiveService) SRV - [2011-08-31 16:00:48 | 000,366,152 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService) SRV - [2011-04-18 19:25:10 | 000,042,184 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus) SRV - [2010-03-04 22:38:00 | 000,071,096 | ---- | M] () [Auto | Running] -- C:\Program Files\CDBurnerXP\NMSAccessU.exe -- (NMSAccess) SRV - [2009-08-24 22:16:36 | 000,406,016 | ---- | M] (mst software GmbH, Germany) [Auto | Running] -- C:\Program Files\Ashampoo\Ashampoo WinOptimizer 8\DfsdkS.exe -- (DfSdkS) SRV - [2009-04-30 12:23:26 | 000,090,112 | ---- | M] () [Disabled | Stopped] -- C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe -- (OMSI download service) SRV - [2007-03-06 15:45:37 | 000,517,040 | ---- | M] ( ) [Auto | Running] -- C:\WINDOWS\System32\lxdicoms.exe -- (lxdi_device) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2011-10-07 18:48:02 | 000,097,760 | ---- | M] (COMODO) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\inspect.sys -- (Inspect) DRV - [2011-10-07 18:48:01 | 000,031,704 | ---- | M] (COMODO) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\cmdhlp.sys -- (cmdHlp) DRV - [2011-10-07 18:48:00 | 000,492,768 | ---- | M] (COMODO) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\cmdGuard.sys -- (cmdGuard) DRV - [2011-09-06 21:38:54 | 000,111,320 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\aswFW.sys -- (aswFW) DRV - [2011-09-02 07:31:28 | 000,039,192 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LMouFilt.Sys -- (LMouFilt) DRV - [2011-09-02 07:31:20 | 000,041,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LHidFilt.Sys -- (LHidFilt) DRV - [2011-09-02 07:30:58 | 000,012,184 | ---- | M] (Logitech, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\LBeepKE.sys -- (LBeepKE) DRV - [2011-08-31 16:00:50 | 000,022,216 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mbam.sys -- (MBAMProtector) DRV - [2011-04-18 19:17:46 | 000,441,176 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx) DRV - [2011-04-18 19:17:34 | 000,307,288 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP) DRV - [2011-04-18 19:16:18 | 000,049,240 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi) DRV - [2011-04-18 19:16:06 | 000,102,488 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2) DRV - [2011-04-18 19:13:21 | 000,025,432 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr) DRV - [2011-04-18 19:13:02 | 000,030,680 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4) DRV - [2011-04-18 19:12:58 | 000,019,544 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk) DRV - [2011-03-08 06:01:06 | 000,012,696 | ---- | M] () [Kernel | Auto | Running] -- C:\Program Files\Ashampoo\Ashampoo WinOptimizer 8\LiveTunerProcessMonitor32.sys -- (LiveTunerPM) DRV - [2009-11-12 13:48:56 | 000,005,504 | ---- | M] () [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen) DRV - [2009-03-25 17:48:00 | 000,114,728 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018mdm.sys -- (s1018mdm) DRV - [2009-03-25 17:48:00 | 000,109,864 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018unic.sys -- (s1018unic) Sony Ericsson Device 1018 USB Ethernet Emulation (WDM) DRV - [2009-03-25 17:48:00 | 000,106,208 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018mgmt.sys -- (s1018mgmt) Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM) DRV - [2009-03-25 17:48:00 | 000,104,744 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018obex.sys -- (s1018obex) DRV - [2009-03-25 17:48:00 | 000,086,824 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018bus.sys -- (s1018bus) Sony Ericsson Device 1018 driver (WDM) DRV - [2009-03-25 17:48:00 | 000,026,024 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018nd5.sys -- (s1018nd5) Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS) DRV - [2009-03-25 17:48:00 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018mdfl.sys -- (s1018mdfl) DRV - [2008-05-16 12:33:14 | 000,115,752 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016unic.sys -- (s0016unic) Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM) DRV - [2008-05-16 12:33:14 | 000,025,512 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016nd5.sys -- (s0016nd5) Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS) DRV - [2008-05-16 12:33:14 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016mdfl.sys -- (s0016mdfl) DRV - [2008-05-16 12:33:12 | 000,120,744 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016mdm.sys -- (s0016mdm) DRV - [2008-05-16 12:33:12 | 000,114,216 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016mgmt.sys -- (s0016mgmt) Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM) DRV - [2008-05-16 12:33:12 | 000,110,632 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016obex.sys -- (s0016obex) DRV - [2008-05-16 12:33:12 | 000,089,256 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016bus.sys -- (s0016bus) Sony Ericsson Device 0016 driver (WDM) DRV - [2008-04-13 23:15:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum) DRV - [2008-01-09 11:28:34 | 000,027,632 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\seehcri.sys -- (seehcri) DRV - [2007-04-13 19:24:04 | 010,246,144 | ---- | M] (Sonix Co. Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\snpstd3.sys -- (SNPSTD3) USB PC Camera (SNPSTD3) DRV - [2007-03-08 13:34:46 | 004,027,840 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\alcxwdm.sys -- (ALCXWDM) Service for Realtek AC97 Audio (WDM) DRV - [2006-12-01 13:23:58 | 000,392,122 | ---- | M] (Vimicro Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\usbVM303.sys -- (ZSMC303) DRV - [2006-11-30 15:14:22 | 000,090,800 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se45unic.sys -- (se45unic) Sony Ericsson Device 069 USB Ethernet Emulation SEMC45 (WDM) DRV - [2006-11-30 15:14:14 | 000,086,432 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se45obex.sys -- (se45obex) DRV - [2006-11-30 15:14:10 | 000,088,624 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se45mgmt.sys -- (se45mgmt) Sony Ericsson Device 069 USB WMC Device Management Drivers (WDM) DRV - [2006-11-30 15:14:10 | 000,018,704 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se45nd5.sys -- (se45nd5) Sony Ericsson Device 069 USB Ethernet Emulation SEMC45 (NDIS) DRV - [2006-11-30 15:14:04 | 000,097,088 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se45mdm.sys -- (se45mdm) DRV - [2006-11-30 15:14:04 | 000,009,360 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se45mdfl.sys -- (se45mdfl) DRV - [2006-11-30 15:13:56 | 000,061,536 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se45bus.sys -- (se45bus) Sony Ericsson Device 069 driver (WDM) DRV - [2006-04-25 09:57:42 | 000,428,160 | ---- | M] (Vimicro Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\vmfilter303.sys -- (vmfilter303) DRV - [2004-08-03 23:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Sterownik NT karty Realtek RTL8139(A/B/C) DRV - [2001-08-17 22:00:04 | 000,002,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\msmpu401.sys -- (ms_mpu401) DRV - [2001-08-17 21:51:32 | 000,018,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\irsir.sys -- (irsir) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1993962763-113007714-854245398-1003\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1 IE - HKU\S-1-5-21-1993962763-113007714-854245398-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/ IE - HKU\S-1-5-21-1993962763-113007714-854245398-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultthis.engineName: "" FF - prefs.js..browser.search.defaulturl: "" FF - prefs.js..browser.startup.homepage: "http://pl.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:pl:official" FF - prefs.js..extensions.enabledItems: {53A03D43-5363-4669-8190-99061B2DEBA5}:1.3.7 FF - prefs.js..extensions.enabledItems: jyboy.yy@gmail.com:1.0.4 FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:2.0.1 FF - prefs.js..extensions.enabledItems: {B17C1C5A-04B1-11DB-9804-B622A1EF5492}:1.2.1 FF - prefs.js..extensions.enabledItems: {aff87fa2-a58e-4edd-b852-0a20203c1e17}:0.9 FF - prefs.js..extensions.enabledItems: pl@dictionaries.addons.mozilla.org:1.0.20110621 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA}:7.0.01 FF - prefs.js..extensions.enabledItems: wrc@avast.com:20110101 FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.9.7 FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2011-12-07 23:19:58 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.25\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-12-21 11:58:09 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.25\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-12-21 11:58:09 | 000,000,000 | ---D | M] [2011-05-10 23:09:10 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Extensions [2011-12-22 19:15:56 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions [2011-05-10 23:49:15 | 000,000,000 | ---D | M] (FEBE) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} [2011-05-10 23:16:20 | 000,000,000 | ---D | M] (ScrapBook) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{53A03D43-5363-4669-8190-99061B2DEBA5} [2011-12-07 21:31:23 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} [2011-11-10 09:18:41 | 000,000,000 | ---D | M] (gTranslate) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{aff87fa2-a58e-4edd-b852-0a20203c1e17} [2011-05-10 23:59:19 | 000,000,000 | ---D | M] (Password Exporter) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{B17C1C5A-04B1-11DB-9804-B622A1EF5492} [2011-12-12 19:54:48 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2011-12-07 21:31:19 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}(2) [2011-12-15 10:46:06 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2011-05-10 23:24:40 | 000,000,000 | ---D | M] (gTranslator) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\jyboy.yy@gmail.com [2011-08-25 00:04:36 | 000,000,000 | ---D | M] (Polski slownik poprawnej pisowni) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\pl@dictionaries.addons.mozilla.org [2011-12-22 00:28:58 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2011-10-30 12:01:35 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA} [2011-12-07 23:19:58 | 000,000,000 | ---D | M] (avast! WebRep) -- C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF [2011-10-30 12:00:28 | 000,611,224 | ---- | M] (Oracle Corporation) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2011-03-19 23:40:49 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2011-03-19 23:40:49 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2011-03-19 23:40:49 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2011-03-19 23:40:49 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2011-03-19 23:40:49 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2011-03-19 23:40:49 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Conduit (Enabled) CHR - default_search_provider: search_url = http://search.conduit.com/Results.aspx?q={searchTerms}&hl=en&SelfSearch=1&SearchSource=49&ctid=CT2269050 CHR - default_search_provider: suggest_url = http://search.conduit.com/ CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\16.0.912.63\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll CHR - plugin: Java Deployment Toolkit 7.0.10.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 7 U1 (Enabled) = C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\16.0.912.63\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\16.0.912.63\pdf.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll CHR - plugin: Default Plug-in (Enabled) = default_plugin CHR - Extension: YouTube = C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.2_0\ CHR - Extension: YouTube = C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2_0\ CHR - Extension: Szukaj w Google = C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.14_0\ CHR - Extension: Szukaj w Google = C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.16_0\ CHR - Extension: avast! WebRep = C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1091_0\ CHR - Extension: Gmail = C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\6.1.3_0\ CHR - Extension: Gmail = C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\6.1.4_0\ O1 HOSTS File: ([2011-10-29 17:45:33 | 000,000,098 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (IE7Pro BHO) - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files\IEPro\IEPro.dll (IE7Pro.com) O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O2 - BHO: (FDMIECookiesBHO Class) - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll () O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O3 - HKLM\..\Toolbar: (Grab Pro) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\IEPro\IEProRecorder.dll () O3 - HKU\S-1-5-21-1993962763-113007714-854245398-1003\..\Toolbar\WebBrowser: (Grab Pro) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\IEPro\IEProRecorder.dll () O4 - HKLM..\Run: [Ashampoo WinOptimizer Live-Tuner] C:\Program Files\Ashampoo\Ashampoo WinOptimizer 8\LiveTuner.exe (Ashampoo Development GmbH & Co. KG) O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software) O4 - HKLM..\Run: [BigDog303] C:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH) File not found O4 - HKLM..\Run: [LXDICATS] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXDItime.DLL (Lexmark International, Inc.) O4 - HKU\S-1-5-21-1993962763-113007714-854245398-1003..\Run: [Gadu-Gadu] C:\Program Files\Gadu-Gadu\gg.exe (Gadu-Gadu S.A.) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1993962763-113007714-854245398-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-1993962763-113007714-854245398-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-21-1993962763-113007714-854245398-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-21-1993962763-113007714-854245398-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\S-1-5-21-1993962763-113007714-854245398-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1 O8 - Extra context menu item: Free YouTube Download - C:\Documents and Settings\Private\Dane aplikacji\DVDVideoSoftIEHelpers\freeyoutubedownload.htm () O9 - Extra Button: IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files\IEPro\IEPro.dll (IE7Pro.com) O9 - Extra 'Tools' menuitem : IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files\IEPro\IEPro.dll (IE7Pro.com) O9 - Extra Button: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\IEPro.dll (IE7Pro.com) O9 - Extra 'Tools' menuitem : IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\IEPro.dll (IE7Pro.com) O15 - HKU\S-1-5-21-1993962763-113007714-854245398-1003\..Trusted Domains: mks.com.pl ([www] http in Trusted sites) O15 - HKU\S-1-5-21-1993962763-113007714-854245398-1003\..Trusted Domains: mks.com.pl ([www] https in Trusted sites) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_01-windows-i586.cab (Java Plug-in 1.7.0_01) O16 - DPF: {CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_01-windows-i586.cab (Java Plug-in 1.7.0_01) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_01-windows-i586.cab (Java Plug-in 1.7.0_01) O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{35866813-DF5B-4D9A-84E1-5F49AD61BE57}: NameServer = 10.3.0.1 O20 - AppInit_DLLs: (C:\WINDOWS\system32\guard32.dll) -C:\WINDOWS\system32\guard32.dll (COMODO) O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2007-06-06 14:12:39 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2009-05-28 20:31:29 | 000,000,000 | R--D | M] - C:\autorun.inf -- [ NTFS ] O32 - AutoRun File - [2009-05-28 20:31:30 | 000,000,000 | R--D | M] - D:\autorun.inf -- [ NTFS ] O32 - AutoRun File - [2010-03-04 13:05:12 | 000,000,000 | ---- | M] () - G:\AUTOEXEC.BAT -- [ FAT32 ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011-12-22 19:20:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Private\Menu Start\Programy\Ad-Remover [2011-12-22 19:20:28 | 000,000,000 | ---D | C] -- C:\Program Files\Ad-Remover [2011-12-22 19:05:15 | 000,000,000 | ---D | C] -- C:\_OTL [2011-12-20 09:14:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Skype [2011-12-19 01:04:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Private\Dane aplikacji\pdfforge [2011-12-19 01:04:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\PDFCreator [2011-12-19 01:04:25 | 000,662,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSCOMCT2.OCX [2011-12-19 01:04:25 | 000,137,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSMAPI32.OCX [2011-12-19 01:04:19 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSMPIDE.DLL [2011-12-19 01:04:19 | 000,000,000 | ---D | C] -- C:\Program Files\PDFCreator [2011-12-16 03:57:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Ashampoo [2011-12-16 03:57:18 | 000,028,160 | ---- | C] (mst software GmbH, Germany) -- C:\WINDOWS\System32\DfSdkBt.exe [2011-12-12 20:00:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Private\dwhelper [2011-12-09 04:11:25 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Private\Recent [2011-12-09 04:00:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Google Chrome [2011-12-07 23:20:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\avast! Free Antivirus [2011-12-07 23:20:32 | 000,307,288 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSP.sys [2011-12-07 23:20:32 | 000,019,544 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys [2011-12-07 23:20:29 | 000,025,432 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys [2011-12-07 23:20:28 | 000,441,176 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSnx.sys [2011-12-07 23:20:28 | 000,049,240 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys [2011-12-07 23:20:27 | 000,102,488 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys [2011-12-07 23:20:27 | 000,096,344 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswmon.sys [2011-12-07 23:20:27 | 000,030,680 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys [2011-12-07 23:19:55 | 000,040,112 | ---- | C] (AVAST Software) -- C:\WINDOWS\avastSS.scr [2011-12-07 23:19:54 | 000,199,304 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe [2011-12-07 23:19:35 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software [2011-12-07 22:27:40 | 000,303,104 | R--- | C] (Hewlett-Packard Co.) -- C:\WINDOWS\System32\hpovst15.dll [2011-12-07 22:27:39 | 000,581,632 | R--- | C] (Hewlett-Packard Co.) -- C:\WINDOWS\System32\hpotscl6.dll [2011-12-07 22:27:38 | 000,729,088 | R--- | C] (Hewlett-Packard) -- C:\WINDOWS\System32\hpowiax7.dll [2011-12-07 21:36:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\HP Product Assistant [2011-12-07 21:33:35 | 000,000,000 | -HSD | C] -- C:\RECYCLER [2011-12-07 21:31:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Free Download Manager [2011-12-07 21:31:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\FreeDownloadManager.ORG [2011-12-07 21:31:39 | 000,000,000 | ---D | C] -- C:\Program Files\Free Download Manager [2011-12-07 21:31:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Private\Dane aplikacji\Free Download Manager [2011-12-07 21:31:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\DVDVideoSoft [2011-12-07 21:31:28 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Plasmoo [2011-12-07 21:31:25 | 000,000,000 | ---D | C] -- C:\Program Files\DVDVideoSoft [2011-11-28 21:01:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Private\Moje dokumenty\Downloads [2011-11-27 02:15:31 | 000,000,000 | ---D | C] -- C:\RECYCLER(2) [2011-11-25 23:12:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Private\Moje dokumenty\Originals [2010-08-28 10:57:50 | 000,356,352 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdiinpa.dll [2010-08-28 10:57:50 | 000,339,968 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdiiesc.dll [2010-08-28 10:57:50 | 000,311,296 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdihcp.dll [2010-08-28 10:57:49 | 001,187,840 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdiserv.dll [2010-08-28 10:57:49 | 000,942,080 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdiusb1.dll [2010-08-28 10:57:48 | 000,614,400 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdipmui.dll [2010-08-28 10:57:48 | 000,532,480 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdilmpm.dll [2010-08-28 10:57:48 | 000,053,248 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdiprox.dll [2010-08-28 10:57:48 | 000,053,248 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdipplc.dll [2010-08-28 10:57:47 | 000,320,432 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdiih.exe [2010-08-28 10:57:46 | 000,671,744 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdihbn3.dll [2010-08-28 10:57:44 | 000,761,856 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdicomc.dll [2010-08-28 10:57:44 | 000,517,040 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdicoms.exe [2010-08-28 10:57:44 | 000,360,448 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdicomm.dll [2010-08-28 10:57:43 | 000,340,912 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdicfg.exe [2008-03-17 16:20:26 | 000,172,032 | ---- | C] ( ) -- C:\WINDOWS\System32\rsnpstd3.dll [2008-03-17 16:20:26 | 000,061,440 | ---- | C] ( ) -- C:\WINDOWS\System32\vsnpstd3.dll [2008-03-17 16:20:26 | 000,053,248 | ---- | C] ( ) -- C:\WINDOWS\System32\csnpstd3.dll [2008-03-17 16:20:26 | 000,053,248 | ---- | C] ( ) -- C:\WINDOWS\csnpstd3.dll [2004-07-09 04:08:36 | 000,472,576 | ---- | C] (Microsoft Corporation) -- C:\Program Files\dxsetup.exe [2004-07-09 04:08:34 | 002,242,560 | ---- | C] (Microsoft Corporation) -- C:\Program Files\dsetup32.dll [2004-07-09 03:03:10 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Program Files\DSETUP.dll [1 C:\Documents and Settings\All Users\*.tmp files -> C:\Documents and Settings\All Users\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011-12-22 19:20:39 | 000,001,554 | ---- | M] () -- C:\Documents and Settings\Private\Pulpit\Ad-Remover.lnk [2011-12-22 19:08:42 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2011-12-20 20:14:34 | 000,002,801 | ---- | M] () -- C:\Documents and Settings\Private\Pulpit\HiJackThis.lnk [2011-12-20 15:44:00 | 000,159,544 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2011-12-20 10:42:31 | 000,001,393 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2011-12-20 09:14:17 | 000,001,878 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk [2011-12-19 16:32:05 | 000,148,188 | ---- | M] () -- C:\Documents and Settings\Private\Moje dokumenty\bacchus-sepia4bg12.jpg [2011-12-19 12:17:15 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2011-12-16 03:57:28 | 000,001,863 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\1-Click-Optimizer (WO8).lnk [2011-12-16 03:57:28 | 000,000,865 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Ashampoo WinOptimizer 8.lnk [2011-12-12 20:08:05 | 000,199,680 | ---- | M] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-12-09 13:19:38 | 000,168,545 | ---- | M] () -- C:\WINDOWS\hpoins27.dat [2011-12-09 12:46:51 | 000,169,051 | ---- | M] () -- C:\WINDOWS\hpoins27.dat.temp [2011-12-09 12:21:44 | 000,000,807 | ---- | M] () -- C:\WINDOWS\wininit.ini [2011-12-09 04:16:02 | 000,003,420 | ---- | M] () -- C:\Documents and Settings\Private\Moje dokumenty\cc_20111209_041544.reg [2011-12-09 04:14:55 | 000,015,858 | ---- | M] () -- C:\Documents and Settings\Private\Moje dokumenty\cc_20111209_041448.reg [2011-12-09 03:59:41 | 000,000,682 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\CCleaner.lnk [2011-12-07 23:20:33 | 000,001,689 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\avast! Free Antivirus.lnk [2011-12-07 23:20:28 | 000,002,644 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT [2011-12-05 06:05:08 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\{5733574A-9F20-49E5-A5C3-E885C626FCD3} [2011-12-04 03:42:43 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\{04C910EA-7EF4-4419-A9B1-870C239A0879} [2011-12-02 04:46:57 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\{16F48A82-4D02-4EC4-BBD0-E2E91E5C6FDD} [2011-11-28 20:40:16 | 000,001,088 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1993962763-113007714-854245398-1003Core.job [2011-11-25 23:12:02 | 000,099,820 | ---- | M] () -- C:\Documents and Settings\Private\Moje dokumenty\marij_v2459[1].jpg [2011-11-23 15:40:46 | 001,859,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\win32k.sys [2011-11-23 15:40:46 | 001,859,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\win32k.sys [1 C:\Documents and Settings\All Users\*.tmp files -> C:\Documents and Settings\All Users\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-12-22 19:20:39 | 000,001,554 | ---- | C] () -- C:\Documents and Settings\Private\Pulpit\Ad-Remover.lnk [2011-12-20 20:14:34 | 000,002,801 | ---- | C] () -- C:\Documents and Settings\Private\Pulpit\HiJackThis.lnk [2011-12-20 10:28:13 | 000,001,393 | ---- | C] () -- C:\WINDOWS\imsins.BAK [2011-12-20 09:14:17 | 000,001,878 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk [2011-12-19 16:33:54 | 000,148,188 | ---- | C] () -- C:\Documents and Settings\Private\Moje dokumenty\bacchus-sepia4bg12.jpg [2011-12-19 01:04:24 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll [2011-12-16 03:57:28 | 000,001,863 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\1-Click-Optimizer (WO8).lnk [2011-12-16 03:57:28 | 000,000,865 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Ashampoo WinOptimizer 8.lnk [2011-12-09 04:15:46 | 000,003,420 | ---- | C] () -- C:\Documents and Settings\Private\Moje dokumenty\cc_20111209_041544.reg [2011-12-09 04:14:51 | 000,015,858 | ---- | C] () -- C:\Documents and Settings\Private\Moje dokumenty\cc_20111209_041448.reg [2011-12-09 03:59:40 | 000,000,682 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\CCleaner.lnk [2011-12-07 23:20:33 | 000,001,689 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\avast! Free Antivirus.lnk [2011-12-05 06:05:08 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\{5733574A-9F20-49E5-A5C3-E885C626FCD3} [2011-12-04 03:42:43 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\{04C910EA-7EF4-4419-A9B1-870C239A0879} [2011-12-02 04:46:57 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\{16F48A82-4D02-4EC4-BBD0-E2E91E5C6FDD} [2011-11-28 20:40:16 | 000,001,088 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1993962763-113007714-854245398-1003Core.job [2011-11-25 23:10:18 | 000,099,820 | ---- | C] () -- C:\Documents and Settings\Private\Moje dokumenty\marij_v2459[1].jpg [2011-11-22 20:39:38 | 000,168,545 | ---- | C] () -- C:\WINDOWS\hpoins27.dat [2011-11-22 20:39:38 | 000,000,932 | ---- | C] () -- C:\WINDOWS\hpomdl27.dat [2011-11-22 06:44:20 | 000,000,512 | ---- | C] () -- C:\WINDOWS\hpomdl44.dat.temp [2011-11-22 01:21:40 | 000,169,051 | ---- | C] () -- C:\WINDOWS\hpoins27.dat.temp [2011-11-22 01:21:40 | 000,000,932 | ---- | C] () -- C:\WINDOWS\hpomdl27.dat.temp [2011-11-16 06:03:22 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\{13D28CF9-B685-4837-B27B-A51FFC69C6BC} [2011-10-25 18:07:38 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\setupfilter.exe [2011-09-07 09:32:58 | 000,059,904 | ---- | C] () -- C:\WINDOWS\System32\zlib.dll [2011-05-09 21:18:34 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat [2011-04-15 20:52:27 | 000,723,981 | ---- | C] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\unins000.exe [2011-04-15 20:52:26 | 000,002,170 | ---- | C] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\unins000.dat [2011-02-14 00:32:38 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini [2011-02-04 13:05:32 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin [2010-12-08 19:20:29 | 000,005,504 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys [2010-08-28 11:00:24 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\lxdivs.dll [2010-08-28 11:00:16 | 000,344,064 | ---- | C] () -- C:\WINDOWS\System32\lxdicoin.dll [2010-08-28 10:59:31 | 000,692,224 | ---- | C] () -- C:\WINDOWS\System32\lxdidrs.dll [2010-08-28 10:59:31 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\lxdicnv4.dll [2010-08-28 10:59:31 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\lxdicaps.dll [2010-08-28 10:58:08 | 000,000,060 | -H-- | C] () -- C:\WINDOWS\System32\lxdirwrd.ini [2010-08-28 10:57:50 | 000,294,912 | ---- | C] () -- C:\WINDOWS\System32\lxdiinst.dll [2010-08-28 10:57:45 | 000,208,896 | ---- | C] () -- C:\WINDOWS\System32\lxdigrd.dll [2010-02-24 02:52:16 | 000,000,050 | ---- | C] () -- C:\WINDOWS\SW_Win9423X24.DLL [2010-02-24 02:51:57 | 001,220,608 | ---- | C] () -- C:\WINDOWS\System32\pdf2bmp.dll [2010-02-24 02:51:54 | 000,098,304 | ---- | C] () -- C:\WINDOWS\System32\DVM.dll [2010-02-24 02:51:54 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\RegisterExe.exe [2009-12-14 18:35:32 | 000,343,040 | ---- | C] () -- C:\WINDOWS\System32\lffpx7.dll [2009-12-14 18:35:32 | 000,116,736 | ---- | C] () -- C:\WINDOWS\System32\lfkodak.dll [2009-11-25 00:51:17 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2009-11-23 14:36:06 | 000,000,228 | ---- | C] () -- C:\WINDOWS\System32\edacded0.dat [2009-05-24 09:58:43 | 004,471,092 | ---- | C] () -- C:\WINDOWS\System32\libavcodec.dll [2009-05-23 15:05:06 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\mmswitch.dll [2009-05-23 15:04:55 | 000,207,360 | ---- | C] () -- C:\WINDOWS\System32\evrprop.dll [2009-05-23 14:52:48 | 000,108,032 | ---- | C] () -- C:\WINDOWS\System32\avi.dll [2009-05-23 14:52:47 | 000,246,784 | ---- | C] () -- C:\WINDOWS\System32\dxr.dll [2009-05-23 14:52:45 | 000,141,312 | ---- | C] () -- C:\WINDOWS\System32\mp4.dll [2009-05-23 14:52:44 | 000,148,480 | ---- | C] () -- C:\WINDOWS\System32\mkx.dll [2009-05-23 14:52:42 | 000,159,744 | ---- | C] () -- C:\WINDOWS\System32\mmfinfo.dll [2009-05-23 14:52:41 | 000,120,832 | ---- | C] () -- C:\WINDOWS\System32\ogm.dll [2009-05-23 14:52:40 | 000,163,840 | ---- | C] () -- C:\WINDOWS\System32\ts.dll [2009-05-23 14:52:38 | 000,079,360 | ---- | C] () -- C:\WINDOWS\System32\mkzlib.dll [2009-05-23 14:52:37 | 000,023,552 | ---- | C] () -- C:\WINDOWS\System32\mkunicode.dll [2009-05-23 14:52:06 | 001,416,015 | ---- | C] () -- C:\WINDOWS\System32\ffmpegmt.dll [2009-05-23 14:51:55 | 000,557,469 | ---- | C] () -- C:\WINDOWS\System32\libmplayer.dll [2009-05-23 14:51:50 | 000,146,098 | ---- | C] () -- C:\WINDOWS\System32\libmpeg2_ff.dll [2009-05-23 14:51:14 | 000,098,304 | ---- | C] () -- C:\WINDOWS\System32\ff_wmv9.dll [2009-05-23 14:51:13 | 000,113,152 | ---- | C] () -- C:\WINDOWS\System32\ff_unrar.dll [2009-05-23 14:51:12 | 000,183,296 | ---- | C] () -- C:\WINDOWS\System32\ff_samplerate.dll [2009-05-23 14:51:10 | 000,178,688 | ---- | C] () -- C:\WINDOWS\System32\ff_libmad.dll [2009-05-23 14:51:08 | 000,486,400 | ---- | C] () -- C:\WINDOWS\System32\ff_libfaad2.dll [2009-05-23 14:51:04 | 000,257,024 | ---- | C] () -- C:\WINDOWS\System32\ff_libdts.dll [2009-05-23 14:51:01 | 000,142,848 | ---- | C] () -- C:\WINDOWS\System32\ff_liba52.dll [2009-05-23 14:50:39 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\OggDS.dll [2009-05-23 14:50:36 | 000,921,600 | ---- | C] () -- C:\WINDOWS\System32\vorbisenc.dll [2009-05-23 14:50:29 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\vorbis.dll [2009-05-23 14:50:27 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\ogg.dll [2009-05-23 14:50:11 | 000,009,216 | ---- | C] () -- C:\WINDOWS\System32\cpuinf32.dll [2009-05-18 21:36:07 | 025,327,648 | -HS- | C] () -- C:\WINDOWS\System32\drivers\fidbox.dat [2009-05-02 17:48:00 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\LXF3PMON.DLL [2009-05-02 17:48:00 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\LXF3FXPU.DLL [2009-05-02 17:47:40 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\lxf3oem.dll [2009-05-02 17:47:40 | 000,012,288 | ---- | C] () -- C:\WINDOWS\System32\LXF3PMRC.DLL [2009-03-14 20:25:49 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\CNMVS3w.DLL [2008-12-10 23:02:58 | 000,000,000 | ---- | C] () -- C:\WINDOWS\PCSPATS.DAT [2008-12-07 16:53:32 | 000,000,071 | ---- | C] () -- C:\WINDOWS\iltwain.ini [2008-11-22 16:39:53 | 000,000,807 | ---- | C] () -- C:\WINDOWS\wininit.ini [2008-09-28 14:17:48 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe [2008-09-27 00:42:10 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat [2008-05-16 12:38:24 | 000,088,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\snsntfy.dll [2008-03-17 16:20:31 | 000,843,776 | ---- | C] () -- C:\WINDOWS\vsnpstd3.exe [2008-03-17 16:20:30 | 000,015,498 | ---- | C] () -- C:\WINDOWS\snpstd3.ini [2008-03-16 15:31:41 | 000,160,565 | ---- | C] () -- C:\WINDOWS\Sqirlz Water Reflections Uninstaller.exe [2008-03-07 20:40:23 | 000,000,032 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\ezsid.dat [2008-01-03 21:31:02 | 000,000,132 | ---- | C] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [2007-09-01 12:42:46 | 000,199,680 | ---- | C] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2007-07-12 12:33:20 | 000,000,019 | ---- | C] () -- C:\WINDOWS\SMURFED.INI [2007-07-12 12:33:14 | 000,034,800 | ---- | C] () -- C:\WINDOWS\UNWISE.EXE [2007-06-21 21:07:06 | 000,000,346 | ---- | C] () -- C:\WINDOWS\I_VIEW32.INI [2007-06-09 19:31:43 | 000,001,287 | ---- | C] () -- C:\WINDOWS\mozver.dat [2007-06-06 16:37:04 | 000,000,421 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2007-06-06 15:51:44 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2007-06-06 15:50:31 | 000,159,544 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2007-06-06 15:24:50 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll [2007-06-06 14:16:14 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2007-06-06 14:08:49 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2004-08-04 00:56:48 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin [2004-08-02 14:20:40 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat [2004-07-22 10:51:34 | 003,432,656 | ---- | C] () -- C:\Program Files\ManagedDX.CAB [2004-07-19 22:58:36 | 001,156,363 | ---- | C] () -- C:\Program Files\BDANT.cab [2004-07-19 22:53:26 | 000,976,020 | ---- | C] () -- C:\Program Files\BDAXP.cab [2004-07-09 14:17:16 | 013,265,040 | ---- | C] () -- C:\Program Files\dxnt.cab [2004-07-09 09:13:48 | 015,493,481 | ---- | C] () -- C:\Program Files\DirectX.cab [2004-07-09 09:13:46 | 000,703,080 | ---- | C] () -- C:\Program Files\BDA.cab [2001-10-26 17:15:16 | 000,520,106 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat [2001-10-26 17:15:16 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat [2001-10-26 17:15:16 | 000,097,988 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat [2001-10-26 17:15:16 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat [2001-08-23 14:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin [2001-08-23 14:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat [2001-08-17 22:30:24 | 000,459,168 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat [2001-08-17 22:30:24 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat [2001-08-17 22:30:24 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat [2001-08-17 22:30:22 | 000,077,228 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat [2001-08-17 22:15:38 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin [2001-07-21 23:36:48 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat [2001-07-21 23:36:04 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat [2001-07-21 23:24:16 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat [color=#E56717]========== LOP Check ==========[/color] [2011-12-07 23:19:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Alwil Software [2010-12-26 00:40:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\BVRP Software [2010-12-26 13:29:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Canneverbe Limited [2009-05-15 21:27:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DriverScanner [2011-07-25 07:44:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Easybits GO [2011-11-06 20:57:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Edytor Wspomnień [2011-12-07 21:31:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\FreeDownloadManager.ORG [2011-03-03 02:17:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10 [2011-10-20 14:45:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla [2011-08-13 23:55:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM [2010-12-12 23:04:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Pattern Maker for cross stitch [2011-10-20 14:35:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\RDRM [2011-02-02 18:50:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\RH_Backups [2008-02-02 16:16:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SiComponents [2010-08-19 19:18:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP [2011-10-23 17:53:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TuneUp Software [2011-10-10 12:46:32 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16} [2009-05-15 21:25:42 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{66E2F539-12B6-4870-A500-7689CDE75C5E} [2011-11-03 00:50:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Lexmark Imaging Studio [2010-01-20 14:13:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\ArcaMicroScan [2010-08-30 17:03:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\ArcaVirMicroScan [2010-12-08 19:20:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Canneverbe Limited [2010-01-18 12:30:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\ChomikBox [2007-10-21 23:23:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\ContentGuard [2011-12-07 21:32:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\DVDVideoSoft [2011-01-03 20:41:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\DVDVideoSoftIEHelpers [2011-11-26 17:57:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\ElevatedDiagnostics [2011-12-12 19:44:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Free Download Manager [2007-06-23 16:44:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Gadu-Gadu [2011-08-08 20:34:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Gadu-Gadu 10 [2009-01-01 15:49:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\GanymedeNet [2011-07-25 07:43:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\go [2011-04-13 12:53:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\GrabPro [2011-11-18 11:06:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\gtk-2.0 [2011-04-13 12:53:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\IEPro [2011-10-29 12:53:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\ipla [2007-11-05 15:41:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Leadertech [2010-08-28 11:08:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Lexmark Imaging Studio [2011-05-09 21:16:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\MiniDm [2009-03-01 19:34:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Nowe Gadu-Gadu [2009-10-23 21:34:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\OpenFM [2009-04-14 15:03:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\OpenOffice.org [2011-12-19 01:04:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\pdfforge [2011-02-07 21:13:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\PhotoFiltre [2011-02-23 20:32:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\PhotoScape [2008-12-24 20:32:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Printer Info Cache [2008-01-03 21:50:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Teleca [2009-11-24 23:00:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Thunderbird [2011-10-10 12:50:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\TuneUp Software [2010-10-06 23:01:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Uniblue [2011-10-29 12:44:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\VSRevoGroup [2011-11-28 23:06:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\XnView [color=#E56717]========== Purity Check ==========[/color] < End of report >

OTL Exstras txt

Kod: Zaznacz wszystko: OTL Extras logfile created on: 2011-12-22 21:59:32 - Run 2 OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\Private\Pulpit\Antywirusy Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 511,48 Mb Total Physical Memory | 160,43 Mb Available Physical Memory | 31,37% Memory free 2,47 Gb Paging File | 1,81 Gb Available in Paging File | 73,40% Paging File free Paging file location(s): [Binary data over 100 bytes] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 37,25 Gb Total Space | 8,53 Gb Free Space | 22,90% Space Free | Partition Type: NTFS Drive D: | 37,27 Gb Total Space | 34,43 Gb Free Space | 92,37% Space Free | Partition Type: NTFS Drive G: | 29,28 Gb Total Space | 22,25 Gb Free Space | 75,99% Space Free | Partition Type: FAT32 Drive H: | 203,58 Gb Total Space | 94,73 Gb Free Space | 46,53% Space Free | Partition Type: NTFS Computer Name: NN-04FCDEF7E0AE | User Name: Private | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* .html [@ = ChromeHTML] -- C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) .url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l [HKEY_USERS\S-1-5-21-1993962763-113007714-854245398-1003\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* exefile [open] -- "%1" %* http [open] -- "C:\Program Files\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.) https [open] -- "C:\Program Files\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.) InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [ChomikBox.Upload] -- "C:\Program Files\ChomikBox\\ChomikBox.exe" -u"%1" ( ) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Przeglądaj w XnView] -- "C:\Program Files\XnView\xnview.exe" "%1" (XnView, http://www.xnview.com) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusOverride" = 0 "FirewallOverride" = 0 "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] [color=#E56717]========== System Restore Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr] "Start" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List] "1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007 "2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DoNotAllowExceptions" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] "1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007 "2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008 [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] "C:\Program Files\Lexmark 3500-4500 Series\app4r.exe" = C:\Program Files\Lexmark 3500-4500 Series\App4R.exe:*:Enabled:BorgListener -- () [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\WINDOWS\system32\lxdicoms.exe" = C:\WINDOWS\system32\lxdicoms.exe:*:Enabled:Lexmark Communications System -- ( ) "C:\Program Files\Lexmark 3500-4500 Series\lxdiamon.exe" = C:\Program Files\Lexmark 3500-4500 Series\lxdiamon.exe:*:Enabled:Lexmark Device Monitor -- (Lexmark) "C:\Program Files\Lexmark 3500-4500 Series\App4R.exe" = C:\Program Files\Lexmark 3500-4500 Series\App4R.exe:*:Enabled:Lexmark Imaging Studio -- () "C:\Program Files\Free Download Manager\fdm.exe" = C:\Program Files\Free Download Manager\fdm.exe:*:Enabled:Free Download Manager -- (FreeDownloadManager.ORG) "G:\Program Files\Gadu-Gadu 10\gg.exe" = G:\Program Files\Gadu-Gadu 10\gg.exe:*:Enabled:Gadu-Gadu 10 -- (GG Network S.A.) "C:\Program Files\Lexmark 3500-4500 Series\Wireless\lxdiwpss.exe" = C:\Program Files\Lexmark 3500-4500 Series\Wireless\lxdiwpss.exe:*:Enabled: -- () "C:\Program Files\Gadu-Gadu 10\gg.exe" = C:\Program Files\Gadu-Gadu 10\gg.exe:*:Disabled:Gadu-Gadu 10 -- (GG Network S.A.) "C:\Program Files\IEPro\MiniDM.exe" = C:\Program Files\IEPro\MiniDM.exe:*:Enabled:MiniDM -- (IE7Pro.com) "C:\Program Files\Gadu-Gadu\gg.exe" = C:\Program Files\Gadu-Gadu\gg.exe:*:Enabled:Gadu-Gadu - program główny -- (Gadu-Gadu S.A.) "C:\Program Files\Lexmark 3500-4500 Series\lxdimon.exe" = C:\Program Files\Lexmark 3500-4500 Series\lxdimon.exe:*:Enabled: -- () "C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe "C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe "C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe "C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdipswx.exe" = C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdipswx.exe:*:Enabled: -- () "C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdijswx.exe" = C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdijswx.exe:*:Enabled: -- () "C:\WINDOWS\system32\spool\drivers\w32x86\3\lxditime.exe" = C:\WINDOWS\system32\spool\drivers\w32x86\3\lxditime.exe:*:Enabled: -- (Lexmark International, Inc.) [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator "{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended "{0F9196C6-58B4-445B-B56E-B1200FECC151}" = Microsoft Bootvis "{172423F9-522A-483A-AD65-03600CE4CA4F}" = Microsoft Works 6-9 Converter "{18669FF9-C8FE-407a-9F70-E674896B1DB4}" = GPBaseService "{1C36647E-F5BD-43E9-BA64-5F274B7F7050}_is1" = Prawo Jazdy 2010 1.1 "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{26A24AE4-039D-4CA4-87B4-2F83217001FF}" = Java(TM) 7 Update 1 "{2FFE93F0-BB72-4E52-8761-354D1AAA9387}" = Sony Ericsson PC Suite 6.009.00 "{315F5FFC-1A5C-4A2A-B8E7-1C5B1174C198}_is1" = AML Free Registry Cleaner 4.21 "{31BFEC6C-1F27-45B5-839C-BCBAE327993A}" = OpenOffice.org 3.0 "{34BFB099-07B2-4E95-A673-7362D60866A2}" = PSSWCORE "{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{36FDBE6E-6684-462b-AE98-9A39A1B200CC}" = HPProductAssistant "{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile "{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = eReg "{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{5109C064-813E-4e87-B0DE-C8AF7B5BC02B}" = SmartWebPrintingOC "{52A69E11-7CEB-4a7d-9607-68BA4F39A89B}" = DeviceDiscovery "{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime "{5ACE69F0-A3E8-44eb-88C1-0A841E700180}" = TrayApp "{5AF71003-1797-4D93-9F37-4F2125CBF539}" = Microsoft .NET Framework 2.0 Language Pack - PLK "{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder "{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD "{687FEF8A-8597-40b4-832C-297EA3F35817}" = BufferChm "{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update "{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP "{80533B67-C407-485D-8B5D-63BB8ED9D878}" = Scan "{81BF6353-3C5B-4E6E-A566-7E162A00BF72}_is1" = Wtyczka e-Deklaracje "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{90110415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003 "{99392BE9-4B07-4386-BA40-D925C2ECF74B}" = ChomikBox "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{9EFDFBA8-9174-3C61-8645-28376C5CA994}" = Microsoft .NET Framework 3.5 Language Pack SP1 - plk "{A0B9F8DF-C949-45ed-9808-7DC5C0C19C81}" = Status "{A5AB9D5E-52E2-440e-A3ED-9512E253C81A}" = SolutionCenter "{A80FA752-C491-4ED9-ABF0-4278563160B2}" = 32 Bit HP CIO Components Installer "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5 "{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder "{AC76BA86-7AD7-1045-7B44-A81200000003}" = Adobe Reader 8 - Polish "{AC76BA86-7AD7-1045-7B44-AA1000000001}" = Adobe Reader X (10.1.1) - Polish "{B8DBED1E-8BC3-4d08-B94A-F9D7D88E9BBF}" = HPSSupply "{BAD0FA60-09CF-4411-AE6A-C2844C8812FA}" = HP Photosmart Essential 2.5 "{c6922d7f-c698-4d9e-9671-8b3de04d1511}" = DJ_AIO_03_F2200_Software_Min "{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}" = PlayReady PC Runtime x86 "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{CE3B8E96-B0AF-4871-9178-1519B58E3A93}" = A4 TECH PC Camera H "{D99A8E3A-AE5A-4692-8B19-6F16D454E240}" = Destination Component "{db18dc72-cd20-4801-be82-f5d2caeec4d7}" = DJ_AIO_03_F2200_Software "{DE5D78ED-145E-4FA3-9D75-C92A09E1FEB1}" = Pattern Maker Viewer - v4 "{E08DC77E-D09A-4e36-8067-D6DBBCC5F8DC}" = VideoToolkit01 "{ECD03DA7-5952-406A-8156-5F0C93618D1F}" = USB PC Camera Plus "{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support "{F2A69CA0-8BBF-4404-BA68-DB79A3548E34}" = PCStitch "{F3D7BBAA-7412-4388-B510-11E145D2C48B}" = Microsoft Web Platform Installer 3.0 "{F42CD69D-E393-47c8-B2CD-B139C4ADA9A8}" = Copy "{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio "{FD8E178D-8B4E-42DA-B434-EFF270329B1C}" = COMODO Internet Security "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin "Adobe Shockwave Player" = Adobe Shockwave Player "Ashampoo WinOptimizer 8_is1" = Ashampoo WinOptimizer 8 v.8.13 "avast" = avast! Free Antivirus "CCleaner" = CCleaner "Defraggler" = Defraggler "Edytor Wspomnień" = Edytor Wspomnień 4.2.4.9 "ESET Online Scanner" = ESET Online Scanner v3 "Free Download Manager_is1" = Free Download Manager 3.0 "Free YouTube Download_is1" = Free YouTube Download version 3.0.16.923 "Gadu-Gadu" = Gadu-Gadu 7.7 "Gadu-Gadu 10" = Gadu-Gadu 10 "Google Chrome" = Google Chrome "HaftiX" = HaftiX v. 2.0.2 "IE7Pro" = IE7Pro "ie8" = Windows Internet Explorer 8 "IrfanView" = IrfanView (remove only) "KLiteCodecPack_is1" = K-Lite Codec Pack 6.9.0 (Full) "Lektury 1_is1" = Lektury 1 "Lexmark 3500-4500 Series" = Lexmark 3500-4500 Series "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware wersja 1.51.2.1300 "Microsoft .NET Framework 2.0 Language Pack - PLK" = Microsoft .NET Framework 2.0 — pakiet języka polskiego "Microsoft .NET Framework 3.5 Language Pack SP1 - plk" = Pakiet językowy programu Microsoft .NET Framework 3.5 z dodatkiem SP1 — PLK "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended "Mozilla Firefox (3.6.25)" = Mozilla Firefox (3.6.25) "Nero - Burning Rom!UninstallKey" = Nero 6 Ultra Edition "PhotoScape" = PhotoScape "RegCompact.NET" = RegCompact.NET 2.0 "RegHealer_is2" = Registry Healer 4.5.0 uninstall "Revo Uninstaller" = Revo Uninstaller 1.93 "SkanerOnline" = Skaner on-line mks_vir "Sqirlz Water Reflections" = Sqirlz Water Reflections "SubEdit-Player_is1" = SubEdit-Player "Uninstall_is1" = Uninstall 1.0.0.1 "Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9 "Windows Media Format Runtime" = Windows Media Format 11 runtime "Windows Media Player" = Windows Media Player 11 "WinGimp-2.0_is1" = GIMP 2.6.8 "WinRAR archiver" = Archiwizator WinRAR "XnView_is1" = XnView 1.98.2 [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-1993962763-113007714-854245398-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "3100527833.www.coricamo.com" = Abakan OnLine "Ad-Remover" = Ad-Remover "PhotoFiltre" = PhotoFiltre [color=#E56717]========== Last 10 Event Log Errors ==========[/color] Error: Unable to start EventLog service! < End of report >

OTL po wykonaniu skryptu i restarcie komputera

Kod: Zaznacz wszystko: All processes killed ========== OTL ========== Service avast! Firewall stopped successfully! Service avast! Firewall deleted successfully! Prefs.js: "DVDVideoSoftTB Customized Web Search" removed from browser.search.defaultthis.engineName Prefs.js: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=3&q={searchTerms}" removed from browser.search.defaulturl Folder move failed. C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{d43723ae-1ae1-4a25-a6a4-bf0929273cab}\searchplugin scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{d43723ae-1ae1-4a25-a6a4-bf0929273cab}\modules scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{d43723ae-1ae1-4a25-a6a4-bf0929273cab}\META-INF scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{d43723ae-1ae1-4a25-a6a4-bf0929273cab}\defaults scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{d43723ae-1ae1-4a25-a6a4-bf0929273cab}\components scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{d43723ae-1ae1-4a25-a6a4-bf0929273cab}\chrome scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{d43723ae-1ae1-4a25-a6a4-bf0929273cab} scheduled to be moved on reboot. C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\searchplugins\conduit.xml moved successfully. Unable to fix default_search_provider items. Unable to fix default_search_provider items. Unable to fix default_search_provider items. Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\Funkcja Google Sidewiki\ deleted successfully. Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\Pobierz plik wideo we Free Download Manager\ deleted successfully. Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\Pobierz w Free Download Manager\ deleted successfully. Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\Pobierz wszystkie pliki w Free Download Manager\ deleted successfully. Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\Pobierz zaznaczone w Free Download Manager\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{DDE87865-83C5-48c4-8357-2F5B1AA84522}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DDE87865-83C5-48c4-8357-2F5B1AA84522}\ not found. ADS C:\Documents and Settings\All Users\Dane aplikacji\TEMP:DFC5A2B2 deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 47372 bytes ->FireFox cache emptied: 0 bytes ->Flash cache emptied: 0 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Private ->Temp folder emptied: 15791305 bytes ->Temporary Internet Files folder emptied: 1579793 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 153461669 bytes ->Google Chrome cache emptied: 0 bytes ->Flash cache emptied: 2330 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 415488 bytes RecycleBin emptied: 153466789 bytes Total Files Cleaned = 310,00 mb [EMPTYFLASH] User: All Users User: Default User ->Flash cache emptied: 0 bytes User: LocalService ->Flash cache emptied: 0 bytes User: NetworkService User: Private ->Flash cache emptied: 0 bytes Total Flash Files Cleaned = 0,00 mb OTL by OldTimer - Version 3.2.31.0 log created on 12222011_190515 Files\Folders moved on Reboot... C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{d43723ae-1ae1-4a25-a6a4-bf0929273cab}\searchplugin folder moved successfully. C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{d43723ae-1ae1-4a25-a6a4-bf0929273cab}\modules folder moved successfully. C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{d43723ae-1ae1-4a25-a6a4-bf0929273cab}\META-INF folder moved successfully. C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{d43723ae-1ae1-4a25-a6a4-bf0929273cab}\defaults folder moved successfully. C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{d43723ae-1ae1-4a25-a6a4-bf0929273cab}\components folder moved successfully. C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{d43723ae-1ae1-4a25-a6a4-bf0929273cab}\chrome folder moved successfully. C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{d43723ae-1ae1-4a25-a6a4-bf0929273cab} folder moved successfully. File\Folder C:\Documents and Settings\Private\Ustawienia lokalne\Temp\~DF27A2.tmp not found! File\Folder C:\Documents and Settings\Private\Ustawienia lokalne\Temp\~DF6CF0.tmp not found! File\Folder C:\Documents and Settings\Private\Ustawienia lokalne\Temp\~DF7215.tmp not found! C:\Documents and Settings\Private\Ustawienia lokalne\Temp\~WRD0000.doc moved successfully. C:\Documents and Settings\Private\Ustawienia lokalne\Temp\~WRS0005.tmp moved successfully. File move failed. C:\WINDOWS\temp\_avast_\Webshlock.txt scheduled to be moved on reboot. Registry entries deleted on Reboot...

**Posty:** 18165 · przez **wojtas** 23 Gru 2011, 16:34

Uruchom OTL i w sekcji własne opcje skanowania / skrypt wklej:

:OTL
CHR - default_search_provider: Conduit (Enabled)
CHR - default_search_provider: search_url = http://search.conduit.com/Results.aspx?q={searchTerms}&hl=en&SelfSearch=1&SearchSource=49&ctid=CT2269050
CHR - default_search_provider: suggest_url = http://search.conduit.com/
O4 - HKLM..\Run: [BigDog303] C:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH) File not found

:Files
C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Conduit
C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\OpenCandy
C:\Documents and Settings\Private\Dane aplikacji\pdfforge

:Reg
[-HKEY_LOCAL_MACHINE\Software\Classes\Conduit.Engine]
[-HKEY_LOCAL_MACHINE\Software\Classes\Toolbar.CT2269050]
[-HKEY_CURRENT_USER\Software\PriceGong]
[-HKEY_LOCAL_MACHINE\Software\Canneverbe Limited\OpenCandy]
[-HKEY_LOCAL_MACHINE\Software\ProgSense\OpenCandy]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515]

:Services
avast! Firewall

:Commands
[emptytemp]
[emptyflash]

Kliknij wykonaj skrypt. I potwierdź reset komputera .

Następnie uruchamiasz OTL z opcją skanuj. Pokazujesz nowy log OTL.txt oraz raport z czyszczenia (zawartość notatnika, która otworzy się po restarcie).

**Posty:** 7 · przez **Ninka46** 23 Gru 2011, 18:52

Zrobione
Log po wykonaniu skryptu

Kod: Zaznacz wszystko: All processes killed ========== OTL ========== Unable to fix default_search_provider items. Unable to fix default_search_provider items. Unable to fix default_search_provider items. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\BigDog303 deleted successfully. File KEY_LOCAL_MACHINE\Software\Classes\Conduit.Engine] not found. File KEY_LOCAL_MACHINE\Software\Classes\Toolbar.CT2269050] not found. File KEY_CURRENT_USER\Software\PriceGong] not found. File KEY_LOCAL_MACHINE\Software\Canneverbe Limited\OpenCandy] not found. File KEY_LOCAL_MACHINE\Software\ProgSense\OpenCandy] not found. File KEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515] not found. File ptytemp] not found. File ptyflash] not found. OTL by OldTimer - Version 3.2.31.0 log created on 12232011_171843 Files\Folders moved on Reboot... Registry entries deleted on Reboot...

Log OTL txt po skanowaniu

Kod: Zaznacz wszystko: OTL logfile created on: 2011-12-23 17:29:23 - Run 3 OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\Private\Pulpit\Antywirusy Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 511,48 Mb Total Physical Memory | 83,18 Mb Available Physical Memory | 16,26% Memory free 2,47 Gb Paging File | 1,93 Gb Available in Paging File | 78,08% Paging File free Paging file location(s): [Binary data over 100 bytes] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 37,25 Gb Total Space | 8,48 Gb Free Space | 22,75% Space Free | Partition Type: NTFS Drive D: | 37,27 Gb Total Space | 34,43 Gb Free Space | 92,37% Space Free | Partition Type: NTFS Drive G: | 29,28 Gb Total Space | 22,25 Gb Free Space | 75,99% Space Free | Partition Type: FAT32 Drive H: | 203,58 Gb Total Space | 94,72 Gb Free Space | 46,53% Space Free | Partition Type: NTFS Computer Name: NN-04FCDEF7E0AE | User Name: Private | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-12-22 09:54:23 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Private\Pulpit\Antywirusy\OTL.exe PRC - [2011-12-21 11:58:03 | 000,912,856 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2011-10-07 18:47:13 | 001,883,328 | ---- | M] (COMODO) -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe PRC - [2011-09-28 09:45:12 | 000,885,160 | ---- | M] () -- C:\Program Files\Ashampoo\Ashampoo WinOptimizer 8\LiveTunerService.exe PRC - [2011-09-28 09:45:10 | 002,656,680 | ---- | M] (Ashampoo Development GmbH & Co. KG) -- C:\Program Files\Ashampoo\Ashampoo WinOptimizer 8\LiveTuner.exe PRC - [2011-08-31 16:00:48 | 000,366,152 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe PRC - [2011-04-18 19:25:12 | 003,460,784 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe PRC - [2011-04-18 19:25:10 | 000,042,184 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe PRC - [2010-03-04 22:38:00 | 000,071,096 | ---- | M] () -- C:\Program Files\CDBurnerXP\NMSAccessU.exe PRC - [2009-08-24 22:16:36 | 000,406,016 | ---- | M] (mst software GmbH, Germany) -- C:\Program Files\Ashampoo\Ashampoo WinOptimizer 8\DfSdkS.exe PRC - [2008-04-14 21:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2008-03-20 11:04:46 | 002,127,296 | ---- | M] (Gadu-Gadu S.A.) -- C:\Program Files\Gadu-Gadu\gg.exe PRC - [2007-03-06 15:45:37 | 000,517,040 | ---- | M] ( ) -- C:\WINDOWS\system32\lxdicoms.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2011-12-23 09:49:20 | 001,656,832 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\11122300\algo.dll MOD - [2011-12-21 11:58:03 | 000,849,368 | ---- | M] () -- C:\Program Files\Mozilla Firefox\js3250.dll MOD - [2011-12-20 00:49:56 | 000,241,528 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\11122300\aswRep.dll MOD - [2011-10-12 09:59:03 | 008,522,400 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll MOD - [2011-09-28 09:45:12 | 000,885,160 | ---- | M] () -- C:\Program Files\Ashampoo\Ashampoo WinOptimizer 8\LiveTunerService.exe MOD - [2011-09-05 18:05:04 | 000,300,544 | ---- | M] () -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.POL MOD - [2010-03-04 22:38:00 | 000,071,096 | ---- | M] () -- C:\Program Files\CDBurnerXP\NMSAccessU.exe MOD - [2008-04-14 21:50:38 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll MOD - [2008-03-20 10:17:48 | 000,106,496 | ---- | M] () -- C:\Program Files\Gadu-Gadu\libiax2.dll MOD - [2008-03-20 10:17:44 | 000,061,440 | ---- | M] () -- C:\Program Files\Gadu-Gadu\libjb.dll MOD - [2007-10-25 12:51:16 | 000,198,656 | ---- | M] () -- C:\Program Files\Gadu-Gadu\libcurl.dll MOD - [2007-03-05 11:31:25 | 000,113,152 | ---- | M] () -- C:\WINDOWS\system32\spool\prtprocs\w32x86\lxdidrpp.dll MOD - [2001-10-28 17:42:30 | 000,116,224 | ---- | M] () -- C:\WINDOWS\system32\pdfcmnnt.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Auto | Stopped] -- -- (avast! Firewall) SRV - [2011-10-07 18:47:13 | 001,883,328 | ---- | M] (COMODO) [Auto | Running] -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe -- (cmdAgent) SRV - [2011-09-28 09:45:12 | 000,885,160 | ---- | M] () [Auto | Running] -- C:\Program Files\Ashampoo\Ashampoo WinOptimizer 8\LiveTunerService.exe -- (WO_LiveService) SRV - [2011-08-31 16:00:48 | 000,366,152 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService) SRV - [2011-04-18 19:25:10 | 000,042,184 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus) SRV - [2010-03-04 22:38:00 | 000,071,096 | ---- | M] () [Auto | Running] -- C:\Program Files\CDBurnerXP\NMSAccessU.exe -- (NMSAccess) SRV - [2009-08-24 22:16:36 | 000,406,016 | ---- | M] (mst software GmbH, Germany) [Auto | Running] -- C:\Program Files\Ashampoo\Ashampoo WinOptimizer 8\DfsdkS.exe -- (DfSdkS) SRV - [2009-04-30 12:23:26 | 000,090,112 | ---- | M] () [Disabled | Stopped] -- C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe -- (OMSI download service) SRV - [2007-03-06 15:45:37 | 000,517,040 | ---- | M] ( ) [Auto | Running] -- C:\WINDOWS\System32\lxdicoms.exe -- (lxdi_device) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2011-10-07 18:48:02 | 000,097,760 | ---- | M] (COMODO) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\inspect.sys -- (Inspect) DRV - [2011-10-07 18:48:01 | 000,031,704 | ---- | M] (COMODO) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\cmdhlp.sys -- (cmdHlp) DRV - [2011-10-07 18:48:00 | 000,492,768 | ---- | M] (COMODO) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\cmdGuard.sys -- (cmdGuard) DRV - [2011-09-06 21:38:54 | 000,111,320 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\aswFW.sys -- (aswFW) DRV - [2011-09-02 07:31:28 | 000,039,192 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LMouFilt.Sys -- (LMouFilt) DRV - [2011-09-02 07:31:20 | 000,041,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LHidFilt.Sys -- (LHidFilt) DRV - [2011-09-02 07:30:58 | 000,012,184 | ---- | M] (Logitech, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\LBeepKE.sys -- (LBeepKE) DRV - [2011-08-31 16:00:50 | 000,022,216 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mbam.sys -- (MBAMProtector) DRV - [2011-04-18 19:17:46 | 000,441,176 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx) DRV - [2011-04-18 19:17:34 | 000,307,288 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP) DRV - [2011-04-18 19:16:18 | 000,049,240 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi) DRV - [2011-04-18 19:16:06 | 000,102,488 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2) DRV - [2011-04-18 19:13:21 | 000,025,432 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr) DRV - [2011-04-18 19:13:02 | 000,030,680 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4) DRV - [2011-04-18 19:12:58 | 000,019,544 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk) DRV - [2011-03-08 06:01:06 | 000,012,696 | ---- | M] () [Kernel | Auto | Running] -- C:\Program Files\Ashampoo\Ashampoo WinOptimizer 8\LiveTunerProcessMonitor32.sys -- (LiveTunerPM) DRV - [2009-11-12 13:48:56 | 000,005,504 | ---- | M] () [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen) DRV - [2009-03-25 17:48:00 | 000,114,728 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018mdm.sys -- (s1018mdm) DRV - [2009-03-25 17:48:00 | 000,109,864 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018unic.sys -- (s1018unic) Sony Ericsson Device 1018 USB Ethernet Emulation (WDM) DRV - [2009-03-25 17:48:00 | 000,106,208 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018mgmt.sys -- (s1018mgmt) Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM) DRV - [2009-03-25 17:48:00 | 000,104,744 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018obex.sys -- (s1018obex) DRV - [2009-03-25 17:48:00 | 000,086,824 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018bus.sys -- (s1018bus) Sony Ericsson Device 1018 driver (WDM) DRV - [2009-03-25 17:48:00 | 000,026,024 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018nd5.sys -- (s1018nd5) Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS) DRV - [2009-03-25 17:48:00 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018mdfl.sys -- (s1018mdfl) DRV - [2008-05-16 12:33:14 | 000,115,752 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016unic.sys -- (s0016unic) Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM) DRV - [2008-05-16 12:33:14 | 000,025,512 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016nd5.sys -- (s0016nd5) Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS) DRV - [2008-05-16 12:33:14 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016mdfl.sys -- (s0016mdfl) DRV - [2008-05-16 12:33:12 | 000,120,744 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016mdm.sys -- (s0016mdm) DRV - [2008-05-16 12:33:12 | 000,114,216 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016mgmt.sys -- (s0016mgmt) Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM) DRV - [2008-05-16 12:33:12 | 000,110,632 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016obex.sys -- (s0016obex) DRV - [2008-05-16 12:33:12 | 000,089,256 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016bus.sys -- (s0016bus) Sony Ericsson Device 0016 driver (WDM) DRV - [2008-04-13 23:15:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum) DRV - [2008-01-09 11:28:34 | 000,027,632 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\seehcri.sys -- (seehcri) DRV - [2007-04-13 19:24:04 | 010,246,144 | ---- | M] (Sonix Co. Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\snpstd3.sys -- (SNPSTD3) USB PC Camera (SNPSTD3) DRV - [2007-03-08 13:34:46 | 004,027,840 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\alcxwdm.sys -- (ALCXWDM) Service for Realtek AC97 Audio (WDM) DRV - [2006-12-01 13:23:58 | 000,392,122 | ---- | M] (Vimicro Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\usbVM303.sys -- (ZSMC303) DRV - [2006-11-30 15:14:22 | 000,090,800 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se45unic.sys -- (se45unic) Sony Ericsson Device 069 USB Ethernet Emulation SEMC45 (WDM) DRV - [2006-11-30 15:14:14 | 000,086,432 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se45obex.sys -- (se45obex) DRV - [2006-11-30 15:14:10 | 000,088,624 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se45mgmt.sys -- (se45mgmt) Sony Ericsson Device 069 USB WMC Device Management Drivers (WDM) DRV - [2006-11-30 15:14:10 | 000,018,704 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se45nd5.sys -- (se45nd5) Sony Ericsson Device 069 USB Ethernet Emulation SEMC45 (NDIS) DRV - [2006-11-30 15:14:04 | 000,097,088 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se45mdm.sys -- (se45mdm) DRV - [2006-11-30 15:14:04 | 000,009,360 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se45mdfl.sys -- (se45mdfl) DRV - [2006-11-30 15:13:56 | 000,061,536 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se45bus.sys -- (se45bus) Sony Ericsson Device 069 driver (WDM) DRV - [2006-04-25 09:57:42 | 000,428,160 | ---- | M] (Vimicro Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\vmfilter303.sys -- (vmfilter303) DRV - [2004-08-03 23:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Sterownik NT karty Realtek RTL8139(A/B/C) DRV - [2001-08-17 22:00:04 | 000,002,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\msmpu401.sys -- (ms_mpu401) DRV - [2001-08-17 21:51:32 | 000,018,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\irsir.sys -- (irsir) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/ IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultthis.engineName: "" FF - prefs.js..browser.search.defaulturl: "" FF - prefs.js..browser.startup.homepage: "http://pl.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:pl:official" FF - prefs.js..extensions.enabledItems: {53A03D43-5363-4669-8190-99061B2DEBA5}:1.3.7 FF - prefs.js..extensions.enabledItems: jyboy.yy@gmail.com:1.0.4 FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:2.0.1 FF - prefs.js..extensions.enabledItems: {B17C1C5A-04B1-11DB-9804-B622A1EF5492}:1.2.1 FF - prefs.js..extensions.enabledItems: {aff87fa2-a58e-4edd-b852-0a20203c1e17}:0.9 FF - prefs.js..extensions.enabledItems: pl@dictionaries.addons.mozilla.org:1.0.20110621 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA}:7.0.01 FF - prefs.js..extensions.enabledItems: wrc@avast.com:20110101 FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.9.7 FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2011-12-07 23:19:58 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.25\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-12-21 11:58:09 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.25\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-12-21 11:58:09 | 000,000,000 | ---D | M] [2011-05-10 23:09:10 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Extensions [2011-12-23 00:32:26 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions [2011-05-10 23:49:15 | 000,000,000 | ---D | M] (FEBE) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} [2011-05-10 23:16:20 | 000,000,000 | ---D | M] (ScrapBook) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{53A03D43-5363-4669-8190-99061B2DEBA5} [2011-12-07 21:31:23 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} [2011-11-10 09:18:41 | 000,000,000 | ---D | M] (gTranslate) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{aff87fa2-a58e-4edd-b852-0a20203c1e17} [2011-05-10 23:59:19 | 000,000,000 | ---D | M] (Password Exporter) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{B17C1C5A-04B1-11DB-9804-B622A1EF5492} [2011-12-12 19:54:48 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2011-12-07 21:31:19 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}(2) [2011-12-15 10:46:06 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2011-05-10 23:24:40 | 000,000,000 | ---D | M] (gTranslator) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\jyboy.yy@gmail.com [2011-08-25 00:04:36 | 000,000,000 | ---D | M] (Polski slownik poprawnej pisowni) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\pl@dictionaries.addons.mozilla.org [2011-12-23 00:32:28 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2011-10-30 12:01:35 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA} [2011-12-07 23:19:58 | 000,000,000 | ---D | M] (avast! WebRep) -- C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF [2011-10-30 12:00:28 | 000,611,224 | ---- | M] (Oracle Corporation) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2011-03-19 23:40:49 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2011-03-19 23:40:49 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2011-03-19 23:40:49 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2011-03-19 23:40:49 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2011-03-19 23:40:49 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2011-03-19 23:40:49 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Conduit (Enabled) CHR - default_search_provider: search_url = http://search.conduit.com/Results.aspx?q={searchTerms}&hl=en&SelfSearch=1&SearchSource=49&ctid=CT2269050 CHR - default_search_provider: suggest_url = http://search.conduit.com/ CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\16.0.912.63\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll CHR - plugin: Java Deployment Toolkit 7.0.10.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 7 U1 (Enabled) = C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\16.0.912.63\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\16.0.912.63\pdf.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll CHR - plugin: Default Plug-in (Enabled) = default_plugin CHR - Extension: YouTube = C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.2_0\ CHR - Extension: YouTube = C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2_0\ CHR - Extension: Szukaj w Google = C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.14_0\ CHR - Extension: Szukaj w Google = C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.16_0\ CHR - Extension: avast! WebRep = C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1091_0\ CHR - Extension: Gmail = C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\6.1.3_0\ CHR - Extension: Gmail = C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\6.1.4_0\ O1 HOSTS File: ([2011-10-29 17:45:33 | 000,000,098 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (IE7Pro BHO) - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files\IEPro\IEPro.dll (IE7Pro.com) O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O2 - BHO: (FDMIECookiesBHO Class) - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll () O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O3 - HKLM\..\Toolbar: (Grab Pro) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\IEPro\IEProRecorder.dll () O3 - HKCU\..\Toolbar\WebBrowser: (Grab Pro) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\IEPro\IEProRecorder.dll () O4 - HKLM..\Run: [Ashampoo WinOptimizer Live-Tuner] C:\Program Files\Ashampoo\Ashampoo WinOptimizer 8\LiveTuner.exe (Ashampoo Development GmbH & Co. KG) O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software) O4 - HKLM..\Run: [LXDICATS] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXDItime.DLL (Lexmark International, Inc.) O4 - HKCU..\Run: [Gadu-Gadu] C:\Program Files\Gadu-Gadu\gg.exe (Gadu-Gadu S.A.) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1 O8 - Extra context menu item: Free YouTube Download - C:\Documents and Settings\Private\Dane aplikacji\DVDVideoSoftIEHelpers\freeyoutubedownload.htm () O9 - Extra Button: IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files\IEPro\IEPro.dll (IE7Pro.com) O9 - Extra 'Tools' menuitem : IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files\IEPro\IEPro.dll (IE7Pro.com) O9 - Extra Button: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\IEPro.dll (IE7Pro.com) O9 - Extra 'Tools' menuitem : IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\IEPro.dll (IE7Pro.com) O15 - HKCU\..Trusted Domains: mks.com.pl ([www] http in Trusted sites) O15 - HKCU\..Trusted Domains: mks.com.pl ([www] https in Trusted sites) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_01-windows-i586.cab (Java Plug-in 1.7.0_01) O16 - DPF: {CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_01-windows-i586.cab (Java Plug-in 1.7.0_01) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_01-windows-i586.cab (Java Plug-in 1.7.0_01) O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{35866813-DF5B-4D9A-84E1-5F49AD61BE57}: NameServer = 10.3.0.1 O20 - AppInit_DLLs: (C:\WINDOWS\system32\guard32.dll) -C:\WINDOWS\system32\guard32.dll (COMODO) O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2007-06-06 14:12:39 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2009-05-28 20:31:29 | 000,000,000 | R--D | M] - C:\autorun.inf -- [ NTFS ] O32 - AutoRun File - [2009-05-28 20:31:30 | 000,000,000 | R--D | M] - D:\autorun.inf -- [ NTFS ] O32 - AutoRun File - [2010-03-04 13:05:12 | 000,000,000 | ---- | M] () - G:\AUTOEXEC.BAT -- [ FAT32 ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011-12-22 19:20:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Private\Menu Start\Programy\Ad-Remover [2011-12-22 19:20:28 | 000,000,000 | ---D | C] -- C:\Program Files\Ad-Remover [2011-12-22 19:05:15 | 000,000,000 | ---D | C] -- C:\_OTL [2011-12-20 09:14:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Skype [2011-12-19 01:04:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Private\Dane aplikacji\pdfforge [2011-12-19 01:04:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\PDFCreator [2011-12-19 01:04:25 | 000,662,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSCOMCT2.OCX [2011-12-19 01:04:25 | 000,137,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSMAPI32.OCX [2011-12-19 01:04:19 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSMPIDE.DLL [2011-12-19 01:04:19 | 000,000,000 | ---D | C] -- C:\Program Files\PDFCreator [2011-12-16 03:57:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Ashampoo [2011-12-16 03:57:18 | 000,028,160 | ---- | C] (mst software GmbH, Germany) -- C:\WINDOWS\System32\DfSdkBt.exe [2011-12-12 20:00:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Private\dwhelper [2011-12-09 04:11:25 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Private\Recent [2011-12-09 04:00:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Google Chrome [2011-12-07 23:20:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\avast! Free Antivirus [2011-12-07 23:20:32 | 000,307,288 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSP.sys [2011-12-07 23:20:32 | 000,019,544 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys [2011-12-07 23:20:29 | 000,025,432 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys [2011-12-07 23:20:28 | 000,441,176 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSnx.sys [2011-12-07 23:20:28 | 000,049,240 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys [2011-12-07 23:20:27 | 000,102,488 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys [2011-12-07 23:20:27 | 000,096,344 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswmon.sys [2011-12-07 23:20:27 | 000,030,680 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys [2011-12-07 23:19:55 | 000,040,112 | ---- | C] (AVAST Software) -- C:\WINDOWS\avastSS.scr [2011-12-07 23:19:54 | 000,199,304 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe [2011-12-07 23:19:35 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software [2011-12-07 22:27:40 | 000,303,104 | R--- | C] (Hewlett-Packard Co.) -- C:\WINDOWS\System32\hpovst15.dll [2011-12-07 22:27:39 | 000,581,632 | R--- | C] (Hewlett-Packard Co.) -- C:\WINDOWS\System32\hpotscl6.dll [2011-12-07 22:27:38 | 000,729,088 | R--- | C] (Hewlett-Packard) -- C:\WINDOWS\System32\hpowiax7.dll [2011-12-07 21:36:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\HP Product Assistant [2011-12-07 21:33:35 | 000,000,000 | -HSD | C] -- C:\RECYCLER [2011-12-07 21:31:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Free Download Manager [2011-12-07 21:31:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\FreeDownloadManager.ORG [2011-12-07 21:31:39 | 000,000,000 | ---D | C] -- C:\Program Files\Free Download Manager [2011-12-07 21:31:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Private\Dane aplikacji\Free Download Manager [2011-12-07 21:31:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\DVDVideoSoft [2011-12-07 21:31:28 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Plasmoo [2011-12-07 21:31:25 | 000,000,000 | ---D | C] -- C:\Program Files\DVDVideoSoft [2011-11-28 21:01:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Private\Moje dokumenty\Downloads [2011-11-27 02:15:31 | 000,000,000 | ---D | C] -- C:\RECYCLER(2) [2011-11-25 23:12:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Private\Moje dokumenty\Originals [2010-08-28 10:57:50 | 000,356,352 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdiinpa.dll [2010-08-28 10:57:50 | 000,339,968 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdiiesc.dll [2010-08-28 10:57:50 | 000,311,296 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdihcp.dll [2010-08-28 10:57:49 | 001,187,840 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdiserv.dll [2010-08-28 10:57:49 | 000,942,080 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdiusb1.dll [2010-08-28 10:57:48 | 000,614,400 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdipmui.dll [2010-08-28 10:57:48 | 000,532,480 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdilmpm.dll [2010-08-28 10:57:48 | 000,053,248 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdiprox.dll [2010-08-28 10:57:48 | 000,053,248 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdipplc.dll [2010-08-28 10:57:47 | 000,320,432 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdiih.exe [2010-08-28 10:57:46 | 000,671,744 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdihbn3.dll [2010-08-28 10:57:44 | 000,761,856 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdicomc.dll [2010-08-28 10:57:44 | 000,517,040 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdicoms.exe [2010-08-28 10:57:44 | 000,360,448 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdicomm.dll [2010-08-28 10:57:43 | 000,340,912 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdicfg.exe [2008-03-17 16:20:26 | 000,172,032 | ---- | C] ( ) -- C:\WINDOWS\System32\rsnpstd3.dll [2008-03-17 16:20:26 | 000,061,440 | ---- | C] ( ) -- C:\WINDOWS\System32\vsnpstd3.dll [2008-03-17 16:20:26 | 000,053,248 | ---- | C] ( ) -- C:\WINDOWS\System32\csnpstd3.dll [2008-03-17 16:20:26 | 000,053,248 | ---- | C] ( ) -- C:\WINDOWS\csnpstd3.dll [2004-07-09 04:08:36 | 000,472,576 | ---- | C] (Microsoft Corporation) -- C:\Program Files\dxsetup.exe [2004-07-09 04:08:34 | 002,242,560 | ---- | C] (Microsoft Corporation) -- C:\Program Files\dsetup32.dll [2004-07-09 03:03:10 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Program Files\DSETUP.dll [1 C:\Documents and Settings\All Users\*.tmp files -> C:\Documents and Settings\All Users\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011-12-23 17:20:39 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2011-12-22 19:20:39 | 000,001,554 | ---- | M] () -- C:\Documents and Settings\Private\Pulpit\Ad-Remover.lnk [2011-12-20 20:14:34 | 000,002,801 | ---- | M] () -- C:\Documents and Settings\Private\Pulpit\HiJackThis.lnk [2011-12-20 15:44:00 | 000,159,544 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2011-12-20 10:42:31 | 000,001,393 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2011-12-20 09:14:17 | 000,001,878 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk [2011-12-19 16:32:05 | 000,148,188 | ---- | M] () -- C:\Documents and Settings\Private\Moje dokumenty\bacchus-sepia4bg12.jpg [2011-12-19 12:17:15 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2011-12-16 03:57:28 | 000,001,863 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\1-Click-Optimizer (WO8).lnk [2011-12-16 03:57:28 | 000,000,865 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Ashampoo WinOptimizer 8.lnk [2011-12-12 20:08:05 | 000,199,680 | ---- | M] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-12-09 13:19:38 | 000,168,545 | ---- | M] () -- C:\WINDOWS\hpoins27.dat [2011-12-09 12:46:51 | 000,169,051 | ---- | M] () -- C:\WINDOWS\hpoins27.dat.temp [2011-12-09 12:21:44 | 000,000,807 | ---- | M] () -- C:\WINDOWS\wininit.ini [2011-12-09 04:16:02 | 000,003,420 | ---- | M] () -- C:\Documents and Settings\Private\Moje dokumenty\cc_20111209_041544.reg [2011-12-09 04:14:55 | 000,015,858 | ---- | M] () -- C:\Documents and Settings\Private\Moje dokumenty\cc_20111209_041448.reg [2011-12-09 03:59:41 | 000,000,682 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\CCleaner.lnk [2011-12-07 23:20:33 | 000,001,689 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\avast! Free Antivirus.lnk [2011-12-07 23:20:28 | 000,002,644 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT [2011-12-05 06:05:08 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\{5733574A-9F20-49E5-A5C3-E885C626FCD3} [2011-12-04 03:42:43 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\{04C910EA-7EF4-4419-A9B1-870C239A0879} [2011-12-02 04:46:57 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\{16F48A82-4D02-4EC4-BBD0-E2E91E5C6FDD} [2011-11-28 20:40:16 | 000,001,088 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1993962763-113007714-854245398-1003Core.job [2011-11-25 23:12:02 | 000,099,820 | ---- | M] () -- C:\Documents and Settings\Private\Moje dokumenty\marij_v2459[1].jpg [1 C:\Documents and Settings\All Users\*.tmp files -> C:\Documents and Settings\All Users\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-12-22 19:20:39 | 000,001,554 | ---- | C] () -- C:\Documents and Settings\Private\Pulpit\Ad-Remover.lnk [2011-12-20 20:14:34 | 000,002,801 | ---- | C] () -- C:\Documents and Settings\Private\Pulpit\HiJackThis.lnk [2011-12-20 10:28:13 | 000,001,393 | ---- | C] () -- C:\WINDOWS\imsins.BAK [2011-12-20 09:14:17 | 000,001,878 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk [2011-12-19 16:33:54 | 000,148,188 | ---- | C] () -- C:\Documents and Settings\Private\Moje dokumenty\bacchus-sepia4bg12.jpg [2011-12-19 01:04:24 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll [2011-12-16 03:57:28 | 000,001,863 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\1-Click-Optimizer (WO8).lnk [2011-12-16 03:57:28 | 000,000,865 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Ashampoo WinOptimizer 8.lnk [2011-12-09 04:15:46 | 000,003,420 | ---- | C] () -- C:\Documents and Settings\Private\Moje dokumenty\cc_20111209_041544.reg [2011-12-09 04:14:51 | 000,015,858 | ---- | C] () -- C:\Documents and Settings\Private\Moje dokumenty\cc_20111209_041448.reg [2011-12-09 03:59:40 | 000,000,682 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\CCleaner.lnk [2011-12-07 23:20:33 | 000,001,689 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\avast! Free Antivirus.lnk [2011-12-05 06:05:08 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\{5733574A-9F20-49E5-A5C3-E885C626FCD3} [2011-12-04 03:42:43 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\{04C910EA-7EF4-4419-A9B1-870C239A0879} [2011-12-02 04:46:57 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\{16F48A82-4D02-4EC4-BBD0-E2E91E5C6FDD} [2011-11-28 20:40:16 | 000,001,088 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1993962763-113007714-854245398-1003Core.job [2011-11-25 23:10:18 | 000,099,820 | ---- | C] () -- C:\Documents and Settings\Private\Moje dokumenty\marij_v2459[1].jpg [2011-11-22 20:39:38 | 000,168,545 | ---- | C] () -- C:\WINDOWS\hpoins27.dat [2011-11-22 20:39:38 | 000,000,932 | ---- | C] () -- C:\WINDOWS\hpomdl27.dat [2011-11-22 06:44:20 | 000,000,512 | ---- | C] () -- C:\WINDOWS\hpomdl44.dat.temp [2011-11-22 01:21:40 | 000,169,051 | ---- | C] () -- C:\WINDOWS\hpoins27.dat.temp [2011-11-22 01:21:40 | 000,000,932 | ---- | C] () -- C:\WINDOWS\hpomdl27.dat.temp [2011-11-16 06:03:22 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\{13D28CF9-B685-4837-B27B-A51FFC69C6BC} [2011-10-25 18:07:38 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\setupfilter.exe [2011-09-07 09:32:58 | 000,059,904 | ---- | C] () -- C:\WINDOWS\System32\zlib.dll [2011-05-09 21:18:34 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat [2011-04-15 20:52:27 | 000,723,981 | ---- | C] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\unins000.exe [2011-04-15 20:52:26 | 000,002,170 | ---- | C] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\unins000.dat [2011-02-14 00:32:38 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini [2011-02-04 13:05:32 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin [2010-12-08 19:20:29 | 000,005,504 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys [2010-08-28 11:00:24 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\lxdivs.dll [2010-08-28 11:00:16 | 000,344,064 | ---- | C] () -- C:\WINDOWS\System32\lxdicoin.dll [2010-08-28 10:59:31 | 000,692,224 | ---- | C] () -- C:\WINDOWS\System32\lxdidrs.dll [2010-08-28 10:59:31 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\lxdicnv4.dll [2010-08-28 10:59:31 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\lxdicaps.dll [2010-08-28 10:58:08 | 000,000,060 | -H-- | C] () -- C:\WINDOWS\System32\lxdirwrd.ini [2010-08-28 10:57:50 | 000,294,912 | ---- | C] () -- C:\WINDOWS\System32\lxdiinst.dll [2010-08-28 10:57:45 | 000,208,896 | ---- | C] () -- C:\WINDOWS\System32\lxdigrd.dll [2010-02-24 02:52:16 | 000,000,050 | ---- | C] () -- C:\WINDOWS\SW_Win9423X24.DLL [2010-02-24 02:51:57 | 001,220,608 | ---- | C] () -- C:\WINDOWS\System32\pdf2bmp.dll [2010-02-24 02:51:54 | 000,098,304 | ---- | C] () -- C:\WINDOWS\System32\DVM.dll [2010-02-24 02:51:54 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\RegisterExe.exe [2009-12-14 18:35:32 | 000,343,040 | ---- | C] () -- C:\WINDOWS\System32\lffpx7.dll [2009-12-14 18:35:32 | 000,116,736 | ---- | C] () -- C:\WINDOWS\System32\lfkodak.dll [2009-11-25 00:51:17 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2009-11-23 14:36:06 | 000,000,228 | ---- | C] () -- C:\WINDOWS\System32\edacded0.dat [2009-05-24 09:58:43 | 004,471,092 | ---- | C] () -- C:\WINDOWS\System32\libavcodec.dll [2009-05-23 15:05:06 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\mmswitch.dll [2009-05-23 15:04:55 | 000,207,360 | ---- | C] () -- C:\WINDOWS\System32\evrprop.dll [2009-05-23 14:52:48 | 000,108,032 | ---- | C] () -- C:\WINDOWS\System32\avi.dll [2009-05-23 14:52:47 | 000,246,784 | ---- | C] () -- C:\WINDOWS\System32\dxr.dll [2009-05-23 14:52:45 | 000,141,312 | ---- | C] () -- C:\WINDOWS\System32\mp4.dll [2009-05-23 14:52:44 | 000,148,480 | ---- | C] () -- C:\WINDOWS\System32\mkx.dll [2009-05-23 14:52:42 | 000,159,744 | ---- | C] () -- C:\WINDOWS\System32\mmfinfo.dll [2009-05-23 14:52:41 | 000,120,832 | ---- | C] () -- C:\WINDOWS\System32\ogm.dll [2009-05-23 14:52:40 | 000,163,840 | ---- | C] () -- C:\WINDOWS\System32\ts.dll [2009-05-23 14:52:38 | 000,079,360 | ---- | C] () -- C:\WINDOWS\System32\mkzlib.dll [2009-05-23 14:52:37 | 000,023,552 | ---- | C] () -- C:\WINDOWS\System32\mkunicode.dll [2009-05-23 14:52:06 | 001,416,015 | ---- | C] () -- C:\WINDOWS\System32\ffmpegmt.dll [2009-05-23 14:51:55 | 000,557,469 | ---- | C] () -- C:\WINDOWS\System32\libmplayer.dll [2009-05-23 14:51:50 | 000,146,098 | ---- | C] () -- C:\WINDOWS\System32\libmpeg2_ff.dll [2009-05-23 14:51:14 | 000,098,304 | ---- | C] () -- C:\WINDOWS\System32\ff_wmv9.dll [2009-05-23 14:51:13 | 000,113,152 | ---- | C] () -- C:\WINDOWS\System32\ff_unrar.dll [2009-05-23 14:51:12 | 000,183,296 | ---- | C] () -- C:\WINDOWS\System32\ff_samplerate.dll [2009-05-23 14:51:10 | 000,178,688 | ---- | C] () -- C:\WINDOWS\System32\ff_libmad.dll [2009-05-23 14:51:08 | 000,486,400 | ---- | C] () -- C:\WINDOWS\System32\ff_libfaad2.dll [2009-05-23 14:51:04 | 000,257,024 | ---- | C] () -- C:\WINDOWS\System32\ff_libdts.dll [2009-05-23 14:51:01 | 000,142,848 | ---- | C] () -- C:\WINDOWS\System32\ff_liba52.dll [2009-05-23 14:50:39 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\OggDS.dll [2009-05-23 14:50:36 | 000,921,600 | ---- | C] () -- C:\WINDOWS\System32\vorbisenc.dll [2009-05-23 14:50:29 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\vorbis.dll [2009-05-23 14:50:27 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\ogg.dll [2009-05-23 14:50:11 | 000,009,216 | ---- | C] () -- C:\WINDOWS\System32\cpuinf32.dll [2009-05-18 21:36:07 | 025,327,648 | -HS- | C] () -- C:\WINDOWS\System32\drivers\fidbox.dat [2009-05-02 17:48:00 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\LXF3PMON.DLL [2009-05-02 17:48:00 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\LXF3FXPU.DLL [2009-05-02 17:47:40 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\lxf3oem.dll [2009-05-02 17:47:40 | 000,012,288 | ---- | C] () -- C:\WINDOWS\System32\LXF3PMRC.DLL [2009-03-14 20:25:49 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\CNMVS3w.DLL [2008-12-10 23:02:58 | 000,000,000 | ---- | C] () -- C:\WINDOWS\PCSPATS.DAT [2008-12-07 16:53:32 | 000,000,071 | ---- | C] () -- C:\WINDOWS\iltwain.ini [2008-11-22 16:39:53 | 000,000,807 | ---- | C] () -- C:\WINDOWS\wininit.ini [2008-09-28 14:17:48 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe [2008-09-27 00:42:10 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat [2008-05-16 12:38:24 | 000,088,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\snsntfy.dll [2008-03-17 16:20:31 | 000,843,776 | ---- | C] () -- C:\WINDOWS\vsnpstd3.exe [2008-03-17 16:20:30 | 000,015,498 | ---- | C] () -- C:\WINDOWS\snpstd3.ini [2008-03-16 15:31:41 | 000,160,565 | ---- | C] () -- C:\WINDOWS\Sqirlz Water Reflections Uninstaller.exe [2008-03-07 20:40:23 | 000,000,032 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\ezsid.dat [2008-01-03 21:31:02 | 000,000,132 | ---- | C] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [2007-09-01 12:42:46 | 000,199,680 | ---- | C] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2007-07-12 12:33:20 | 000,000,019 | ---- | C] () -- C:\WINDOWS\SMURFED.INI [2007-07-12 12:33:14 | 000,034,800 | ---- | C] () -- C:\WINDOWS\UNWISE.EXE [2007-06-21 21:07:06 | 000,000,346 | ---- | C] () -- C:\WINDOWS\I_VIEW32.INI [2007-06-09 19:31:43 | 000,001,287 | ---- | C] () -- C:\WINDOWS\mozver.dat [2007-06-06 16:37:04 | 000,000,421 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2007-06-06 15:51:44 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2007-06-06 15:50:31 | 000,159,544 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2007-06-06 15:24:50 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll [2007-06-06 14:16:14 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2007-06-06 14:08:49 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2004-08-04 00:56:48 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin [2004-08-02 14:20:40 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat [2004-07-22 10:51:34 | 003,432,656 | ---- | C] () -- C:\Program Files\ManagedDX.CAB [2004-07-19 22:58:36 | 001,156,363 | ---- | C] () -- C:\Program Files\BDANT.cab [2004-07-19 22:53:26 | 000,976,020 | ---- | C] () -- C:\Program Files\BDAXP.cab [2004-07-09 14:17:16 | 013,265,040 | ---- | C] () -- C:\Program Files\dxnt.cab [2004-07-09 09:13:48 | 015,493,481 | ---- | C] () -- C:\Program Files\DirectX.cab [2004-07-09 09:13:46 | 000,703,080 | ---- | C] () -- C:\Program Files\BDA.cab [2001-10-26 17:15:16 | 000,520,106 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat [2001-10-26 17:15:16 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat [2001-10-26 17:15:16 | 000,097,988 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat [2001-10-26 17:15:16 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat [2001-08-23 14:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin [2001-08-23 14:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat [2001-08-17 22:30:24 | 000,459,168 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat [2001-08-17 22:30:24 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat [2001-08-17 22:30:24 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat [2001-08-17 22:30:22 | 000,077,228 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat [2001-08-17 22:15:38 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin [2001-07-21 23:36:48 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat [2001-07-21 23:36:04 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat [2001-07-21 23:24:16 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat [color=#E56717]========== LOP Check ==========[/color] [2011-12-07 23:19:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Alwil Software [2010-12-26 00:40:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\BVRP Software [2010-12-26 13:29:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Canneverbe Limited [2009-05-15 21:27:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DriverScanner [2011-07-25 07:44:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Easybits GO [2011-11-06 20:57:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Edytor Wspomnień [2011-12-07 21:31:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\FreeDownloadManager.ORG [2011-03-03 02:17:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10 [2011-10-20 14:45:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla [2011-08-13 23:55:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM [2010-12-12 23:04:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Pattern Maker for cross stitch [2011-10-20 14:35:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\RDRM [2011-02-02 18:50:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\RH_Backups [2008-02-02 16:16:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SiComponents [2010-08-19 19:18:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP [2011-10-23 17:53:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TuneUp Software [2011-10-10 12:46:32 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16} [2009-05-15 21:25:42 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{66E2F539-12B6-4870-A500-7689CDE75C5E} [2010-01-20 14:13:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\ArcaMicroScan [2010-08-30 17:03:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\ArcaVirMicroScan [2010-12-08 19:20:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Canneverbe Limited [2010-01-18 12:30:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\ChomikBox [2007-10-21 23:23:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\ContentGuard [2011-12-07 21:32:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\DVDVideoSoft [2011-01-03 20:41:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\DVDVideoSoftIEHelpers [2011-11-26 17:57:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\ElevatedDiagnostics [2011-12-12 19:44:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Free Download Manager [2007-06-23 16:44:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Gadu-Gadu [2011-08-08 20:34:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Gadu-Gadu 10 [2009-01-01 15:49:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\GanymedeNet [2011-07-25 07:43:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\go [2011-04-13 12:53:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\GrabPro [2011-11-18 11:06:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\gtk-2.0 [2011-04-13 12:53:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\IEPro [2011-10-29 12:53:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\ipla [2007-11-05 15:41:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Leadertech [2010-08-28 11:08:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Lexmark Imaging Studio [2011-05-09 21:16:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\MiniDm [2009-03-01 19:34:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Nowe Gadu-Gadu [2009-10-23 21:34:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\OpenFM [2009-04-14 15:03:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\OpenOffice.org [2011-12-19 01:04:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\pdfforge [2011-02-07 21:13:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\PhotoFiltre [2011-02-23 20:32:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\PhotoScape [2008-12-24 20:32:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Printer Info Cache [2008-01-03 21:50:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Teleca [2009-11-24 23:00:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Thunderbird [2011-10-10 12:50:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\TuneUp Software [2010-10-06 23:01:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Uniblue [2011-10-29 12:44:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\VSRevoGroup [2011-11-28 23:06:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\XnView [color=#E56717]========== Purity Check ==========[/color] < End of report >

**Posty:** 18165 · przez **wojtas** 23 Gru 2011, 22:13

powtórz powyższy skrypt i daj jeszcze raz nowe logi

**Posty:** 7 · przez **Ninka46** 24 Gru 2011, 00:51

Powtórzyłam, ale gdy po resecie komputera włączyłam skanowanie OTL w trakcie skanowania wyskoczyło okienko OTL.exe Zły obraz i informacja "Aplikacja lub biblioteka DLL C:\Windows\System32\ieframa.dll nie jest poprawnym obrazem Systemu Windowst NT." Po kliknięciu na Ok zacząl na moment skanować, a nastepnie się zawiesił .w miejsce okna z programem OTL zrobiło się białe okno i chodząca bez przerwy klepsydra. Nic sie nie dało wykonać, miękkiego resetu też nie więc musiałam zrobić normalny reset.Niestety nie dało sie też zapisać pliku notatnika po wykonanym skrypcie, a ja nie wiem czy go OTL gdzieś zapisuje. Po resecie ponownie włączyłam OTL i wykonałam skan. Tym razem jednak informacji o złym obrazie nie było. Wstawiam obydwa pliki ze skanowania.

OTL.txt

Kod: Zaznacz wszystko: OTL logfile created on: 2011-12-23 23:33:30 - Run 1 OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\Private\Pulpit\Antywirusy Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 511,48 Mb Total Physical Memory | 82,39 Mb Available Physical Memory | 16,11% Memory free 2,47 Gb Paging File | 1,90 Gb Available in Paging File | 76,73% Paging File free Paging file location(s): [Binary data over 100 bytes] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 37,25 Gb Total Space | 8,40 Gb Free Space | 22,56% Space Free | Partition Type: NTFS Drive D: | 37,27 Gb Total Space | 34,43 Gb Free Space | 92,37% Space Free | Partition Type: NTFS Drive G: | 29,28 Gb Total Space | 22,25 Gb Free Space | 75,99% Space Free | Partition Type: FAT32 Drive H: | 203,58 Gb Total Space | 94,72 Gb Free Space | 46,53% Space Free | Partition Type: NTFS Computer Name: NN-04FCDEF7E0AE | User Name: Private | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-12-22 09:54:23 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Private\Pulpit\Antywirusy\OTL.exe PRC - [2011-12-21 11:58:03 | 000,912,856 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2011-10-07 18:47:13 | 001,883,328 | ---- | M] (COMODO) -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe PRC - [2011-09-28 09:45:12 | 000,885,160 | ---- | M] () -- C:\Program Files\Ashampoo\Ashampoo WinOptimizer 8\LiveTunerService.exe PRC - [2011-09-28 09:45:10 | 002,656,680 | ---- | M] (Ashampoo Development GmbH & Co. KG) -- C:\Program Files\Ashampoo\Ashampoo WinOptimizer 8\LiveTuner.exe PRC - [2011-08-31 16:00:48 | 000,366,152 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe PRC - [2011-04-18 19:25:12 | 003,460,784 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe PRC - [2011-04-18 19:25:10 | 000,042,184 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe PRC - [2010-03-04 22:38:00 | 000,071,096 | ---- | M] () -- C:\Program Files\CDBurnerXP\NMSAccessU.exe PRC - [2009-08-24 22:16:36 | 000,406,016 | ---- | M] (mst software GmbH, Germany) -- C:\Program Files\Ashampoo\Ashampoo WinOptimizer 8\DfSdkS.exe PRC - [2008-04-14 21:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2008-03-20 11:04:46 | 002,127,296 | ---- | M] (Gadu-Gadu S.A.) -- C:\Program Files\Gadu-Gadu\gg.exe PRC - [2007-03-06 15:45:37 | 000,517,040 | ---- | M] ( ) -- C:\WINDOWS\system32\lxdicoms.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2011-12-23 18:58:29 | 001,656,832 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\11122301\algo.dll MOD - [2011-12-21 11:58:03 | 000,849,368 | ---- | M] () -- C:\Program Files\Mozilla Firefox\js3250.dll MOD - [2011-12-20 00:49:56 | 000,241,528 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\11122301\aswRep.dll MOD - [2011-10-12 09:59:03 | 008,522,400 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll MOD - [2011-09-28 09:45:12 | 000,885,160 | ---- | M] () -- C:\Program Files\Ashampoo\Ashampoo WinOptimizer 8\LiveTunerService.exe MOD - [2011-09-05 18:05:04 | 000,300,544 | ---- | M] () -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.POL MOD - [2010-03-04 22:38:00 | 000,071,096 | ---- | M] () -- C:\Program Files\CDBurnerXP\NMSAccessU.exe MOD - [2008-04-14 21:50:38 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll MOD - [2008-03-20 10:17:48 | 000,106,496 | ---- | M] () -- C:\Program Files\Gadu-Gadu\libiax2.dll MOD - [2008-03-20 10:17:44 | 000,061,440 | ---- | M] () -- C:\Program Files\Gadu-Gadu\libjb.dll MOD - [2007-10-25 12:51:16 | 000,198,656 | ---- | M] () -- C:\Program Files\Gadu-Gadu\libcurl.dll MOD - [2007-03-05 11:31:25 | 000,113,152 | ---- | M] () -- C:\WINDOWS\system32\spool\prtprocs\w32x86\lxdidrpp.dll MOD - [2001-10-28 17:42:30 | 000,116,224 | ---- | M] () -- C:\WINDOWS\system32\pdfcmnnt.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Auto | Stopped] -- -- (avast! Firewall) SRV - [2011-10-07 18:47:13 | 001,883,328 | ---- | M] (COMODO) [Auto | Running] -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe -- (cmdAgent) SRV - [2011-09-28 09:45:12 | 000,885,160 | ---- | M] () [Auto | Running] -- C:\Program Files\Ashampoo\Ashampoo WinOptimizer 8\LiveTunerService.exe -- (WO_LiveService) SRV - [2011-08-31 16:00:48 | 000,366,152 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService) SRV - [2011-04-18 19:25:10 | 000,042,184 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus) SRV - [2010-03-04 22:38:00 | 000,071,096 | ---- | M] () [Auto | Running] -- C:\Program Files\CDBurnerXP\NMSAccessU.exe -- (NMSAccess) SRV - [2009-08-24 22:16:36 | 000,406,016 | ---- | M] (mst software GmbH, Germany) [Auto | Running] -- C:\Program Files\Ashampoo\Ashampoo WinOptimizer 8\DfsdkS.exe -- (DfSdkS) SRV - [2009-04-30 12:23:26 | 000,090,112 | ---- | M] () [Disabled | Stopped] -- C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe -- (OMSI download service) SRV - [2007-03-06 15:45:37 | 000,517,040 | ---- | M] ( ) [Auto | Running] -- C:\WINDOWS\System32\lxdicoms.exe -- (lxdi_device) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2011-10-07 18:48:02 | 000,097,760 | ---- | M] (COMODO) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\inspect.sys -- (Inspect) DRV - [2011-10-07 18:48:01 | 000,031,704 | ---- | M] (COMODO) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\cmdhlp.sys -- (cmdHlp) DRV - [2011-10-07 18:48:00 | 000,492,768 | ---- | M] (COMODO) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\cmdGuard.sys -- (cmdGuard) DRV - [2011-09-06 21:38:54 | 000,111,320 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\aswFW.sys -- (aswFW) DRV - [2011-09-02 07:31:28 | 000,039,192 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LMouFilt.Sys -- (LMouFilt) DRV - [2011-09-02 07:31:20 | 000,041,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LHidFilt.Sys -- (LHidFilt) DRV - [2011-09-02 07:30:58 | 000,012,184 | ---- | M] (Logitech, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\LBeepKE.sys -- (LBeepKE) DRV - [2011-08-31 16:00:50 | 000,022,216 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mbam.sys -- (MBAMProtector) DRV - [2011-04-18 19:17:46 | 000,441,176 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx) DRV - [2011-04-18 19:17:34 | 000,307,288 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP) DRV - [2011-04-18 19:16:18 | 000,049,240 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi) DRV - [2011-04-18 19:16:06 | 000,102,488 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2) DRV - [2011-04-18 19:13:21 | 000,025,432 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr) DRV - [2011-04-18 19:13:02 | 000,030,680 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4) DRV - [2011-04-18 19:12:58 | 000,019,544 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk) DRV - [2011-03-08 06:01:06 | 000,012,696 | ---- | M] () [Kernel | Auto | Running] -- C:\Program Files\Ashampoo\Ashampoo WinOptimizer 8\LiveTunerProcessMonitor32.sys -- (LiveTunerPM) DRV - [2009-11-12 13:48:56 | 000,005,504 | ---- | M] () [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen) DRV - [2009-03-25 17:48:00 | 000,114,728 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018mdm.sys -- (s1018mdm) DRV - [2009-03-25 17:48:00 | 000,109,864 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018unic.sys -- (s1018unic) Sony Ericsson Device 1018 USB Ethernet Emulation (WDM) DRV - [2009-03-25 17:48:00 | 000,106,208 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018mgmt.sys -- (s1018mgmt) Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM) DRV - [2009-03-25 17:48:00 | 000,104,744 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018obex.sys -- (s1018obex) DRV - [2009-03-25 17:48:00 | 000,086,824 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018bus.sys -- (s1018bus) Sony Ericsson Device 1018 driver (WDM) DRV - [2009-03-25 17:48:00 | 000,026,024 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018nd5.sys -- (s1018nd5) Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS) DRV - [2009-03-25 17:48:00 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018mdfl.sys -- (s1018mdfl) DRV - [2008-05-16 12:33:14 | 000,115,752 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016unic.sys -- (s0016unic) Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM) DRV - [2008-05-16 12:33:14 | 000,025,512 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016nd5.sys -- (s0016nd5) Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS) DRV - [2008-05-16 12:33:14 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016mdfl.sys -- (s0016mdfl) DRV - [2008-05-16 12:33:12 | 000,120,744 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016mdm.sys -- (s0016mdm) DRV - [2008-05-16 12:33:12 | 000,114,216 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016mgmt.sys -- (s0016mgmt) Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM) DRV - [2008-05-16 12:33:12 | 000,110,632 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016obex.sys -- (s0016obex) DRV - [2008-05-16 12:33:12 | 000,089,256 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016bus.sys -- (s0016bus) Sony Ericsson Device 0016 driver (WDM) DRV - [2008-04-13 23:15:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum) DRV - [2008-01-09 11:28:34 | 000,027,632 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\seehcri.sys -- (seehcri) DRV - [2007-04-13 19:24:04 | 010,246,144 | ---- | M] (Sonix Co. Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\snpstd3.sys -- (SNPSTD3) USB PC Camera (SNPSTD3) DRV - [2007-03-08 13:34:46 | 004,027,840 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\alcxwdm.sys -- (ALCXWDM) Service for Realtek AC97 Audio (WDM) DRV - [2006-12-01 13:23:58 | 000,392,122 | ---- | M] (Vimicro Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\usbVM303.sys -- (ZSMC303) DRV - [2006-11-30 15:14:22 | 000,090,800 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se45unic.sys -- (se45unic) Sony Ericsson Device 069 USB Ethernet Emulation SEMC45 (WDM) DRV - [2006-11-30 15:14:14 | 000,086,432 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se45obex.sys -- (se45obex) DRV - [2006-11-30 15:14:10 | 000,088,624 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se45mgmt.sys -- (se45mgmt) Sony Ericsson Device 069 USB WMC Device Management Drivers (WDM) DRV - [2006-11-30 15:14:10 | 000,018,704 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se45nd5.sys -- (se45nd5) Sony Ericsson Device 069 USB Ethernet Emulation SEMC45 (NDIS) DRV - [2006-11-30 15:14:04 | 000,097,088 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se45mdm.sys -- (se45mdm) DRV - [2006-11-30 15:14:04 | 000,009,360 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se45mdfl.sys -- (se45mdfl) DRV - [2006-11-30 15:13:56 | 000,061,536 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se45bus.sys -- (se45bus) Sony Ericsson Device 069 driver (WDM) DRV - [2006-04-25 09:57:42 | 000,428,160 | ---- | M] (Vimicro Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\vmfilter303.sys -- (vmfilter303) DRV - [2004-08-03 23:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Sterownik NT karty Realtek RTL8139(A/B/C) DRV - [2001-08-17 22:00:04 | 000,002,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\msmpu401.sys -- (ms_mpu401) DRV - [2001-08-17 21:51:32 | 000,018,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\irsir.sys -- (irsir) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1993962763-113007714-854245398-1003\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1 IE - HKU\S-1-5-21-1993962763-113007714-854245398-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/ IE - HKU\S-1-5-21-1993962763-113007714-854245398-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultthis.engineName: "" FF - prefs.js..browser.search.defaulturl: "" FF - prefs.js..browser.startup.homepage: "http://pl.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:pl:official" FF - prefs.js..extensions.enabledItems: {53A03D43-5363-4669-8190-99061B2DEBA5}:1.3.7 FF - prefs.js..extensions.enabledItems: jyboy.yy@gmail.com:1.0.4 FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:2.0.1 FF - prefs.js..extensions.enabledItems: {B17C1C5A-04B1-11DB-9804-B622A1EF5492}:1.2.1 FF - prefs.js..extensions.enabledItems: {aff87fa2-a58e-4edd-b852-0a20203c1e17}:0.9 FF - prefs.js..extensions.enabledItems: pl@dictionaries.addons.mozilla.org:1.0.20110621 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA}:7.0.01 FF - prefs.js..extensions.enabledItems: wrc@avast.com:20110101 FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.9.7 FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2011-12-07 23:19:58 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.25\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-12-21 11:58:09 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.25\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-12-21 11:58:09 | 000,000,000 | ---D | M] [2011-05-10 23:09:10 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Extensions [2011-12-23 00:32:26 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions [2011-05-10 23:49:15 | 000,000,000 | ---D | M] (FEBE) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} [2011-05-10 23:16:20 | 000,000,000 | ---D | M] (ScrapBook) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{53A03D43-5363-4669-8190-99061B2DEBA5} [2011-12-07 21:31:23 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} [2011-11-10 09:18:41 | 000,000,000 | ---D | M] (gTranslate) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{aff87fa2-a58e-4edd-b852-0a20203c1e17} [2011-05-10 23:59:19 | 000,000,000 | ---D | M] (Password Exporter) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{B17C1C5A-04B1-11DB-9804-B622A1EF5492} [2011-12-12 19:54:48 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2011-12-07 21:31:19 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}(2) [2011-12-15 10:46:06 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2011-05-10 23:24:40 | 000,000,000 | ---D | M] (gTranslator) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\jyboy.yy@gmail.com [2011-08-25 00:04:36 | 000,000,000 | ---D | M] (Polski slownik poprawnej pisowni) -- C:\Documents and Settings\Private\Dane aplikacji\Mozilla\Firefox\Profiles\e1vbo2qi.default\extensions\pl@dictionaries.addons.mozilla.org [2011-12-23 00:32:28 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2011-10-30 12:01:35 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA} [2011-12-07 23:19:58 | 000,000,000 | ---D | M] (avast! WebRep) -- C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF [2011-10-30 12:00:28 | 000,611,224 | ---- | M] (Oracle Corporation) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2011-03-19 23:40:49 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2011-03-19 23:40:49 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2011-03-19 23:40:49 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2011-03-19 23:40:49 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2011-03-19 23:40:49 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2011-03-19 23:40:49 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Conduit (Enabled) CHR - default_search_provider: search_url = http://search.conduit.com/Results.aspx?q={searchTerms}&hl=en&SelfSearch=1&SearchSource=49&ctid=CT2269050 CHR - default_search_provider: suggest_url = http://search.conduit.com/ CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\16.0.912.63\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll CHR - plugin: Java Deployment Toolkit 7.0.10.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 7 U1 (Enabled) = C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\16.0.912.63\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\16.0.912.63\pdf.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll CHR - plugin: Default Plug-in (Enabled) = default_plugin CHR - Extension: YouTube = C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.2_0\ CHR - Extension: YouTube = C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2_0\ CHR - Extension: Szukaj w Google = C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.14_0\ CHR - Extension: Szukaj w Google = C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.16_0\ CHR - Extension: avast! WebRep = C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1091_0\ CHR - Extension: Gmail = C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\6.1.3_0\ CHR - Extension: Gmail = C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\6.1.4_0\ O1 HOSTS File: ([2011-10-29 17:45:33 | 000,000,098 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (IE7Pro BHO) - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files\IEPro\IEPro.dll (IE7Pro.com) O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O2 - BHO: (FDMIECookiesBHO Class) - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll () O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O3 - HKLM\..\Toolbar: (Grab Pro) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\IEPro\IEProRecorder.dll () O3 - HKU\S-1-5-21-1993962763-113007714-854245398-1003\..\Toolbar\WebBrowser: (Grab Pro) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\IEPro\IEProRecorder.dll () O4 - HKLM..\Run: [Ashampoo WinOptimizer Live-Tuner] C:\Program Files\Ashampoo\Ashampoo WinOptimizer 8\LiveTuner.exe (Ashampoo Development GmbH & Co. KG) O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software) O4 - HKLM..\Run: [LXDICATS] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXDItime.DLL (Lexmark International, Inc.) O4 - HKU\S-1-5-21-1993962763-113007714-854245398-1003..\Run: [Gadu-Gadu] C:\Program Files\Gadu-Gadu\gg.exe (Gadu-Gadu S.A.) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1993962763-113007714-854245398-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-1993962763-113007714-854245398-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-21-1993962763-113007714-854245398-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-21-1993962763-113007714-854245398-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\S-1-5-21-1993962763-113007714-854245398-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1 O8 - Extra context menu item: Free YouTube Download - C:\Documents and Settings\Private\Dane aplikacji\DVDVideoSoftIEHelpers\freeyoutubedownload.htm () O9 - Extra Button: IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files\IEPro\IEPro.dll (IE7Pro.com) O9 - Extra 'Tools' menuitem : IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files\IEPro\IEPro.dll (IE7Pro.com) O9 - Extra Button: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\IEPro.dll (IE7Pro.com) O9 - Extra 'Tools' menuitem : IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\IEPro.dll (IE7Pro.com) O15 - HKU\S-1-5-21-1993962763-113007714-854245398-1003\..Trusted Domains: mks.com.pl ([www] http in Trusted sites) O15 - HKU\S-1-5-21-1993962763-113007714-854245398-1003\..Trusted Domains: mks.com.pl ([www] https in Trusted sites) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_01-windows-i586.cab (Java Plug-in 1.7.0_01) O16 - DPF: {CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_01-windows-i586.cab (Java Plug-in 1.7.0_01) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_01-windows-i586.cab (Java Plug-in 1.7.0_01) O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{35866813-DF5B-4D9A-84E1-5F49AD61BE57}: NameServer = 10.3.0.1 O20 - AppInit_DLLs: (C:\WINDOWS\system32\guard32.dll) -C:\WINDOWS\system32\guard32.dll (COMODO) O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2007-06-06 14:12:39 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2009-05-28 20:31:29 | 000,000,000 | R--D | M] - C:\autorun.inf -- [ NTFS ] O32 - AutoRun File - [2009-05-28 20:31:30 | 000,000,000 | R--D | M] - D:\autorun.inf -- [ NTFS ] O32 - AutoRun File - [2010-03-04 13:05:12 | 000,000,000 | ---- | M] () - G:\AUTOEXEC.BAT -- [ FAT32 ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011-12-22 19:20:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Private\Menu Start\Programy\Ad-Remover [2011-12-22 19:20:28 | 000,000,000 | ---D | C] -- C:\Program Files\Ad-Remover [2011-12-20 09:14:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Skype [2011-12-19 01:04:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Private\Dane aplikacji\pdfforge [2011-12-19 01:04:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\PDFCreator [2011-12-19 01:04:25 | 000,662,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSCOMCT2.OCX [2011-12-19 01:04:25 | 000,137,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSMAPI32.OCX [2011-12-19 01:04:19 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSMPIDE.DLL [2011-12-19 01:04:19 | 000,000,000 | ---D | C] -- C:\Program Files\PDFCreator [2011-12-16 03:57:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Ashampoo [2011-12-16 03:57:18 | 000,028,160 | ---- | C] (mst software GmbH, Germany) -- C:\WINDOWS\System32\DfSdkBt.exe [2011-12-12 20:00:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Private\dwhelper [2011-12-09 04:11:25 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Private\Recent [2011-12-09 04:00:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Google Chrome [2011-12-07 23:20:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\avast! Free Antivirus [2011-12-07 23:20:32 | 000,307,288 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSP.sys [2011-12-07 23:20:32 | 000,019,544 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys [2011-12-07 23:20:29 | 000,025,432 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys [2011-12-07 23:20:28 | 000,441,176 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSnx.sys [2011-12-07 23:20:28 | 000,049,240 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys [2011-12-07 23:20:27 | 000,102,488 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys [2011-12-07 23:20:27 | 000,096,344 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswmon.sys [2011-12-07 23:20:27 | 000,030,680 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys [2011-12-07 23:19:55 | 000,040,112 | ---- | C] (AVAST Software) -- C:\WINDOWS\avastSS.scr [2011-12-07 23:19:54 | 000,199,304 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe [2011-12-07 23:19:35 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software [2011-12-07 22:27:40 | 000,303,104 | R--- | C] (Hewlett-Packard Co.) -- C:\WINDOWS\System32\hpovst15.dll [2011-12-07 22:27:39 | 000,581,632 | R--- | C] (Hewlett-Packard Co.) -- C:\WINDOWS\System32\hpotscl6.dll [2011-12-07 22:27:38 | 000,729,088 | R--- | C] (Hewlett-Packard) -- C:\WINDOWS\System32\hpowiax7.dll [2011-12-07 21:36:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\HP Product Assistant [2011-12-07 21:33:35 | 000,000,000 | -HSD | C] -- C:\RECYCLER [2011-12-07 21:31:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Free Download Manager [2011-12-07 21:31:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\FreeDownloadManager.ORG [2011-12-07 21:31:39 | 000,000,000 | ---D | C] -- C:\Program Files\Free Download Manager [2011-12-07 21:31:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Private\Dane aplikacji\Free Download Manager [2011-12-07 21:31:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\DVDVideoSoft [2011-12-07 21:31:28 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Plasmoo [2011-12-07 21:31:25 | 000,000,000 | ---D | C] -- C:\Program Files\DVDVideoSoft [2011-11-28 21:01:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Private\Moje dokumenty\Downloads [2011-11-27 02:15:31 | 000,000,000 | ---D | C] -- C:\RECYCLER(2) [2011-11-25 23:12:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Private\Moje dokumenty\Originals [2010-08-28 10:57:50 | 000,356,352 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdiinpa.dll [2010-08-28 10:57:50 | 000,339,968 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdiiesc.dll [2010-08-28 10:57:50 | 000,311,296 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdihcp.dll [2010-08-28 10:57:49 | 001,187,840 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdiserv.dll [2010-08-28 10:57:49 | 000,942,080 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdiusb1.dll [2010-08-28 10:57:48 | 000,614,400 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdipmui.dll [2010-08-28 10:57:48 | 000,532,480 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdilmpm.dll [2010-08-28 10:57:48 | 000,053,248 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdiprox.dll [2010-08-28 10:57:48 | 000,053,248 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdipplc.dll [2010-08-28 10:57:47 | 000,320,432 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdiih.exe [2010-08-28 10:57:46 | 000,671,744 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdihbn3.dll [2010-08-28 10:57:44 | 000,761,856 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdicomc.dll [2010-08-28 10:57:44 | 000,517,040 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdicoms.exe [2010-08-28 10:57:44 | 000,360,448 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdicomm.dll [2010-08-28 10:57:43 | 000,340,912 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdicfg.exe [2008-03-17 16:20:26 | 000,172,032 | ---- | C] ( ) -- C:\WINDOWS\System32\rsnpstd3.dll [2008-03-17 16:20:26 | 000,061,440 | ---- | C] ( ) -- C:\WINDOWS\System32\vsnpstd3.dll [2008-03-17 16:20:26 | 000,053,248 | ---- | C] ( ) -- C:\WINDOWS\System32\csnpstd3.dll [2008-03-17 16:20:26 | 000,053,248 | ---- | C] ( ) -- C:\WINDOWS\csnpstd3.dll [2004-07-09 04:08:36 | 000,472,576 | ---- | C] (Microsoft Corporation) -- C:\Program Files\dxsetup.exe [2004-07-09 04:08:34 | 002,242,560 | ---- | C] (Microsoft Corporation) -- C:\Program Files\dsetup32.dll [2004-07-09 03:03:10 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Program Files\DSETUP.dll [1 C:\Documents and Settings\All Users\*.tmp files -> C:\Documents and Settings\All Users\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011-12-23 22:53:21 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2011-12-23 20:08:55 | 000,197,632 | ---- | M] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-12-22 19:20:39 | 000,001,554 | ---- | M] () -- C:\Documents and Settings\Private\Pulpit\Ad-Remover.lnk [2011-12-20 20:14:34 | 000,002,801 | ---- | M] () -- C:\Documents and Settings\Private\Pulpit\HiJackThis.lnk [2011-12-20 15:44:00 | 000,159,544 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2011-12-20 10:42:31 | 000,001,393 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2011-12-20 09:14:17 | 000,001,878 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk [2011-12-19 16:32:05 | 000,148,188 | ---- | M] () -- C:\Documents and Settings\Private\Moje dokumenty\bacchus-sepia4bg12.jpg [2011-12-19 12:17:15 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2011-12-16 03:57:28 | 000,001,863 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\1-Click-Optimizer (WO8).lnk [2011-12-16 03:57:28 | 000,000,865 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Ashampoo WinOptimizer 8.lnk [2011-12-09 13:19:38 | 000,168,545 | ---- | M] () -- C:\WINDOWS\hpoins27.dat [2011-12-09 12:46:51 | 000,169,051 | ---- | M] () -- C:\WINDOWS\hpoins27.dat.temp [2011-12-09 12:21:44 | 000,000,807 | ---- | M] () -- C:\WINDOWS\wininit.ini [2011-12-09 04:16:02 | 000,003,420 | ---- | M] () -- C:\Documents and Settings\Private\Moje dokumenty\cc_20111209_041544.reg [2011-12-09 04:14:55 | 000,015,858 | ---- | M] () -- C:\Documents and Settings\Private\Moje dokumenty\cc_20111209_041448.reg [2011-12-09 03:59:41 | 000,000,682 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\CCleaner.lnk [2011-12-07 23:20:33 | 000,001,689 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\avast! Free Antivirus.lnk [2011-12-07 23:20:28 | 000,002,644 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT [2011-12-05 06:05:08 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\{5733574A-9F20-49E5-A5C3-E885C626FCD3} [2011-12-04 03:42:43 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\{04C910EA-7EF4-4419-A9B1-870C239A0879} [2011-12-02 04:46:57 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\{16F48A82-4D02-4EC4-BBD0-E2E91E5C6FDD} [2011-11-28 20:40:16 | 000,001,088 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1993962763-113007714-854245398-1003Core.job [2011-11-25 23:12:02 | 000,099,820 | ---- | M] () -- C:\Documents and Settings\Private\Moje dokumenty\marij_v2459[1].jpg [1 C:\Documents and Settings\All Users\*.tmp files -> C:\Documents and Settings\All Users\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-12-22 19:20:39 | 000,001,554 | ---- | C] () -- C:\Documents and Settings\Private\Pulpit\Ad-Remover.lnk [2011-12-20 20:14:34 | 000,002,801 | ---- | C] () -- C:\Documents and Settings\Private\Pulpit\HiJackThis.lnk [2011-12-20 10:28:13 | 000,001,393 | ---- | C] () -- C:\WINDOWS\imsins.BAK [2011-12-20 09:14:17 | 000,001,878 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk [2011-12-19 16:33:54 | 000,148,188 | ---- | C] () -- C:\Documents and Settings\Private\Moje dokumenty\bacchus-sepia4bg12.jpg [2011-12-19 01:04:24 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll [2011-12-16 03:57:28 | 000,001,863 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\1-Click-Optimizer (WO8).lnk [2011-12-16 03:57:28 | 000,000,865 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Ashampoo WinOptimizer 8.lnk [2011-12-09 04:15:46 | 000,003,420 | ---- | C] () -- C:\Documents and Settings\Private\Moje dokumenty\cc_20111209_041544.reg [2011-12-09 04:14:51 | 000,015,858 | ---- | C] () -- C:\Documents and Settings\Private\Moje dokumenty\cc_20111209_041448.reg [2011-12-09 03:59:40 | 000,000,682 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\CCleaner.lnk [2011-12-07 23:20:33 | 000,001,689 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\avast! Free Antivirus.lnk [2011-12-05 06:05:08 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\{5733574A-9F20-49E5-A5C3-E885C626FCD3} [2011-12-04 03:42:43 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\{04C910EA-7EF4-4419-A9B1-870C239A0879} [2011-12-02 04:46:57 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\{16F48A82-4D02-4EC4-BBD0-E2E91E5C6FDD} [2011-11-28 20:40:16 | 000,001,088 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1993962763-113007714-854245398-1003Core.job [2011-11-25 23:10:18 | 000,099,820 | ---- | C] () -- C:\Documents and Settings\Private\Moje dokumenty\marij_v2459[1].jpg [2011-11-22 20:39:38 | 000,168,545 | ---- | C] () -- C:\WINDOWS\hpoins27.dat [2011-11-22 20:39:38 | 000,000,932 | ---- | C] () -- C:\WINDOWS\hpomdl27.dat [2011-11-22 06:44:20 | 000,000,512 | ---- | C] () -- C:\WINDOWS\hpomdl44.dat.temp [2011-11-22 01:21:40 | 000,169,051 | ---- | C] () -- C:\WINDOWS\hpoins27.dat.temp [2011-11-22 01:21:40 | 000,000,932 | ---- | C] () -- C:\WINDOWS\hpomdl27.dat.temp [2011-11-16 06:03:22 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\{13D28CF9-B685-4837-B27B-A51FFC69C6BC} [2011-10-25 18:07:38 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\setupfilter.exe [2011-09-07 09:32:58 | 000,059,904 | ---- | C] () -- C:\WINDOWS\System32\zlib.dll [2011-05-09 21:18:34 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat [2011-04-15 20:52:27 | 000,723,981 | ---- | C] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\unins000.exe [2011-04-15 20:52:26 | 000,002,170 | ---- | C] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\unins000.dat [2011-02-14 00:32:38 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini [2011-02-04 13:05:32 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin [2010-12-08 19:20:29 | 000,005,504 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys [2010-08-28 11:00:24 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\lxdivs.dll [2010-08-28 11:00:16 | 000,344,064 | ---- | C] () -- C:\WINDOWS\System32\lxdicoin.dll [2010-08-28 10:59:31 | 000,692,224 | ---- | C] () -- C:\WINDOWS\System32\lxdidrs.dll [2010-08-28 10:59:31 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\lxdicnv4.dll [2010-08-28 10:59:31 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\lxdicaps.dll [2010-08-28 10:58:08 | 000,000,060 | -H-- | C] () -- C:\WINDOWS\System32\lxdirwrd.ini [2010-08-28 10:57:50 | 000,294,912 | ---- | C] () -- C:\WINDOWS\System32\lxdiinst.dll [2010-08-28 10:57:45 | 000,208,896 | ---- | C] () -- C:\WINDOWS\System32\lxdigrd.dll [2010-02-24 02:52:16 | 000,000,050 | ---- | C] () -- C:\WINDOWS\SW_Win9423X24.DLL [2010-02-24 02:51:57 | 001,220,608 | ---- | C] () -- C:\WINDOWS\System32\pdf2bmp.dll [2010-02-24 02:51:54 | 000,098,304 | ---- | C] () -- C:\WINDOWS\System32\DVM.dll [2010-02-24 02:51:54 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\RegisterExe.exe [2009-12-14 18:35:32 | 000,343,040 | ---- | C] () -- C:\WINDOWS\System32\lffpx7.dll [2009-12-14 18:35:32 | 000,116,736 | ---- | C] () -- C:\WINDOWS\System32\lfkodak.dll [2009-11-25 00:51:17 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2009-11-23 14:36:06 | 000,000,228 | ---- | C] () -- C:\WINDOWS\System32\edacded0.dat [2009-05-24 09:58:43 | 004,471,092 | ---- | C] () -- C:\WINDOWS\System32\libavcodec.dll [2009-05-23 15:05:06 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\mmswitch.dll [2009-05-23 15:04:55 | 000,207,360 | ---- | C] () -- C:\WINDOWS\System32\evrprop.dll [2009-05-23 14:52:48 | 000,108,032 | ---- | C] () -- C:\WINDOWS\System32\avi.dll [2009-05-23 14:52:47 | 000,246,784 | ---- | C] () -- C:\WINDOWS\System32\dxr.dll [2009-05-23 14:52:45 | 000,141,312 | ---- | C] () -- C:\WINDOWS\System32\mp4.dll [2009-05-23 14:52:44 | 000,148,480 | ---- | C] () -- C:\WINDOWS\System32\mkx.dll [2009-05-23 14:52:42 | 000,159,744 | ---- | C] () -- C:\WINDOWS\System32\mmfinfo.dll [2009-05-23 14:52:41 | 000,120,832 | ---- | C] () -- C:\WINDOWS\System32\ogm.dll [2009-05-23 14:52:40 | 000,163,840 | ---- | C] () -- C:\WINDOWS\System32\ts.dll [2009-05-23 14:52:38 | 000,079,360 | ---- | C] () -- C:\WINDOWS\System32\mkzlib.dll [2009-05-23 14:52:37 | 000,023,552 | ---- | C] () -- C:\WINDOWS\System32\mkunicode.dll [2009-05-23 14:52:06 | 001,416,015 | ---- | C] () -- C:\WINDOWS\System32\ffmpegmt.dll [2009-05-23 14:51:55 | 000,557,469 | ---- | C] () -- C:\WINDOWS\System32\libmplayer.dll [2009-05-23 14:51:50 | 000,146,098 | ---- | C] () -- C:\WINDOWS\System32\libmpeg2_ff.dll [2009-05-23 14:51:14 | 000,098,304 | ---- | C] () -- C:\WINDOWS\System32\ff_wmv9.dll [2009-05-23 14:51:13 | 000,113,152 | ---- | C] () -- C:\WINDOWS\System32\ff_unrar.dll [2009-05-23 14:51:12 | 000,183,296 | ---- | C] () -- C:\WINDOWS\System32\ff_samplerate.dll [2009-05-23 14:51:10 | 000,178,688 | ---- | C] () -- C:\WINDOWS\System32\ff_libmad.dll [2009-05-23 14:51:08 | 000,486,400 | ---- | C] () -- C:\WINDOWS\System32\ff_libfaad2.dll [2009-05-23 14:51:04 | 000,257,024 | ---- | C] () -- C:\WINDOWS\System32\ff_libdts.dll [2009-05-23 14:51:01 | 000,142,848 | ---- | C] () -- C:\WINDOWS\System32\ff_liba52.dll [2009-05-23 14:50:39 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\OggDS.dll [2009-05-23 14:50:36 | 000,921,600 | ---- | C] () -- C:\WINDOWS\System32\vorbisenc.dll [2009-05-23 14:50:29 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\vorbis.dll [2009-05-23 14:50:27 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\ogg.dll [2009-05-23 14:50:11 | 000,009,216 | ---- | C] () -- C:\WINDOWS\System32\cpuinf32.dll [2009-05-18 21:36:07 | 025,327,648 | -HS- | C] () -- C:\WINDOWS\System32\drivers\fidbox.dat [2009-05-02 17:48:00 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\LXF3PMON.DLL [2009-05-02 17:48:00 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\LXF3FXPU.DLL [2009-05-02 17:47:40 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\lxf3oem.dll [2009-05-02 17:47:40 | 000,012,288 | ---- | C] () -- C:\WINDOWS\System32\LXF3PMRC.DLL [2009-03-14 20:25:49 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\CNMVS3w.DLL [2008-12-10 23:02:58 | 000,000,000 | ---- | C] () -- C:\WINDOWS\PCSPATS.DAT [2008-12-07 16:53:32 | 000,000,071 | ---- | C] () -- C:\WINDOWS\iltwain.ini [2008-11-22 16:39:53 | 000,000,807 | ---- | C] () -- C:\WINDOWS\wininit.ini [2008-09-28 14:17:48 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe [2008-09-27 00:42:10 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat [2008-05-16 12:38:24 | 000,088,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\snsntfy.dll [2008-03-17 16:20:31 | 000,843,776 | ---- | C] () -- C:\WINDOWS\vsnpstd3.exe [2008-03-17 16:20:30 | 000,015,498 | ---- | C] () -- C:\WINDOWS\snpstd3.ini [2008-03-16 15:31:41 | 000,160,565 | ---- | C] () -- C:\WINDOWS\Sqirlz Water Reflections Uninstaller.exe [2008-03-07 20:40:23 | 000,000,032 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\ezsid.dat [2008-01-03 21:31:02 | 000,000,132 | ---- | C] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [2007-09-01 12:42:46 | 000,197,632 | ---- | C] () -- C:\Documents and Settings\Private\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2007-07-12 12:33:20 | 000,000,019 | ---- | C] () -- C:\WINDOWS\SMURFED.INI [2007-07-12 12:33:14 | 000,034,800 | ---- | C] () -- C:\WINDOWS\UNWISE.EXE [2007-06-21 21:07:06 | 000,000,346 | ---- | C] () -- C:\WINDOWS\I_VIEW32.INI [2007-06-09 19:31:43 | 000,001,287 | ---- | C] () -- C:\WINDOWS\mozver.dat [2007-06-06 16:37:04 | 000,000,421 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2007-06-06 15:51:44 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2007-06-06 15:50:31 | 000,159,544 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2007-06-06 15:24:50 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll [2007-06-06 14:16:14 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2007-06-06 14:08:49 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2004-08-04 00:56:48 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin [2004-08-02 14:20:40 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat [2004-07-22 10:51:34 | 003,432,656 | ---- | C] () -- C:\Program Files\ManagedDX.CAB [2004-07-19 22:58:36 | 001,156,363 | ---- | C] () -- C:\Program Files\BDANT.cab [2004-07-19 22:53:26 | 000,976,020 | ---- | C] () -- C:\Program Files\BDAXP.cab [2004-07-09 14:17:16 | 013,265,040 | ---- | C] () -- C:\Program Files\dxnt.cab [2004-07-09 09:13:48 | 015,493,481 | ---- | C] () -- C:\Program Files\DirectX.cab [2004-07-09 09:13:46 | 000,703,080 | ---- | C] () -- C:\Program Files\BDA.cab [2001-10-26 17:15:16 | 000,520,106 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat [2001-10-26 17:15:16 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat [2001-10-26 17:15:16 | 000,097,988 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat [2001-10-26 17:15:16 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat [2001-08-23 14:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin [2001-08-23 14:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat [2001-08-17 22:30:24 | 000,459,168 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat [2001-08-17 22:30:24 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat [2001-08-17 22:30:24 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat [2001-08-17 22:30:22 | 000,077,228 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat [2001-08-17 22:15:38 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin [2001-07-21 23:36:48 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat [2001-07-21 23:36:04 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat [2001-07-21 23:24:16 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat [color=#E56717]========== LOP Check ==========[/color] [2011-12-07 23:19:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Alwil Software [2010-12-26 00:40:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\BVRP Software [2010-12-26 13:29:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Canneverbe Limited [2009-05-15 21:27:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DriverScanner [2011-07-25 07:44:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Easybits GO [2011-11-06 20:57:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Edytor Wspomnień [2011-12-07 21:31:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\FreeDownloadManager.ORG [2011-03-03 02:17:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10 [2011-10-20 14:45:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla [2011-08-13 23:55:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM [2010-12-12 23:04:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Pattern Maker for cross stitch [2011-10-20 14:35:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\RDRM [2011-02-02 18:50:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\RH_Backups [2008-02-02 16:16:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SiComponents [2010-08-19 19:18:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP [2011-10-23 17:53:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TuneUp Software [2011-10-10 12:46:32 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16} [2009-05-15 21:25:42 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{66E2F539-12B6-4870-A500-7689CDE75C5E} [2011-11-03 00:50:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Lexmark Imaging Studio [2010-01-20 14:13:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\ArcaMicroScan [2010-08-30 17:03:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\ArcaVirMicroScan [2010-12-08 19:20:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Canneverbe Limited [2010-01-18 12:30:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\ChomikBox [2007-10-21 23:23:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\ContentGuard [2011-12-07 21:32:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\DVDVideoSoft [2011-01-03 20:41:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\DVDVideoSoftIEHelpers [2011-11-26 17:57:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\ElevatedDiagnostics [2011-12-12 19:44:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Free Download Manager [2007-06-23 16:44:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Gadu-Gadu [2011-08-08 20:34:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Gadu-Gadu 10 [2009-01-01 15:49:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\GanymedeNet [2011-07-25 07:43:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\go [2011-04-13 12:53:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\GrabPro [2011-11-18 11:06:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\gtk-2.0 [2011-04-13 12:53:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\IEPro [2011-12-23 19:56:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\ipla [2007-11-05 15:41:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Leadertech [2010-08-28 11:08:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Lexmark Imaging Studio [2011-05-09 21:16:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\MiniDm [2009-03-01 19:34:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Nowe Gadu-Gadu [2009-10-23 21:34:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\OpenFM [2009-04-14 15:03:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\OpenOffice.org [2011-12-19 01:04:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\pdfforge [2011-02-07 21:13:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\PhotoFiltre [2011-02-23 20:32:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\PhotoScape [2008-12-24 20:32:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Printer Info Cache [2008-01-03 21:50:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Teleca [2009-11-24 23:00:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Thunderbird [2011-10-10 12:50:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\TuneUp Software [2010-10-06 23:01:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\Uniblue [2011-10-29 12:44:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\VSRevoGroup [2011-11-28 23:06:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Private\Dane aplikacji\XnView [color=#E56717]========== Purity Check ==========[/color] < End of report >

OTL Exstras. txt

Kod: Zaznacz wszystko: OTL Extras logfile created on: 2011-12-23 23:33:30 - Run 1 OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\Private\Pulpit\Antywirusy Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 511,48 Mb Total Physical Memory | 82,39 Mb Available Physical Memory | 16,11% Memory free 2,47 Gb Paging File | 1,90 Gb Available in Paging File | 76,73% Paging File free Paging file location(s): [Binary data over 100 bytes] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 37,25 Gb Total Space | 8,40 Gb Free Space | 22,56% Space Free | Partition Type: NTFS Drive D: | 37,27 Gb Total Space | 34,43 Gb Free Space | 92,37% Space Free | Partition Type: NTFS Drive G: | 29,28 Gb Total Space | 22,25 Gb Free Space | 75,99% Space Free | Partition Type: FAT32 Drive H: | 203,58 Gb Total Space | 94,72 Gb Free Space | 46,53% Space Free | Partition Type: NTFS Computer Name: NN-04FCDEF7E0AE | User Name: Private | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* .html [@ = ChromeHTML] -- C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) .url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l [HKEY_USERS\S-1-5-21-1993962763-113007714-854245398-1003\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* exefile [open] -- "%1" %* http [open] -- "C:\Program Files\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.) https [open] -- "C:\Program Files\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.) InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [ChomikBox.Upload] -- "C:\Program Files\ChomikBox\\ChomikBox.exe" -u"%1" ( ) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Przeglądaj w XnView] -- "C:\Program Files\XnView\xnview.exe" "%1" (XnView, http://www.xnview.com) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusOverride" = 0 "FirewallOverride" = 0 "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] [color=#E56717]========== System Restore Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr] "Start" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List] "1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007 "2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DoNotAllowExceptions" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] "1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007 "2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008 [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] "C:\Program Files\Lexmark 3500-4500 Series\app4r.exe" = C:\Program Files\Lexmark 3500-4500 Series\App4R.exe:*:Enabled:BorgListener -- () [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\WINDOWS\system32\lxdicoms.exe" = C:\WINDOWS\system32\lxdicoms.exe:*:Enabled:Lexmark Communications System -- ( ) "C:\Program Files\Lexmark 3500-4500 Series\lxdiamon.exe" = C:\Program Files\Lexmark 3500-4500 Series\lxdiamon.exe:*:Enabled:Lexmark Device Monitor -- (Lexmark) "C:\Program Files\Lexmark 3500-4500 Series\App4R.exe" = C:\Program Files\Lexmark 3500-4500 Series\App4R.exe:*:Enabled:Lexmark Imaging Studio -- () "C:\Program Files\Free Download Manager\fdm.exe" = C:\Program Files\Free Download Manager\fdm.exe:*:Enabled:Free Download Manager -- (FreeDownloadManager.ORG) "G:\Program Files\Gadu-Gadu 10\gg.exe" = G:\Program Files\Gadu-Gadu 10\gg.exe:*:Enabled:Gadu-Gadu 10 -- (GG Network S.A.) "C:\Program Files\Lexmark 3500-4500 Series\Wireless\lxdiwpss.exe" = C:\Program Files\Lexmark 3500-4500 Series\Wireless\lxdiwpss.exe:*:Enabled: -- () "C:\Program Files\Gadu-Gadu 10\gg.exe" = C:\Program Files\Gadu-Gadu 10\gg.exe:*:Disabled:Gadu-Gadu 10 -- (GG Network S.A.) "C:\Program Files\IEPro\MiniDM.exe" = C:\Program Files\IEPro\MiniDM.exe:*:Enabled:MiniDM -- (IE7Pro.com) "C:\Program Files\Gadu-Gadu\gg.exe" = C:\Program Files\Gadu-Gadu\gg.exe:*:Enabled:Gadu-Gadu - program główny -- (Gadu-Gadu S.A.) "C:\Program Files\Lexmark 3500-4500 Series\lxdimon.exe" = C:\Program Files\Lexmark 3500-4500 Series\lxdimon.exe:*:Enabled: -- () "C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe "C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe "C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe "C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdipswx.exe" = C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdipswx.exe:*:Enabled: -- () "C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdijswx.exe" = C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdijswx.exe:*:Enabled: -- () "C:\WINDOWS\system32\spool\drivers\w32x86\3\lxditime.exe" = C:\WINDOWS\system32\spool\drivers\w32x86\3\lxditime.exe:*:Enabled: -- (Lexmark International, Inc.) [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator "{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended "{0F9196C6-58B4-445B-B56E-B1200FECC151}" = Microsoft Bootvis "{172423F9-522A-483A-AD65-03600CE4CA4F}" = Microsoft Works 6-9 Converter "{18669FF9-C8FE-407a-9F70-E674896B1DB4}" = GPBaseService "{1C36647E-F5BD-43E9-BA64-5F274B7F7050}_is1" = Prawo Jazdy 2010 1.1 "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{26A24AE4-039D-4CA4-87B4-2F83217001FF}" = Java(TM) 7 Update 1 "{2FFE93F0-BB72-4E52-8761-354D1AAA9387}" = Sony Ericsson PC Suite 6.009.00 "{315F5FFC-1A5C-4A2A-B8E7-1C5B1174C198}_is1" = AML Free Registry Cleaner 4.21 "{31BFEC6C-1F27-45B5-839C-BCBAE327993A}" = OpenOffice.org 3.0 "{34BFB099-07B2-4E95-A673-7362D60866A2}" = PSSWCORE "{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{36FDBE6E-6684-462b-AE98-9A39A1B200CC}" = HPProductAssistant "{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile "{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = eReg "{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{5109C064-813E-4e87-B0DE-C8AF7B5BC02B}" = SmartWebPrintingOC "{52A69E11-7CEB-4a7d-9607-68BA4F39A89B}" = DeviceDiscovery "{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime "{5ACE69F0-A3E8-44eb-88C1-0A841E700180}" = TrayApp "{5AF71003-1797-4D93-9F37-4F2125CBF539}" = Microsoft .NET Framework 2.0 Language Pack - PLK "{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder "{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD "{687FEF8A-8597-40b4-832C-297EA3F35817}" = BufferChm "{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update "{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP "{80533B67-C407-485D-8B5D-63BB8ED9D878}" = Scan "{81BF6353-3C5B-4E6E-A566-7E162A00BF72}_is1" = Wtyczka e-Deklaracje "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{90110415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003 "{99392BE9-4B07-4386-BA40-D925C2ECF74B}" = ChomikBox "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{9EFDFBA8-9174-3C61-8645-28376C5CA994}" = Microsoft .NET Framework 3.5 Language Pack SP1 - plk "{A0B9F8DF-C949-45ed-9808-7DC5C0C19C81}" = Status "{A5AB9D5E-52E2-440e-A3ED-9512E253C81A}" = SolutionCenter "{A80FA752-C491-4ED9-ABF0-4278563160B2}" = 32 Bit HP CIO Components Installer "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5 "{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder "{AC76BA86-7AD7-1045-7B44-A81200000003}" = Adobe Reader 8 - Polish "{AC76BA86-7AD7-1045-7B44-AA1000000001}" = Adobe Reader X (10.1.1) - Polish "{B8DBED1E-8BC3-4d08-B94A-F9D7D88E9BBF}" = HPSSupply "{BAD0FA60-09CF-4411-AE6A-C2844C8812FA}" = HP Photosmart Essential 2.5 "{c6922d7f-c698-4d9e-9671-8b3de04d1511}" = DJ_AIO_03_F2200_Software_Min "{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}" = PlayReady PC Runtime x86 "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{CE3B8E96-B0AF-4871-9178-1519B58E3A93}" = A4 TECH PC Camera H "{D99A8E3A-AE5A-4692-8B19-6F16D454E240}" = Destination Component "{db18dc72-cd20-4801-be82-f5d2caeec4d7}" = DJ_AIO_03_F2200_Software "{DE5D78ED-145E-4FA3-9D75-C92A09E1FEB1}" = Pattern Maker Viewer - v4 "{E08DC77E-D09A-4e36-8067-D6DBBCC5F8DC}" = VideoToolkit01 "{ECD03DA7-5952-406A-8156-5F0C93618D1F}" = USB PC Camera Plus "{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support "{F2A69CA0-8BBF-4404-BA68-DB79A3548E34}" = PCStitch "{F3D7BBAA-7412-4388-B510-11E145D2C48B}" = Microsoft Web Platform Installer 3.0 "{F42CD69D-E393-47c8-B2CD-B139C4ADA9A8}" = Copy "{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio "{FD8E178D-8B4E-42DA-B434-EFF270329B1C}" = COMODO Internet Security "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin "Adobe Shockwave Player" = Adobe Shockwave Player "Ashampoo WinOptimizer 8_is1" = Ashampoo WinOptimizer 8 v.8.13 "avast" = avast! Free Antivirus "CCleaner" = CCleaner "Defraggler" = Defraggler "Edytor Wspomnień" = Edytor Wspomnień 4.2.4.9 "ESET Online Scanner" = ESET Online Scanner v3 "Free Download Manager_is1" = Free Download Manager 3.0 "Free YouTube Download_is1" = Free YouTube Download version 3.0.16.923 "Gadu-Gadu" = Gadu-Gadu 7.7 "Gadu-Gadu 10" = Gadu-Gadu 10 "Google Chrome" = Google Chrome "HaftiX" = HaftiX v. 2.0.2 "IE7Pro" = IE7Pro "ie8" = Windows Internet Explorer 8 "IrfanView" = IrfanView (remove only) "KLiteCodecPack_is1" = K-Lite Codec Pack 6.9.0 (Full) "Lektury 1_is1" = Lektury 1 "Lexmark 3500-4500 Series" = Lexmark 3500-4500 Series "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware wersja 1.51.2.1300 "Microsoft .NET Framework 2.0 Language Pack - PLK" = Microsoft .NET Framework 2.0 — pakiet języka polskiego "Microsoft .NET Framework 3.5 Language Pack SP1 - plk" = Pakiet językowy programu Microsoft .NET Framework 3.5 z dodatkiem SP1 — PLK "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended "Mozilla Firefox (3.6.25)" = Mozilla Firefox (3.6.25) "Nero - Burning Rom!UninstallKey" = Nero 6 Ultra Edition "PhotoScape" = PhotoScape "RegCompact.NET" = RegCompact.NET 2.0 "RegHealer_is2" = Registry Healer 4.5.0 uninstall "Revo Uninstaller" = Revo Uninstaller 1.93 "SkanerOnline" = Skaner on-line mks_vir "Sqirlz Water Reflections" = Sqirlz Water Reflections "SubEdit-Player_is1" = SubEdit-Player "Uninstall_is1" = Uninstall 1.0.0.1 "Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9 "Windows Media Format Runtime" = Windows Media Format 11 runtime "Windows Media Player" = Windows Media Player 11 "WinGimp-2.0_is1" = GIMP 2.6.8 "WinRAR archiver" = Archiwizator WinRAR "XnView_is1" = XnView 1.98.2 [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-1993962763-113007714-854245398-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "3100527833.www.coricamo.com" = Abakan OnLine "Ad-Remover" = Ad-Remover "PhotoFiltre" = PhotoFiltre [color=#E56717]========== Last 10 Event Log Errors ==========[/color] Error: Unable to start EventLog service! < End of report >

**Posty:** 18165 · przez **wojtas** 25 Gru 2011, 15:23

*Uruchom OTL z opcji sprzątanie.
* wykonaj optymalizację Windowsa ( instrukcja dla Windowsa XP, lecz w innych systemach jest podobnie )
* zrób pełny skan Malwarebytes Anti-Malware (zaktualizuj, usuń co znajdzie )
* Skasuj stan przywracania systemu

Zaktualizuj zabezpieczenia:
>>> Java™ 6
>>> Mozilla Firefox
>>> Adobe Flash Player

napisz jak sytuacja z komputerem

**Posty:** 7 · przez **Ninka46** 26 Gru 2011, 12:06

Posprzątałam po OTL

Optymalizację mam zrobioną już od dawna, ale przejrzałam jeszcze raz, w autostarcie mam tylko skypa, gg i avasta, powyłączane to co niepotrzebne łącznie z hibernacją
Posprawdzałam dyski i wszystko jest dobrze, nie ma błędów.Dfragmentację robiłam niedawno, ale zrobię jeszcze dziś ponownie
MBA używam przynajmniej raz w m-cu. Teraz też zrobiłam pełny skan i jest czysto
Java6 miałam, a teraz zainstalowałam z Twojego linku "Java SE Runtime Environment (JRE) 7 update 2" Czy o to chodziło?
Mozilli nie zmienie na nową wersje przynajmniej na razie, bo tylko z nową mam problemy z logowaniami z dodatkami itp.
Adobe Flash Player mam włączoną aktualizację a więc mam zawsze najnowszą wersję, a z linka który podałeś dla Windowsa są 4 możliwości pobrania i nie wiem co miałabym pobrać, a nie chcę sobie zaśmiecać.

Acha, poniewaz skan z MAM był czysty na razie nie kasowałam przywracania systemu,- nie chcę sie na razie pozbawiać możliwości przywrócenia gdyby było nadal tak jak jest, ponieważ żadnej poprawy w działaniu komputera nie ma ,w dalszym ciągu się zamraża i zamiast np wyświetlić folder robi się białe okno, które trwa przez kilka-kilkanaście sekund i na nic nie reaguje i potem sam wraca do normalności.Sprawdzałam w Menadżerze zadań i nie zawsze jest w takim wypadku wpis,że program nie odpowiada często jest,że program jest uruchomiony.

PS, chciałam z płyty naprawić ew. system, ale niestety byłam taka mądra,że zainstalowałam SP3 i teraz mam wersje nie kompatybilna( na płycie SP2) i się nie da. A stawianie od nowa systemu na razie nie wchodzi w rachubę.

**Posty:** 18165 · przez **wojtas** 26 Gru 2011, 17:08

tak o to Javę chodziło, niestety tu zajmuje się usuwaniem wirusów, których nie masz.. przyczyna musi leżeć w systemie.

**Posty:** 7 · przez **Ninka46** 27 Gru 2011, 01:06

No cóż dziękuję za tyle. Ale co dalej?Czy bez stawiania systemu od nowa nic sie nie da zrobić.?, poprawić?

**Posty:** 18165 · przez **wojtas** 27 Gru 2011, 09:57

pisz w dziale system windows... tu jest dział od wirusów.