OTL logfile created on: 5/3/2013 9:02:11 PM - Run OTLPE by OldTimer - Version 3.1.48.0 Folder = X:\Programs\OTLPE 64bit-Windows 7 Ultimate Service Pack 1 (Version = 6.1.7601) - Type = System Internet Explorer (Version = 9.0.8112.16421) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 88.00% Memory free 3.00 Gb Paging File | 3.00 Gb Available in Paging File | 97.00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 63.48 Gb Total Space | 12.38 Gb Free Space | 19.51% Space Free | Partition Type: NTFS Drive D: | 234.61 Gb Total Space | 88.17 Gb Free Space | 37.58% Space Free | Partition Type: NTFS Drive E: | 1.87 Gb Total Space | 1.87 Gb Free Space | 100.00% Space Free | Partition Type: FAT Drive X: | 284.12 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS Computer Name: REATOGO | User Name: SYSTEM Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days Using ControlSet: ControlSet004 [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2009/07/13 21:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Disabled] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2009/07/13 21:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Windows\System32\appmgmts.dll -- (AppMgmt) SRV - [2013/04/19 01:03:16 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [On_Demand] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2013/02/28 12:45:16 | 000,161,384 | R--- | M] (Skype Technologies) [Auto] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2013/02/05 11:48:00 | 000,235,216 | ---- | M] (McAfee, Inc.) [On_Demand] -- C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe -- (McComponentHostService) SRV - [2012/10/02 07:13:44 | 003,064,000 | ---- | M] (Skype Technologies S.A.) [Auto] -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service) SRV - [2012/04/07 11:26:25 | 000,008,192 | ---- | M] () [Auto] -- C:\Windows\SysWOW64\srvany.exe -- (KMService) SRV - [2011/06/12 05:43:28 | 051,740,536 | ---- | M] (Microsoft Corporation) [On_Demand] -- D:\Programy\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service) SRV - [2010/08/12 09:18:40 | 000,042,360 | ---- | M] (ESET) [On_Demand] -- D:\Programy\ESET\ESET NOD32 Antivirus\EHttpSrv.exe -- (EhttpSrv) SRV - [2010/08/12 09:16:26 | 000,810,144 | ---- | M] (ESET) [Auto] -- D:\Programy\ESET\ESET NOD32 Antivirus\x86\ekrn.exe -- (ekrn) SRV - [2010/03/18 08:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009/10/14 11:44:38 | 000,090,112 | ---- | M] (France Telecom SA) [Auto] -- C:\Program Files (x86)\Common Files\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe -- (FTRTSVC) SRV - [2009/06/10 17:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2009/05/14 12:07:14 | 000,759,048 | ---- | M] (ABBYY) [Auto] -- D:\Programy\ABBYY PDF Transformer 3.0\NetworkLicenseServer.exe -- (ABBYY.Licensing.PDFTransformer.Classic.3.0) SRV - [2007/05/31 12:11:54 | 000,443,784 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm) SRV - [2007/05/31 12:11:46 | 000,225,672 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2012/02/19 11:24:38 | 000,254,464 | ---- | M] (Jungo) [Kernel | On_Demand] -- C:\Windows\System32\drivers\windrvr6.sys -- (WinDriver6) DRV:[b]64bit:[/b] - [2010/11/20 07:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2010/11/20 07:03:42 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:[b]64bit:[/b] - [2010/11/20 05:37:42 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\Windows\system32\drivers\sdbus.sys -- (sdbus) DRV:[b]64bit:[/b] - [2010/11/11 10:14:07 | 000,834,544 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot] -- C:\Windows\System32\drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2010/07/29 08:31:26 | 000,168,544 | ---- | M] (ESET) [File_System | Auto] -- C:\Windows\System32\drivers\eamonm.sys -- (eamonm) DRV:[b]64bit:[/b] - [2010/07/29 08:31:26 | 000,141,264 | ---- | M] (ESET) [Kernel | System] -- C:\Windows\System32\drivers\ehdrv.sys -- (ehdrv) DRV:[b]64bit:[/b] - [2010/07/29 08:31:26 | 000,126,320 | ---- | M] (ESET) [Kernel | Auto] -- C:\Windows\System32\drivers\epfwwfpr.sys -- (epfwwfpr) DRV:[b]64bit:[/b] - [2009/08/04 07:04:28 | 000,116,864 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard) DRV:[b]64bit:[/b] - [2009/08/04 07:04:28 | 000,116,224 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\ewusbfake.sys -- (hwusbfake) DRV:[b]64bit:[/b] - [2009/07/13 20:09:50 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\usb8023x.sys -- (usb_rndisx) DRV:[b]64bit:[/b] - [2009/07/13 20:00:13 | 000,013,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\Dot4Scan.sys -- (Dot4Scan) DRV:[b]64bit:[/b] - [2009/06/10 17:01:14 | 001,227,776 | ---- | M] (Motorola Inc.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\SmSerl64.sys -- (smserial) DRV:[b]64bit:[/b] - [2009/06/10 16:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand] -- C:\Windows\System32\wbem\ntfs.mof -- (Ntfs) DRV:[b]64bit:[/b] - [2009/06/10 16:35:36 | 000,867,328 | ---- | M] (Ralink Technology Corp.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\netr28ux.sys -- (netr28ux) DRV:[b]64bit:[/b] - [2009/06/10 16:35:28 | 005,434,368 | ---- | M] (Intel Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\netw5v64.sys -- (netw5v64) Sterownik karty Intel(R) DRV:[b]64bit:[/b] - [2009/06/10 16:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand] -- C:\Windows\system32\DRIVERS\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009/06/10 16:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand] -- C:\Windows\system32\DRIVERS\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009/06/10 16:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009/04/29 11:28:30 | 000,030,208 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand] -- C:\Windows\System32\drivers\KMWDFILTER.sys -- (KMWDFILTER) DRV:[b]64bit:[/b] - [2009/03/01 18:05:32 | 000,187,392 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand] -- C:\Windows\System32\drivers\Rt64win7.sys -- (RTL8167) DRV:[b]64bit:[/b] - [2007/07/10 21:30:34 | 000,009,088 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\HpqRemHid.sys -- (HpqRemHid) DRV:[b]64bit:[/b] - [2006/11/18 08:07:48 | 000,055,296 | ---- | M] (REDC) [Kernel | Auto] -- C:\Windows\System32\drivers\rixdpx64.sys -- (rismxdp) DRV - [2009/12/18 06:58:52 | 000,017,864 | ---- | M] () [Kernel | On_Demand] -- C:\Program Files (x86)\SystemRequirementsLab\cpudrv64.sys -- (cpudrv64) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\A_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\System32\Macromed\Flash\NPSWF64_11_7_700_169.dll () FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.3.1: C:\Windows\System32\npdeployJava1.dll (Oracle Corporation) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.3.1: C:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: D:\Programy\Microsoft Office\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_169.dll () FF - HKLM\Software\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\Wow6432Node\MozillaPlugins\@mcafee.com/McAfeeMssPlugin: C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMSS.dll (McAfee, Inc.) FF - HKLM\Software\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\Program Files (x86)\Microsoft Office\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\Program Files (x86)\Microsoft Office\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\Wow6432Node\MozillaPlugins\@real.com/nppl3260;version=6.0.12.450: D:\Programy\Real Alternative\Browser\Plugins\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\Wow6432Node\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: D:\Programy\Real Alternative\Browser\Plugins\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\Wow6432Node\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: FF - HKLM\Software\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\Wow6432Node\MozillaPlugins\Adobe Reader: D:\Programy\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) 64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: D:\PROGRAMY\ESET\ESET NOD32 ANTIVIRUS\MOZILLA THUNDERBIRD [2010/11/11 15:12:40 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: D:\Programy\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2010/11/11 15:12:40 | 000,000,000 | ---D | M] O1 HOSTS File: ([2010/11/11 14:59:41 | 000,001,178 | R--- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 mynortonaccount.conxion.com O1 - Hosts: 127.0.0.1 lcsitemain.conxion.com O1 - Hosts: 127.0.0.1 lc1alt.symantec.com O1 - Hosts: 127.0.0.1 lcsitemain.symantec.com O1 - Hosts: 127.0.0.1 subsync.symantec.com O1 - Hosts: 127.0.0.1 webact.symantec.com O1 - Hosts: 127.0.0.1 www-secure.symantec.com O1 - Hosts: 127.0.0.1 www.mynortonaccount.com O2:[b]64bit:[/b] - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Programy\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) O2:[b]64bit:[/b] - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) O2:[b]64bit:[/b] - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\Programy\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (MSS+ Identifier) - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.) O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O4:[b]64bit:[/b] - HKLM..\Run: [egui] D:\Programy\ESET\ESET NOD32 Antivirus\egui.exe (ESET) O4 - HKLM..\Run: [CardDetectorHUAWEI1752_1552] C:\Program Files (x86)\CardDetector\HUAWEI1752_1552\CardDetector.exe (France Telecom SA) O4 - HKU\A_ON_C..\Run: [Google UPDATE] File not found O4 - HKU\LocalService_ON_C..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\NetworkService_ON_C..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\LocalService_ON_C..\RunOnce: [mctadmin] File not found O4 - HKU\NetworkService_ON_C..\RunOnce: [mctadmin] File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O7 - HKU\A_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\A_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAHealth = 1 O8:[b]64bit:[/b] - Extra context menu item: E&ksportuj do programu Microsoft Excel - D:\Programy\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - D:\Programy\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation) O9:[b]64bit:[/b] - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation) O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O13:[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25) O16 - DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} https://carelink.minimed.com/plugin/jinstall-6u25-windows-i586.cab (Java Plug-in 1.6.0_25) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25) O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.3.13.0.cab (SysInfo Class) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.179.1.62 62.179.1.63 O18:[b]64bit:[/b] - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - Reg Error: Key error. File not found O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKU\A_ON_C Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKU\A_ON_C Winlogon: Shell - (C:\Users\A\AppData\Roaming\skype.dat) - C:\Users\A\AppData\Roaming\skype.dat () O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O28:[b]64bit:[/b] - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - D:\Programy\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ] O33 - MountPoints2\{504e7aff-3185-11e2-bc97-001e68447ee8}\Shell - "" = AutoRun O33 - MountPoints2\{504e7aff-3185-11e2-bc97-001e68447ee8}\Shell\AutoRun\command - "" = G:\MicroLauncher.exe O33 - MountPoints2\{8541fd41-b482-11e1-9069-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{8541fd41-b482-11e1-9069-806e6f6e6963}\Shell\AutoRun\command - "" = G:\AutoRunCardDetector.exe O33 - MountPoints2\{abe997d2-efaf-11df-bdb8-001e68447ee8}\Shell - "" = AutoRun O33 - MountPoints2\{abe997d2-efaf-11df-bdb8-001e68447ee8}\Shell\AutoRun\command - "" = G:\MicroLauncher.exe O33 - MountPoints2\{ac8ab869-f282-11e1-a2d1-001e68447ee8}\Shell - "" = AutoRun O33 - MountPoints2\{ac8ab869-f282-11e1-a2d1-001e68447ee8}\Shell\AutoRun\command - "" = I:\MicroLauncher.exe O33 - MountPoints2\G\Shell - "" = AutoRun O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\AutoRunCardDetector.exe O34 - HKLM BootExecute: (autocheck autochk *) - File not found [b]64bit:[/b] O35 - HKLM\..comfile [open] -- "%1" %* File not found [b]64bit:[/b] O35 - HKLM\..exefile [open] -- "%1" %* File not found O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2013/05/03 11:47:56 | 000,000,000 | ---D | C] -- C:\Windows\System32\%LOCALAPPDATA% [2013/05/03 11:14:38 | 000,000,000 | ---D | C] -- C:\_OTL [2013/04/23 10:33:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype [2013/04/19 00:52:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus [2013/04/18 16:06:23 | 000,000,000 | ---D | C] -- C:\ProgramData\McAfee Security Scan [2013/04/18 16:06:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\McAfee Security Scan [2013/04/07 05:02:09 | 000,000,000 | ---D | C] -- C:\Users\A\Desktop\nie wiem co [1 C:\Users\A\Desktop\*.tmp files -> C:\Users\A\Desktop\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2013/05/03 13:45:17 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2013/05/03 13:19:48 | 000,701,244 | ---- | M] () -- C:\Windows\System32\perfh015.dat [2013/05/03 13:19:48 | 000,618,936 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2013/05/03 13:19:48 | 000,136,262 | ---- | M] () -- C:\Windows\System32\perfc015.dat [2013/05/03 13:19:48 | 000,107,256 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2013/05/03 13:13:03 | 3219,988,480 | -HS- | M] () -- C:\hiberfil.sys [2013/05/03 12:32:14 | 000,000,396 | ---- | M] () -- C:\Windows\tasks\FileCure Startup.job [2013/05/03 12:32:12 | 000,000,004 | ---- | M] () -- C:\Users\A\AppData\Roaming\skype.ini [2013/05/03 12:30:19 | 000,000,048 | ---- | M] () -- C:\RB.rdat [2013/05/03 12:30:19 | 000,000,048 | ---- | M] () -- C:\License_Time.rdat [2013/05/03 12:30:07 | 000,001,034 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2013/05/03 12:30:06 | 000,000,486 | ---- | M] () -- C:\Windows\tasks\ParetoLogic Update Version3 Startup Task.job [2013/05/03 11:05:00 | 000,001,038 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2013/05/03 10:49:32 | 000,010,016 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2013/05/03 10:49:32 | 000,010,016 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2013/05/03 08:37:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2013/05/02 12:09:48 | 000,000,460 | ---- | M] () -- C:\Windows\tasks\ParetoLogic Registration3.job [2013/04/27 00:38:15 | 000,000,380 | ---- | M] () -- C:\Windows\tasks\FileCure Default.job [2013/04/22 22:33:08 | 000,000,434 | ---- | M] () -- C:\Windows\tasks\ParetoLogic Update Version3.job [2013/04/19 01:03:16 | 000,691,592 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2013/04/19 01:03:16 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2013/04/19 00:52:19 | 000,002,046 | ---- | M] () -- C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk [2013/04/19 00:52:19 | 000,002,046 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2013/04/19 00:52:19 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus [2013/04/19 00:52:18 | 000,000,000 | R--D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup [2013/04/10 00:09:58 | 000,002,183 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk [1 C:\Users\A\Desktop\*.tmp files -> C:\Users\A\Desktop\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2013/05/03 08:50:27 | 000,000,004 | ---- | C] () -- C:\Users\A\AppData\Roaming\skype.ini [2013/04/18 16:06:22 | 000,002,046 | ---- | C] () -- C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk [2013/04/18 16:06:22 | 000,002,046 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2013/01/26 07:47:46 | 000,000,033 | ---- | C] () -- C:\Windows\forevermopt.INI [2012/01/12 13:22:18 | 000,102,400 | ---- | C] () -- C:\Users\A\AppData\Roaming\skype.dat [2011/09/10 12:55:27 | 000,000,412 | ---- | C] () -- C:\Windows\ODBC.INI [2011/06/02 03:16:12 | 000,252,928 | ---- | C] () -- C:\Windows\SysWow64\DShowRdpFilter.dll [2011/02/15 06:29:59 | 000,008,192 | ---- | C] () -- C:\Windows\SysWow64\srvany.exe [2011/01/27 10:27:07 | 000,000,010 | ---- | C] () -- C:\Windows\popcinfo.dat [2010/11/11 14:03:32 | 000,165,376 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll [2010/11/11 14:03:32 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini [2010/11/11 14:03:31 | 000,790,528 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll [2010/11/11 14:03:31 | 000,134,144 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll [2010/11/11 14:03:31 | 000,108,032 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll [2009/08/11 06:55:06 | 000,002,900 | ---- | C] () -- C:\Windows\SysWow64\ActNAV_cltDynam.dat [2009/07/14 01:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2009/07/13 22:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT [2009/07/13 22:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat [2009/07/13 20:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2009/07/13 19:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009/07/13 18:25:04 | 000,197,632 | ---- | C] () -- C:\Windows\SysWow64\ir32_32.dll [2009/07/13 17:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2009/06/10 17:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat [color=#E56717]========== LOP Check ==========[/color] [2010/11/11 14:14:16 | 000,000,000 | ---D | M] -- C:\Users\A\AppData\Roaming\Ashampoo [2011/03/18 05:53:32 | 000,000,000 | ---D | M] -- C:\Users\A\AppData\Roaming\Autodesk [2012/04/07 10:39:16 | 000,000,000 | ---D | M] -- C:\Users\A\AppData\Roaming\DAEMON Tools Lite [2010/11/11 09:46:47 | 000,000,000 | ---D | M] -- C:\Users\A\AppData\Roaming\Easeware [2013/03/23 14:31:58 | 000,000,000 | ---D | M] -- C:\Users\A\AppData\Roaming\Free Monitor for Google [2010/11/11 14:02:05 | 000,000,000 | ---D | M] -- C:\Users\A\AppData\Roaming\ipla [2012/10/29 19:09:08 | 000,000,000 | ---D | M] -- C:\Users\A\AppData\Roaming\JPEGCompress [2010/12/18 08:45:39 | 000,000,000 | ---D | M] -- C:\Users\A\AppData\Roaming\OpenOffice.org [2011/09/07 11:39:58 | 000,000,000 | ---D | M] -- C:\Users\A\AppData\Roaming\Opera [2010/11/11 14:01:48 | 000,000,000 | ---D | M] -- C:\Users\A\AppData\Roaming\RDRM [2010/11/11 15:04:15 | 000,000,000 | ---D | M] -- C:\Users\A\AppData\Roaming\Tific [2010/11/11 14:39:29 | 000,000,000 | ---D | M] -- C:\Users\A\AppData\Roaming\Windows Live Writer [2012/08/20 05:39:57 | 000,000,000 | ---D | M] -- C:\ProgramData\0C1CFAEF0000024902B41C03F875EF60 [2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- C:\ProgramData\Application Data [2010/11/11 14:13:44 | 000,000,000 | ---D | M] -- C:\ProgramData\ashampoo [2011/03/18 05:53:22 | 000,000,000 | ---D | M] -- C:\ProgramData\Autodesk [2010/11/11 10:13:25 | 000,000,000 | ---D | M] -- C:\ProgramData\DAEMON Tools Lite [2010/11/11 08:05:02 | 000,000,000 | -HSD | M] -- C:\ProgramData\Dane aplikacji [2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- C:\ProgramData\Desktop [2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- C:\ProgramData\Documents [2010/11/11 08:05:02 | 000,000,000 | -HSD | M] -- C:\ProgramData\Dokumenty [2010/11/11 15:12:40 | 000,000,000 | ---D | M] -- C:\ProgramData\ESET [2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- C:\ProgramData\Favorites [2013/03/23 12:39:14 | 000,000,000 | ---D | M] -- C:\ProgramData\FileCure [2010/11/11 14:01:52 | 000,000,000 | ---D | M] -- C:\ProgramData\ipla [2012/02/19 11:24:37 | 000,000,000 | ---D | M] -- C:\ProgramData\Medtronic [2010/11/11 08:05:02 | 000,000,000 | -HSD | M] -- C:\ProgramData\Menu Start [2013/03/23 12:36:16 | 000,000,000 | ---D | M] -- C:\ProgramData\ParetoLogic [2010/11/11 08:05:02 | 000,000,000 | -HSD | M] -- C:\ProgramData\Pulpit [2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- C:\ProgramData\Start Menu [2010/11/11 08:05:02 | 000,000,000 | -HSD | M] -- C:\ProgramData\Szablony [2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- C:\ProgramData\Templates [2010/11/11 08:05:02 | 000,000,000 | -HSD | M] -- C:\ProgramData\Ulubione [2013/04/27 00:38:15 | 000,000,380 | ---- | M] () -- C:\Windows\Tasks\FileCure Default.job [2013/05/03 12:32:14 | 000,000,396 | ---- | M] () -- C:\Windows\Tasks\FileCure Startup.job [2013/05/02 12:09:48 | 000,000,460 | ---- | M] () -- C:\Windows\Tasks\ParetoLogic Registration3.job [2013/05/03 12:30:06 | 000,000,486 | ---- | M] () -- C:\Windows\Tasks\ParetoLogic Update Version3 Startup Task.job [2013/04/22 22:33:08 | 000,000,434 | ---- | M] () -- C:\Windows\Tasks\ParetoLogic Update Version3.job [2013/01/14 17:38:21 | 000,032,608 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 1205 bytes -> C:\Users\A\Desktop\kamery na budowie.eml:OECustomProperty < End of report >