OTL logfile created on: 2011-10-22 12:06:51 - Run 3
OTL by OldTimer - Version 3.2.31.0     Folder = C:\Documents and Settings\Tramp-Tour\Pulpit
Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
446.16 Mb Total Physical Memory | 161.81 Mb Available Physical Memory | 36.27% Memory free
1.03 Gb Paging File | 0.85 Gb Available in Paging File | 82.26% Paging File free
Paging file location(s): C:\pagefile.sys 672 1344 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 19.53 Gb Total Space | 9.49 Gb Free Space | 48.60% Space Free | Partition Type: NTFS
Drive D: | 29.30 Gb Total Space | 28.38 Gb Free Space | 96.85% Space Free | Partition Type: NTFS
Drive E: | 25.69 Gb Total Space | 23.85 Gb Free Space | 92.84% Space Free | Partition Type: NTFS
 
Computer Name: FUJITSU-SIEMENS | User Name: Tramp-Tour | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2011-10-21 17:26:10 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Tramp-Tour\Pulpit\OTL.exe
PRC - [2008-04-14 19:21:16 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2005-07-28 12:08:34 | 000,057,344 | ---- | M] (Wistron) -- C:\Program Files\Launch Manager\HotkeyApp.exe
PRC - [2005-07-25 14:36:40 | 000,032,768 | ---- | M] () -- C:\Program Files\Launch Manager\LaunchAp.exe
PRC - [2005-07-25 14:34:28 | 000,081,920 | ---- | M] () -- C:\Program Files\Launch Manager\WButton.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2005-10-20 10:36:08 | 000,077,824 | R--- | M] () -- C:\Program Files\HP\Digital Imaging\bin\crm\xmltok.dll
MOD - [2005-10-20 10:36:08 | 000,065,536 | R--- | M] () -- C:\Program Files\HP\Digital Imaging\bin\crm\xmlparse.dll
MOD - [2005-07-25 14:36:40 | 000,032,768 | ---- | M] () -- C:\Program Files\Launch Manager\LaunchAp.exe
MOD - [2005-07-25 14:34:28 | 000,081,920 | ---- | M] () -- C:\Program Files\Launch Manager\WButton.exe
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [Disabled | Stopped] --  -- (HidServ)
SRV - File not found [On_Demand | Stopped] --  -- (AppMgmt)
SRV - [2011-10-21 16:33:32 | 000,073,728 | ---- | M] (HP) [Auto | Stopped] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)
SRV - [2011-06-08 13:02:00 | 000,633,856 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Running] --  -- (catchme)
DRV - [2011-05-18 10:12:38 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2011-05-18 10:12:36 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2011-05-18 10:12:32 | 000,023,168 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2011-05-18 10:12:28 | 000,018,176 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2010-11-09 14:56:12 | 000,098,392 | ---- | M] (Sunbelt Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\SBREDrv.sys -- (SBRE)
DRV - [2008-08-26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2006-05-16 18:32:58 | 004,275,712 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.Sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2006-03-09 00:49:20 | 001,506,816 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2006-02-27 06:46:20 | 000,081,408 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtnicxp.sys -- (RTL8023xp)
DRV - [2005-11-16 21:28:32 | 000,028,928 | ---- | M] (REDC) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2005-11-10 04:51:38 | 000,854,404 | ---- | M] (Motorola Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\smserial.sys -- (smserial)
DRV - [2005-11-01 19:08:00 | 000,308,992 | ---- | M] (REDC) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rixdptsk.sys -- (rismxdp)
DRV - [2005-11-01 18:54:50 | 000,051,584 | ---- | M] (REDC) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2005-09-15 01:49:52 | 000,468,768 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ar5211.sys -- (AR5211)
DRV - [2004-10-06 12:49:04 | 000,248,320 | R--- | M] (ZyDAS Technology Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ZD1211U.sys -- (WLAN(WLAN)) 802.11b+g USB Wireless LAN Adapter Driver(WLAN)
DRV - [2004-08-04 00:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Sterownik NT karty Realtek RTL8139(A/B/C)
DRV - [2003-04-28 12:27:06 | 000,009,867 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\HOTKEY.sys -- (Hotkey)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-117609710-706699826-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google
IE - HKU\S-1-5-21-117609710-706699826-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
IE - HKU\S-1-5-21-117609710-706699826-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
IE - HKU\S-1-5-21-117609710-706699826-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-117609710-706699826-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:56970
 
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.1\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
 
 
O1 HOSTS File: ([2011-10-22 11:56:03 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O3 - HKU\S-1-5-21-117609710-706699826-725345543-1004\..\Toolbar\WebBrowser: (no name) - {472734EA-242A-422B-ADF8-83D1E48CC825} - No CLSID value found.
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.1\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [CtrlVol] C:\Program Files\Launch Manager\CtrlVol.exe (Wistron)
O4 - HKLM..\Run: [HotkeyApp] C:\Program Files\Launch Manager\HotkeyApp.exe (Wistron)
O4 - HKLM..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe (HP)
O4 - HKLM..\Run: [LaunchAp] C:\Program Files\Launch Manager\LaunchAp.exe ()
O4 - HKLM..\Run: [Wbutton] C:\Program Files\Launch Manager\WButton.exe ()
O4 - HKLM..\RunOnce: [WIAWizardMenu] C:\WINDOWS\System32\sti_ci.dll (Microsoft Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-117609710-706699826-725345543-1004\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-117609710-706699826-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-117609710-706699826-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-117609710-706699826-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab (Reg Error: Key error.)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} http://download.bitdefender.com/resources/scanner/sources/en/scan8/oscan8.cab (BDSCANONLINE Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{66BE86BE-80FB-494D-84CE-CCF502434E2B}: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2007-02-21 19:47:44 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011-10-22 11:43:30 | 000,138,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\afd.sys
[2011-10-22 11:39:44 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2011-10-22 11:35:49 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2011-10-22 11:35:49 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2011-10-22 11:35:49 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2011-10-22 11:35:49 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2011-10-22 11:35:19 | 000,000,000 | ---D | C] -- C:\Qoobox
[2011-10-22 11:35:11 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Tramp-Tour\Moje dokumenty\Moje wideo
[2011-10-22 11:35:11 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Dokumenty\Moje wideo
[2011-10-22 11:30:25 | 000,105,672 | ---- | C] (ESET) -- C:\Documents and Settings\Tramp-Tour\Pulpit\ESETSirefefRemover.exe
[2011-10-22 11:30:19 | 004,269,227 | R--- | C] (Swearware) -- C:\Documents and Settings\Tramp-Tour\Pulpit\ComboFix.exe
[2011-10-22 11:27:00 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Tramp-Tour\Recent
[2011-10-22 11:19:53 | 000,000,000 | -H-D | C] -- C:\WINDOWS\PIF
[2011-10-21 17:46:48 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Tramp-Tour\Pulpit\OTL.exe
[2011-10-21 16:30:27 | 000,309,320 | ---- | C] (BitDefender S.R.L.) -- C:\WINDOWS\System32\drivers\TrufosAlt.sys
[2011-10-21 12:46:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Spybot - Search & Destroy
[2011-10-21 01:23:17 | 000,098,392 | ---- | C] (Sunbelt Software) -- C:\WINDOWS\System32\drivers\SBREDrv.sys
[2011-10-21 01:23:17 | 000,027,984 | ---- | C] (Sunbelt Software) -- C:\WINDOWS\System32\sbbd.exe
[2011-10-21 00:18:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Tramp-Tour\Ustawienia lokalne\Dane aplikacji\Threat Expert
[2011-10-21 00:12:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP
[2011-10-21 00:12:03 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\PC Tools
[2011-10-21 00:07:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Tools
[2011-10-20 21:46:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Tramp-Tour\Dane aplikacji\14AAD
[2011-10-16 21:01:09 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Tramp-Tour\Ustawienia lokalne\Dane aplikacji\a36f7020
[2011-10-09 17:42:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Tramp-Tour\Ustawienia lokalne\Dane aplikacji\DOSBox
[2011-10-09 17:41:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\DOSBox-0.74
[2011-10-09 17:32:25 | 000,000,000 | ---D | C] -- C:\SWOS
[2011-09-27 12:12:19 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbser.sys
[2011-09-27 12:11:55 | 000,016,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsgXP_2k3.dll
[2011-09-27 11:52:10 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\PCSuite
[2011-09-27 11:51:56 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Nokia
[2011-09-27 11:51:35 | 000,018,816 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\pccsmcfd.sys
[2011-09-27 11:51:23 | 000,000,000 | ---D | C] -- C:\Program Files\PC Connectivity Solution
[2011-09-27 11:50:51 | 000,008,192 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\usbser_lowerfltj.sys
[2011-09-27 11:50:50 | 000,008,192 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\usbser_lowerflt.sys
[2011-09-27 11:50:48 | 000,023,168 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\ccdcmbo.sys
[2011-09-27 11:50:44 | 001,461,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wdfcoinstaller01009.dll
[2011-09-27 11:50:44 | 000,605,696 | ---- | C] (Nokia) -- C:\WINDOWS\System32\nmwcdcocls.dll
[2011-09-27 11:50:44 | 000,123,904 | ---- | C] (Nokia) -- C:\WINDOWS\System32\ccdcmbwu.dll
[2011-09-27 11:50:44 | 000,018,176 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\ccdcmb.sys
[2011-09-26 11:41:54 | 000,614,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\uiautomationcore.dll
[2011-09-23 13:35:03 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ptpusb.dll
[2011-09-23 13:35:02 | 000,159,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ptpusd.dll
[2011-09-23 12:55:53 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Tramp-Tour\Phone Browser
[33 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\Program Files\*.tmp files -> C:\Program Files\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2011-10-22 11:56:03 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2011-10-22 11:55:55 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011-10-22 11:55:49 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011-10-22 11:39:51 | 000,000,327 | RHS- | M] () -- C:\boot.ini
[2011-10-22 11:34:06 | 000,048,016 | -HS- | M] () -- C:\WINDOWS\System32\c_91860.nl_
[2011-10-22 11:32:33 | 000,138,496 | ---- | M] () -- C:\WINDOWS\System32\drivers\afd.sys.vir
[2011-10-22 09:58:04 | 004,269,227 | R--- | M] (Swearware) -- C:\Documents and Settings\Tramp-Tour\Pulpit\ComboFix.exe
[2011-10-22 09:43:28 | 000,105,672 | ---- | M] (ESET) -- C:\Documents and Settings\Tramp-Tour\Pulpit\ESETSirefefRemover.exe
[2011-10-21 19:25:41 | 000,430,528 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2011-10-21 19:25:41 | 000,374,398 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011-10-21 19:25:41 | 000,064,760 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2011-10-21 19:25:41 | 000,050,866 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011-10-21 17:28:46 | 000,302,592 | ---- | M] () -- C:\Documents and Settings\Tramp-Tour\Pulpit\4f2iti7z.exe
[2011-10-21 17:26:10 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Tramp-Tour\Pulpit\OTL.exe
[2011-10-21 16:54:03 | 000,309,320 | ---- | M] (BitDefender S.R.L.) -- C:\WINDOWS\System32\drivers\TrufosAlt.sys
[2011-10-21 16:33:32 | 000,073,728 | ---- | M] (HP) -- C:\WINDOWS\System32\HPZipm12.exe
[2011-10-21 13:05:59 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\SBRC.dat
[2011-10-21 00:13:09 | 000,716,598 | ---- | M] () -- C:\WINDOWS\System32\drivers\Cat.DB
[2011-10-17 16:41:29 | 000,000,247 | ---- | M] () -- C:\Documents and Settings\Tramp-Tour\Pulpit\Google.url
[2011-10-17 15:51:49 | 000,000,281 | ---- | M] () -- C:\Boot.bak
[2011-10-15 18:56:13 | 000,414,368 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2011-10-12 11:41:52 | 000,111,784 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011-10-11 14:55:34 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2011-10-03 12:45:40 | 000,000,733 | ---- | M] () -- C:\Documents and Settings\Tramp-Tour\Pulpit\Umowa - Zielona Szkoła.lnk
[2011-10-03 10:31:32 | 005,971,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mshtml.dll
[2011-09-27 12:12:02 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_ccdcmb_01009.Wdf
[2011-09-27 12:12:00 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
[2011-09-26 11:41:54 | 000,614,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\uiautomationcore.dll
[2011-09-26 11:41:54 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\oleaccrc.dll
[2011-09-26 11:41:54 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\oleaccrc.dll
[2011-09-26 11:41:20 | 000,220,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\oleacc.dll
[33 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\Program Files\*.tmp files -> C:\Program Files\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011-10-22 11:39:51 | 000,000,281 | ---- | C] () -- C:\Boot.bak
[2011-10-22 11:39:47 | 000,262,400 | RHS- | C] () -- C:\cmldr
[2011-10-22 11:35:49 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2011-10-22 11:35:49 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2011-10-22 11:35:49 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2011-10-22 11:35:49 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2011-10-22 11:35:49 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2011-10-22 11:32:32 | 000,138,496 | ---- | C] () -- C:\WINDOWS\System32\drivers\afd.sys.vir
[2011-10-21 17:46:48 | 000,302,592 | ---- | C] () -- C:\Documents and Settings\Tramp-Tour\Pulpit\4f2iti7z.exe
[2011-10-21 13:05:59 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\SBRC.dat
[2011-10-21 12:39:07 | 000,153,088 | ---- | C] () -- C:\WINDOWS\System32\UNRAR3.dll
[2011-10-21 11:49:48 | 000,048,016 | -HS- | C] () -- C:\WINDOWS\System32\c_91860.nl_
[2011-10-21 00:12:43 | 000,716,598 | ---- | C] () -- C:\WINDOWS\System32\drivers\Cat.DB
[2011-10-17 15:51:47 | 000,001,809 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\HP Digital Imaging Monitor.lnk
[2011-09-27 12:12:02 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_ccdcmb_01009.Wdf
[2011-09-27 12:12:00 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
[2011-09-21 16:23:47 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2009-10-06 16:17:24 | 000,084,480 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2009-07-09 11:51:13 | 000,000,221 | ---- | C] () -- C:\WINDOWS\NCLogConfig.ini
[2009-05-21 11:02:43 | 000,120,529 | ---- | C] () -- C:\WINDOWS\hpoins11.dat
[2009-05-15 14:41:08 | 000,901,040 | ---- | C] () -- C:\WINDOWS\System32\drivers\sfi.dat
[2009-01-05 15:44:10 | 000,053,248 | ---- | C] () -- C:\WINDOWS\bdoscandel.exe
[2009-01-05 15:44:10 | 000,000,453 | ---- | C] () -- C:\WINDOWS\bdoscandellang.ini
[2008-10-16 14:22:50 | 000,000,118 | ---- | C] () -- C:\WINDOWS\System32\MRT.INI
[2008-07-01 16:23:25 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI
[2008-01-29 13:04:44 | 000,000,059 | ---- | C] () -- C:\WINDOWS\wpd99.drv
[2008-01-29 13:04:43 | 000,051,716 | ---- | C] () -- C:\WINDOWS\System32\pdf995mon.dll
[2008-01-04 15:05:28 | 000,077,824 | R--- | C] () -- C:\WINDOWS\System32\HPZIDS01.dll
[2007-05-24 13:27:14 | 000,002,081 | ---- | C] () -- C:\WINDOWS\hpdj3500.ini
[2007-05-24 13:04:49 | 000,004,594 | ---- | C] () -- C:\WINDOWS\hpdj3600.ini
[2007-04-27 11:33:11 | 000,000,421 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2007-04-19 23:38:02 | 000,011,634 | ---- | C] () -- C:\WINDOWS\hpomdl11.dat
[2007-04-03 13:33:54 | 000,000,103 | ---- | C] () -- C:\WINDOWS\pro.INI
[2007-03-13 17:53:32 | 000,041,472 | ---- | C] () -- C:\Documents and Settings\Tramp-Tour\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007-03-09 13:13:58 | 037,943,240 | ---- | C] () -- C:\WINDOWS\System32\MRT.exe
[2007-02-23 01:37:57 | 000,001,122 | ---- | C] () -- C:\WINDOWS\bestplayer.ini
[2007-02-22 12:09:51 | 000,204,800 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeW7.dll
[2007-02-22 12:09:51 | 000,200,704 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeA6.dll
[2007-02-22 12:09:51 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeP6.dll
[2007-02-22 12:09:51 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeM6.dll
[2007-02-22 12:09:51 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\IVIresizePX.dll
[2007-02-22 12:09:51 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\IVIresize.dll
[2007-02-21 20:33:42 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2007-02-21 20:32:06 | 000,111,784 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2007-02-21 20:27:22 | 000,016,480 | ---- | C] () -- C:\WINDOWS\System32\rixdicon.dll
[2007-02-21 20:25:48 | 000,135,168 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll
[2007-02-21 20:25:48 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2007-02-21 20:24:58 | 000,009,867 | ---- | C] () -- C:\WINDOWS\System32\drivers\HOTKEY.sys
[2007-02-21 20:21:24 | 000,124,376 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2007-02-21 20:21:14 | 000,069,632 | ---- | C] () -- C:\WINDOWS\sm56spn.dll
[2007-02-21 20:21:14 | 000,069,632 | ---- | C] () -- C:\WINDOWS\sm56itl.dll
[2007-02-21 20:21:14 | 000,069,632 | ---- | C] () -- C:\WINDOWS\sm56eng.dll
[2007-02-21 20:21:14 | 000,069,632 | ---- | C] () -- C:\WINDOWS\sm56brz.dll
[2007-02-21 20:21:14 | 000,061,440 | ---- | C] () -- C:\WINDOWS\sm56ger.dll
[2007-02-21 20:21:14 | 000,061,440 | ---- | C] () -- C:\WINDOWS\sm56fra.dll
[2007-02-21 20:21:14 | 000,053,248 | ---- | C] () -- C:\WINDOWS\sm56jpn.dll
[2007-02-21 20:21:14 | 000,049,152 | ---- | C] () -- C:\WINDOWS\sm56cht.dll
[2007-02-21 20:21:14 | 000,049,152 | ---- | C] () -- C:\WINDOWS\sm56chs.dll
[2007-02-21 20:03:51 | 000,000,135 | ---- | C] () -- C:\Documents and Settings\Tramp-Tour\Ustawienia lokalne\Dane aplikacji\fusioncache.dat
[2007-02-21 19:57:01 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2007-02-21 19:51:46 | 000,001,112 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2007-02-21 19:44:08 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2005-07-15 20:36:35 | 000,524,288 | ---- | C] () -- C:\WINDOWS\System32\DivXsm.exe
[2005-07-15 20:35:56 | 000,831,488 | ---- | C] () -- C:\WINDOWS\System32\libeay32.dll
[2005-07-15 20:35:56 | 000,159,744 | ---- | C] () -- C:\WINDOWS\System32\ssleay32.dll
[2005-07-15 20:35:24 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2004-09-29 12:41:10 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\zlib.dll
[2004-08-04 14:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2004-08-04 14:00:00 | 000,430,528 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat
[2004-08-04 14:00:00 | 000,374,398 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2004-08-04 14:00:00 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat
[2004-08-04 14:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2004-08-04 14:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2004-08-04 14:00:00 | 000,064,760 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat
[2004-08-04 14:00:00 | 000,050,866 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2004-08-04 14:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2004-08-04 14:00:00 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat
[2004-08-04 14:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2004-08-04 14:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004-08-04 14:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2004-08-04 14:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2003-07-30 11:48:28 | 000,004,711 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2003-07-30 10:49:22 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2001-07-07 04:00:02 | 000,003,234 | ---- | C] () -- C:\WINDOWS\System32\HPTCPMON.INI
[2001-03-30 22:58:36 | 000,135,168 | ---- | C] () -- C:\WINDOWS\System32\drivers\Property.dll
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2011-09-27 11:49:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Installations
[2008-09-15 16:35:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Suite
[2008-01-29 13:20:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\pdf995
[2011-10-21 12:42:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP
[2011-10-20 21:47:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Tramp-Tour\Dane aplikacji\14AAD
[2010-07-26 10:37:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Tramp-Tour\Dane aplikacji\Image Zone Express
[2007-04-26 13:39:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Tramp-Tour\Dane aplikacji\InterVideo
[2011-02-01 12:37:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Tramp-Tour\Dane aplikacji\Netia
[2008-09-15 16:36:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Tramp-Tour\Dane aplikacji\Nokia
[2011-09-27 12:15:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Tramp-Tour\Dane aplikacji\PC Suite
[2009-04-17 11:50:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Tramp-Tour\Dane aplikacji\Printer Info Cache
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 148 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:CB0AACC9
@Alternate Data Stream - 127 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:430C6D84
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:DFC5A2B2

< End of report >