OTL logfile created on: 2012-01-28 10:03:53 - Run 3 OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\admin\Pulpit\programy Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 1,43 Gb Available Physical Memory | 71,44% Memory free 3,85 Gb Paging File | 3,43 Gb Available in Paging File | 89,24% Paging File free Paging file location(s): c:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 116,21 Gb Total Space | 60,08 Gb Free Space | 51,70% Space Free | Partition Type: NTFS Drive D: | 116,67 Gb Total Space | 116,43 Gb Free Space | 99,80% Space Free | Partition Type: NTFS Drive F: | 656,53 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS Computer Name: NIEDBA-661BE5BF | User Name: admin | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-01-25 21:48:35 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\admin\Pulpit\programy\OTL.exe PRC - [2012-01-20 06:35:36 | 001,047,024 | ---- | M] (Google Inc.) -- C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\chrome.exe PRC - [2011-12-16 16:51:08 | 019,858,888 | ---- | M] (Redefine Sp z o.o.) -- C:\Program Files\ipla\ipla.exe PRC - [2011-07-22 13:26:40 | 000,690,472 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Update\NASvc.exe PRC - [2011-04-03 14:48:24 | 000,136,312 | ---- | M] (Google Inc.) -- C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Flock\Update\FlockUpdate.exe PRC - [2011-02-23 16:04:20 | 003,451,496 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe PRC - [2011-02-23 16:04:19 | 000,042,184 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe PRC - [2011-01-20 10:20:12 | 001,305,408 | ---- | M] (DT Soft Ltd) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe PRC - [2010-08-07 12:38:00 | 001,262,592 | ---- | M] (AIMP DevTeam) -- C:\Program Files\AIMP2\AIMP2.exe PRC - [2010-03-04 22:38:00 | 000,071,096 | ---- | M] () -- C:\Program Files\CDBurnerXP\NMSAccessU.exe PRC - [2008-04-14 18:21:16 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2006-12-06 06:14:04 | 000,679,936 | ---- | M] (Ovislink Corp) -- C:\Program Files\Ovislink\Common\TurboG-UI.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012-01-27 21:17:57 | 001,687,552 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\12012701\algo.dll MOD - [2012-01-20 06:35:35 | 000,411,120 | ---- | M] () -- C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\16.0.912.77\ppgooglenaclpluginchrome.dll MOD - [2012-01-20 06:35:34 | 003,767,792 | ---- | M] () -- C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\16.0.912.77\pdf.dll MOD - [2012-01-20 06:34:10 | 000,122,880 | ---- | M] () -- C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\16.0.912.77\avutil-51.dll MOD - [2012-01-20 06:34:09 | 000,222,208 | ---- | M] () -- C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\16.0.912.77\avformat-53.dll MOD - [2012-01-20 06:34:07 | 001,746,432 | ---- | M] () -- C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\16.0.912.77\avcodec-53.dll MOD - [2011-12-16 16:51:14 | 000,068,456 | ---- | M] () -- C:\Program Files\ipla\ziplib.dll MOD - [2011-12-16 16:51:12 | 000,392,552 | ---- | M] () -- C:\Program Files\ipla\jabberoo.dll MOD - [2011-12-16 16:36:20 | 000,292,352 | ---- | M] () -- C:\Program Files\ipla\MediaFileScanner.dll MOD - [2011-12-16 16:33:28 | 000,156,160 | ---- | M] () -- C:\Program Files\ipla\lua.dll MOD - [2011-02-23 16:04:14 | 000,144,672 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\aswDld.dll MOD - [2010-03-04 22:38:00 | 000,071,096 | ---- | M] () -- C:\Program Files\CDBurnerXP\NMSAccessU.exe MOD - [2009-12-26 21:23:50 | 000,186,880 | ---- | M] () -- C:\Program Files\AIMP2\sqlite3.dll MOD - [2009-02-27 19:04:20 | 000,311,296 | ---- | M] () -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\pdfshell.POL MOD - [2006-10-25 08:05:46 | 001,167,360 | ---- | M] () -- C:\Program Files\Ovislink\Common\acAuth.dll MOD - [2006-03-04 01:52:00 | 000,088,576 | ---- | M] () -- C:\Program Files\AIMP2\OptimFROG.dll MOD - [2001-10-28 16:42:30 | 000,116,224 | ---- | M] () -- C:\WINDOWS\system32\pdfcmnnt.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [On_Demand | Stopped] -- -- (AppMgmt) SRV - [2011-07-22 13:26:40 | 000,690,472 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files\Nero\Update\NASvc.exe -- (NAUpdate) SRV - [2011-02-23 16:04:19 | 000,042,184 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus) SRV - [2010-03-04 22:38:00 | 000,071,096 | ---- | M] () [Auto | Running] -- C:\Program Files\CDBurnerXP\NMSAccessU.exe -- (NMSAccess) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2011-04-01 21:11:59 | 000,218,688 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\dtsoftbus01.sys -- (dtsoftbus01) DRV - [2011-04-01 14:16:33 | 000,015,600 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\gdrv.sys -- (gdrv) DRV - [2011-02-23 15:56:55 | 000,371,544 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx) DRV - [2011-02-23 15:56:45 | 000,301,528 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP) DRV - [2011-02-23 15:55:49 | 000,049,240 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi) DRV - [2011-02-23 15:55:47 | 000,102,232 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2) DRV - [2011-02-23 15:55:10 | 000,025,432 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr) DRV - [2011-02-23 15:54:57 | 000,030,680 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4) DRV - [2011-02-23 15:54:55 | 000,019,544 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk) DRV - [2009-11-12 13:48:56 | 000,005,504 | ---- | M] () [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen) DRV - [2007-07-18 12:26:04 | 004,547,584 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2007-06-29 13:20:30 | 000,051,712 | ---- | M] (Sagem Communication) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\UsbSagCom.sys -- (UsbSagCom) DRV - [2006-11-27 15:33:54 | 000,019,968 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus) DRV - [2006-11-27 15:33:50 | 000,058,368 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD) DRV - [2006-10-25 08:05:58 | 000,385,280 | ---- | M] (Ralink Technology Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rt61.sys -- (RT61) DRV - [2006-10-18 15:31:38 | 000,105,472 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\nvata.sys -- (nvata) DRV - [2006-06-18 22:51:32 | 000,043,520 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=ddr&s={searchTerms}&f=4 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.facemoods.com/?a=ddr IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@update.flock.com/Flock Update;version=8: C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Flock\Update\1.2.213.0\npFlockOneClick8.dll (Flock Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{27182e60-b5f3-411c-b545-b44205977502}: C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\ [2011-11-02 16:20:35 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}: C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\ [2011-11-02 16:20:40 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{3C5F0F00-683D-4847-89C8-E7AF64FD1CFB}: C:\Program Files\RelevantKnowledge FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.14\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2011-12-19 21:24:20 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.14\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2011-04-03 15:08:34 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\admin\Dane aplikacji\Mozilla\Extensions [2011-04-03 15:08:34 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\admin\Dane aplikacji\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6} [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms} CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\16.0.912.77\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll CHR - plugin: Java Deployment Toolkit 6.0.260.3 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 6 U26 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\16.0.912.77\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\16.0.912.77\pdf.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll CHR - plugin: Flock Update (Enabled) = C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Flock\Update\1.2.213.0\npFlockOneClick8.dll CHR - plugin: Google Update (Enabled) = C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.69\npGoogleUpdate3.dll CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll CHR - plugin: Default Plug-in (Enabled) = default_plugin CHR - Extension: YouTube = C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.3_0\ CHR - Extension: Szukaj w Google = C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.16_0\ CHR - Extension: Gmail = C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2006-03-02 13:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Yahoo! Companion BHO) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_2_0.dll (Yahoo! Inc.) O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll () O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll () O3 - HKLM\..\Toolbar: (&Yahoo! Companion) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_2_0.dll (Yahoo! Inc.) O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (&Yahoo! Companion) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_2_0.dll (Yahoo! Inc.) O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] nwiz.exe /installquiet File not found O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O4 - HKCU..\Run: [Flock Update] C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Flock\Update\FlockUpdate.exe (Google Inc.) O4 - HKCU..\Run: [IPLA!] C:\Program Files\ipla\ipla.exe (Redefine Sp z o.o.) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\AirLive Turbo-G Wireless Utility.lnk = C:\Program Files\Ovislink\Common\TurboG-UI.exe (Ovislink Corp) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 172.16.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{50FEB52F-6C67-46B9-994F-C4C851178D93}: DhcpNameServer = 172.16.1.1 O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O24 - Desktop Components:0 () - http://photos.nasza-klasa.pl/47352925/1/main/f7126f3557.jpeg O24 - Desktop Components:1 () - http://photos.nasza-klasa.pl/22834428/60/main/0598e85111.jpeg O24 - Desktop Components:2 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2011-04-01 14:06:12 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2010-10-23 17:13:59 | 000,000,000 | R--D | M] - F:\autorun -- [ CDFS ] O32 - AutoRun File - [2010-09-20 10:59:24 | 000,000,062 | R--- | M] () - F:\autorun.inf -- [ CDFS ] O33 - MountPoints2\{055b7d8d-5c98-11e0-be89-001d7d5ed837}\Shell - "" = AutoRun O33 - MountPoints2\{055b7d8d-5c98-11e0-be89-001d7d5ed837}\Shell\AutoRun\command - "" = F:\cdstart.exe -- [2010-10-04 04:14:24 | 001,419,984 | R--- | M] () O33 - MountPoints2\{47836a00-e6a2-11e0-82f4-001d7d5ed837}\Shell - "" = AutoRun O33 - MountPoints2\{47836a00-e6a2-11e0-82f4-001d7d5ed837}\Shell\AutoRun\command - "" = G:\USBAutoRun.exe O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-01-27 17:44:33 | 000,371,544 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSnx.sys [2012-01-27 17:44:33 | 000,301,528 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSP.sys [2012-01-27 17:44:33 | 000,102,232 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys [2012-01-27 17:44:33 | 000,096,344 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswmon.sys [2012-01-27 17:44:33 | 000,049,240 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys [2012-01-27 17:44:33 | 000,030,680 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys [2012-01-27 17:44:33 | 000,025,432 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys [2012-01-27 17:44:33 | 000,019,544 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys [2012-01-27 17:44:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\avast! Free Antivirus [2012-01-27 17:44:24 | 000,190,016 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe [2012-01-27 17:44:24 | 000,040,648 | ---- | C] (AVAST Software) -- C:\WINDOWS\avastSS.scr [2012-01-26 19:55:24 | 000,000,000 | ---D | C] -- C:\Program Files\Ad-Remover [2012-01-26 18:18:52 | 000,000,000 | ---D | C] -- C:\_OTL [2012-01-25 21:22:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\admin\Dane aplikacji\Malwarebytes [2012-01-25 21:22:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Malwarebytes' Anti-Malware [2012-01-25 21:22:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Malwarebytes [2012-01-25 21:22:05 | 000,020,464 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2012-01-25 21:22:05 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2012-01-13 11:46:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\admin\Dane aplikacji\Media Player Classic [2012-01-12 16:59:24 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe [2012-01-11 17:20:28 | 000,000,000 | -HSD | C] -- C:\WINDOWS\ftpcache [2012-01-11 17:20:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\admin\Menu Start\Programy\6klasa_testy_2007 [2012-01-11 17:20:15 | 000,000,000 | ---D | C] -- C:\Program Files\6klasa_testy_2007 [2012-01-06 21:49:36 | 000,000,000 | ---D | C] -- C:\ściśle tajne [2011-12-31 09:24:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\admin\Moje dokumenty\UEFA EURO 2008 - Demo [2011-12-31 09:21:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\EA Sports [2011-12-31 09:20:07 | 000,000,000 | ---D | C] -- C:\Program Files\EA Sports [2011-12-31 09:17:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\admin\Menu Start\Programy\1944 Bitwa w Ardenach [2011-12-31 09:16:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\admin\Menu Start\Programy\Aquadelic [2011-12-31 09:16:41 | 000,000,000 | ---D | C] -- C:\Program Files\Aquadelic [2011-12-31 09:14:41 | 000,000,000 | ---D | C] -- C:\Program Files\1944 [2 C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\*.tmp files -> C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-01-28 10:04:03 | 000,001,132 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2000478354-838170752-839522115-1004UA.job [2012-01-28 10:01:58 | 000,271,490 | ---- | M] () -- C:\WINDOWS\System32\NvApps.xml [2012-01-28 10:01:52 | 000,001,030 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2012-01-28 10:01:51 | 000,000,278 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-2000478354-838170752-839522115-1004.job [2012-01-28 10:01:45 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2012-01-27 19:57:00 | 000,001,034 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2012-01-27 19:53:14 | 000,000,978 | ---- | M] () -- C:\WINDOWS\tasks\FlockUpdateTaskUserS-1-5-21-2000478354-838170752-839522115-1004UA.job [2012-01-27 17:44:33 | 000,002,644 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT [2012-01-27 17:44:33 | 000,001,689 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\avast! Free Antivirus.lnk [2012-01-27 15:53:00 | 000,000,926 | ---- | M] () -- C:\WINDOWS\tasks\FlockUpdateTaskUserS-1-5-21-2000478354-838170752-839522115-1004Core.job [2012-01-27 14:04:00 | 000,001,080 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2000478354-838170752-839522115-1004Core.job [2012-01-26 19:55:25 | 000,001,554 | ---- | M] () -- C:\Documents and Settings\admin\Pulpit\AD-R.lnk [2012-01-26 19:16:58 | 000,025,294 | ---- | M] () -- C:\Documents and Settings\admin\Pulpit\wozkowe1_m.jpg [2012-01-26 19:16:44 | 000,031,435 | ---- | M] () -- C:\Documents and Settings\admin\Pulpit\glowkowe_m.jpg [2012-01-26 19:16:17 | 000,025,039 | ---- | M] () -- C:\Documents and Settings\admin\Pulpit\krzyzykowe1_m.jpg [2012-01-26 18:19:59 | 000,479,682 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2012-01-26 18:19:59 | 000,422,204 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2012-01-26 18:19:59 | 000,077,976 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2012-01-26 18:19:59 | 000,061,906 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2012-01-24 18:58:45 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat [2012-01-23 17:51:41 | 000,014,033 | ---- | M] () -- C:\Documents and Settings\admin\Pulpit\ambitna__hallo.jpg [2012-01-22 18:49:32 | 000,334,547 | ---- | M] () -- C:\Documents and Settings\admin\Pulpit\ggggggggggggggr.jpg [2012-01-16 20:01:42 | 000,516,785 | ---- | M] () -- C:\Documents and Settings\admin\Pulpit\P160112_20.01.jpg [2012-01-16 18:59:15 | 000,972,202 | ---- | M] () -- C:\Documents and Settings\admin\Pulpit\ja.jpg [2012-01-16 18:57:55 | 000,093,184 | -H-- | M] () -- C:\Documents and Settings\admin\Pulpit\photothumb.db [2012-01-15 15:12:15 | 000,007,379 | ---- | M] () -- C:\Documents and Settings\admin\Pulpit\kosztorys.abw [2012-01-13 17:13:40 | 000,044,319 | ---- | M] () -- C:\Documents and Settings\admin\Pulpit\11111111111234`.jpg [2012-01-13 16:10:41 | 000,010,240 | ---- | M] () -- C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-01-11 17:54:30 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2012-01-11 17:20:16 | 000,000,726 | ---- | M] () -- C:\Documents and Settings\admin\Pulpit\6klasa_testy_2007.lnk [2012-01-09 19:35:48 | 000,022,789 | ---- | M] () -- C:\Documents and Settings\admin\Pulpit\Zdjęcie034.jpg [2012-01-08 19:06:18 | 000,002,439 | ---- | M] () -- C:\Documents and Settings\admin\Pulpit\Zdjęcie037.jpg [2012-01-08 18:25:10 | 000,002,109 | ---- | M] () -- C:\Documents and Settings\admin\Pulpit\Zdjęcie033.jpg [2012-01-08 18:24:40 | 000,002,027 | ---- | M] () -- C:\Documents and Settings\admin\Pulpit\Zdjęcie032.jpg [2012-01-08 18:22:26 | 000,002,097 | ---- | M] () -- C:\Documents and Settings\admin\Pulpit\Zdjęcie030.jpg [2012-01-08 18:21:50 | 000,002,060 | ---- | M] () -- C:\Documents and Settings\admin\Pulpit\Zdjęcie027.jpg [2012-01-08 14:10:18 | 000,491,501 | ---- | M] () -- C:\Documents and Settings\admin\Pulpit\mmmmmmewe2w.jpg [2012-01-07 17:01:49 | 000,002,582 | ---- | M] () -- C:\Documents and Settings\admin\Pulpit\s.abw [2012-01-07 14:11:10 | 000,014,060 | ---- | M] () -- C:\Documents and Settings\admin\Pulpit\ambitna__Umbrella.jpg [2012-01-06 13:47:08 | 000,003,967 | ---- | M] () -- C:\Documents and Settings\admin\Pulpit\a.abw [2012-01-02 21:22:00 | 000,000,286 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-2000478354-838170752-839522115-1004.job [2 C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\*.tmp files -> C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-01-27 17:44:33 | 000,001,689 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\avast! Free Antivirus.lnk [2012-01-26 19:55:25 | 000,001,554 | ---- | C] () -- C:\Documents and Settings\admin\Pulpit\AD-R.lnk [2012-01-26 19:17:01 | 000,025,294 | ---- | C] () -- C:\Documents and Settings\admin\Pulpit\wozkowe1_m.jpg [2012-01-26 19:16:45 | 000,031,435 | ---- | C] () -- C:\Documents and Settings\admin\Pulpit\glowkowe_m.jpg [2012-01-26 19:16:21 | 000,025,039 | ---- | C] () -- C:\Documents and Settings\admin\Pulpit\krzyzykowe1_m.jpg [2012-01-23 17:51:41 | 000,014,033 | ---- | C] () -- C:\Documents and Settings\admin\Pulpit\ambitna__hallo.jpg [2012-01-23 14:38:00 | 000,334,547 | ---- | C] () -- C:\Documents and Settings\admin\Pulpit\ggggggggggggggr.jpg [2012-01-18 20:09:57 | 000,516,785 | ---- | C] () -- C:\Documents and Settings\admin\Pulpit\P160112_20.01.jpg [2012-01-15 15:12:15 | 000,007,379 | ---- | C] () -- C:\Documents and Settings\admin\Pulpit\kosztorys.abw [2012-01-15 13:33:29 | 000,972,202 | ---- | C] () -- C:\Documents and Settings\admin\Pulpit\ja.jpg [2012-01-13 17:21:15 | 000,002,439 | ---- | C] () -- C:\Documents and Settings\admin\Pulpit\Zdjęcie037.jpg [2012-01-13 17:04:58 | 000,002,097 | ---- | C] () -- C:\Documents and Settings\admin\Pulpit\Zdjęcie030.jpg [2012-01-13 17:04:55 | 000,002,027 | ---- | C] () -- C:\Documents and Settings\admin\Pulpit\Zdjęcie032.jpg [2012-01-13 17:04:48 | 000,002,109 | ---- | C] () -- C:\Documents and Settings\admin\Pulpit\Zdjęcie033.jpg [2012-01-12 16:59:42 | 000,001,804 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Adobe Reader 9.lnk [2012-01-11 17:20:16 | 000,000,726 | ---- | C] () -- C:\Documents and Settings\admin\Pulpit\6klasa_testy_2007.lnk [2012-01-08 19:52:40 | 000,002,060 | ---- | C] () -- C:\Documents and Settings\admin\Pulpit\Zdjęcie027.jpg [2012-01-08 19:52:35 | 000,022,789 | ---- | C] () -- C:\Documents and Settings\admin\Pulpit\Zdjęcie034.jpg [2012-01-08 19:51:49 | 000,044,319 | ---- | C] () -- C:\Documents and Settings\admin\Pulpit\11111111111234`.jpg [2012-01-08 19:51:32 | 000,491,501 | ---- | C] () -- C:\Documents and Settings\admin\Pulpit\mmmmmmewe2w.jpg [2012-01-07 17:01:49 | 000,002,582 | ---- | C] () -- C:\Documents and Settings\admin\Pulpit\s.abw [2012-01-07 14:11:10 | 000,014,060 | ---- | C] () -- C:\Documents and Settings\admin\Pulpit\ambitna__Umbrella.jpg [2012-01-06 13:47:08 | 000,003,967 | ---- | C] () -- C:\Documents and Settings\admin\Pulpit\a.abw [2012-01-04 16:12:33 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat [2011-12-15 09:17:19 | 000,112,640 | ---- | C] () -- C:\WINDOWS\lsb_un20.exe [2011-12-05 15:41:51 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll [2011-08-17 19:12:59 | 000,083,246 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-System.dat [2011-08-17 19:12:59 | 000,083,246 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-S-1-5-21-2000478354-838170752-839522115-1004-0.dat [2011-08-17 19:02:28 | 000,005,504 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys [2011-08-17 18:54:07 | 000,000,047 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2011-08-17 16:18:02 | 000,000,130 | ---- | C] () -- C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [2011-08-11 09:02:36 | 000,175,616 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2011-08-11 09:02:35 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini [2011-08-11 09:02:31 | 000,644,608 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2011-08-11 09:02:31 | 000,243,200 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2011-08-11 09:02:31 | 000,073,216 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2011-07-22 20:42:22 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll [2011-04-03 15:18:10 | 000,010,240 | ---- | C] () -- C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-04-03 15:08:30 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat [2011-04-01 15:58:55 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2011-04-01 15:56:18 | 000,097,456 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2011-04-01 15:08:20 | 002,283,526 | ---- | C] () -- C:\WINDOWS\System32\nvdata.bin [2011-04-01 14:18:31 | 000,319,488 | ---- | C] () -- C:\WINDOWS\System32\AegisI5.exe [2011-04-01 14:18:31 | 000,295,018 | ---- | C] () -- C:\WINDOWS\System32\Install6x.dll [2011-04-01 14:18:31 | 000,008,192 | ---- | C] () -- C:\WINDOWS\System32\drivers\RT2661.bin [2011-04-01 14:18:31 | 000,008,192 | ---- | C] () -- C:\WINDOWS\System32\drivers\RT2561s.bin [2011-04-01 14:18:31 | 000,008,192 | ---- | C] () -- C:\WINDOWS\System32\drivers\RT2561.bin [2011-04-01 14:15:27 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe [2011-04-01 14:12:30 | 000,001,732 | ---- | C] () -- C:\WINDOWS\System32\drivers\nvphy.bin [2011-04-01 14:07:41 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2011-04-01 14:04:24 | 000,023,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2006-03-02 13:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin [2006-03-02 13:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat [2006-03-02 13:00:00 | 000,479,682 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat [2006-03-02 13:00:00 | 000,422,204 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat [2006-03-02 13:00:00 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat [2006-03-02 13:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat [2006-03-02 13:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat [2006-03-02 13:00:00 | 000,077,976 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat [2006-03-02 13:00:00 | 000,061,906 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat [2006-03-02 13:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin [2006-03-02 13:00:00 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat [2006-03-02 13:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat [2006-03-02 13:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat [2006-03-02 13:00:00 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat [2006-03-02 13:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin [2006-03-02 13:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat < End of report >