O1 - Hosts:
O1 - Hosts: 90 more lines...
O4 - HKLM..\Run: [Bron-Spizaetus] C:\WINDOWS\ShellNew\sempalong.exe ()
O4 - HKU\S-1-5-21-1220945662-1275210071-725345543-500..\Run: [ALLUpdate] C:\Program Files\ALLPlayer\ALLUpdate.exe ()
O4 - HKU\S-1-5-21-1220945662-1275210071-725345543-500..\Run: [ares] C:\Program Files\Ares\Ares.exe (Ares Development Group)
O4 - HKU\S-1-5-21-1220945662-1275210071-725345543-500..\Run: [Tok-Cirrhatus] C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\smss.exe ()
O4 - Startup: C:\Documents and Settings\Administrator\Menu Start\Programy\Autostart\Empty.pif ()
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe (McAfee, Inc.)
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1220945662-1275210071-725345543-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1220945662-1275210071-725345543-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFolderOptions = 1
O7 - HKU\S-1-5-21-1220945662-1275210071-725345543-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O15 - HKU\S-1-5-21-1220945662-1275210071-725345543-500\..Trusted Domains: ([]msn in Mój komputer)
O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{250FF781-224E-424F-A287-AE8CB392DCA2}: DhcpNameServer = 192.168.1.1
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - ("C:\WINDOWS\eksplorasi.exe") - C:\WINDOWS\eksplorasi.exe ()
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - (igfxsrvc.dll) - C:\WINDOWS\System32\igfxsrvc.dll (Intel Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{0bad072a-9d88-11df-bc7f-000c6e37fd7a}\Shell\AutoRun\command - "" = F:\pbyqfn.exe
O33 - MountPoints2\{0bad072a-9d88-11df-bc7f-000c6e37fd7a}\Shell\open\Command - "" = F:\pbyqfn.exe
O33 - MountPoints2\{0ef59654-0a11-11e0-bda6-000c6e37fd7a}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Recycled\ctfmon.exe
O33 - MountPoints2\{0ef59654-0a11-11e0-bda6-000c6e37fd7a}\Shell\Open(&0)\command - "" = F:\Recycled\ctfmon.exe
O33 - MountPoints2\{0f836c68-9d8d-11df-bc80-000c6e37fd7a}\Shell\AutoRun\command - "" = F:\pbyqfn.exe
O33 - MountPoints2\{0f836c68-9d8d-11df-bc80-000c6e37fd7a}\Shell\open\Command - "" = F:\pbyqfn.exe
O33 - MountPoints2\{5e76ac54-639b-11e0-bec9-000c6e37fd7a}\Shell\AutoRun\command - "" = H:\PMBP_Win.exe
O33 - MountPoints2\{6cf356c8-cfbb-11df-bd0c-000c6e37fd7a}\Shell\AutoRun\command - "" = F:\biriprg.exe
O33 - MountPoints2\{6cf356c8-cfbb-11df-bd0c-000c6e37fd7a}\Shell\open\Command - "" = F:\biriprg.exe
O33 - MountPoints2\{996b5770-d6f3-11df-bd24-000c6e37fd7a}\Shell\AutoRun\command - "" = F:\biriprg.exe
O33 - MountPoints2\{996b5770-d6f3-11df-bd24-000c6e37fd7a}\Shell\open\Command - "" = F:\biriprg.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
[2012-02-23 18:26:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\HD Tune
[2012-02-23 18:26:21 | 000,000,000 | ---D | C] -- C:\Program Files\HD Tune
[2012-01-31 14:26:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Bron.tok-12-31
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
[2012-02-23 18:46:38 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012-02-23 18:41:33 | 000,355,830 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2012-02-23 18:41:33 | 000,311,740 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012-02-23 18:41:33 | 000,049,712 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2012-02-23 18:41:33 | 000,040,128 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012-02-23 18:26:22 | 000,000,613 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\HD Tune.lnk
[2012-02-23 16:39:16 | 000,044,544 | ---- | M] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-02-23 15:10:21 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012-02-08 06:49:44 | 000,048,174 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\Str 3-5.pdf
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[color=#E56717]========== Files Created - No Company Name ==========[/color]
[2012-02-23 18:26:22 | 000,000,613 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\HD Tune.lnk
[2012-02-08 06:49:37 | 000,048,174 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\Str 3-5.pdf
[2010-12-30 17:07:47 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2010-09-16 14:27:28 | 000,042,687 | -H-- | C] () -- C:\WINDOWS\eksplorasi.exe
[2010-09-16 14:27:28 | 000,042,687 | ---- | C] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\winlogon.exe
[2010-09-16 14:27:28 | 000,042,687 | ---- | C] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\smss.exe
[2010-09-16 14:27:28 | 000,042,687 | ---- | C] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\services.exe
[2010-09-16 14:27:28 | 000,042,687 | ---- | C] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\lsass.exe
[2010-09-16 14:27:28 | 000,042,687 | ---- | C] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\inetinfo.exe
[2010-09-16 14:27:28 | 000,042,687 | ---- | C] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\csrss.exe
[2010-07-24 17:47:05 | 000,819,200 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2010-07-24 17:47:05 | 000,258,048 | ---- | C] () -- C:\WINDOWS\System32\libFLAC.dll
[2010-05-03 09:34:03 | 000,000,033 | ---- | C] () -- C:\WINDOWS\Multimedia manager.INI
[2010-05-02 16:13:57 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\LauncherAccess.dt
[2010-05-02 16:10:54 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2010-03-17 18:05:05 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI
[2010-02-26 19:06:03 | 000,049,152 | ---- | C] () -- C:\WINDOWS\Domino.exe
[2010-02-23 19:43:17 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[color=#E56717]========== LOP Check ==========[/color]
[2011-03-03 18:53:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Gadu-Gadu 10
[2010-02-23 20:07:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\OpenFM
[2010-04-06 13:11:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Opera
[2010-05-02 16:15:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Samsung
[2010-02-23 20:06:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10
[2010-02-23 20:07:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM
[color=#E56717]========== Purity Check ==========[/color]
< End of report >