OTL logfile created on: 2012-03-01 08:41:51 - Run 2 OTL by OldTimer - Version 3.2.33.2 Folder = C:\Documents and Settings\kkk\Pulpit Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1023,17 Mb Total Physical Memory | 621,21 Mb Available Physical Memory | 60,71% Memory free 2,40 Gb Paging File | 1,99 Gb Available in Paging File | 82,79% Paging File free Paging file location(s): C:\pagefile.sys 0 0 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 48,83 Gb Total Space | 14,22 Gb Free Space | 29,13% Space Free | Partition Type: NTFS Drive F: | 184,05 Gb Total Space | 101,15 Gb Free Space | 54,96% Space Free | Partition Type: NTFS Drive G: | 3,31 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF Computer Name: III-59924FC4392 | User Name: kkk | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-03-01 05:32:38 | 000,583,680 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\kkk\Pulpit\OTL.exe PRC - [2011-10-27 10:34:30 | 000,718,384 | ---- | M] (Nokia) -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe PRC - [2011-10-27 10:33:58 | 000,173,104 | ---- | M] (Nokia) -- C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe PRC - [2011-10-27 10:33:40 | 000,126,512 | ---- | M] (Nokia) -- C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe PRC - [2009-01-06 12:06:36 | 000,290,088 | ---- | M] (Apple Inc.) -- F:\Program Files\Quick Time Player\iTunesHelper.exe PRC - [2008-10-23 23:24:38 | 000,068,865 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe PRC - [2008-10-23 23:24:36 | 000,151,297 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe PRC - [2008-07-19 14:24:09 | 000,266,497 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe PRC - [2007-11-22 10:49:08 | 000,385,024 | ---- | M] (Sony Corporation) -- C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe PRC - [2007-06-13 14:23:49 | 001,034,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2006-11-12 11:48:46 | 000,157,592 | ---- | M] (DT Soft Ltd.) -- F:\Program Files\deamon tools\DAEMON Tools\daemon.exe PRC - [2006-11-08 13:27:54 | 000,222,208 | ---- | M] (Nokia) -- F:\Program Files\Nokia PC Suite 6\LaunchApplication.exe PRC - [2006-07-18 18:52:54 | 000,417,792 | ---- | M] () -- C:\Program Files\Office Keyboard Driver\PS2USBKbdDrv.exe PRC - [2006-04-10 17:54:14 | 000,241,664 | ---- | M] (ASUSTeK COMPUTER INC.) -- C:\WINDOWS\ATKKBService.exe PRC - [2006-01-30 17:00:00 | 000,098,304 | R--- | M] (Hewlett-Packard) -- C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2008-04-18 18:36:32 | 000,339,968 | ---- | M] () -- C:\Program Files\Avira\AntiVir PersonalEdition Classic\sqlite3.dll MOD - [2006-12-03 14:53:06 | 000,126,464 | ---- | M] () -- F:\Program Files\winrar\RarExt.dll MOD - [2006-07-18 18:52:54 | 000,417,792 | ---- | M] () -- C:\Program Files\Office Keyboard Driver\PS2USBKbdDrv.exe MOD - [2006-07-14 06:34:00 | 000,007,680 | ---- | M] () -- F:\Program Files\deamon tools\DAEMON Tools\Plugins\Images\bw5mount.dll MOD - [2006-06-29 17:03:52 | 000,041,084 | ---- | M] () -- C:\Program Files\Office Keyboard Driver\keydll.dll MOD - [2004-04-25 09:27:46 | 000,429,568 | ---- | M] () -- C:\Program Files\Office Keyboard Driver\Dllmkkbd.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Auto | Stopped] -- -- (WinHttpAutoProxySvc) SRV - File not found [Auto | Stopped] -- -- (w200obex) SRV - File not found [Auto | Stopped] -- -- (vsdatant) SRV - File not found [Auto | Stopped] -- -- (U81xmdfl) SRV - File not found [Auto | Stopped] -- -- (TUWinStylerThemeSvc) SRV - File not found [Auto | Stopped] -- -- (tosrfcom) SRV - File not found [Auto | Stopped] -- -- (TMBMServer) SRV - File not found [Auto | Stopped] -- -- (sysdown) SRV - File not found [Auto | Stopped] -- -- (symsecureport) SRV - File not found [Auto | Stopped] -- -- (SWNC8U20) SRV - File not found [Auto | Stopped] -- -- (sqlagent$sony_mediamgr) SRV - File not found [Auto | Stopped] -- -- (spkrmon) SRV - File not found [Auto | Stopped] -- -- (SI3112) SRV - File not found [Auto | Stopped] -- -- (QWAVEDRV) SRV - File not found [Auto | Stopped] -- -- (qbposdbextservices) SRV - File not found [Auto | Stopped] -- -- (PQNTDrv) SRV - File not found [Auto | Stopped] -- -- (portio) SRV - File not found [Auto | Stopped] -- -- (pdlnepkt) SRV - File not found [Auto | Stopped] -- -- (Packet) SRV - File not found [Auto | Stopped] -- -- (ood2000) SRV - File not found [Auto | Stopped] -- -- (mcpromgr) SRV - File not found [Auto | Stopped] -- -- (ma_cmidi_installerservice) SRV - File not found [Auto | Stopped] -- -- (hpzid412) SRV - File not found [Auto | Stopped] -- -- (fssfltr) SRV - File not found [Auto | Stopped] -- -- (emu10k) SRV - File not found [Auto | Stopped] -- -- (EMCFILT) SRV - File not found [Auto | Stopped] -- -- (ELmon) SRV - File not found [Auto | Stopped] -- -- (EhttpSrv) SRV - File not found [Auto | Stopped] -- -- (dot4) SRV - File not found [Auto | Stopped] -- -- (dnserver32) SRV - File not found [Auto | Stopped] -- -- (DniVad) SRV - File not found [Auto | Stopped] -- -- (dcpflics) SRV - File not found [Auto | Stopped] -- -- (automate6) SRV - File not found [Auto | Stopped] -- -- (ahcix86s) SRV - [2011-10-27 10:34:30 | 000,718,384 | ---- | M] (Nokia) [On_Demand | Running] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2008-10-23 23:24:38 | 000,068,865 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe -- (AntiVirScheduler) SRV - [2008-10-23 23:24:36 | 000,151,297 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe -- (AntiVirService) SRV - [2007-11-07 07:58:18 | 003,004,416 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- F:\MS Visual Studio 2008\Visual\Common7\IDE\Remote Debugger\x86\msvsmon.exe -- (msvsmon90) SRV - [2006-04-10 17:54:14 | 000,241,664 | ---- | M] (ASUSTeK COMPUTER INC.) [Auto | Running] -- C:\WINDOWS\ATKKBService.exe -- (ATKKeyboardService) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Running] -- -- (catchme) DRV - [2011-08-17 12:56:32 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt) DRV - [2011-08-17 12:56:30 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev) DRV - [2011-08-17 12:56:26 | 000,023,168 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc) DRV - [2011-08-17 12:56:22 | 000,018,176 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd) DRV - [2010-02-11 13:01:43 | 000,226,880 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\tcpip6.sys -- (Tcpip6) DRV - [2009-05-27 16:52:35 | 000,075,096 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb) DRV - [2009-05-27 16:52:31 | 000,052,056 | ---- | M] (Avira GmbH) [File_System | On_Demand | Running] -- C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys -- (avgntflt) DRV - [2009-05-27 16:52:30 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys -- (avgio) DRV - [2008-08-26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2007-03-01 09:34:36 | 000,028,352 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv) DRV - [2007-01-15 16:17:29 | 000,639,224 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd) DRV - [2006-07-05 13:55:58 | 000,043,392 | R--- | M] (JMicron Technology Corp.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\jraid.sys -- (JRAID) DRV - [2006-06-15 09:02:22 | 000,142,464 | R--- | M] (Analog Devices, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\adidts.sys -- (ADIDTSFiltService) DRV - [2006-06-14 06:56:00 | 000,012,288 | R--- | M] (ASUSTeK Computer Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\EIO.sys -- (EIO) DRV - [2006-05-23 07:56:00 | 000,245,248 | ---- | M] (Marvell) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\yk51x86.sys -- (yukonwxp) DRV - [2006-03-01 18:53:54 | 000,032,128 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\pcandis5.sys -- (PCANDIS5) DRV - [2006-02-07 12:52:58 | 000,006,912 | R--- | M] (JMicron ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\JGOGO.sys -- (JGOGO) DRV - [2005-10-18 15:01:38 | 000,011,008 | ---- | M] (ASUSTeK COMPUTER INC.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\atkkbnt.sys -- (asuskbnt) DRV - [2005-03-22 10:03:04 | 000,032,910 | ---- | M] (USB Com port.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ser120.sys -- (SER120) DRV - [2004-08-13 03:56:20 | 000,005,810 | R--- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ASACPI.sys -- (MTsensor) DRV - [2003-09-23 10:38:34 | 000,034,688 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\pcampr5.sys -- (PCAMPR5) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-602162358-1757981266-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.de/ IE - HKU\S-1-5-21-602162358-1757981266-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKU\S-1-5-21-602162358-1757981266-839522115-1003\..\URLSearchHook: {08C06D61-F1F3-4799-86F8-BE1A89362C85} - SOFTWARE\Classes\CLSID\{08C06D61-F1F3-4799-86F8-BE1A89362C85}\InprocServer32 File not found IE - HKU\S-1-5-21-602162358-1757981266-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-602162358-1757981266-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "www.google.de" FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23 FF - prefs.js..extensions.enabledItems: gencrawler@some.com:2.0 FF - prefs.js..extensions.enabledItems: fe_3.6@nokia.com:1.7.56.205 FF - prefs.js..network.proxy.type: 4 FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: F:\Program Files\Quick Time Player\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@macromedia.com/FlashPlayer9: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@macromedia.com/FlashPlayer9: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\fe_3.6@nokia.com: C:\Program Files\Nokia\Nokia Suite\Connectors\Bookmarks Connector\FirefoxExtension_3.6 [2011-11-27 12:54:06 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-05-13 17:01:56 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-05-13 17:01:56 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\te_7.0@nokia.com: C:\Program Files\Nokia\Nokia Suite\Connectors\Thunderbird Connector\ThunderbirdExtension_7.0 [2011-11-27 12:54:17 | 000,000,000 | ---D | M] [2010-11-07 17:26:08 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\kkk\Dane aplikacji\Mozilla\Extensions [2012-01-09 23:16:48 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\kkk\Dane aplikacji\Mozilla\Firefox\Profiles\mac6zit5.default\extensions [2011-05-16 14:43:15 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\kkk\Dane aplikacji\Mozilla\Firefox\Profiles\mac6zit5.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2012-01-09 23:16:48 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2010-12-17 02:38:07 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} [2011-12-09 05:07:56 | 000,000,000 | ---D | M] (General Crawler) -- C:\DOCUMENTS AND SETTINGS\KKK\DANE APLIKACJI\MOZILLA\EXTENSIONS\{EC8030F7-C20A-464F-9B0E-13A3A9E97384}\GENCRAWLER@SOME.COM [2009-08-11 21:52:02 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [2011-11-27 12:54:06 | 000,000,000 | ---D | M] (Firefox Synchronisation Extension) -- C:\PROGRAM FILES\NOKIA\NOKIA SUITE\CONNECTORS\BOOKMARKS CONNECTOR\FIREFOXEXTENSION_3.6 [2010-11-12 18:53:06 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2006-11-09 15:20:00 | 002,111,096 | ---- | M] () -- C:\Program Files\mozilla firefox\plugins\NPSWF32.dll [2010-10-27 06:37:26 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2010-10-27 06:37:26 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2010-10-27 06:37:26 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2010-10-27 06:37:26 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2010-10-27 06:37:26 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2010-10-27 06:37:26 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2012-03-01 08:28:29 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Help the General-Search Project) - {CA4520F3-AE13-4FB1-A513-58E23991C86D} - C:\Documents and Settings\kkk\Dane aplikacji\Media Finder\Extensions\gencrawler_gc.dll () O3 - HKLM\..\Toolbar: (&Google) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\Program Files\Google\GoogleToolbar1.dll (Google Inc.) O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll File not found O3 - HKU\S-1-5-21-602162358-1757981266-839522115-1003\..\Toolbar\WebBrowser: (&Google) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\Program Files\Google\GoogleToolbar1.dll (Google Inc.) O3 - HKU\S-1-5-21-602162358-1757981266-839522115-1003\..\Toolbar\WebBrowser: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll File not found O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [DAEMON Tools] F:\Program Files\deamon tools\DAEMON Tools\daemon.exe (DT Soft Ltd.) O4 - HKLM..\Run: [iTunesHelper] F:\Program Files\Quick Time Player\iTunesHelper.exe (Apple Inc.) O4 - HKLM..\Run: [JMB36X Configure] C:\WINDOWS\System32\JMRaidTool.exe (JMicron Technology Corp.) O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\nvmctray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe () O4 - HKLM..\Run: [OrderReminder] C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe (Hewlett-Packard) O4 - HKLM..\Run: [PCSuiteTrayApplication] F:\Program Files\Nokia PC Suite 6\LaunchApplication.exe (Nokia) O4 - HKLM..\Run: [TweakMASTER] C:\Program Files\TweakMASTER\TwMaster.exe (Hagel Technologies) O4 - HKLM..\Run: [WireLessKeyboard] C:\Program Files\Office Keyboard Driver\StartAutorun.exe PS2USBKbdDrv.exe File not found O4 - HKU\.DEFAULT..\Run: [PcSync] F:\Program Files\Nokia PC Suite 6\PcSync2.exe (Time Information Services Ltd.) O4 - HKU\S-1-5-18..\Run: [PcSync] F:\Program Files\Nokia PC Suite 6\PcSync2.exe (Time Information Services Ltd.) O4 - HKU\S-1-5-21-602162358-1757981266-839522115-1003..\Run: [Gadu-Gadu] C:\Documents and Settings\kkk\Pulpit\grzegorz\Gadu-Gadu\gg.exe (Gadu-Gadu S.A.) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe (Adobe Systems Incorporated) O4 - Startup: C:\Documents and Settings\kkk\Menu Start\Programy\Autostart\Picture Motion Browser Media Check Tool.lnk = C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe (Sony Corporation) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-602162358-1757981266-839522115-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-602162358-1757981266-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-21-602162358-1757981266-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-21-602162358-1757981266-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O8 - Extra context menu item: Download with &Media Finder - C:\Program Files\Media Finder\hook.html File not found O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 195.140.236.250 195.140.238.250 195.140.236.251 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{CAD0A338-128F-4279-97AA-133E2E8688F1}: NameServer = 8.8.8.8 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D002C1DA-1703-4E07-AA33-1427AD7CBBEE}: DhcpNameServer = 195.140.236.250 195.140.238.250 195.140.236.251 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D002C1DA-1703-4E07-AA33-1427AD7CBBEE}: NameServer = 8.8.8.8,208.67.220.220 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\kkk\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\kkk\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006-10-24 22:23:05 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2007-11-08 06:44:04 | 000,054,272 | R--- | M] (Microsoft Corporation) - G:\autorun.exe -- [ UDF ] O32 - AutoRun File - [2003-07-24 02:26:21 | 000,000,048 | R--- | M] () - G:\autorun.inf -- [ UDF ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-03-01 08:09:55 | 000,138,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\afd.sys [2012-03-01 08:04:21 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe [2012-03-01 08:04:21 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe [2012-03-01 08:04:21 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe [2012-03-01 08:04:21 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe [2012-03-01 08:04:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT [2012-03-01 08:04:12 | 000,000,000 | ---D | C] -- C:\Qoobox [2012-03-01 08:04:06 | 000,000,000 | R--D | C] -- C:\Documents and Settings\kkk\Menu Start\Programy\Narzędzia administracyjne [2012-03-01 07:05:54 | 004,422,703 | R--- | C] (Swearware) -- C:\Documents and Settings\kkk\Pulpit\ComboFix.exe.exe [2012-03-01 06:12:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\kkk\Pulpit\Abnow [2012-03-01 05:32:37 | 000,583,680 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\kkk\Pulpit\OTL.exe [2012-02-28 00:48:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Dane aplikacji\Adobe [2012-02-28 00:04:30 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\kkk\Ustawienia lokalne\Dane aplikacji\4c307e15 [7 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2060-08-18 19:02:32 | 002,023,424 | ---- | M] (Inprise Corporation) -- C:\WINDOWS\System32\VCL50.BPL [2060-08-18 19:02:22 | 001,496,064 | ---- | M] (Inprise Corporation) -- C:\WINDOWS\System32\CC3250MT.DLL [2060-08-18 19:02:12 | 000,248,832 | ---- | M] (Inprise Corporation) -- C:\WINDOWS\System32\VCLX50.BPL [2060-08-18 18:40:44 | 000,909,824 | ---- | M] (Inprise Corporation) -- C:\WINDOWS\System32\CP3245MT.DLL [2060-08-18 18:40:44 | 000,024,064 | ---- | M] (Inprise Corporation) -- C:\WINDOWS\System32\BORLNDMM.DLL [2012-03-01 08:28:39 | 000,063,804 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml [2012-03-01 08:28:29 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts [2012-03-01 08:28:22 | 000,001,374 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2012-03-01 08:28:20 | 000,001,026 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2012-03-01 08:24:30 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2012-03-01 07:05:54 | 004,422,703 | R--- | M] (Swearware) -- C:\Documents and Settings\kkk\Pulpit\ComboFix.exe.exe [2012-03-01 06:56:00 | 000,001,030 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2012-03-01 05:32:38 | 000,583,680 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\kkk\Pulpit\OTL.exe [2012-02-28 00:13:33 | 000,000,626 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\ipla.lnk [2012-02-26 00:38:35 | 000,002,557 | ---- | M] () -- C:\Documents and Settings\kkk\Pulpit\Microsoft Office Excel 2003.lnk [2012-02-06 17:28:26 | 000,002,539 | ---- | M] () -- C:\Documents and Settings\kkk\Pulpit\Microsoft Office Word 2003.lnk [7 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-03-01 08:04:21 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe [2012-03-01 08:04:21 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe [2012-03-01 08:04:21 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe [2012-03-01 08:04:21 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe [2012-03-01 08:04:21 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe [2011-06-30 20:18:33 | 000,114,688 | ---- | C] () -- C:\WINDOWS\System32\WLANUTL.dll [2011-03-22 18:24:07 | 000,000,135 | ---- | C] () -- C:\WINDOWS\matlab.ini [2011-03-17 20:13:42 | 015,517,808 | ---- | C] () -- C:\Program Files\iplasetup.exe [2010-11-07 02:05:11 | 000,000,352 | ---- | C] () -- C:\WINDOWS\RewardDemo.ini [color=#E56717]========== LOP Check ==========[/color] [2006-11-11 21:02:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Freedom Scientific [2006-12-24 18:03:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Hagel Technologies [2012-02-28 00:12:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla [2011-11-27 12:54:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Nokia [2010-08-27 00:06:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\NokiaInstallerCache [2006-11-26 17:27:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Suite [2011-03-27 04:14:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PreEmptive Solutions [2011-08-13 00:18:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\RDRM [2011-05-13 17:02:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{3276BE95_AF08_429F_A64F_CA64CB79BCF6} [2007-02-07 20:12:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kkk\Dane aplikacji\FMA [2007-10-07 22:13:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kkk\Dane aplikacji\Gadu-Gadu [2007-01-07 19:26:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kkk\Dane aplikacji\InterTrust [2012-02-28 00:13:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kkk\Dane aplikacji\ipla [2011-12-09 05:09:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kkk\Dane aplikacji\Media Finder [2011-11-27 12:53:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kkk\Dane aplikacji\Nokia [2007-10-30 16:14:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kkk\Dane aplikacji\Nokia Multimedia Player [2010-10-11 20:27:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kkk\Dane aplikacji\Nokia Ovi Suite [2010-10-11 20:17:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kkk\Dane aplikacji\PC Suite [2011-03-17 20:15:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kkk\Dane aplikacji\RDRM [2010-12-17 22:04:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kkk\Dane aplikacji\Synthesia [2007-01-07 12:38:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\kkk\Dane aplikacji\uTorrent [color=#E56717]========== Purity Check ==========[/color] < End of report >