OTL logfile created on: 2012-06-04 16:00:29 - Run 1
OTL by OldTimer - Version 3.2.46.0     Folder = D:\Dokumenty-Ryszard\Pobieranie
Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
511,55 Mb Total Physical Memory | 50,73 Mb Available Physical Memory | 9,92% Memory free
866,54 Mb Paging File | 326,98 Mb Available in Paging File | 37,73% Paging File free
Paging file location(s): E:\pagefile.sys 384 768 [binary data]
 
%SystemDrive% = E: | %SystemRoot% = E:\WINDOWS | %ProgramFiles% = E:\Program Files
Drive C: | 14,65 Gb Total Space | 4,22 Gb Free Space | 28,82% Space Free | Partition Type: NTFS
Drive D: | 14,65 Gb Total Space | 8,25 Gb Free Space | 56,35% Space Free | Partition Type: NTFS
Drive E: | 19,53 Gb Total Space | 7,31 Gb Free Space | 37,41% Space Free | Partition Type: NTFS
Drive F: | 25,69 Gb Total Space | 9,07 Gb Free Space | 35,29% Space Free | Partition Type: NTFS
 
Computer Name: RW-1 | User Name: Ryszard | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-06-04 15:58:30 | 000,596,480 | ---- | M] (OldTimer Tools) -- D:\Dokumenty-Ryszard\Pobieranie\OTL.exe
PRC - [2012-05-23 03:56:51 | 001,240,088 | ---- | M] (Google Inc.) -- E:\Program Files\Google\Chrome\Application\chrome.exe
PRC - [2012-05-13 00:16:55 | 000,924,600 | ---- | M] (Mozilla Corporation) -- E:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2011-01-27 16:24:25 | 000,136,584 | ---- | M] (LogMeIn, Inc.) -- E:\Program Files\LogMeIn\x86\ramaint.exe
PRC - [2011-01-27 16:23:59 | 000,390,528 | ---- | M] (LogMeIn, Inc.) -- E:\Program Files\LogMeIn\x86\LogMeIn.exe
PRC - [2010-12-08 14:11:32 | 000,374,152 | ---- | M] (LogMeIn, Inc.) -- E:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe
PRC - [2009-11-26 17:02:46 | 000,185,632 | ---- | M] (Ralink Technology, Corp.) -- E:\Program Files\Ralink\Common\RaRegistry.exe
PRC - [2009-11-26 17:02:44 | 001,643,808 | ---- | M] (Ralink Technology, Corp.) -- E:\Program Files\Ralink\Common\RaUI.exe
PRC - [2009-09-23 14:38:18 | 000,935,208 | ---- | M] (Nero AG) -- E:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
PRC - [2009-08-16 18:04:42 | 001,043,968 | ---- | M] (Alexander Roshal) -- E:\Program Files\WinRAR\WinRAR.exe
PRC - [2009-05-08 11:35:50 | 002,780,432 | ---- | M] () -- E:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
PRC - [2009-05-08 11:34:08 | 000,559,888 | ---- | M] () -- E:\Program Files\Common Files\LogiShrd\LQCVFX\COCIManager.exe
PRC - [2009-04-30 17:01:10 | 000,154,136 | ---- | M] (Logitech Inc.) -- E:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
PRC - [2008-07-24 19:46:10 | 000,063,048 | ---- | M] (LogMeIn, Inc.) -- E:\Program Files\LogMeIn\x86\LogMeInSystray.exe
PRC - [2008-04-15 14:00:00 | 001,035,264 | ---- | M] (Microsoft Corporation) -- E:\WINDOWS\explorer.exe
PRC - [2008-04-06 12:35:08 | 000,042,713 | ---- | M] () -- E:\Documents and Settings\Ryszard\Ustawienia lokalne\Dane aplikacji\winlogon.exe
PRC - [2008-04-06 12:35:08 | 000,042,713 | ---- | M] () -- E:\Documents and Settings\Ryszard\Ustawienia lokalne\Dane aplikacji\services.exe
PRC - [2008-04-06 12:35:08 | 000,042,713 | ---- | M] () -- E:\Documents and Settings\Ryszard\Ustawienia lokalne\Dane aplikacji\lsass.exe
PRC - [2008-04-06 12:35:08 | 000,042,713 | ---- | M] () -- E:\Documents and Settings\Ryszard\Ustawienia lokalne\Dane aplikacji\inetinfo.exe
PRC - [2007-02-22 19:32:12 | 000,118,784 | ---- | M] (OLYMPUS IMAGING CORP.) -- E:\Program Files\Olympus\DeviceDetector\DevDtct2.exe
PRC - [2006-11-03 20:20:12 | 000,866,584 | ---- | M] (Microsoft Corporation) -- E:\Program Files\Windows Defender\MSASCui.exe
PRC - [2006-11-03 20:19:58 | 000,013,592 | ---- | M] (Microsoft Corporation) -- E:\Program Files\Windows Defender\MsMpEng.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2012-05-23 03:56:50 | 000,441,880 | ---- | M] () -- E:\Program Files\Google\Chrome\Application\19.0.1084.52\ppgooglenaclpluginchrome.dll
MOD - [2012-05-23 03:56:49 | 003,922,456 | ---- | M] () -- E:\Program Files\Google\Chrome\Application\19.0.1084.52\pdf.dll
MOD - [2012-05-23 03:55:24 | 000,134,696 | ---- | M] () -- E:\Program Files\Google\Chrome\Application\19.0.1084.52\avutil-51.dll
MOD - [2012-05-23 03:55:23 | 000,250,408 | ---- | M] () -- E:\Program Files\Google\Chrome\Application\19.0.1084.52\avformat-54.dll
MOD - [2012-05-23 03:55:21 | 002,375,720 | ---- | M] () -- E:\Program Files\Google\Chrome\Application\19.0.1084.52\avcodec-54.dll
MOD - [2012-05-13 00:16:51 | 001,952,696 | ---- | M] () -- E:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2010-01-27 03:07:32 | 003,884,312 | ---- | M] () -- E:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
MOD - [2009-11-26 17:02:50 | 000,147,456 | ---- | M] () -- E:\WINDOWS\system32\DiagFunc.dll
MOD - [2009-11-26 17:02:44 | 000,918,816 | ---- | M] () -- E:\Program Files\Ralink\Common\RaWLAPI.dll
MOD - [2009-05-08 11:35:50 | 002,780,432 | ---- | M] () -- E:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
MOD - [2009-05-08 11:34:08 | 000,559,888 | ---- | M] () -- E:\Program Files\Common Files\LogiShrd\LQCVFX\COCIManager.exe
MOD - [2009-02-27 20:04:20 | 000,311,296 | ---- | M] () -- E:\Program Files\Common Files\Adobe\Acrobat\ActiveX\pdfshell.POL
MOD - [2008-04-06 12:35:08 | 000,042,713 | ---- | M] () -- E:\Documents and Settings\Ryszard\Ustawienia lokalne\Dane aplikacji\winlogon.exe
MOD - [2008-04-06 12:35:08 | 000,042,713 | ---- | M] () -- E:\Documents and Settings\Ryszard\Ustawienia lokalne\Dane aplikacji\services.exe
MOD - [2008-04-06 12:35:08 | 000,042,713 | ---- | M] () -- E:\Documents and Settings\Ryszard\Ustawienia lokalne\Dane aplikacji\lsass.exe
MOD - [2008-04-06 12:35:08 | 000,042,713 | ---- | M] () -- E:\Documents and Settings\Ryszard\Ustawienia lokalne\Dane aplikacji\inetinfo.exe
MOD - [2005-07-30 22:00:40 | 000,114,688 | ---- | M] () -- E:\WINDOWS\system32\OdiOlDVR.dll
MOD - [2004-06-21 11:14:54 | 000,053,248 | ---- | M] () -- E:\WINDOWS\system32\OdiAPI.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ)
SRV - File not found [On_Demand | Stopped] -- %SystemRoot%\System32\appmgmts.dll -- (AppMgmt)
SRV - [2012-05-13 00:16:55 | 000,129,976 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- E:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2011-01-27 16:24:25 | 000,136,584 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- E:\Program Files\LogMeIn\x86\ramaint.exe -- (LMIMaint)
SRV - [2011-01-27 16:23:59 | 000,390,528 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- E:\Program Files\LogMeIn\x86\LogMeIn.exe -- (LogMeIn)
SRV - [2009-11-26 17:02:46 | 000,185,632 | ---- | M] (Ralink Technology, Corp.) [Auto | Running] -- E:\Program Files\Ralink\Common\RaRegistry.exe -- (RalinkRegistryWriter)
SRV - [2009-09-23 14:38:18 | 000,935,208 | ---- | M] (Nero AG) [Auto | Running] -- E:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0)
SRV - [2009-04-30 17:01:10 | 000,154,136 | ---- | M] (Logitech Inc.) [Auto | Running] -- E:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe -- (LVPrcSrv)
SRV - [2008-04-15 14:00:00 | 000,114,688 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- E:\WINDOWS\system32\netdde.exe -- (NetDDEdsdm)
SRV - [2008-04-15 14:00:00 | 000,114,688 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- E:\WINDOWS\system32\netdde.exe -- (NetDDE)
SRV - [2008-04-15 14:00:00 | 000,053,248 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- E:\WINDOWS\system32\mprdim.dll -- (RemoteAccess)
SRV - [2008-04-15 14:00:00 | 000,033,792 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- E:\WINDOWS\system32\msgsvc.dll -- (Messenger)
SRV - [2008-04-15 14:00:00 | 000,033,280 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- E:\WINDOWS\system32\clipsrv.exe -- (ClipSrv)
SRV - [2008-04-15 14:00:00 | 000,017,408 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- E:\WINDOWS\system32\alrsvc.dll -- (Alerter)
SRV - [2006-11-03 20:19:58 | 000,013,592 | ---- | M] (Microsoft Corporation) [Auto | Running] -- E:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] --  -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] --  -- (Changer)
DRV - [2011-01-27 16:23:30 | 000,083,360 | ---- | M] (LogMeIn, Inc.) [File_System | Disabled | Stopped] -- E:\WINDOWS\System32\LMIRfsClientNP.dll -- (LMIRfsClientNP)
DRV - [2009-11-26 17:02:52 | 000,019,072 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | Auto | Running] -- E:\WINDOWS\system32\drivers\Scutum50.sys -- (Scutum50)
DRV - [2009-11-26 17:02:34 | 001,136,128 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- E:\WINDOWS\system32\drivers\rt2860.sys -- (RT80x86)
DRV - [2009-05-01 01:03:30 | 000,023,832 | R--- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- E:\WINDOWS\system32\drivers\lvuvcflt.sys -- (FilterService)
DRV - [2009-05-01 01:03:08 | 006,754,712 | R--- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- E:\WINDOWS\system32\drivers\lvuvc.sys -- (LVUVC) Logitech Webcam 200(UVC)
DRV - [2009-05-01 01:01:36 | 000,265,496 | R--- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- E:\WINDOWS\system32\drivers\lvrs.sys -- (LVRS)
DRV - [2009-05-01 01:00:00 | 000,114,712 | R--- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- E:\WINDOWS\system32\drivers\lvpopflt.sys -- (lvpopflt)
DRV - [2009-04-30 17:00:12 | 000,025,624 | ---- | M] () [Kernel | On_Demand | Running] -- E:\WINDOWS\system32\drivers\LVPr2Mon.sys -- (LVPr2Mon)
DRV - [2008-07-24 19:46:12 | 000,012,856 | ---- | M] (LogMeIn, Inc.) [Kernel | Auto | Running] -- E:\Program Files\LogMeIn\x86\rainfo.sys -- (LMIInfo)
DRV - [2008-07-24 19:46:10 | 000,047,640 | ---- | M] (LogMeIn, Inc.) [File_System | Auto | Running] -- E:\WINDOWS\system32\drivers\LMIRfsDriver.sys -- (LMIRfsDriver)
DRV - [2008-04-15 14:00:00 | 000,800,000 | ---- | M] (Microsoft Corp., Veritas Software) [Kernel | Disabled | Stopped] -- E:\WINDOWS\system32\drivers\dmboot.sys -- (dmboot)
DRV - [2008-04-15 14:00:00 | 000,153,856 | ---- | M] (Microsoft Corp., Veritas Software) [Kernel | Disabled | Stopped] -- E:\WINDOWS\system32\drivers\dmio.sys -- (dmio)
DRV - [2008-04-15 14:00:00 | 000,143,744 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- E:\WINDOWS\System32\drivers\fastfat.sys -- (Fastfat)
DRV - [2008-04-15 14:00:00 | 000,120,320 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- E:\WINDOWS\System32\drivers\pcmcia.sys -- (Pcmcia)
DRV - [2008-04-15 14:00:00 | 000,066,048 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- E:\WINDOWS\System32\drivers\udfs.sys -- (Udfs)
DRV - [2008-04-15 14:00:00 | 000,013,952 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- E:\WINDOWS\System32\drivers\cbidf2k.sys -- (cbidf2k)
DRV - [2008-04-15 14:00:00 | 000,005,888 | ---- | M] (Microsoft Corp., Veritas Software.) [Kernel | Disabled | Stopped] -- E:\WINDOWS\system32\drivers\dmload.sys -- (dmload)
DRV - [2008-04-14 02:15:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- E:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2006-04-07 18:06:38 | 000,038,496 | ---- | M] (OLYMPUS IMAGING CORP.) [Kernel | On_Demand | Stopped] -- E:\WINDOWS\system32\drivers\VNUSB.sys -- (VNUSB)
DRV - [2003-09-08 17:06:00 | 000,255,360 | ---- | M] (D-Link) [Kernel | On_Demand | Stopped] -- E:\WINDOWS\system32\drivers\AIRPLUS.sys -- (AIRPLUS)
DRV - [2003-04-08 10:56:36 | 000,820,133 | R--- | M] (Silicon Integrated Systems Corporation) [Kernel | On_Demand | Running] -- E:\WINDOWS\system32\drivers\sis7012.sys -- (SiS7012) Service for AC'97 Sample Driver (WDM)
DRV - [2001-10-26 18:48:56 | 000,009,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- E:\WINDOWS\system32\drivers\NtApm.sys -- (NtApm)
DRV - [2001-08-18 00:00:04 | 000,002,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- E:\WINDOWS\system32\drivers\msmpu401.sys -- (ms_mpu401)
DRV - [2000-07-24 02:01:00 | 000,019,537 | ---- | M] (Brother Industries Ltd.) [Kernel | Auto | Running] -- E:\WINDOWS\system32\drivers\BRPAR.SYS -- (BrPar)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: E:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: E:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: E:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: E:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010-08-28 16:55:48 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: E:\Program Files\Mozilla Firefox\components [2012-05-13 00:16:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: E:\Program Files\Mozilla Firefox\plugins [2011-05-23 21:05:10 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: E:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010-08-28 16:55:48 | 000,000,000 | ---D | M]
 
[2009-03-20 12:31:59 | 000,000,000 | ---D | M] (No name found) -- E:\Documents and Settings\Ryszard\Dane aplikacji\Mozilla\Extensions
[2012-05-13 00:19:58 | 000,000,000 | ---D | M] (No name found) -- E:\Documents and Settings\Ryszard\Dane aplikacji\Mozilla\Firefox\Profiles\0pa1fblo.default\extensions
[2011-05-23 08:57:37 | 000,000,000 | ---D | M] (No name found) -- E:\Program Files\Mozilla Firefox\extensions
[2010-02-23 00:26:41 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- E:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2012-05-13 00:16:55 | 000,097,208 | ---- | M] (Mozilla Foundation) -- E:\Program Files\mozilla firefox\components\browsercomps.dll
[2012-02-19 00:10:42 | 000,002,767 | ---- | M] () -- E:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2012-02-19 00:10:42 | 000,001,406 | ---- | M] () -- E:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2012-02-19 00:10:42 | 000,000,917 | ---- | M] () -- E:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2012-02-19 00:10:42 | 000,000,858 | ---- | M] () -- E:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2012-02-19 00:10:42 | 000,001,183 | ---- | M] () -- E:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2012-02-19 00:10:42 | 000,001,683 | ---- | M] () -- E:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = E:\Program Files\Google\Chrome\Application\19.0.1084.52\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = E:\Program Files\Google\Chrome\Application\19.0.1084.52\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = E:\Program Files\Google\Chrome\Application\19.0.1084.52\gcswf32.dll
CHR - plugin: Shockwave Flash (Disabled) = E:\Documents and Settings\Ryszard\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\PepperFlash\11.1.31.203\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = E:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Adobe Acrobat (Disabled) = E:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = E:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = E:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = E:\Program Files\Windows Media Player\npdsplay.dll
CHR - plugin: Google Update (Enabled) = E:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll
 
O1 HOSTS File: ([2012-02-23 19:57:23 | 000,012,393 | ---- | M]) - E:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
O1 - Hosts: <html lang='en'>
O1 - Hosts: <head>
O1 - Hosts:             <meta name="description" content="Yahoo! GeoCities offers you a free web site and all the tools you need to build a dynamic site. Features include easy-to-use site building tools, online help, web site statistics, secure and reliable hosting, and an intuitive control panel.">
O1 - Hosts:             <title>Yahoo! GeoCities: Get a web site with easy-to-use site building tools.</title>
O1 - Hosts:             <link rel="stylesheet" type="text/css" media="all" href="http://l.yimg.com/a/combo?yui/2.5.2/build/reset-fonts-grids/reset-fonts-grids.css&smbiz/css/headfoot_6.css&smbiz/css/ysbs_glossary_1.css"> 
O1 - Hosts: <link rel="stylesheet" type="text/css" media="all" href="http://l.yimg.com/a/lib/smbiz/css/geocities_84954.css"> 
O1 - Hosts: <style>
O1 - Hosts: h1 { line-height:30px;height:30px; padding-left:15px; font-weight:bold;font-size:1.6em;color:#1f296a;}
O1 - Hosts: .services li { margin-left:1.0em; padding-left:0.5em; background:url("http://l.yimg.com/a/lib/smbiz/i/geo_bullet_3x3_1.gif") no-repeat 0 0.5em; margin-bottom:0.5em;margin-left:1.5em;margin-right:0.5em;width:6em}
O1 - Hosts: .services li {float:left; width:17em; font-size:116%;margin-top:0.8em}
O1 - Hosts:  .services {  font-size:116%; padding-bottom:20px }
O1 - Hosts: .learnmore a {color:#2882DE;font-size:16px}
O1 - Hosts: .image_web  {float:right; margin:15px 0 0 15px}
O1 - Hosts: p {margin:20px;font-size:1em;}
O1 - Hosts: h2 {margin:20px 0 0 20px;color:#1F296;font-weight:bold;font-size:1.25em;color:#1f296a;}
O1 - Hosts: h3 {margin:20px;color:#1F296;font-weight:bold;font-size:1.15em;color:#1f296a;}
O1 - Hosts: li.rule {border-top:solid 1px #DBE1E6;}
O1 - Hosts: </style>
O1 - Hosts: </head>
O1 - Hosts: <body>
O1 - Hosts: <!-- following code added by server. PLEASE REMOVE -->
O1 - Hosts: <!-- preceding code added by server. PLEASE REMOVE -->
O1 - Hosts:  <div class="ez-mw" style ="height:900px;width:905px">
O1 - Hosts:     <div class="ez-wri ez-oh" style="width:900px">
O1 - Hosts: 90 more lines...
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [Bron-Spizaetus] E:\WINDOWS\ShellNew\sempalong.exe ()
O4 - HKLM..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd File not found
O4 - HKLM..\Run: [LogitechQuickCamRibbon] E:\Program Files\Logitech\Logitech WebCam Software\LWS.exe ()
O4 - HKLM..\Run: [LogMeIn GUI] E:\Program Files\LogMeIn\x86\LogMeInSystray.exe (LogMeIn, Inc.)
O4 - HKLM..\Run: [Windows Defender] E:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [Tok-Cirrhatus] E:\Documents and Settings\Ryszard\Ustawienia lokalne\Dane aplikacji\smss.exe ()
O4 - Startup: E:\Documents and Settings\All Users\Menu Start\Programy\Autostart\D-Link AirPlus.lnk = E:\Program Files\D-Link AirPlus\AIRPLUS.EXE (D-Link)
O4 - Startup: E:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Device Detector 3.lnk = E:\Program Files\Olympus\DeviceDetector\DevDtct2.exe (OLYMPUS IMAGING CORP.)
O4 - Startup: E:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Ralink Wireless Utility.lnk = E:\Program Files\Ralink\Common\RaUI.exe (Ralink Technology, Corp.)
O4 - Startup: E:\Documents and Settings\Ryszard\Menu Start\Programy\Autostart\Empty.pif ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFolderOptions = 1
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://go.microsoft.com/fwlink/?linkid=39204 (Windows Genuine Advantage Validation Tool)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1237496008229 (WUWebControl Class)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.20
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A01F31B8-3C78-4103-9205-90CB60816E69}: DhcpNameServer = 192.168.1.20
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - E:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - E:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - ("E:\WINDOWS\eksplorasi.exe") - E:\WINDOWS\eksplorasi.exe ()
O20 - HKLM Winlogon: UserInit - (E:\WINDOWS\system32\userinit.exe) - E:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\LMIinit: DllName - (LMIinit.dll) - E:\WINDOWS\System32\LMIinit.dll (LogMeIn, Inc.)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: E:\WINDOWS\Web\Wallpaper\Idylla.bmp
O24 - Desktop BackupWallPaper: E:\WINDOWS\Web\Wallpaper\Idylla.bmp
O28 - HKLM ShellExecuteHooks: {091EB208-39DD-417D-A5DD-7E2C2D8FB9CB} - E:\Program Files\Windows Defender\MpShHook.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2012-06-04 15:30:26 | 000,000,007 | -HS- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2005-02-02 11:22:07 | 000,000,000 | ---D | M] - E:\AutoRoute -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012-06-04 15:34:11 | 000,000,000 | ---D | C] -- E:\WINDOWS\pss
[2012-05-19 23:52:50 | 000,000,000 | ---D | C] -- E:\Documents and Settings\Ryszard\Pulpit\Nieużywane skróty pulpitu
[2012-05-13 00:17:12 | 000,000,000 | ---D | C] -- E:\Documents and Settings\All Users\Dane aplikacji\Mozilla
[2012-05-13 00:17:11 | 000,000,000 | ---D | C] -- E:\Program Files\Mozilla Maintenance Service
[8 D:\Dokumenty-Ryszard\*.tmp files -> D:\Dokumenty-Ryszard\*.tmp -> ]
[3 E:\WINDOWS\System32\*.tmp files -> E:\WINDOWS\System32\*.tmp -> ]
[3 E:\WINDOWS\*.tmp files -> E:\WINDOWS\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012-06-04 15:42:43 | 000,012,393 | ---- | M] () -- E:\Documents and Settings\Ryszard\Ustawienia lokalne\Dane aplikacji\Bron.tok.A12.em.bin
[2012-06-04 15:34:58 | 000,000,330 | -H-- | M] () -- E:\WINDOWS\tasks\MP Scheduled Scan.job
[2012-06-04 15:31:46 | 000,001,744 | ---- | M] () -- E:\WINDOWS\System32\d3d9caps.dat
[2012-06-04 15:30:14 | 000,001,034 | ---- | M] () -- E:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2012-06-04 15:30:03 | 000,013,646 | ---- | M] () -- E:\WINDOWS\System32\wpa.dbl
[2012-06-04 15:29:59 | 000,002,048 | --S- | M] () -- E:\WINDOWS\bootstat.dat
[2012-06-04 15:29:53 | 536,465,408 | -HS- | M] () -- E:\hiberfil.sys
[2012-06-04 15:24:09 | 000,001,038 | ---- | M] () -- E:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2012-05-23 16:36:18 | 000,000,283 | ---- | M] () -- E:\Documents and Settings\Ryszard\Pulpit\                                                                                                                                .lnk
[2012-05-11 03:39:09 | 000,192,184 | ---- | M] () -- E:\WINDOWS\System32\FNTCACHE.DAT
[2012-05-11 03:04:42 | 000,001,374 | ---- | M] () -- E:\WINDOWS\imsins.BAK
[8 D:\Dokumenty-Ryszard\*.tmp files -> D:\Dokumenty-Ryszard\*.tmp -> ]
[3 E:\WINDOWS\System32\*.tmp files -> E:\WINDOWS\System32\*.tmp -> ]
[3 E:\WINDOWS\*.tmp files -> E:\WINDOWS\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012-06-04 16:15:08 | 000,012,393 | ---- | C] () -- E:\Documents and Settings\Ryszard\Ustawienia lokalne\Dane aplikacji\Update.12.Bron.Tok.bin
[2012-06-04 15:42:43 | 000,012,393 | ---- | C] () -- E:\Documents and Settings\Ryszard\Ustawienia lokalne\Dane aplikacji\Bron.tok.A12.em.bin
[2012-05-23 16:36:17 | 000,000,283 | ---- | C] () -- E:\Documents and Settings\Ryszard\Pulpit\                                                                                                                                .lnk
[2012-03-14 04:12:46 | 000,000,118 | ---- | C] () -- E:\WINDOWS\System32\MRT.INI
[2012-02-15 02:16:20 | 000,003,072 | ---- | C] () -- E:\WINDOWS\System32\iacenc.dll
[2010-08-28 20:49:24 | 000,001,191 | ---- | C] () -- E:\WINDOWS\System32\W32N55.INI
[2010-08-28 20:49:24 | 000,000,516 | ---- | C] () -- E:\WINDOWS\System32\DiagFunc.ini
[2010-08-28 20:49:23 | 000,147,456 | ---- | C] () -- E:\WINDOWS\System32\DiagFunc.dll
[2010-08-28 20:47:11 | 000,013,931 | ---- | C] () -- E:\WINDOWS\System32\RaCoInst.dat
[2010-08-28 16:39:34 | 000,211,189 | ---- | C] () -- E:\WINDOWS\hpoins46.dat
[2010-08-28 16:39:32 | 000,000,532 | ---- | C] () -- E:\WINDOWS\hpomdl46.dat
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2012-06-04 15:30:09 | 000,000,000 | ---D | M] -- E:\Documents and Settings\All Users\Dane aplikacji\LogMeIn
[2010-08-28 20:47:06 | 000,000,000 | ---D | M] -- E:\Documents and Settings\All Users\Dane aplikacji\Ralink Driver
[2010-02-23 01:49:01 | 000,000,000 | ---D | M] -- E:\Documents and Settings\Ryszard\Dane aplikacji\Leadertech
[2012-06-04 15:34:58 | 000,000,330 | -H-- | M] () -- E:\WINDOWS\Tasks\MP Scheduled Scan.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 

< End of report >