OTL logfile created on: 2012-06-14 15:58:23 - Run 2
OTL by OldTimer - Version 3.2.48.0     Folder = C:\Users\asix\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18882)
Locale: 00000415 | Country: Poland | Language: PLK | Date Format: yyyy-MM-dd
 
1,99 Gb Total Physical Memory | 1,20 Gb Available Physical Memory | 60,44% Memory free
4,23 Gb Paging File | 3,53 Gb Available in Paging File | 83,46% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 110,32 Gb Total Space | 38,21 Gb Free Space | 34,63% Space Free | Partition Type: NTFS
 
Computer Name: ASIX-PC | User Name: asix | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-06-14 15:22:34 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\asix\Desktop\OTL.exe
PRC - [2011-03-18 20:04:29 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2010-12-09 10:10:56 | 001,435,136 | ---- | M] (Mitsubishi Electric Corporation) -- C:\Program Files\MELSOFT\MSF\Common\MMS\MMSserve.exe
PRC - [2010-04-07 14:57:42 | 000,099,896 | ---- | M] (HP) -- C:\Windows\System32\HPSIsvc.exe
PRC - [2009-05-14 16:47:54 | 000,731,840 | ---- | M] (ESET) -- C:\Program Files\ESET NOD32 Antivirus\ekrn.exe
PRC - [2009-05-14 16:47:08 | 002,029,640 | ---- | M] (ESET) -- C:\Program Files\ESET NOD32 Antivirus\egui.exe
PRC - [2009-04-11 00:27:38 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2012-05-28 13:13:10 | 008,797,856 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32_11_2_202_235.dll
MOD - [2011-03-18 20:04:29 | 001,874,904 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2010-01-30 03:41:12 | 004,254,560 | ---- | M] () -- C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
MOD - [2009-12-12 16:12:03 | 000,141,824 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll
MOD - [2006-11-06 09:05:40 | 000,061,440 | ---- | M] () -- C:\Windows\System32\igfxTMM.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [Auto | Stopped] -- %SYSTEMROOT%\system32\wscsvc.dll -- (wscsvc)
SRV - [2011-12-07 23:27:18 | 000,008,192 | ---- | M] () [Auto | Stopped] -- C:\Windows\System32\srvany.exe -- (KMService)
SRV - [2011-10-08 22:03:59 | 000,651,720 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010-12-09 10:10:56 | 001,435,136 | ---- | M] (Mitsubishi Electric Corporation) [Auto | Running] -- C:\Program Files\MELSOFT\MSF\Common\MMS\MMSserve.exe -- (MELSOFT Mediative Server)
SRV - [2010-04-07 14:57:42 | 000,099,896 | ---- | M] (HP) [Auto | Running] -- C:\Windows\System32\HPSIsvc.exe -- (HPSIService)
SRV - [2010-03-25 11:25:22 | 030,969,208 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service)
SRV - [2009-05-14 16:54:22 | 000,020,680 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET NOD32 Antivirus\EHttpSrv.exe -- (EhttpSrv)
SRV - [2009-05-14 16:47:54 | 000,731,840 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET NOD32 Antivirus\ekrn.exe -- (ekrn)
SRV - [2008-01-19 00:38:26 | 000,272,952 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007-03-06 10:35:02 | 000,198,168 | ---- | M] (InterVideo Inc.) [Disabled | Stopped] -- C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe -- (Capture Device Service)
SRV - [2006-11-23 03:45:28 | 000,425,648 | ---- | M] (TOSHIBA Corporation) [Disabled | Stopped] -- C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe -- (TosCoSrv)
SRV - [2006-11-02 11:45:35 | 000,009,216 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\System32\regedt32.exe -- (.EsetTrialReset)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | Auto | Stopped] -- system32\DRIVERS\xaudio.sys -- (XAudio)
DRV - File not found [Kernel | System | Stopped] --  -- (Tosrfcom)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\asix\AppData\Roaming\TZAC\tizek32.sys -- (tizekdrv)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | Auto | Stopped] -- system32\DRIVERS\mdmxsdk.sys -- (mdmxsdk)
DRV - File not found [Kernel | On_Demand | Unknown] -- C:\Users\asix\AppData\Local\Temp\mbr.sys -- (mbr)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\HSXHWAZL.sys -- (HSXHWAZL)
DRV - File not found [Kernel | On_Demand | Running] -- C:\ComboFix\catchme.sys -- (catchme)
DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\blbdrive.sys -- (blbdrive)
DRV - [2011-09-15 11:25:19 | 000,232,512 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2010-10-31 13:19:49 | 000,717,296 | ---- | M] (Duplex Secure Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\sptd.sys -- (sptd)
DRV - [2010-03-06 01:40:57 | 000,017,408 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mvusbews.sys -- (mvusbews)
DRV - [2010-01-18 01:43:00 | 000,196,064 | ---- | M] (Jungo) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\windrvr6.sys -- (WinDriver6)
DRV - [2009-05-14 16:49:34 | 000,093,312 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\epfwwfpr.sys -- (epfwwfpr)
DRV - [2009-05-14 16:47:14 | 000,107,256 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\System32\drivers\ehdrv.sys -- (ehdrv)
DRV - [2009-05-14 16:41:10 | 000,114,472 | ---- | M] (ESET) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\eamon.sys -- (eamon)
DRV - [2007-12-06 14:40:12 | 000,761,856 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2007-11-09 06:00:52 | 000,023,640 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\TVALZ_O.SYS -- (TVALZ)
DRV - [2006-11-21 04:14:28 | 000,033,792 | ---- | M] (TOSHIBA) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\qkbfiltr.sys -- (qkbfiltr)
DRV - [2006-11-17 23:08:36 | 000,145,920 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CHDART.sys -- (HdAudAddService)
DRV - [2006-11-02 09:30:55 | 000,200,704 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\e1e6032.sys -- (e1express) Intel(R)
DRV - [2006-11-02 09:30:54 | 001,781,760 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\NETw3v32.sys -- (NETw3v32) Intel(R)
DRV - [2006-10-24 02:32:20 | 000,009,216 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfec.sys -- (tosrfec)
DRV - [2006-10-12 19:18:14 | 000,007,680 | ---- | M] (Quanta Computer Corp) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\BoiHwSetup.sys -- (BoiHwsetup)
DRV - [2006-09-28 05:06:56 | 000,479,488 | ---- | M] (TOSHIBA CORPORATION) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\kr3npxp.sys -- (KR3NPXP)
DRV - [2006-07-06 23:44:00 | 000,168,448 | ---- | M] (Texas Instruments) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tifm21.sys -- (tifm21)
DRV - [2006-02-14 20:50:52 | 000,216,320 | ---- | M] (TOSHIBA CORPORATION) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\KR10I.sys -- (KR10I)
DRV - [2005-09-28 01:57:38 | 000,207,104 | ---- | M] (TOSHIBA CORPORATION) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\KR10N.sys -- (KR10N)
DRV - [2001-09-07 03:09:36 | 000,038,912 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lvcd.sys -- (QCDonner) Logitech QuickCam Express(PID_0840)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-3995180117-740364809-1315259007-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com/?l=dis&o=41647997&gct=hp
IE - HKU\S-1-5-21-3995180117-740364809-1315259007-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-3995180117-740364809-1315259007-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-3995180117-740364809-1315259007-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC
IE - HKU\S-1-5-21-3995180117-740364809-1315259007-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rlz=1I7TSHB_en&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKU\S-1-5-21-3995180117-740364809-1315259007-1000\..\SearchScopes\{9AF33DAB-D35D-4A1F-A0BA-BEE4B7D5BC38}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=MPC2&o=41647997&src=crm&q={searchTerms}&locale=&apn_ptnrs=8E&apn_dtid=YYYYYYM1PL&apn_uid=2c1cc40a-7bab-40e4-a17d-f3c884a805c9&apn_sauid=C5B26761-6493-4676-B7D5-AE3FE566C7BA
IE - HKU\S-1-5-21-3995180117-740364809-1315259007-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-3995180117-740364809-1315259007-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.update: false
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.onet.pl"
FF - prefs.js..extensions.enabledItems: toolbar@ask.com:3.11.3.15590
FF - prefs.js..extensions.enabledItems: {3d7eb24f-2740-49df-8937-200b1cc08f8a}:1.5.11.2
FF - prefs.js..keyword.URL: "http://startsear.ch/?q="
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_2_202_235.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2852: C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.46: C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1662: C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.46: C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 4.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-03-24 20:11:41 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 4.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-02-21 14:39:11 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET NOD32 Antivirus\Mozilla Thunderbird [2010-03-15 20:00:43 | 000,000,000 | ---D | M]
 
[2010-03-15 23:30:47 | 000,000,000 | ---D | M] (No name found) -- C:\Users\asix\AppData\Roaming\mozilla\Extensions
[2012-02-21 14:36:09 | 000,000,000 | ---D | M] (No name found) -- C:\Users\asix\AppData\Roaming\mozilla\Firefox\Profiles\j96l79ea.default\extensions
[2010-03-15 23:35:29 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\asix\AppData\Roaming\mozilla\Firefox\Profiles\j96l79ea.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011-03-24 20:11:59 | 000,000,000 | ---D | M] (Flashblock) -- C:\Users\asix\AppData\Roaming\mozilla\Firefox\Profiles\j96l79ea.default\extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a}
[2012-04-03 16:30:31 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012-04-03 16:30:31 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}
[2011-03-24 20:14:07 | 000,418,041 | ---- | M] () (No name found) -- C:\USERS\ASIX\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\J96L79EA.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
[2011-03-18 20:04:29 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012-04-03 16:30:17 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2010-01-01 10:00:00 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2010-01-01 10:00:00 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2010-01-01 10:00:00 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2010-01-01 10:00:00 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2010-01-01 10:00:00 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2010-01-01 10:00:00 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2012-06-14 15:39:26 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (IeCatch2 Class) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\Program Files\FlashGet\Jccatch.dll (Amaze Soft)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O4 - HKLM..\Run: [egui] C:\Program Files\ESET NOD32 Antivirus\egui.exe (ESET)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-3995180117-740364809-1315259007-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-3995180117-740364809-1315259007-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-3995180117-740364809-1315259007-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 95 00 00 00  [binary data]
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Ściągnij przy pomocy FlashGet'a - C:\Program Files\FlashGet\jc_link.htm ()
O8 - Extra context menu item: Ściągnij wszystko przy pomocy FlashGet'a - C:\Program Files\FlashGet\jc_all.htm ()
O8 - Extra context menu item: Wyślij &do programu OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\flashget.exe (Amaze Soft)
O9 - Extra 'Tools' menuitem : &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\flashget.exe (Amaze Soft)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab (Java Plug-in 1.6.0)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.179.1.62 62.179.1.63 0.0.0.0
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{175C4D85-A0E3-4104-8215-E88040D5EDFC}: DhcpNameServer = 192.168.0.1 0.0.0.0 0.0.0.0
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1E2B915A-B6CA-4F91-AF4C-59631A5DD4E9}: DhcpNameServer = 10.10.10.1 192.168.112.2 82.160.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{EDD6B41A-4C63-473A-A74A-AA4E41642F73}: DhcpNameServer = 62.179.1.62 62.179.1.63 0.0.0.0
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\asix\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O24 - Desktop BackupWallPaper: C:\Users\asix\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No CLSID value found.
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011-10-08 21:46:43 | 000,000,000 | ---D | M] - C:\Autodesk -- [ NTFS ]
O32 - AutoRun File - [2006-09-18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
MsConfig - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Microtek Scanner Finder.lnk - C:\Program Files\Microtek\ScanWizard 5\ScannerFinder.exe - ()
MsConfig - StartUpFolder: C:^Users^asix^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Reality Fusion GameCam SE.lnk -  - File not found
MsConfig - StartUpFolder: CCleaner.exe -  - File not found
MsConfig - StartUpReg: [b]BCSSync[/b] - hkey= - key= - C:\Program Files\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation)
MsConfig - StartUpReg: [b]DAEMON Tools Lite[/b] - hkey= - key= - C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
MsConfig - StartUpReg: [b]DXM6Patch_981116[/b] - hkey= - key= - C:\Windows\p_981116.exe (Microsoft Corporation)
MsConfig - StartUpReg: [b]Gadu-Gadu 10[/b] - hkey= - key= - C:\Program Files\Gadu-Gadu 10\gg.exe (GG Network S.A.)
MsConfig - StartUpReg: [b]HotKeysCmds[/b] - hkey= - key= -  File not found
MsConfig - StartUpReg: [b]IgfxTray[/b] - hkey= - key= -  File not found
MsConfig - StartUpReg: [b]IPLA![/b] - hkey= - key= - C:\Program Files\ipla\ipla.exe (Redefine Sp z o.o.)
MsConfig - StartUpReg: [b]LVCOMS[/b] - hkey= - key= - C:\Program Files\Common Files\Logitech\QCDriver\LVComS.exe (Logitech Inc.)
MsConfig - StartUpReg: [b]OfficeSyncProcess[/b] - hkey= - key= - C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE (Microsoft Corporation)
MsConfig - StartUpReg: [b]Persistence[/b] - hkey= - key= -  File not found
MsConfig - StartUpReg: [b]RealTray[/b] - hkey= - key= - C:\Program Files\K-Lite Codec Pack\Real\mpclauncher.exe ()
MsConfig - StartUpReg: [b]Skype[/b] - hkey= - key= - C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.)
MsConfig - StartUpReg: [b]SunJavaUpdateSched[/b] - hkey= - key= - C:\Program Files\Common Files\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
MsConfig - StartUpReg: [b]SynTPEnh[/b] - hkey= - key= - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics, Inc.)
MsConfig - StartUpReg: [b]TOSHIBA Volume Indicator[/b] - hkey= - key= - C:\Program Files\Toshiba\Utilities\VolControl.exe (TOSHIBA Inc.)
MsConfig - StartUpReg: [b]UVS11 Preload[/b] - hkey= - key= - C:\Program Files\Ulead Systems\Ulead VideoStudio 11\uvPL.exe (InterVideo Digital Technology Corporation)
MsConfig - StartUpReg: [b]Windows Defender[/b] - hkey= - key= -  File not found
MsConfig - StartUpReg: [b]WMPNSCFG[/b] - hkey= - key= - C:\Program Files\Windows Media Player\wmpnscfg.exe (Microsoft Corporation)
MsConfig - State: "bootini" - 2
 
NetSvcs: FastUserSwitchingCompatibility -  File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla -  File not found
NetSvcs: Ntmssvc -  File not found
NetSvcs: NWCWorkstation -  File not found
NetSvcs: Nwsapagent -  File not found
NetSvcs: SRService -  File not found
NetSvcs: WmdmPmSp -  File not found
NetSvcs: LogonHours -  File not found
NetSvcs: PCAudit -  File not found
NetSvcs: helpsvc -  File not found
NetSvcs: uploadmgr -  File not found
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012-06-14 15:45:04 | 000,000,000 | ---D | C] -- C:\Users\asix\AppData\Local\temp
[2012-06-14 15:43:38 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2012-06-14 15:24:37 | 000,000,000 | ---D | C] -- C:\ComboFix
[2012-06-14 15:24:20 | 000,000,000 | R--D | C] -- C:\Users\asix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2012-06-14 15:24:20 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
[2012-06-14 15:22:33 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Users\asix\Desktop\OTL.exe
[2012-06-14 15:21:31 | 004,557,483 | R--- | C] (Swearware) -- C:\Users\asix\Desktop\ComboFix.exe
[2012-06-13 20:21:25 | 000,000,000 | ---D | C] -- C:\Users\asix\Desktop\mech nat
[2012-06-13 19:14:12 | 000,000,000 | ---D | C] -- C:\Users\asix\Desktop\reprcik1kokoswyniki
[2012-06-12 21:36:27 | 000,000,000 | ---D | C] -- C:\Users\asix\Desktop\automatyzacja
[2012-06-11 13:20:43 | 000,000,000 | ---D | C] -- C:\Users\asix\Desktop\bateria
[2012-06-09 14:02:56 | 000,000,000 | ---D | C] -- C:\downloadss
[2012-06-07 14:16:36 | 000,000,000 | ---D | C] -- C:\Users\asix\Desktop\kotki
[2012-06-07 01:14:37 | 000,000,000 | ---D | C] -- C:\Users\asix\Desktop\wesele
[2012-05-30 18:08:51 | 000,000,000 | ---D | C] -- C:\Users\asix\Desktop\Praca dyplomowa Joanna Szebla 2012
[2012-05-28 13:11:19 | 000,419,488 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2012-05-28 13:11:19 | 000,070,304 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2012-05-18 17:02:23 | 000,000,000 | ---D | C] -- C:\Program Files\Tony Hawks Pro Skater 4
[2012-05-18 12:26:37 | 000,597,504 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System32\Ltocx12n.ocx
[2012-05-18 12:26:37 | 000,406,016 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System32\Ltkrn12n.dll
[2012-05-18 12:26:37 | 000,314,368 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System32\Lfcmp12n.dll
[2012-05-18 12:26:37 | 000,278,528 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System32\Ltdis12n.dll
[2012-05-18 12:26:37 | 000,227,840 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System32\Ltefx12n.dll
[2012-05-18 12:26:37 | 000,166,400 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System32\Ltimg12n.dll
[2012-05-18 12:26:37 | 000,121,344 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System32\Ltfil12n.dll
[2012-05-18 12:26:37 | 000,041,472 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System32\Lttwn12n.dll
[2012-05-18 12:26:37 | 000,036,864 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System32\Lfbmp12n.dll
[2012-05-18 12:24:33 | 000,924,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFC44452.rra
[2012-05-18 12:23:36 | 000,067,581 | ---- | C] (MITSUBISHI ELECTRIC CORPORATION) -- C:\Windows\System32\drivers\sscpci2k.sys
[2012-05-18 12:23:36 | 000,066,970 | ---- | C] (MITSUBISHI ELECTRIC CORPORATION) -- C:\Windows\System32\drivers\sscpdrv2k.sys
[2012-05-18 12:20:33 | 003,783,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc90u.dll
[2012-05-18 12:20:33 | 000,572,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcp90.dll
[2012-05-18 12:20:33 | 000,225,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcm90.dll
[2012-05-18 12:20:32 | 003,768,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc90.dll
[2012-05-18 12:20:32 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Shared
[2012-05-18 12:20:31 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42loc.dll
[2012-05-18 12:20:31 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFC40LOC.DLL
[2012-05-18 12:18:02 | 000,196,064 | ---- | C] (Jungo) -- C:\Windows\System32\drivers\windrvr6.sys
[2012-05-18 12:12:59 | 000,369,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VBDB32.DLL
[2012-05-18 12:12:59 | 000,252,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSRD2X35.DLL
[2012-05-18 12:12:59 | 000,244,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vbar2232.dll
[2012-05-18 12:07:05 | 001,238,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msjt4jlt.dll
[2012-05-18 12:07:05 | 001,050,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msjet35.dll
[2012-05-18 12:07:05 | 001,013,144 | ---- | C] (FarPoint Technologies, Inc.) -- C:\Windows\System32\SPR32X30.ocx
[2012-05-18 12:07:05 | 000,938,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msjt3032.dll
[2012-05-18 12:07:05 | 000,415,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrepl35.dll
[2012-05-18 12:07:05 | 000,261,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSRD2X32.DLL
[2012-05-18 12:07:05 | 000,123,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSJINT35.DLL
[2012-05-18 12:07:05 | 000,098,356 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msjter32.dll
[2012-05-18 12:07:05 | 000,035,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msjint32.dll
[2012-05-18 12:07:05 | 000,024,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSJTER35.DLL
[2012-05-18 12:07:04 | 000,368,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VBAR332.DLL
[2012-05-18 12:07:04 | 000,309,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSWNG300.DLL
[2012-05-18 12:07:04 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFC71DEU.DLL
[2012-05-18 12:07:04 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFC71ITA.DLL
[2012-05-18 12:07:04 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFC71FRA.DLL
[2012-05-18 12:07:04 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFC71ESP.DLL
[2012-05-18 12:07:04 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFC71ENU.DLL
[2012-05-18 12:07:04 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFC71KOR.DLL
[2012-05-18 12:07:04 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFC71JPN.DLL
[2012-05-18 12:07:04 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFC71CHT.DLL
[2012-05-18 12:07:04 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFC71CHS.DLL
[2012-05-18 12:01:11 | 000,000,000 | ---D | C] -- C:\Users\asix\AppData\Roaming\GT Designer3
[2012-05-18 12:01:08 | 000,000,000 | ---D | C] -- C:\Users\asix\Documents\1
[2012-05-17 16:55:05 | 000,000,000 | ---D | C] -- C:\Users\asix\AppData\Local\MITSUBISHI
[2012-05-17 16:52:47 | 000,000,000 | ---D | C] -- C:\Program Files\EZSocket
[2012-05-17 16:50:23 | 000,200,704 | ---- | C] (Sheridan Software Systems, Inc.) -- C:\Windows\System32\THREED32.OCX
[2012-05-17 16:49:39 | 002,286,944 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System32\Ltwvcu.dll
[2012-05-17 16:49:39 | 000,756,736 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System32\ltocx13n.ocx
[2012-05-17 16:49:39 | 000,606,208 | ---- | C] (ComponentOne) -- C:\Windows\System32\vsflex8n.ocx
[2012-05-17 16:49:39 | 000,570,928 | ---- | C] (ComponentOne) -- C:\Windows\System32\vsflex8l.ocx
[2012-05-17 16:49:39 | 000,501,088 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System32\Ltkrnu.dll
[2012-05-17 16:49:39 | 000,453,120 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System32\ltkrn13n.dll
[2012-05-17 16:49:39 | 000,444,928 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System32\ltimg13n.dll
[2012-05-17 16:49:39 | 000,206,336 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System32\ltefx13n.dll
[2012-05-17 16:49:39 | 000,199,168 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System32\ltscr13n.ocx
[2012-05-17 16:49:39 | 000,153,088 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System32\ltfil13n.DLL
[2012-05-17 16:49:39 | 000,143,360 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System32\lftif13n.dll
[2012-05-17 16:49:39 | 000,136,544 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System32\Ltscru.dll
[2012-05-17 16:49:39 | 000,090,112 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System32\lfjbg13n.dll
[2012-05-17 16:49:39 | 000,073,728 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System32\lffax13n.dll
[2012-05-17 16:49:39 | 000,044,032 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System32\lttwn13n.dll
[2012-05-17 16:49:39 | 000,030,208 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System32\lfbmp13n.dll
[2012-05-17 16:49:39 | 000,018,944 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System32\lfmsp13n.dll
[2012-05-17 16:49:38 | 001,693,696 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System32\LTCLR13n.dll
[2012-05-17 16:49:38 | 001,053,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFC71u.dll
[2012-05-17 16:49:38 | 000,643,072 | ---- | C] (Exontrol Inc.) -- C:\Windows\System32\ExEditU.dll
[2012-05-17 16:49:38 | 000,420,352 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System32\LFCMP13n.DLL
[2012-05-17 16:49:38 | 000,386,400 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System32\Lfcmpu.dll
[2012-05-17 16:49:38 | 000,278,016 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System32\LFJ2K13n.dll
[2012-05-17 16:49:38 | 000,270,336 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System32\LTDIS13n.dll
[2012-05-17 16:49:38 | 000,267,616 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System32\Ltdisu.dll
[2012-05-17 16:49:38 | 000,189,792 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System32\Ltfilu.dll
[2012-05-17 16:49:38 | 000,170,496 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System32\LTSCR13n.DLL
[2012-05-17 16:49:38 | 000,030,560 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\System32\Lfbmpu.dll
[2012-05-17 16:49:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MELSOFT Application
[2012-05-17 16:49:33 | 000,000,000 | ---D | C] -- C:\Program Files\MELSOFT
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012-06-14 15:46:39 | 000,590,082 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012-06-14 15:46:39 | 000,102,094 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012-06-14 15:40:10 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012-06-14 15:40:10 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012-06-14 15:39:26 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2012-06-14 15:39:09 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012-06-14 15:39:06 | 2137,186,304 | -HS- | M] () -- C:\hiberfil.sys
[2012-06-14 15:22:34 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\asix\Desktop\OTL.exe
[2012-06-14 15:21:52 | 004,557,483 | R--- | M] (Swearware) -- C:\Users\asix\Desktop\ComboFix.exe
[2012-06-13 22:45:41 | 001,399,748 | ---- | M] () -- C:\Users\asix\Desktop\IMG_20120613_224235.jpg
[2012-06-13 22:45:05 | 000,161,369 | ---- | M] () -- C:\Users\asix\Desktop\erde.jpg
[2012-06-13 20:00:41 | 000,113,389 | ---- | M] () -- C:\Users\asix\Desktop\imag0007rq.jpg
[2012-06-12 14:51:07 | 000,013,200 | ---- | M] () -- C:\Users\asix\Desktop\2011-2012 21A4 wyniki testu - temin 1.pdf
[2012-06-12 11:15:23 | 000,199,139 | ---- | M] () -- C:\Users\asix\Desktop\CURRICULUM VITAE Joanna Szebla.pdf
[2012-06-12 00:08:35 | 000,784,936 | ---- | M] () -- C:\Users\asix\Desktop\opracowaniev.pdf
[2012-06-11 20:46:34 | 000,216,342 | ---- | M] () -- C:\Users\asix\Desktop\20120611402.jpg
[2012-06-10 17:55:18 | 000,166,400 | ---- | M] () -- C:\Users\asix\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-06-10 10:43:05 | 000,363,370 | ---- | M] () -- C:\Users\asix\Desktop\sprawozdanie odw.pdf
[2012-06-10 10:42:24 | 001,265,892 | ---- | M] () -- C:\Users\asix\Desktop\projekt_1_2_gawlik kogos.zip
[2012-06-09 16:11:22 | 000,016,735 | ---- | M] () -- C:\Users\asix\Desktop\2009 Zagadnienia do zaliczenia.pdf
[2012-06-09 16:11:21 | 008,512,383 | ---- | M] () -- C:\Users\asix\Desktop\Materiały dydaktyczne - Planowanie doświadczeń.pdf
[2012-06-09 13:33:58 | 000,000,463 | -H-- | M] () -- C:\Users\asix\Desktop\Nagranie001.amr.ini
[2012-06-05 23:28:48 | 000,032,848 | ---- | M] () -- C:\Users\asix\Desktop\LAB_Mech_Man_2012.pdf
[2012-05-28 13:13:10 | 000,419,488 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2012-05-28 13:13:10 | 000,070,304 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2012-05-18 12:01:08 | 000,000,606 | ---- | M] () -- C:\Users\asix\Documents\workspacelist.xml
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012-06-13 22:45:39 | 001,399,748 | ---- | C] () -- C:\Users\asix\Desktop\IMG_20120613_224235.jpg
[2012-06-13 22:45:05 | 000,161,369 | ---- | C] () -- C:\Users\asix\Desktop\erde.jpg
[2012-06-13 20:00:40 | 000,113,389 | ---- | C] () -- C:\Users\asix\Desktop\imag0007rq.jpg
[2012-06-12 14:51:06 | 000,013,200 | ---- | C] () -- C:\Users\asix\Desktop\2011-2012 21A4 wyniki testu - temin 1.pdf
[2012-06-12 11:15:22 | 000,199,139 | ---- | C] () -- C:\Users\asix\Desktop\CURRICULUM VITAE Joanna Szebla.pdf
[2012-06-12 00:08:32 | 000,784,936 | ---- | C] () -- C:\Users\asix\Desktop\opracowaniev.pdf
[2012-06-11 20:45:59 | 000,216,342 | ---- | C] () -- C:\Users\asix\Desktop\20120611402.jpg
[2012-06-10 10:43:04 | 000,363,370 | ---- | C] () -- C:\Users\asix\Desktop\sprawozdanie odw.pdf
[2012-06-10 10:42:23 | 001,265,892 | ---- | C] () -- C:\Users\asix\Desktop\projekt_1_2_gawlik kogos.zip
[2012-06-09 16:11:21 | 000,016,735 | ---- | C] () -- C:\Users\asix\Desktop\2009 Zagadnienia do zaliczenia.pdf
[2012-06-09 16:11:09 | 008,512,383 | ---- | C] () -- C:\Users\asix\Desktop\Materiały dydaktyczne - Planowanie doświadczeń.pdf
[2012-06-05 23:28:33 | 000,032,848 | ---- | C] () -- C:\Users\asix\Desktop\LAB_Mech_Man_2012.pdf
[2012-05-18 12:01:08 | 000,000,606 | ---- | C] () -- C:\Users\asix\Documents\workspacelist.xml
[2012-04-18 16:59:01 | 000,000,833 | ---- | C] () -- C:\Windows\vissim.ini
[2011-12-27 22:37:10 | 000,000,035 | ---- | C] () -- C:\Windows\Ulead32.INI
[2011-12-27 22:36:45 | 000,285,216 | ---- | C] () -- C:\Windows\System32\drivers\Onsio.sys
[2011-12-27 22:36:45 | 000,007,680 | ---- | C] () -- C:\Windows\System32\drivers\Onsreged.sys
[2011-12-23 19:48:57 | 000,002,432 | ---- | C] () -- C:\Users\asix\AppData\Local\TempDr1932.html
[2011-12-22 22:13:04 | 000,000,039 | ---- | C] () -- C:\Windows\WININIT.INI
[2011-12-22 21:55:16 | 000,166,400 | ---- | C] () -- C:\Windows\RemLomax.exe
[2011-12-07 23:28:11 | 000,008,192 | ---- | C] () -- C:\Windows\System32\srvany.exe
[2011-12-06 11:36:26 | 001,511,424 | ---- | C] () -- C:\Windows\System32\HP1100SM.EXE
[2011-12-06 11:36:26 | 000,147,456 | ---- | C] () -- C:\Windows\System32\HP1100LM.DLL
[2011-12-06 11:33:44 | 000,284,160 | ---- | C] () -- C:\Windows\System32\mvhlewsi.DLL
[2011-12-06 11:33:41 | 000,049,664 | ---- | C] () -- C:\Windows\System32\HP1100SMs.dll
[2011-12-05 23:55:39 | 000,002,432 | ---- | C] () -- C:\Users\asix\AppData\Local\TempWW3136.html
[2011-12-04 21:53:30 | 000,002,432 | ---- | C] () -- C:\Users\asix\AppData\Local\TempYa2836.html
[2011-11-08 00:03:44 | 000,002,432 | ---- | C] () -- C:\Users\asix\AppData\Local\TempLw2868.html
[2011-11-07 23:58:38 | 000,002,432 | ---- | C] () -- C:\Users\asix\AppData\Local\TempCH2868.html
[2011-11-06 14:04:48 | 000,045,568 | ---- | C] () -- C:\Windows\UniFish3.exe
[2011-10-31 21:53:37 | 000,002,432 | ---- | C] () -- C:\Users\asix\AppData\Local\TempaP3224.html
[2011-10-09 13:16:14 | 000,022,328 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2011-10-09 13:16:07 | 000,103,736 | ---- | C] () -- C:\Windows\System32\PnkBstrB.exe
[2011-10-09 13:16:01 | 000,066,872 | ---- | C] () -- C:\Windows\System32\PnkBstrA.exe
[2011-09-27 00:46:13 | 000,000,056 | ---- | C] () -- C:\Windows\Kulki.ini
[2011-09-18 20:14:11 | 000,002,432 | ---- | C] () -- C:\Users\asix\AppData\Local\TempYx1636.html
[2011-09-17 20:47:46 | 000,002,432 | ---- | C] () -- C:\Users\asix\AppData\Local\TempXtw516.html
[2011-09-17 18:00:50 | 000,002,432 | ---- | C] () -- C:\Users\asix\AppData\Local\TempbZ1916.html
[2011-09-16 20:53:31 | 000,002,432 | ---- | C] () -- C:\Users\asix\AppData\Local\Temptc3676.html
[2011-08-31 20:59:49 | 000,002,432 | ---- | C] () -- C:\Users\asix\AppData\Local\TempDh1692.html
[2011-08-31 10:45:00 | 000,002,432 | ---- | C] () -- C:\Users\asix\AppData\Local\TempIoE700.html
[2011-08-28 20:11:42 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2011-08-28 20:11:42 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2011-08-28 20:11:42 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2011-08-28 20:11:42 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2011-08-28 20:11:42 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2011-05-24 17:55:58 | 000,004,096 | -H-- | C] () -- C:\Users\asix\AppData\Local\keyfile3.drm
[2011-05-22 18:45:31 | 000,081,920 | ---- | C] () -- C:\Windows\System32\mvusbews.dll
[2010-11-22 21:05:54 | 000,000,000 | ---- | C] () -- C:\Windows\MTSTACK.INI
[2010-11-22 21:02:05 | 000,045,056 | ---- | C] () -- C:\Windows\System32\MTSTACK.EXE
[2010-08-06 20:30:17 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.INI
[2010-07-21 20:29:51 | 000,061,440 | ---- | C] () -- C:\Windows\System32\igfxTMM.dll
[2010-07-21 20:29:51 | 000,053,248 | ---- | C] () -- C:\Windows\System32\oemdspif.dll
[2010-07-21 20:12:18 | 000,000,680 | ---- | C] () -- C:\Users\asix\AppData\Local\d3d9caps.dat
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2010-12-09 23:20:16 | 000,000,000 | ---D | M] -- C:\Users\asix\AppData\Roaming\Ansys
[2011-10-13 00:11:19 | 000,000,000 | ---D | M] -- C:\Users\asix\AppData\Roaming\Autodesk
[2010-10-31 13:19:48 | 000,000,000 | ---D | M] -- C:\Users\asix\AppData\Roaming\DAEMON Tools
[2012-05-18 19:40:45 | 000,000,000 | ---D | M] -- C:\Users\asix\AppData\Roaming\DAEMON Tools Lite
[2010-05-09 13:39:58 | 000,000,000 | ---D | M] -- C:\Users\asix\AppData\Roaming\DassaultSystemes
[2012-05-31 17:31:26 | 000,000,000 | ---D | M] -- C:\Users\asix\AppData\Roaming\foobar2000
[2011-12-04 21:53:29 | 000,000,000 | ---D | M] -- C:\Users\asix\AppData\Roaming\Gadu-Gadu 10
[2012-05-18 13:30:12 | 000,000,000 | ---D | M] -- C:\Users\asix\AppData\Roaming\GT Designer3
[2011-12-24 16:55:18 | 000,000,000 | ---D | M] -- C:\Users\asix\AppData\Roaming\ipla
[2011-05-21 12:41:44 | 000,000,000 | ---D | M] -- C:\Users\asix\AppData\Roaming\IrfanView
[2010-11-28 01:30:40 | 000,000,000 | ---D | M] -- C:\Users\asix\AppData\Roaming\Mathsoft
[2010-07-01 23:17:26 | 000,000,000 | ---D | M] -- C:\Users\asix\AppData\Roaming\OpenFM
[2012-05-04 23:23:50 | 000,000,000 | ---D | M] -- C:\Users\asix\AppData\Roaming\PotPlayerMini
[2010-12-28 20:19:03 | 000,000,000 | ---D | M] -- C:\Users\asix\AppData\Roaming\SuperMemo World
[2012-06-13 11:48:56 | 000,000,000 | ---D | M] -- C:\Users\asix\AppData\Roaming\Tlen.pl
[2010-05-13 20:01:38 | 000,000,000 | ---D | M] -- C:\Users\asix\AppData\Roaming\Ulead Systems
[2012-01-30 13:49:03 | 000,000,000 | ---D | M] -- C:\Users\asix\AppData\Roaming\URSE Games
[2012-06-14 11:19:40 | 000,000,000 | ---D | M] -- C:\Users\asix\AppData\Roaming\uTorrent
[2012-06-14 15:37:28 | 000,032,562 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Custom Scans ==========[/color]
 
[color=#A23BEC]< %systemdrive%\*.* >[/color]
[2012-03-31 16:19:02 | 000,000,000 | ---- | M] () -- C:\AILog.txt
[2006-09-18 23:43:36 | 000,000,024 | ---- | M] () -- C:\autoexec.bat
[2009-04-11 00:36:38 | 000,333,257 | RHS- | M] () -- C:\bootmgr
[2006-12-01 01:26:20 | 000,008,192 | R-S- | M] () -- C:\BOOTSECT.BAK
[2012-06-14 15:45:02 | 000,011,919 | ---- | M] () -- C:\ComboFix.txt
[2006-09-18 23:43:37 | 000,000,010 | ---- | M] () -- C:\config.sys
[2012-06-14 15:39:06 | 2137,186,304 | -HS- | M] () -- C:\hiberfil.sys
[2010-04-28 12:26:49 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2010-04-28 12:26:49 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2012-06-14 15:39:02 | 2450,976,768 | -HS- | M] () -- C:\pagefile.sys

< End of report >