OTL logfile created on: 2012-07-08 09:44:06 - Run 1
OTL by OldTimer - Version 3.2.43.1     Folder = K:\
Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
2,00 Gb Total Physical Memory | 1,75 Gb Available Physical Memory | 87,68% Memory free
3,85 Gb Paging File | 3,78 Gb Available in Paging File | 98,20% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 37,55 Gb Total Space | 10,49 Gb Free Space | 27,93% Space Free | Partition Type: NTFS
Drive D: | 195,32 Gb Total Space | 124,62 Gb Free Space | 63,80% Space Free | Partition Type: NTFS
Drive F: | 3,60 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive H: | 6,67 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive K: | 3,73 Gb Total Space | 1,19 Gb Free Space | 31,97% Space Free | Partition Type: FAT32
 
Computer Name: LUKASZ | User Name: wyszo | Logged in as Administrator.
Boot Mode: SafeMode | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-07-08 09:37:16 | 000,595,968 | ---- | M] (OldTimer Tools) -- K:\24960-OTL.exe
PRC - [2008-04-14 19:21:16 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007-11-12 16:14:48 | 000,487,424 | ---- | M] () -- C:\Program Files\WLAN_Software\ZD1211B\ZDWLan.EXE
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2007-11-12 16:14:48 | 000,487,424 | ---- | M] () -- C:\Program Files\WLAN_Software\ZD1211B\ZDWLan.EXE
MOD - [2007-11-12 16:09:50 | 000,045,056 | ---- | M] () -- C:\Program Files\WLAN_Software\ZD1211B\ZDWlan.DLL
MOD - [2005-11-10 16:50:18 | 000,212,992 | ---- | M] () -- C:\Program Files\WLAN_Software\ZD1211B\dot1x_dll.dll
MOD - [2005-10-19 11:17:58 | 000,073,728 | ---- | M] () -- C:\Program Files\ATI Technologies\ATI.ACE\atiacmxx.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [On_Demand | Stopped] -- %SystemRoot%\System32\appmgmts.dll -- (AppMgmt)
SRV - [2012-06-24 22:12:35 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012-06-17 21:35:40 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012-03-07 12:09:32 | 004,033,024 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\WINDOWS\system32\GameMon.des -- (npggsvc)
SRV - [2012-03-07 02:15:14 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Stopped] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2011-09-15 12:06:04 | 000,088,576 | ---- | M] () [Auto | Stopped] -- C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe -- (PassThru Service)
SRV - [2005-01-27 10:33:58 | 000,036,864 | ---- | M] () [Auto | Stopped] -- C:\WINDOWS\system32\o2flash.exe -- (O2Flash)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] --  -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] --  -- (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\wyszo\USTAWI~1\Temp\catchme.sys -- (catchme)
DRV - [2012-03-07 02:03:51 | 000,612,184 | ---- | M] (AVAST Software) [File_System | System | Stopped] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2012-03-07 02:03:38 | 000,337,880 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2012-03-07 02:02:00 | 000,035,672 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2012-03-07 02:01:53 | 000,053,848 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2012-03-07 02:01:39 | 000,095,704 | ---- | M] (AVAST Software) [File_System | Auto | Stopped] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2012-03-07 02:01:30 | 000,020,696 | ---- | M] (AVAST Software) [File_System | Auto | Stopped] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2012-03-07 01:58:29 | 000,024,920 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2012-01-29 02:40:02 | 000,242,240 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2012-01-11 01:41:12 | 000,020,608 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\BRGSp50.sys -- (BRGSp50)
DRV - [2012-01-11 01:41:12 | 000,017,664 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ZDPSp50.sys -- (ZDPSp50)
DRV - [2010-06-22 19:01:50 | 000,021,248 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\htcnprot.sys -- (htcnprot)
DRV - [2009-06-10 01:49:32 | 000,024,576 | ---- | M] (HTC, Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ANDROIDUSB.sys -- (HTCAND32)
DRV - [2007-06-25 21:29:52 | 000,500,736 | ---- | M] (Atheros Technology Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ZD1211BU.sys -- (ZD1211BU(Atheros)) ZyDAS ZD1211B IEEE 802.11 b+g Wireless LAN Driver (USB)(Atheros)
DRV - [2006-03-23 05:36:34 | 000,006,861 | R--- | M] (Conexant Systems, Inc) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\UIUSYS.SYS -- (UIUSys)
DRV - [2006-03-23 05:36:30 | 000,995,712 | R--- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HSF_DPV.sys -- (HSF_DPV)
DRV - [2006-03-23 05:36:30 | 000,726,400 | R--- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf)
DRV - [2006-03-23 05:36:30 | 000,206,976 | R--- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HSFHWAZL.sys -- (HSFHWAZL)
DRV - [2006-02-16 12:51:36 | 004,156,416 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RtkHDAud.Sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2006-02-07 15:55:36 | 001,480,704 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2005-12-19 11:15:44 | 000,028,800 | ---- | M] (O2Micro ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\o2sd.sys -- (O2SDRDR)
DRV - [2005-12-05 01:55:30 | 001,428,096 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\w39n51.sys -- (w39n51) Intel(R)
DRV - [2005-11-28 13:09:26 | 000,013,568 | ---- | M] (Intel Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\s24trans.sys -- (s24trans)
DRV - [2005-08-05 04:51:26 | 000,034,144 | ---- | M] (O2Micro ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\o2media.sys -- (O2MDRDR)
DRV - [2005-04-22 23:34:56 | 000,052,608 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\TosRfhid.sys -- (Tosrfhid)
DRV - [2005-04-22 22:11:30 | 000,098,048 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\TosRfbd.sys -- (Tosrfbd)
DRV - [2004-12-21 12:38:12 | 000,034,816 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\tosrfusb.sys -- (Tosrfusb)
DRV - [2004-11-26 08:41:44 | 000,013,941 | R--- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\CIR.sys -- (MTC0301_CIR)
DRV - [2004-10-04 11:33:02 | 000,062,799 | ---- | M] (TOSHIBA Corporation) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\tosrfcom.sys -- (Tosrfcom)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://startsear.ch/?aff=1&cf=368528de-8bd8-11e1-921c-002163e39d0b
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
IE - HKU\S-1-5-21-1343024091-412668190-682003330-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://startsear.ch/?aff=1&cf=368528de-8bd8-11e1-921c-002163e39d0b
IE - HKU\S-1-5-21-1343024091-412668190-682003330-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultenginename: "Web Search"
FF - prefs.js..browser.search.order.1: "Web Search"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..keyword.URL: "http://startsear.ch/?aff=1&src=sp&cf=368528de-8bd8-11e1-921c-002163e39d0b&q="
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_3_300_262.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-03-24 19:19:25 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-06-17 21:35:41 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-04-21 19:34:40 | 000,000,000 | ---D | M]
 
[2012-01-15 17:43:41 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\wyszo\Dane aplikacji\Mozilla\Extensions
[2012-06-07 22:00:18 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\wyszo\Dane aplikacji\Mozilla\Firefox\Profiles\xqwme6d5.default\extensions
[2012-06-07 22:00:18 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\wyszo\Dane aplikacji\Mozilla\Firefox\Profiles\xqwme6d5.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2012-02-25 14:06:33 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012-03-24 19:19:25 | 000,000,000 | ---D | M] (avast! WebRep) -- C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF
[2012-06-17 21:35:40 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012-01-02 11:48:42 | 000,083,456 | ---- | M] (StartSearch ) -- C:\Program Files\mozilla firefox\plugins\npvsharetvplg.dll
[2012-02-25 14:06:23 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2012-02-25 14:06:23 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2012-02-25 14:06:23 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2012-02-25 14:06:23 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2012-02-25 14:06:23 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2012-02-25 14:06:23 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2012-07-08 08:35:38 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [ATICCC] C:\Program Files\ATI Technologies\ATI.ACE\cli.exe (ATI Technologies Inc.)
O4 - HKLM..\Run: [AutoEJCD_0ACE20FF] C:\Program Files\AutoInstall\ZD1211B_Auto_Install_CD_Only_Gen_0ACE20FF\AutoEJCD.EXE ()
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [BluetoothAuthenticationAgent] C:\WINDOWS\System32\bthprops.cpl (Microsoft Corporation)
O4 - HKLM..\Run: [Browsers Protector] C:\Program Files\Browsers Protector\regmon32.exe ()
O4 - HKLM..\Run: [CIR] C:\WINDOWS\system32\drivers\CIR.exe (MTC)
O4 - HKLM..\Run: [EOUApp] C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe (Intel Corporation)
O4 - HKLM..\Run: [HTC Sync Loader] C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe ()
O4 - HKLM..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe (Intel Corporation)
O4 - HKLM..\Run: [IntelZeroConfig] C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe (Intel Corporation)
O4 - HKLM..\Run: [sdchange] C:\Documents and Settings\wyszo\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\1091\sdchange.exe ()
O4 - HKLM..\Run: [ZDWLan_Utility] C:\Program Files\WLAN_Software\ZD1211B\ZDWLan.EXE ()
O4 - HKU\S-1-5-21-1343024091-412668190-682003330-1004..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - Startup: C:\Documents and Settings\wyszo\Menu Start\Programy\Autostart\OpenOffice.org 3.3.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
O4 - Startup: C:\Documents and Settings\wyszo\Menu Start\Programy\Autostart\Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDockFree\ObjectDock.exe (Stardock)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1343024091-412668190-682003330-1004\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1343024091-412668190-682003330-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-1343024091-412668190-682003330-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-1343024091-412668190-682003330-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2E2AA293-761E-4B4D-B23D-FBC810AD1931}: DhcpNameServer = 10.0.0.1
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O22 - SharedTaskScheduler: {1984D045-52CF-49cd-DB77-08F378FEA4DB} - ObjectDockShellExt - C:\Program Files\Stardock\ObjectDockFree\ODMenu.dll (Stardock)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\wyszo\Moje dokumenty\Moje obrazy\Policja_Slaska.png
O24 - Desktop BackupWallPaper: C:\Documents and Settings\wyszo\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2012-01-11 01:11:18 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2004-08-26 05:15:32 | 000,000,027 | RH-- | M] () - F:\autorun.inf -- [ CDFS ]
O32 - AutoRun File - [2008-05-06 14:26:23 | 000,000,309 | R--- | M] () - H:\autorun.inf -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012-07-08 08:40:05 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2012-07-08 08:36:59 | 000,000,000 | ---D | C] -- C:\WINDOWS\temp
[2012-07-08 08:29:07 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2012-07-08 08:29:07 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2012-07-08 08:29:07 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2012-07-08 08:29:07 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2012-07-08 08:28:49 | 000,000,000 | ---D | C] -- C:\Qoobox
[2012-07-08 08:28:45 | 000,000,000 | R--D | C] -- C:\Documents and Settings\wyszo\Menu Start\Programy\Narzędzia administracyjne
[2012-07-08 08:28:45 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Dokumenty\Moje wideo
[2012-07-08 08:28:37 | 000,000,000 | ---D | C] -- C:\WINDOWS\erdnt
[2012-07-08 07:30:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\wyszo\Dane aplikacji\hellomoto
[2012-07-07 14:42:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\wyszo\Ustawienia lokalne\Dane aplikacji\Identities
[2012-07-06 05:18:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\wyszo\Pulpit\Nowy folder (2)
[2012-06-08 23:58:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\wyszo\Dane aplikacji\Skype
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012-07-08 09:26:17 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012-07-08 09:24:50 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012-07-08 08:42:17 | 001,119,952 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2012-07-08 08:42:17 | 000,501,904 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2012-07-08 08:42:17 | 000,442,548 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012-07-08 08:42:17 | 000,090,018 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2012-07-08 08:42:17 | 000,072,292 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012-07-08 08:39:09 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2012-07-08 08:38:13 | 005,505,024 | ---- | M] () -- C:\Documents and Settings\wyszo\NTUSER.DAT
[2012-07-08 08:38:13 | 000,000,188 | -HS- | M] () -- C:\Documents and Settings\wyszo\ntuser.ini
[2012-07-08 08:38:11 | 003,184,656 | -H-- | M] () -- C:\Documents and Settings\wyszo\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2012-07-08 08:35:44 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2012-07-08 08:35:38 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2012-07-08 08:12:15 | 000,000,930 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2012-07-07 13:58:07 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012-07-02 17:02:24 | 000,032,242 | ---- | M] () -- C:\Documents and Settings\wyszo\Pulpit\Wykonywanie poleceń uprawnionych organów oraz udzielanie pomocy i asysty.odt
[2012-06-24 22:12:35 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2012-06-24 22:12:34 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012-06-13 05:33:35 | 000,125,320 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012-06-13 01:52:48 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2012-06-12 20:39:37 | 000,024,576 | ---- | M] () -- C:\Documents and Settings\wyszo\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-06-08 23:38:42 | 001,124,393 | ---- | M] () -- C:\Documents and Settings\wyszo\Pulpit\obowiazki-policjanta-pelniacego-sluzbe-w-PDOZ.pdf
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012-07-08 08:29:07 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2012-07-08 08:29:07 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2012-07-08 08:29:07 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2012-07-08 08:29:07 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2012-07-08 08:29:07 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2012-07-08 08:23:34 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012-07-02 17:02:24 | 000,032,242 | ---- | C] () -- C:\Documents and Settings\wyszo\Pulpit\Wykonywanie poleceń uprawnionych organów oraz udzielanie pomocy i asysty.odt
[2012-06-08 23:38:42 | 001,124,393 | ---- | C] () -- C:\Documents and Settings\wyszo\Pulpit\obowiazki-policjanta-pelniacego-sluzbe-w-PDOZ.pdf
[2012-02-17 17:49:05 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012-02-05 01:34:01 | 000,022,328 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2012-02-05 01:34:01 | 000,022,328 | ---- | C] () -- C:\Documents and Settings\wyszo\Dane aplikacji\PnkBstrK.sys
[2012-02-05 01:33:44 | 000,103,736 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe
[2012-02-05 01:33:42 | 000,066,872 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe
[2012-02-05 01:33:41 | 000,000,273 | ---- | C] () -- C:\WINDOWS\game.ini
[2012-01-29 19:38:24 | 000,169,258 | ---- | C] () -- C:\WINDOWS\hpoins29.dat
[2012-01-29 19:38:24 | 000,000,986 | ---- | C] () -- C:\WINDOWS\hpomdl29.dat
[2012-01-28 09:28:16 | 000,024,576 | ---- | C] () -- C:\Documents and Settings\wyszo\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-01-15 22:18:26 | 000,451,072 | R--- | C] () -- C:\WINDOWS\System32\drivers\UnCIR.exe
[2012-01-15 22:18:26 | 000,020,480 | R--- | C] () -- C:\WINDOWS\System32\drivers\NBID.DLL
[2012-01-15 22:18:26 | 000,013,941 | R--- | C] () -- C:\WINDOWS\System32\drivers\CIR.sys
[2012-01-15 22:18:26 | 000,006,656 | R--- | C] () -- C:\WINDOWS\System32\drivers\DIO.DLL
[2012-01-15 22:17:03 | 000,135,168 | R--- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll
[2012-01-15 22:17:03 | 000,040,960 | R--- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2012-01-11 10:10:57 | 000,019,240 | ---- | C] () -- C:\Documents and Settings\wyszo\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
[2012-01-11 10:05:40 | 000,000,024 | R--- | C] () -- C:\WINDOWS\System32\drivers\RtkHDAud.dat
[2012-01-11 10:02:43 | 000,000,130 | ---- | C] () -- C:\Documents and Settings\wyszo\Ustawienia lokalne\Dane aplikacji\fusioncache.dat
[2012-01-11 09:58:53 | 000,121,994 | R--- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2012-01-11 05:51:49 | 003,184,656 | -H-- | C] () -- C:\Documents and Settings\wyszo\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2012-01-11 01:46:25 | 001,119,952 | ---- | C] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2012-01-11 01:46:24 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2012-01-11 01:45:03 | 000,125,320 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012-01-11 01:13:36 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2012-01-11 01:11:18 | 000,000,000 | ---- | C] () -- C:\WINDOWS\control.ini
[2012-01-11 01:10:19 | 000,000,488 | RH-- | C] () -- C:\WINDOWS\System32\logonui.exe.manifest
[2012-01-11 01:10:13 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\cdplayer.exe.manifest
[2012-01-11 01:08:19 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2012-01-11 01:08:05 | 000,000,037 | ---- | C] () -- C:\WINDOWS\vbaddin.ini
[2012-01-11 01:08:05 | 000,000,036 | ---- | C] () -- C:\WINDOWS\vb.ini
[2012-01-11 01:07:01 | 000,026,717 | ---- | C] () -- C:\WINDOWS\System32\tslabels.ini
[2012-01-11 01:06:59 | 000,003,813 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.ini
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2012-01-15 17:43:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ashampoo
[2012-01-15 17:53:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AVAST Software
[2012-01-29 02:38:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite
[2012-01-15 17:46:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10
[2012-01-28 11:21:04 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{5486EA6B-AF91-4B4B-868E-F80AB4BCD83A}
[2012-06-16 18:39:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\wyszo\Dane aplikacji\AIMP3
[2012-01-15 17:58:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\wyszo\Dane aplikacji\Ashampoo
[2012-06-13 21:09:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\wyszo\Dane aplikacji\Audacity
[2012-01-29 02:41:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\wyszo\Dane aplikacji\DAEMON Tools Lite
[2012-03-05 02:20:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\wyszo\Dane aplikacji\Gadu-Gadu 10
[2012-02-11 18:58:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\wyszo\Dane aplikacji\GameRanger
[2012-03-09 21:33:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\wyszo\Dane aplikacji\gtk-2.0
[2012-07-08 07:30:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\wyszo\Dane aplikacji\hellomoto
[2012-04-01 09:28:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\wyszo\Dane aplikacji\HTC
[2012-03-30 22:12:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\wyszo\Dane aplikacji\HTC.388BC06ACDAB6261375BCE37FBA2E023C0D7EE34.1
[2012-02-11 18:21:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\wyszo\Dane aplikacji\Leadertech
[2012-04-15 23:25:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\wyszo\Dane aplikacji\Moje pliki zapisu Bitwy o Śródziemie
[2012-01-15 17:37:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\wyszo\Dane aplikacji\OpenOffice.org
[2012-01-28 11:21:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\wyszo\Dane aplikacji\Stardock
 
[color=#E56717]========== Purity Check ==========[/color]
 
 

< End of report >