OTL logfile created on: 2012-07-08 22:40:56 - Run 2 OTL by OldTimer - Version 3.2.53.1 Folder = C:\Users\Vaio\Desktop Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.19088) Locale: 00000415 | Country: Poland | Language: PLK | Date Format: yyyy-MM-dd 2,97 Gb Total Physical Memory | 2,45 Gb Available Physical Memory | 82,50% Memory free 6,13 Gb Paging File | 5,81 Gb Available in Paging File | 94,72% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 359,70 Gb Total Space | 119,16 Gb Free Space | 33,13% Space Free | Partition Type: NTFS Computer Name: VAIO-PC | User Name: Vaio | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-07-08 15:10:47 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Users\Vaio\Desktop\OTL.exe PRC - [2012-06-17 20:51:43 | 000,913,888 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2009-10-27 11:19:46 | 000,895,696 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee\MPF\MpfSrv.exe PRC - [2008-10-29 08:29:41 | 002,927,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012-06-17 20:51:42 | 002,042,848 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Auto | Stopped] -- C:\Users\Vaio\AppData\Local\Temp\015758~1.EXE -- (0157581341749362mcinstcleanup) McAfee Application Installer Cleanup (0157581341749362) SRV - [2012-06-25 09:55:45 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2012-06-17 20:51:42 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2012-04-04 07:53:50 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Stopped] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2011-12-09 20:47:42 | 000,213,888 | ---- | M] (FileOpen Systems Inc.) [Auto | Stopped] -- C:\Program Files\FileOpen\Services\FileOpenManagerSvc32.exe -- (FileOpenManagerSvc) SRV - [2010-06-14 16:07:14 | 000,615,936 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2010-03-18 12:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon) SRV - [2009-10-27 11:19:46 | 000,895,696 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\McAfee\MPF\MpfSrv.exe -- (MpfService) SRV - [2008-11-25 19:48:44 | 000,415,584 | ---- | M] (Sony Corporation) [Auto | Stopped] -- C:\Program Files\sony\VAIO Power Management\SPMService.exe -- (VAIO Power Management) SRV - [2008-11-22 14:33:20 | 000,303,104 | ---- | M] (Sony Corporation) [Auto | Stopped] -- C:\Program Files\sony\Network Utility\NSUService.exe -- (NSUService) SRV - [2008-11-06 04:32:28 | 000,203,624 | ---- | M] (Sony Corporation) [Auto | Stopped] -- C:\Program Files\sony\VAIO Event Service\VESMgr.exe -- (VAIO Event Service) SRV - [2008-11-01 00:18:20 | 000,651,720 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2008-10-21 20:52:38 | 000,353,568 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\sony\VAIO Media plus\SOHDms.exe -- (SOHDms) SRV - [2008-10-21 20:52:38 | 000,062,752 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\sony\VAIO Media plus\SOHDs.exe -- (SOHDs) SRV - [2008-10-21 20:52:36 | 000,103,712 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\sony\VAIO Media plus\SOHCImp.exe -- (SOHCImp) SRV - [2008-10-17 12:28:57 | 000,102,400 | ---- | M] (Realtek Semiconductor) [Auto | Stopped] -- C:\Windows\RTKAUDIOSERVICE.EXE -- (RtkAudioService) SRV - [2008-10-02 04:18:48 | 000,369,952 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe -- (VcmIAlzMgr) SRV - [2008-09-19 20:06:22 | 000,083,232 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper.exe -- (VcmXmlIfHelper) SRV - [2008-09-18 20:59:10 | 000,104,960 | ---- | M] (ArcSoft, Inc.) [Auto | Stopped] -- C:\Program Files\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe -- (uCamMonitor) SRV - [2008-09-12 05:28:26 | 000,446,464 | ---- | M] (Sony Corporation) [Auto | Stopped] -- C:\Program Files\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe -- (VCFw) SRV - [2008-09-08 19:59:56 | 000,073,728 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe -- (VAIO Entertainment TV Device Arbitration Service) SRV - [2008-09-08 19:59:54 | 000,192,512 | ---- | M] (Sony Corporation) [Auto | Stopped] -- C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe -- (VzCdbSvc) SRV - [2008-09-08 19:59:52 | 000,279,848 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe -- (Vcsw) SRV - [2008-08-21 02:38:30 | 000,860,160 | ---- | M] (Intel(R) Corporation) [Auto | Stopped] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng) SRV - [2008-08-21 02:08:02 | 000,466,944 | ---- | M] (Intel(R) Corporation) [Auto | Stopped] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc) SRV - [2008-05-20 11:51:34 | 000,077,824 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe -- (SPTISRV) SRV - [2008-05-20 11:49:04 | 000,053,248 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe -- (MSCSPTISRV) SRV - [2008-05-20 11:29:06 | 000,053,248 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe -- (PACSPTISVR) SRV - [2008-01-21 04:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2007-09-11 10:45:04 | 000,124,832 | ---- | M] () [Auto | Stopped] -- c:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor6.0) SRV - [2007-01-05 05:48:50 | 000,112,152 | ---- | M] (InterVideo) [Auto | Stopped] -- c:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe -- (IviRegMgr) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Vaio\AppData\Local\Temp\catchme.sys -- (catchme) DRV - [2010-02-17 16:52:48 | 000,040,552 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mfesmfk.sys -- (mfesmfk) DRV - [2010-02-17 16:52:10 | 000,034,248 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mferkdk.sys -- (mferkdk) DRV - [2009-07-16 12:32:26 | 000,130,424 | ---- | M] (McAfee, Inc.) [Kernel | System | Running] -- C:\Windows\System32\drivers\Mpfp.sys -- (MPFP) DRV - [2008-11-25 05:46:26 | 000,010,216 | ---- | M] (Sony Corporation) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\DMICall.sys -- (DMICall) DRV - [2008-10-24 02:06:27 | 000,150,560 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\RtHDMIV.sys -- (RTHDMIAzAudService) DRV - [2008-10-23 02:02:23 | 000,046,592 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\risdptsk.sys -- (risdptsk) DRV - [2008-10-23 02:02:02 | 000,068,608 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimsptsk.sys -- (rimsptsk) DRV - [2008-09-30 02:04:57 | 000,164,400 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Apfiltr.sys -- (ApfiltrService) DRV - [2008-09-25 02:44:13 | 003,847,168 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag) DRV - [2008-08-29 09:48:46 | 003,664,384 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NETw5v32.sys -- (NETw5v32) Intel(R) DRV - [2008-08-26 11:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2008-08-22 02:06:22 | 000,009,344 | ---- | M] (Sony Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SFEP.sys -- (SFEP) DRV - [2008-06-07 02:02:55 | 000,131,000 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\WimFltr.sys -- (WimFltr) DRV - [2008-04-25 00:06:40 | 000,017,920 | ---- | M] (ArcSoft, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ArcSoftKsUFilter.sys -- (ArcSoftKsUFilter) DRV - [2008-01-25 04:14:25 | 000,008,192 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\XAudio.sys -- (XAudio) DRV - [2007-04-18 06:09:28 | 000,011,032 | ---- | M] (InterVideo) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\regi.sys -- (regi) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\..\SearchScopes,DefaultScope = {00362A95-0C40-459E-8DA1-CBD906BDE983} IE - HKLM\..\SearchScopes\{00362A95-0C40-459E-8DA1-CBD906BDE983}: "URL" = http://www.google.co.uk/search?hl=en&q={searchTerms}&meta= IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1868213863-3244487241-2592187260-1000\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google IE - HKU\S-1-5-21-1868213863-3244487241-2592187260-1000\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 IE - HKU\S-1-5-21-1868213863-3244487241-2592187260-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.online.icomarch24.pl/ioptima24/ IE - HKU\S-1-5-21-1868213863-3244487241-2592187260-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKU\S-1-5-21-1868213863-3244487241-2592187260-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKU\S-1-5-21-1868213863-3244487241-2592187260-1000\..\SearchScopes,DefaultScope = {50676421-EB97-41BD-9AD2-E43DE0EEC7C5} IE - HKU\S-1-5-21-1868213863-3244487241-2592187260-1000\..\SearchScopes\{00362A95-0C40-459E-8DA1-CBD906BDE983}: "URL" = http://www.google.co.uk/search?hl=en&q={searchTerms}&meta=&rlz=1I7SNYK_en IE - HKU\S-1-5-21-1868213863-3244487241-2592187260-1000\..\SearchScopes\{50676421-EB97-41BD-9AD2-E43DE0EEC7C5}: "URL" = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8&rlz=1I7SNYK_en IE - HKU\S-1-5-21-1868213863-3244487241-2592187260-1000\..\SearchScopes\{70D46D94-BF1E-45ED-B567-48701376298E}: "URL" = http://127.0.0.1:4664/search&s=5L8AKVgNmscOy_B34-FhfES7O3c?q={searchTerms} IE - HKU\S-1-5-21-1868213863-3244487241-2592187260-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1868213863-3244487241-2592187260-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "http://www.gazetaprawna.pl/" FF - prefs.js..extensions.enabledItems: ietab@ip.cn:1.98.20110322 FF - prefs.js..extensions.enabledItems: bkmrksync@nokia.com:1.0.0.732 FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_262.dll () FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX,Inc.) FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll (DivX, Inc) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.4.1: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.4.1: C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-06-17 20:51:43 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-04-30 18:18:32 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 13.0.1\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2012-06-19 22:04:29 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 13.0.1\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-06-17 20:51:43 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-04-30 18:18:32 | 000,000,000 | ---D | M] [2010-07-09 09:38:24 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Vaio\AppData\Roaming\mozilla\Extensions [2010-07-09 09:38:24 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Vaio\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6} [2012-07-02 02:54:24 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Vaio\AppData\Roaming\mozilla\Firefox\Profiles\srjvvwjb.default\extensions [2012-07-02 02:54:24 | 000,000,000 | ---D | M] (IE Tab 2 (FF 3.6+)) -- C:\Users\Vaio\AppData\Roaming\mozilla\Firefox\Profiles\srjvvwjb.default\extensions\{1BC9BA34-1EED-42ca-A505-6D2F1A935BBB} [2012-05-07 08:13:10 | 000,000,000 | ---D | M] (IE Tab Plus) -- C:\Users\Vaio\AppData\Roaming\mozilla\Firefox\Profiles\srjvvwjb.default\extensions\ietab@ip.cn [2012-05-10 14:52:30 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2012-06-17 20:51:43 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2011-04-14 14:01:38 | 000,024,376 | ---- | M] (McAfee, Inc.) -- C:\Program Files\mozilla firefox\components\Scriptff.dll [2011-05-04 04:52:23 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2012-04-21 04:18:44 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2012-04-21 04:18:44 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2012-04-21 04:18:44 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2012-04-21 04:18:44 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2012-04-21 04:18:44 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2012-04-21 04:18:44 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2012-07-08 14:42:51 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (McAfee Phishing Filter) - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\progra~1\mcafee\msk\mskapbho.dll File not found O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation) O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll (Google Inc.) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\Program Files\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.) O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O3 - HKU\S-1-5-21-1868213863-3244487241-2592187260-1000\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe (Adobe Systems Inc.) O4 - HKLM..\Run: [Adobe Acrobat Speed Launcher] C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [AML] C:\Program Files\Sony\VAIO Launcher\AML.exe (Sony) O4 - HKLM..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe (Alps Electric Co., Ltd.) O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) O4 - HKLM..\Run: [FileOpenBroker] C:\Program Files\FileOpen\Services\FileOpenBroker32.exe (FileOpen Systems Inc.) O4 - HKLM..\Run: [ISBMgr.exe] C:\Program Files\Sony\ISB Utility\ISBMgr.exe (Sony Corporation) O4 - HKLM..\Run: [MarketingTools] C:\Program Files\sony\Marketing Tools\MarketingTools.exe (Sony Corporation) O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor) O4 - HKLM..\Run: [StartCCC] c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKU\S-1-5-21-1868213863-3244487241-2592187260-1000..\Run: [ALLUpdate] C:\Program Files\ALLPlayer\ALLUpdate.exe () O4 - HKU\S-1-5-21-1868213863-3244487241-2592187260-1000..\Run: [NSUFloatingUI] C:\Program Files\Sony\Network Utility\LANUtil.exe (Sony Corporation) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-1868213863-3244487241-2592187260-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-1868213863-3244487241-2592187260-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1868213863-3244487241-2592187260-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O8 - Extra context menu item: Wyślij obraz do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm () O8 - Extra context menu item: Wyślij stronę do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O15 - HKU\S-1-5-21-1868213863-3244487241-2592187260-1000\..Trusted Domains: localhost ([]http in Lokalny intranet) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 10.4.1) O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07) O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 10.4.1) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O16 - DPF: DrvInstObjCab http://demo.cdnonline.pl/OnlineDemo/DrvInstObj.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.179.1.63 62.179.1.62 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{029AEA36-599E-4758-A5D0-AE223888EE26}: DhcpNameServer = 62.179.1.63 62.179.1.62 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7B726279-7D71-460F-A25D-67FAF73F42BC}: DhcpNameServer = 62.179.1.63 62.179.1.62 O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL) - C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - Winlogon\Notify\VESWinlogon: DllName - (VESWinlogon.dll) - C:\Windows\System32\VESWinlogon.dll (Sony Corporation) O24 - Desktop WallPaper: C:\Users\Vaio\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg O24 - Desktop BackupWallPaper: C:\Users\Vaio\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006-09-18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-07-08 21:28:24 | 000,000,000 | ---D | C] -- C:\_OTL [2012-07-08 15:10:46 | 000,595,968 | ---- | C] (OldTimer Tools) -- C:\Users\Vaio\Desktop\OTL.exe [2012-07-08 14:45:15 | 000,000,000 | ---D | C] -- C:\Users\Vaio\AppData\Local\temp [2012-07-08 14:44:28 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN [2012-07-08 14:12:02 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe [2012-07-08 14:12:02 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe [2012-07-08 14:12:02 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe [2012-07-08 14:01:54 | 000,000,000 | ---D | C] -- C:\Qoobox [2012-07-08 14:01:28 | 000,000,000 | ---D | C] -- C:\Windows\erdnt [2012-07-08 14:00:14 | 004,574,136 | R--- | C] (Swearware) -- C:\Users\Vaio\Desktop\ComboFix.exe [2012-06-25 11:02:38 | 000,000,000 | ---D | C] -- C:\Users\Vaio\AppData\Local\Macromedia [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-07-08 22:45:26 | 000,008,188 | ---- | M] () -- C:\Users\Vaio\AppData\Local\d3d9caps.dat [2012-07-08 22:40:38 | 002,883,584 | -HS- | M] () -- C:\Users\Vaio\NTUSER.DAT [2012-07-08 22:38:18 | 000,029,175 | ---- | M] () -- C:\Windows\System32\Config.MPF [2012-07-08 21:34:29 | 000,703,388 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI [2012-07-08 21:34:29 | 000,595,996 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2012-07-08 21:34:29 | 000,104,070 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2012-07-08 21:30:11 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012-07-08 21:29:12 | 000,524,288 | -HS- | M] () -- C:\Users\Vaio\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms [2012-07-08 21:29:12 | 000,065,536 | -HS- | M] () -- C:\Users\Vaio\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TM.blf [2012-07-08 21:17:51 | 000,001,076 | ---- | M] () -- C:\Windows\bthservsdp.dat [2012-07-08 21:17:51 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2012-07-08 21:17:42 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2012-07-08 21:17:41 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2012-07-08 15:10:47 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Users\Vaio\Desktop\OTL.exe [2012-07-08 15:02:06 | 000,001,032 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2012-07-08 14:42:57 | 000,000,215 | ---- | M] () -- C:\Windows\system.ini [2012-07-08 14:42:51 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts [2012-07-08 14:00:41 | 004,574,136 | R--- | M] (Swearware) -- C:\Users\Vaio\Desktop\ComboFix.exe [2012-07-06 17:55:15 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2012-07-06 17:53:00 | 000,001,036 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2012-07-01 23:31:18 | 000,014,953 | ---- | M] () -- C:\Users\Vaio\Desktop\protokół zdawczo odbiroczy.odt [2012-07-01 23:30:58 | 000,016,024 | ---- | M] () -- C:\Users\Vaio\Desktop\instrukcja kierowca.odt [2012-06-27 12:33:06 | 000,030,024 | ---- | M] () -- C:\Users\Vaio\Desktop\facebook.odt [2012-06-27 00:22:56 | 000,028,571 | ---- | M] () -- C:\Users\Vaio\Desktop\uwagi dla forte.odt [2012-06-25 19:11:03 | 000,015,408 | ---- | M] () -- C:\Users\Vaio\Desktop\reklamacja topronic.odt [2012-06-25 09:55:43 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe [2012-06-25 09:55:42 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl [2012-06-22 12:44:46 | 000,001,768 | ---- | M] () -- C:\Users\Vaio\Desktop\np_custom_6386555_2012-06-14_2012-06-20.csv [2012-06-22 12:06:06 | 000,000,846 | ---- | M] () -- C:\Users\Vaio\Desktop\np_custom_6386555_2012-06-07_2012-06-13.csv [2012-06-22 10:35:37 | 000,001,757 | ---- | M] () -- C:\Users\Vaio\Desktop\np_custom_6386555_2012-05-31_2012-06-06.csv [2012-06-22 09:58:41 | 000,001,469 | ---- | M] () -- C:\Users\Vaio\Desktop\np_custom_6386555_2012-05-24_2012-05-30.csv [2012-06-21 20:30:28 | 000,011,561 | ---- | M] () -- C:\Users\Vaio\Desktop\uwagi do Patryka.odt [2012-06-19 22:47:37 | 000,035,328 | ---- | M] () -- C:\Users\Vaio\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-07-08 14:12:02 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe [2012-07-08 14:12:02 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe [2012-07-08 14:12:02 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe [2012-07-08 14:12:02 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe [2012-07-08 14:12:02 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe [2012-07-01 23:31:16 | 000,014,953 | ---- | C] () -- C:\Users\Vaio\Desktop\protokół zdawczo odbiroczy.odt [2012-07-01 21:46:27 | 000,016,024 | ---- | C] () -- C:\Users\Vaio\Desktop\instrukcja kierowca.odt [2012-06-27 08:50:27 | 000,030,024 | ---- | C] () -- C:\Users\Vaio\Desktop\facebook.odt [2012-06-26 11:32:55 | 000,028,571 | ---- | C] () -- C:\Users\Vaio\Desktop\uwagi dla forte.odt [2012-06-25 19:11:01 | 000,015,408 | ---- | C] () -- C:\Users\Vaio\Desktop\reklamacja topronic.odt [2012-06-22 12:44:46 | 000,001,768 | ---- | C] () -- C:\Users\Vaio\Desktop\np_custom_6386555_2012-06-14_2012-06-20.csv [2012-06-22 12:06:06 | 000,000,846 | ---- | C] () -- C:\Users\Vaio\Desktop\np_custom_6386555_2012-06-07_2012-06-13.csv [2012-06-22 10:35:37 | 000,001,757 | ---- | C] () -- C:\Users\Vaio\Desktop\np_custom_6386555_2012-05-31_2012-06-06.csv [2012-06-22 09:58:41 | 000,001,469 | ---- | C] () -- C:\Users\Vaio\Desktop\np_custom_6386555_2012-05-24_2012-05-30.csv [2012-06-21 14:18:22 | 000,011,561 | ---- | C] () -- C:\Users\Vaio\Desktop\uwagi do Patryka.odt [2012-05-23 15:10:22 | 000,037,888 | ---- | C] () -- C:\Windows\System32\winip.exe [2012-05-23 15:10:21 | 000,397,312 | ---- | C] () -- C:\Windows\System32\winip.dll [2012-04-30 20:08:02 | 000,011,761 | ---- | C] () -- C:\Users\Vaio\AppData\Local\unins000.msg [2012-04-30 20:08:02 | 000,007,287 | ---- | C] () -- C:\Users\Vaio\AppData\Local\unins000.dat [2010-08-31 08:03:17 | 000,000,266 | RHS- | C] () -- C:\ProgramData\ntuser.pol [2010-04-21 18:27:22 | 000,035,328 | ---- | C] () -- C:\Users\Vaio\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-04-11 16:00:40 | 000,025,773 | ---- | C] () -- C:\Users\Vaio\AppData\Roaming\UserTile.png [2010-02-23 17:52:09 | 000,524,288 | -HS- | C] () -- C:\Users\Vaio\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000002.regtrans-ms [2010-02-23 17:52:09 | 000,524,288 | -HS- | C] () -- C:\Users\Vaio\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms [2010-02-23 17:52:08 | 000,065,536 | -HS- | C] () -- C:\Users\Vaio\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TM.blf [2010-02-23 17:52:06 | 000,086,224 | ---- | C] () -- C:\Users\Vaio\AppData\Local\GDIPFONTCACHEV1.DAT [2010-02-23 17:52:06 | 000,008,188 | ---- | C] () -- C:\Users\Vaio\AppData\Local\d3d9caps.dat [2010-02-23 17:52:00 | 002,883,584 | -HS- | C] () -- C:\Users\Vaio\NTUSER.DAT [2010-02-23 17:52:00 | 000,000,020 | -HS- | C] () -- C:\Users\Vaio\ntuser.ini [color=#E56717]========== LOP Check ==========[/color] [2012-03-14 13:33:22 | 000,000,000 | ---D | M] -- C:\Users\Vaio\AppData\Roaming\Cube-IQ [2010-04-17 11:38:22 | 000,000,000 | ---D | M] -- C:\Users\Vaio\AppData\Roaming\e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1 [2012-03-20 01:19:20 | 000,000,000 | ---D | M] -- C:\Users\Vaio\AppData\Roaming\EurekaLog [2012-02-04 23:50:33 | 000,000,000 | ---D | M] -- C:\Users\Vaio\AppData\Roaming\FileOpen [2012-06-18 16:20:11 | 000,000,000 | ---D | M] -- C:\Users\Vaio\AppData\Roaming\Free Monitor for Google [2010-04-11 15:10:07 | 000,000,000 | ---D | M] -- C:\Users\Vaio\AppData\Roaming\InterVideo [2010-05-13 11:10:34 | 000,000,000 | ---D | M] -- C:\Users\Vaio\AppData\Roaming\ipla [2010-11-29 22:08:01 | 000,000,000 | ---D | M] -- C:\Users\Vaio\AppData\Roaming\Nokia [2010-04-11 18:50:25 | 000,000,000 | ---D | M] -- C:\Users\Vaio\AppData\Roaming\OpenOffice.org [2011-04-05 22:46:32 | 000,000,000 | ---D | M] -- C:\Users\Vaio\AppData\Roaming\PC Suite [2010-04-11 16:00:39 | 000,000,000 | ---D | M] -- C:\Users\Vaio\AppData\Roaming\PeerNetworking [2012-04-27 10:39:37 | 000,000,000 | ---D | M] -- C:\Users\Vaio\AppData\Roaming\PITy2011 [2010-07-09 09:38:22 | 000,000,000 | ---D | M] -- C:\Users\Vaio\AppData\Roaming\Thunderbird [2012-01-15 01:59:59 | 000,000,356 | ---- | M] () -- C:\Windows\Tasks\McDefragTask.job [2011-11-01 02:00:00 | 000,000,348 | ---- | M] () -- C:\Windows\Tasks\McQcTask.job [2012-07-08 21:17:51 | 000,032,564 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] < End of report >