OTL logfile created on: 2012-07-10 09:09:26 - Run 1
OTL by OldTimer - Version 3.2.53.1     Folder = C:\Documents and Settings\admin\Pulpit
Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
3,50 Gb Total Physical Memory | 2,80 Gb Available Physical Memory | 80,10% Memory free
5,34 Gb Paging File | 4,64 Gb Available in Paging File | 86,90% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 39,06 Gb Total Space | 6,12 Gb Free Space | 15,67% Space Free | Partition Type: NTFS
Drive E: | 426,69 Gb Total Space | 340,28 Gb Free Space | 79,75% Space Free | Partition Type: NTFS
Drive K: | 1,87 Gb Total Space | 1,40 Gb Free Space | 74,70% Space Free | Partition Type: FAT32
 
Computer Name: ARCH1-SLAWEK | User Name: admin | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-07-09 17:24:34 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\admin\Pulpit\OTL_[www.programosy.pl].exe
PRC - [2012-03-21 21:16:10 | 001,318,816 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee.com\Agent\mcagent.exe
PRC - [2012-03-20 13:11:32 | 000,151,880 | ---- | M] (McAfee, Inc.) -- C:\WINDOWS\system32\mfevtps.exe
PRC - [2012-03-20 13:05:00 | 000,161,632 | ---- | M] (McAfee, Inc.) -- C:\Program Files\Common Files\Mcafee\SystemCore\mfefire.exe
PRC - [2012-03-20 13:04:32 | 000,166,288 | ---- | M] (McAfee, Inc.) -- C:\Program Files\Common Files\Mcafee\SystemCore\mcshield.exe
PRC - [2012-02-18 08:59:28 | 000,282,648 | ---- | M] (McAfee, Inc.) -- c:\Program Files\McAfee\SiteAdvisor\saUI.exe
PRC - [2011-07-29 01:08:12 | 001,259,376 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
PRC - [2011-01-27 19:28:14 | 000,214,904 | ---- | M] (McAfee, Inc.) -- C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
PRC - [2010-09-02 22:18:02 | 000,255,536 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee Security Scan\2.0.189\SSScheduler.exe
PRC - [2010-03-09 04:47:02 | 000,047,616 | R--- | M] (Mobile Leader Co.,Ltd.) -- C:\WINDOWS\system32\LGScsiCommandService.exe
PRC - [2010-03-04 22:38:00 | 000,071,096 | ---- | M] () -- E:\PROGRAM\CDBurner\CDBurnerXP\NMSAccessU.exe
PRC - [2009-10-01 14:41:35 | 000,072,704 | ---- | M] (Autodata Limited) -- C:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe
PRC - [2009-09-17 08:06:00 | 001,246,496 | ---- | M] (SafeNet, Inc) -- C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
PRC - [2009-09-17 02:03:00 | 000,369,952 | ---- | M] (SafeNet, Inc.) -- C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
PRC - [2009-09-17 02:00:02 | 000,292,128 | ---- | M] (SafeNet, Inc.) -- C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Security Runtime\sntlsrtsrvr.exe
PRC - [2008-01-31 18:27:04 | 000,118,784 | R--- | M] (Brother Industries, Ltd.) -- C:\Program Files\Brother\Brmfcmon\BrMfimon.exe
PRC - [2008-01-28 17:07:18 | 000,285,192 | ---- | M] () -- C:\Program Files\GIGABYTE\GEST\gest.exe
PRC - [2007-12-14 12:46:28 | 000,047,624 | ---- | M] () -- C:\Program Files\GIGABYTE\GEST\GSvr.exe
PRC - [2006-08-04 11:35:54 | 000,217,088 | ---- | M] (VMware, Inc.) -- C:\Program Files\VMware\VMware Workstation\vmware-authd.exe
PRC - [2006-08-04 11:35:52 | 000,135,168 | ---- | M] (VMware, Inc.) -- C:\WINDOWS\system32\vmnat.exe
PRC - [2006-08-04 11:35:52 | 000,106,496 | ---- | M] (VMware, Inc.) -- C:\WINDOWS\system32\vmnetdhcp.exe
PRC - [2006-08-04 11:28:58 | 000,262,144 | ---- | M] (VMware, Inc.) -- C:\Program Files\Common Files\VMware\VMware Virtual Image Editing\vmount2.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2011-07-29 01:09:42 | 000,096,112 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
MOD - [2011-07-29 01:08:12 | 001,259,376 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
MOD - [2010-03-04 22:38:00 | 000,071,096 | ---- | M] () -- E:\PROGRAM\CDBurner\CDBurnerXP\NMSAccessU.exe
MOD - [2009-02-27 19:04:20 | 000,311,296 | ---- | M] () -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\pdfshell.POL
MOD - [2008-01-28 17:07:18 | 000,285,192 | ---- | M] () -- C:\Program Files\GIGABYTE\GEST\gest.exe
MOD - [2007-12-14 12:46:28 | 000,047,624 | ---- | M] () -- C:\Program Files\GIGABYTE\GEST\GSvr.exe
MOD - [2007-12-07 15:24:56 | 000,117,256 | ---- | M] () -- C:\Program Files\GIGABYTE\GEST\ycc.dll
MOD - [2007-10-05 18:37:58 | 000,151,552 | ---- | M] () -- C:\Program Files\GIGABYTE\GEST\etiv.dll
MOD - [2002-11-26 14:43:18 | 000,106,496 | ---- | M] () -- C:\WINDOWS\system32\BrMuSNMP.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [On_Demand | Stopped] -- %SystemRoot%\System32\appmgmts.dll -- (AppMgmt)
SRV - [2012-04-19 08:21:16 | 000,361,976 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee\VirusScan\mcods.exe -- (McODS)
SRV - [2012-03-20 13:11:32 | 000,151,880 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\WINDOWS\system32\mfevtps.exe -- (mfevtp)
SRV - [2012-03-20 13:05:00 | 000,161,632 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe -- (mfefire)
SRV - [2012-03-20 13:04:32 | 000,166,288 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe -- (McShield)
SRV - [2011-01-28 13:28:50 | 000,203,080 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- c:\Program Files\McAfee\MSC\McAWFwk.exe -- (McAWFwk)
SRV - [2011-01-27 19:28:14 | 000,214,904 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe -- (MSK80Service)
SRV - [2011-01-27 19:28:14 | 000,214,904 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe -- (McProxy)
SRV - [2011-01-27 19:28:14 | 000,214,904 | ---- | M] (McAfee, Inc.) [Disabled | Stopped] -- C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe -- (McOobeSv)
SRV - [2011-01-27 19:28:14 | 000,214,904 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe -- (McNASvc)
SRV - [2011-01-27 19:28:14 | 000,214,904 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe -- (McNaiAnn)
SRV - [2011-01-27 19:28:14 | 000,214,904 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe -- (mcmscsvc)
SRV - [2011-01-27 19:28:14 | 000,214,904 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe -- (McMPFSvc)
SRV - [2011-01-27 19:28:14 | 000,214,904 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe -- (McAfee SiteAdvisor Service)
SRV - [2010-09-02 22:18:02 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\2.0.189\McCHSvc.exe -- (McComponentHostService)
SRV - [2010-03-09 04:47:02 | 000,047,616 | R--- | M] (Mobile Leader Co.,Ltd.) [Auto | Running] -- C:\WINDOWS\system32\LGScsiCommandService.exe -- (LGScsiCommandService)
SRV - [2010-03-04 22:38:00 | 000,071,096 | ---- | M] () [Auto | Running] -- E:\PROGRAM\CDBurner\CDBurnerXP\NMSAccessU.exe -- (NMSAccess)
SRV - [2009-09-17 08:06:00 | 001,246,496 | ---- | M] (SafeNet, Inc) [Auto | Running] -- C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe -- (SentinelProtectionServer)
SRV - [2009-09-17 02:03:00 | 000,369,952 | ---- | M] (SafeNet, Inc.) [Auto | Running] -- C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe -- (SentinelKeysServer)
SRV - [2009-09-17 02:00:02 | 000,292,128 | ---- | M] (SafeNet, Inc.) [Auto | Running] -- C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Security Runtime\sntlsrtsrvr.exe -- (SentinelSecurityRuntime)
SRV - [2007-12-14 12:46:28 | 000,047,624 | ---- | M] () [On_Demand | Running] -- C:\Program Files\GIGABYTE\GEST\GSvr.exe -- (GEST Service)
SRV - [2006-08-04 11:35:54 | 000,217,088 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Program Files\VMware\VMware Workstation\vmware-authd.exe -- (VMAuthdService)
SRV - [2006-08-04 11:35:52 | 000,135,168 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\WINDOWS\system32\vmnat.exe -- (VMware NAT Service)
SRV - [2006-08-04 11:35:52 | 000,106,496 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\WINDOWS\system32\vmnetdhcp.exe -- (VMnetDHCP)
SRV - [2006-08-04 11:28:58 | 000,262,144 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Program Files\Common Files\VMware\VMware Virtual Image Editing\vmount2.exe -- (vmount2)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | Auto | Stopped] -- SYSTEM32\DRIVERS\WibuKey.sys -- (WIBUKEY)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\Drivers\Pcouffin.sys -- (Pcouffin)
DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)
DRV - File not found [Kernel | On_Demand | Unknown] --  -- (mfeavfk01)
DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] --  -- (i2omgmt)
DRV - File not found [Kernel | On_Demand | Stopped] -- E:\PROGRAM\MediaCoder\SysInfo.sys -- (CrystalSysInfo)
DRV - File not found [Kernel | System | Stopped] --  -- (Changer)
DRV - [2012-07-10 08:35:13 | 000,016,608 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\gdrv.sys -- (gdrv)
DRV - [2012-03-14 09:53:31 | 000,821,248 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\XXLHASP.sys -- (XXLHASP)
DRV - [2012-03-14 09:39:56 | 000,047,616 | ---- | M] (Aladdin Knowledge Systems) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\Haspnt.sys -- (Haspnt)
DRV - [2012-02-22 13:29:46 | 000,464,304 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\mfehidk.sys -- (mfehidk)
DRV - [2012-02-22 13:29:46 | 000,340,920 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mfefirek.sys -- (mfefirek)
DRV - [2012-02-22 13:29:46 | 000,180,848 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mfeavfk.sys -- (mfeavfk)
DRV - [2012-02-22 13:29:46 | 000,121,544 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mfeapfk.sys -- (mfeapfk)
DRV - [2012-02-22 13:29:46 | 000,089,792 | ---- | M] (McAfee, Inc.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\mfetdi2k.sys -- (mfetdi2k)
DRV - [2012-02-22 13:29:46 | 000,087,656 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mferkdet.sys -- (mferkdet)
DRV - [2012-02-22 13:29:46 | 000,083,856 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mfendisk.sys -- (mfendiskmp)
DRV - [2012-02-22 13:29:46 | 000,083,856 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mfendisk.sys -- (mfendisk)
DRV - [2012-02-22 13:29:46 | 000,059,456 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mfebopk.sys -- (mfebopk)
DRV - [2012-02-22 13:29:46 | 000,057,600 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\cfwids.sys -- (cfwids)
DRV - [2012-02-17 10:19:50 | 000,167,224 | ---- | M] (SpyShelter) [Kernel | System | Running] -- C:\Program Files\SpyShelter Personal Free\SpyShelter.sys -- (Spyshelter)
DRV - [2012-01-04 16:28:36 | 000,016,128 | ---- | M] (Windows (R) Win 7 DDK provider) [File_System | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\gtkdrv.sys -- (TrojanKillerDriver)
DRV - [2010-02-11 14:02:15 | 000,226,880 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\tcpip6.sys -- (Tcpip6)
DRV - [2010-02-04 02:48:42 | 001,323,040 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rt2860.sys -- (RT80x86)
DRV - [2010-01-21 02:59:58 | 000,020,864 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbdiag.sys -- (UsbDiag)
DRV - [2010-01-21 02:59:56 | 000,024,960 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbmodem.sys -- (USBModem)
DRV - [2010-01-21 02:59:56 | 000,013,056 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbbus.sys -- (usbbus)
DRV - [2009-12-09 22:27:18 | 000,588,800 | ---- | M] (SafeNet Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\hardlock.sys -- (Hardlock)
DRV - [2009-11-12 13:48:56 | 000,007,168 | ---- | M] () [File_System | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen)
DRV - [2009-09-29 09:11:22 | 000,012,160 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\lgbtport.sys -- (LgBttPort)
DRV - [2009-09-29 09:11:20 | 000,012,928 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\lgvmodem.sys -- (LGVMODEM)
DRV - [2009-09-29 09:11:20 | 000,010,496 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\lgbtbus.sys -- (lgbusenum)
DRV - [2009-09-17 08:05:02 | 000,092,712 | ---- | M] (SafeNet, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\sentinel.sys -- (Sentinel)
DRV - [2008-09-11 05:08:10 | 003,331,072 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2008-07-02 21:38:14 | 000,089,600 | R--- | M] (ATI Research Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV - [2008-02-14 11:04:06 | 004,676,096 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2008-01-03 16:10:16 | 000,105,856 | R--- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2007-10-11 12:10:52 | 000,030,008 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ET5Drv.sys -- (ET5Drv)
DRV - [2006-10-05 04:42:42 | 000,002,560 | ---- | M] (Sonic Solutions) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\cdralw2k.sys -- (Cdralw2k)
DRV - [2006-10-05 04:42:42 | 000,002,432 | ---- | M] (Sonic Solutions) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\cdr4_xp.sys -- (Cdr4_xp)
DRV - [2006-08-04 11:35:56 | 000,023,296 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\vmnetbridge.sys -- (VMnetBridge)
DRV - [2006-08-04 11:35:56 | 000,015,616 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\vmnetuserif.sys -- (VMnetuserif)
DRV - [2006-08-04 11:35:56 | 000,009,600 | R--- | M] (VMware, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\vmnetadapter.sys -- (VMnetAdapter)
DRV - [2006-08-04 11:35:54 | 000,022,016 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\hcmon.sys -- (hcmon)
DRV - [2006-08-04 11:35:52 | 000,094,848 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\vmx86.sys -- (vmx86)
DRV - [2006-08-04 11:35:52 | 000,009,216 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\vmparport.sys -- (VMparport)
DRV - [2006-08-04 11:28:58 | 000,011,520 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Program Files\Common Files\VMware\VMware Virtual Image Editing\vstor2.sys -- (vstor2)
DRV - [2004-08-25 11:09:36 | 000,010,240 | R--- | M] (A4Tech Co.,Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Amusbprt.sys -- (Amusbprt)
DRV - [2004-08-25 11:09:02 | 000,005,120 | R--- | M] (A4Tech Co.,Ltd.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\Amfilter.sys -- (Amfilter)
DRV - [2003-06-06 15:34:56 | 000,016,695 | ---- | M] (EUTRON) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\eusk2par.sys -- (eusk2par)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\..\URLSearchHook: {D3F669EB-57CE-4f45-8FBD-E245CBB46366} - C:\Program Files\STOPzilla!\Toolbar\SZIESearchHook.dll (iS3 Inc.)
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-2025429265-1715567821-682003330-1009\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
IE - HKU\S-1-5-21-2025429265-1715567821-682003330-1009\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-2025429265-1715567821-682003330-1009\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC
IE - HKU\S-1-5-21-2025429265-1715567821-682003330-1009\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@garmin.com/GpsControl: C:\Program Files\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@mcafee.com/MSC,version=10: c:\progra~1\mcafee\msc\npmcsn~1.dll ()
FF - HKLM\Software\MozillaPlugins\@mcafee.com/SAFFPlugin: C:\Program Files\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: E:\PROGRAM\adobe\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{780044d1-e8c0-488f-8059-4522ddbfc2ea}: C:\Program Files\Stopzilla!\Toolbar\Extension [2009-11-23 10:51:02 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{4ED1F68A-5463-4931-9384-8FFF5ED91D92}: C:\Program Files\McAfee\SiteAdvisor [2012-02-27 09:50:30 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012-01-09 16:52:23 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{D19CA586-DD6C-4a0a-96F8-14644F340D60}: C:\Program Files\Common Files\McAfee\SystemCore [2012-07-10 08:39:10 | 000,000,000 | ---D | M]
 
 
O1 HOSTS File: ([2012-07-09 14:55:26 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (ZILLAbar Browser Helper Object) - {1827766B-9F49-4854-8034-F6EE26FCB1EC} - C:\Program Files\STOPzilla!\Toolbar\SZSG.dll (iS3, Inc)
O2 - BHO: (HistoryTriggerBHO Class) - {21A88CB9-84D2-4020-A2D1-B25A21034884} - C:\Program Files\LG Electronics\LG PC Suite IV\LinkAir\LinkAirBrowserHelper.dll (LG Electronics)
O2 - BHO: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (NCH EN Toolbar) - {37483b40-c254-4a72-bda4-22ee90182c1e} - C:\Program Files\NCH_EN\prxtbNCH0.dll (Conduit Ltd.)
O2 - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\Mcafee\SystemCore\ScriptSn.20120627103156.dll (McAfee, Inc.)
O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O3 - HKLM\..\Toolbar: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (NCH EN Toolbar) - {37483b40-c254-4a72-bda4-22ee90182c1e} - C:\Program Files\NCH_EN\prxtbNCH0.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (STOPzilla) - {98828DED-A591-462F-83BA-D2F62A68B8B8} - C:\Program Files\STOPzilla!\Toolbar\SZSG.dll (iS3, Inc)
O3 - HKU\S-1-5-21-2025429265-1715567821-682003330-1009\..\Toolbar\WebBrowser: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-2025429265-1715567821-682003330-1009\..\Toolbar\WebBrowser: (NCH EN Toolbar) - {37483B40-C254-4A72-BDA4-22EE90182C1E} - C:\Program Files\NCH_EN\prxtbNCH0.dll (Conduit Ltd.)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] E:\PROGRAM\adobe\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [GEST] C:\Program Files\GIGABYTE\GEST\run.exe ()
O4 - HKLM..\Run: [mcui_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
O4 - HKLM..\Run: [SNTSearch] C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\1179\SNTSearch.exe File not found
O4 - HKLM..\Run: [WSDPrintProxy] C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows\813\WSDPrintProxy.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\2.0.189\SSScheduler.exe (McAfee, Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\control panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-2025429265-1715567821-682003330-1009\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-2025429265-1715567821-682003330-1009\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe (PokerStars)
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab (QuickTime Object)
O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {92ECE6FA-AC2E-4042-BFAE-0C8608E52A43} https://www.bph.pl/pi/components/SignActivX.cab (SignActivX Control)
O16 - DPF: {B1953AD6-C50E-11D3-B020-00A0C9251384} http://www.o2c.de/download/o2cplayer.cab (o2c Player (ELECO Software GmbH))
O16 - DPF: {B4891BE9-835D-471B-B495-F5F3E6A8BBD7} http://cdn.vod4net.pl/1791/viv-3.5.27.1/player/player_ocx.jpeg (VPlayer Control)
O16 - DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: Garmin Communicator Plug-In https://static.garmincdn.com/gcp/ie/2.9.3.0/GarminAxControl.CAB (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 95.160.170.92 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7DE7823F-137F-4FF5-9569-0126FB530870}: DhcpNameServer = 95.160.170.92 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B43E40E2-8834-488B-B955-50B78606BEEE}: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O18 - Protocol\Filter\application/x-mfe-ipt {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\McAfee\MSC\McSnIePl.dll (McAfee, Inc.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008-11-25 16:09:06 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2009-04-09 21:26:00 | 000,000,000 | R--D | M] - C:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2009-04-09 21:26:00 | 000,000,000 | R--D | M] - E:\autorun.inf -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012-07-10 09:00:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\admin\Moje dokumenty\Pliki PDF
[2012-07-10 09:00:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\admin\Menu Start\Programy\pdfFactory Pro
[2012-07-10 08:39:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\McAfee
[2012-07-10 08:27:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\admin\Dane aplikacji\Adobe
[2012-07-10 08:27:39 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\admin\PrivacIE
[2012-07-10 08:15:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\admin\Dane aplikacji\hellomoto
[2012-07-09 19:31:39 | 000,595,968 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\admin\Pulpit\OTL_[www.programosy.pl].exe
[2012-07-09 19:24:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Spybot - Search & Destroy
[2012-07-09 18:23:58 | 000,000,000 | R--D | C] -- C:\Documents and Settings\admin\Menu Start\Programy\Narzędzia administracyjne
[2012-07-09 18:23:58 | 000,000,000 | R--D | C] -- C:\Documents and Settings\admin\Moje dokumenty\Moje wideo
[2012-07-09 18:23:58 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2012-07-09 18:23:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP
[2012-07-09 18:23:57 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\admin\SendTo
[2012-07-09 18:23:57 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\admin\Recent
[2012-07-09 18:23:57 | 000,000,000 | R--D | C] -- C:\Documents and Settings\admin\Moje dokumenty\Moje obrazy
[2012-07-09 18:23:57 | 000,000,000 | R--D | C] -- C:\Documents and Settings\admin\Moje dokumenty
[2012-07-09 18:23:57 | 000,000,000 | R--D | C] -- C:\Documents and Settings\admin\Moje dokumenty\Moja muzyka
[2012-07-09 18:23:57 | 000,000,000 | R--D | C] -- C:\Documents and Settings\admin\Menu Start
[2012-07-09 18:23:57 | 000,000,000 | R--D | C] -- C:\Documents and Settings\admin\Menu Start\Programy\Autostart
[2012-07-09 18:23:57 | 000,000,000 | R--D | C] -- C:\Documents and Settings\admin\Menu Start\Programy\Akcesoria
[2012-07-09 18:23:57 | 000,000,000 | -H-D | C] -- C:\Program Files\Uninstall Information
[2012-07-09 18:23:57 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\admin\PrintHood
[2012-07-09 18:23:57 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\admin\NetHood
[2012-07-09 18:23:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\admin\Dane aplikacji\Sun
[2012-07-09 18:23:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Scansoft
[2012-07-09 18:23:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\admin\Pulpit
[2012-07-09 18:23:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\NCH_EN
[2012-07-09 18:23:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\admin\Dane aplikacji\Identities
[2012-07-09 18:23:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\ConduitEngine
[2012-07-09 18:23:50 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Dokumenty\Moje wideo
[2012-07-09 15:29:28 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\admin\IETldCache
[2012-07-09 15:29:28 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\admin\Cookies
[2012-07-09 15:29:20 | 000,000,000 | --SD | C] -- C:\Documents and Settings\admin\Dane aplikacji\Microsoft
[2012-07-09 15:29:20 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\admin\Dane aplikacji
[2012-07-09 15:29:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\admin\Dane aplikacji\Macromedia
[2012-07-09 15:29:19 | 000,000,000 | R--D | C] -- C:\Documents and Settings\admin\Ulubione
[2012-07-09 15:29:19 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\admin\Ustawienia lokalne
[2012-07-09 15:29:19 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\admin\Szablony
[2012-07-09 15:29:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\admin\Ustawienia lokalne\Dane aplikacji\Microsoft
[2012-07-09 15:19:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\temp
[2012-07-09 13:55:12 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2012-07-09 13:12:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\erdnt
[2012-07-09 11:47:54 | 000,000,000 | ---D | C] -- C:\Kaspersky Rescue Disk 10.0
[2012-07-03 23:29:06 | 000,000,000 | ---D | C] -- C:\Program Files\SystemRequirementsLab
[2012-06-26 13:56:59 | 000,000,000 | ---D | C] -- C:\Program Files\Kerkythea Rendering System
[2012-06-26 13:44:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\SU Podium V2
[2012-06-20 11:51:25 | 000,000,000 | ---D | C] -- C:\Program Files\Kangurek KAO
[2012-06-14 12:21:20 | 000,000,000 | ---D | C] -- C:\Program Files\ReflexiveArcade
[2012-06-13 03:24:58 | 000,521,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jsdbgui.dll
[2012-06-12 14:30:57 | 000,000,000 | ---D | C] -- C:\Program Files\Alawar.pl
[2012-06-12 14:11:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dokumenty\AlawarWrapper
[2012-06-12 14:11:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\AlawarWrapper
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
File not found -- C:\WINDOWS\System32\drivers\mshdmd.sys.
[2012-07-10 09:09:00 | 000,000,456 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{B6FCEA59-7523-4B8E-889B-A4237B160548}.job
[2012-07-10 08:35:13 | 000,016,608 | ---- | M] (Windows (R) 2000 DDK provider) -- C:\WINDOWS\gdrv.sys
[2012-07-10 08:35:06 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012-07-10 08:35:05 | 000,054,376 | ---- | M] () -- C:\WINDOWS\System32\ativvaxx.cap
[2012-07-10 08:30:00 | 000,001,120 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2025429265-1715567821-682003330-1004UA.job
[2012-07-09 17:37:10 | 000,240,736 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012-07-09 17:24:34 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\admin\Pulpit\OTL_[www.programosy.pl].exe
[2012-07-09 14:55:26 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2012-07-09 13:55:17 | 000,000,355 | RHS- | M] () -- C:\boot.ini
[2012-07-09 13:20:44 | 000,000,245 | ---- | M] () -- C:\Boot.bak
[2012-07-09 08:21:40 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012-07-06 15:17:49 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012-07-06 14:47:08 | 000,000,807 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Trojan Killer.lnk
[2012-07-06 09:30:00 | 000,001,068 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2025429265-1715567821-682003330-1004Core.job
[2012-07-02 14:55:42 | 000,000,059 | ---- | M] () -- C:\WINDOWS\LTDLG13N.INI
[2012-06-22 10:14:37 | 000,000,004 | ---- | M] () -- C:\napis.zip
[2012-06-13 16:13:26 | 000,493,748 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2012-06-13 16:13:26 | 000,435,612 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012-06-13 16:13:26 | 000,085,526 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2012-06-13 16:13:26 | 000,069,094 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012-06-12 14:31:40 | 000,004,096 | ---- | M] () -- C:\WINDOWS\d3dx.dat
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
File not found -- C:\WINDOWS\System32\drivers\mshdmd.sys.
[2012-07-09 15:29:59 | 000,000,803 | ---- | C] () -- C:\Documents and Settings\admin\Menu Start\Programy\Internet Explorer.lnk
[2012-07-09 15:29:51 | 000,000,738 | ---- | C] () -- C:\Documents and Settings\admin\Menu Start\Programy\Outlook Express.lnk
[2012-07-09 15:29:20 | 000,001,599 | ---- | C] () -- C:\Documents and Settings\admin\Menu Start\Programy\Pomoc zdalna.lnk
[2012-07-09 15:29:20 | 000,000,792 | ---- | C] () -- C:\Documents and Settings\admin\Menu Start\Programy\Windows Media Player.lnk
[2012-07-09 13:55:17 | 000,000,245 | ---- | C] () -- C:\Boot.bak
[2012-07-09 13:55:15 | 000,262,400 | RHS- | C] () -- C:\cmldr
[2012-07-06 15:03:33 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012-06-27 09:25:10 | 000,001,120 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2025429265-1715567821-682003330-1004UA.job
[2012-06-27 09:25:09 | 000,001,068 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2025429265-1715567821-682003330-1004Core.job
[2012-06-12 14:31:40 | 000,004,096 | ---- | C] () -- C:\WINDOWS\d3dx.dat
[2012-05-28 08:47:20 | 001,740,800 | ---- | C] () -- C:\WINDOWS\System32\Osklauncher.exe
[2012-05-28 08:47:20 | 000,054,784 | ---- | C] () -- C:\WINDOWS\System32\inject_logon_dll.dll
[2012-05-28 08:47:20 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\SpyShelterShellExt.dll
[2012-04-16 11:43:36 | 000,013,931 | ---- | C] () -- C:\WINDOWS\System32\RaCoInst.dat
[2012-03-14 09:39:56 | 000,000,383 | ---- | C] () -- C:\WINDOWS\System32\haspdos.sys
[2012-03-14 09:39:13 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\hdduinst.exe
[2012-03-14 09:37:17 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\hdsuinst.exe
[2012-03-13 16:42:27 | 000,628,224 | ---- | C] () -- C:\WINDOWS\System32\boost_wserialization-bcb-mt-1_35.dll
[2012-03-13 16:42:27 | 000,620,544 | ---- | C] () -- C:\WINDOWS\System32\stlpmt45.dll
[2012-03-13 16:42:27 | 000,618,496 | ---- | C] () -- C:\WINDOWS\System32\stlp45.dll
[2012-03-13 16:42:26 | 001,269,248 | ---- | C] () -- C:\WINDOWS\System32\boost_regex-bcb-mt-1_35.dll
[2012-03-13 16:42:26 | 001,256,448 | ---- | C] () -- C:\WINDOWS\System32\boost_regex-bcb-1_35.dll
[2012-03-13 16:42:26 | 000,763,904 | ---- | C] () -- C:\WINDOWS\System32\boost_serialization-bcb-mt-1_35.dll
[2012-03-13 16:42:26 | 000,761,344 | ---- | C] () -- C:\WINDOWS\System32\boost_serialization-bcb-1_35.dll
[2012-03-13 16:42:26 | 000,698,880 | ---- | C] () -- C:\WINDOWS\System32\boost_unit_test_framework-bcb-mt-1_35.dll
[2012-03-13 16:42:26 | 000,694,784 | ---- | C] () -- C:\WINDOWS\System32\boost_unit_test_framework-bcb-1_35.dll
[2012-03-13 16:42:26 | 000,625,152 | ---- | C] () -- C:\WINDOWS\System32\boost_wserialization-bcb-1_35.dll
[2012-03-13 16:42:26 | 000,174,592 | ---- | C] () -- C:\WINDOWS\System32\boost_thread-bcb-mt-1_35.dll
[2012-03-13 16:42:26 | 000,099,840 | ---- | C] () -- C:\WINDOWS\System32\boost_signals-bcb-mt-1_35.dll
[2012-03-13 16:42:26 | 000,099,840 | ---- | C] () -- C:\WINDOWS\System32\boost_signals-bcb-1_35.dll
[2012-03-13 16:42:26 | 000,025,088 | ---- | C] () -- C:\WINDOWS\System32\boost_system-bcb-mt-1_35.dll
[2012-03-13 16:42:26 | 000,025,088 | ---- | C] () -- C:\WINDOWS\System32\boost_system-bcb-1_35.dll
[2012-03-13 16:42:25 | 000,896,512 | ---- | C] () -- C:\WINDOWS\System32\boost_program_options-bcb-mt-1_35.dll
[2012-03-13 16:42:25 | 000,894,976 | ---- | C] () -- C:\WINDOWS\System32\boost_program_options-bcb-1_35.dll
[2012-03-13 16:42:25 | 000,197,120 | ---- | C] () -- C:\WINDOWS\System32\boost_filesystem-bcb-mt-1_35.dll
[2012-03-13 16:42:25 | 000,196,096 | ---- | C] () -- C:\WINDOWS\System32\boost_filesystem-bcb-1_35.dll
[2012-03-13 16:42:25 | 000,097,792 | ---- | C] () -- C:\WINDOWS\System32\boost_iostreams-bcb-mt-1_35.dll
[2012-03-13 16:42:25 | 000,097,792 | ---- | C] () -- C:\WINDOWS\System32\boost_iostreams-bcb-1_35.dll
[2012-03-13 16:42:25 | 000,074,240 | ---- | C] () -- C:\WINDOWS\System32\boost_prg_exec_monitor-bcb-mt-1_35.dll
[2012-03-13 16:42:25 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\boost_prg_exec_monitor-bcb-1_35.dll
[2012-03-13 16:42:25 | 000,068,096 | ---- | C] () -- C:\WINDOWS\System32\boost_date_time-bcb-mt-1_35.dll
[2012-03-13 16:42:25 | 000,067,584 | ---- | C] () -- C:\WINDOWS\System32\boost_date_time-bcb-1_35.dll
[2012-03-13 15:07:39 | 000,821,248 | ---- | C] () -- C:\WINDOWS\System32\drivers\XXLHASP.sys
[2012-02-16 09:02:04 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2011-12-02 09:59:51 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2011-08-31 10:02:03 | 000,007,168 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2011-01-25 13:10:05 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\SNTI386.DLL
[2011-01-25 13:09:47 | 000,000,036 | ---- | C] () -- C:\WINDOWS\PMLoc2.ini
[2011-01-25 13:08:25 | 000,000,051 | ---- | C] () -- C:\WINDOWS\PFloc.ini
[2011-01-05 12:39:20 | 002,254,848 | ---- | C] () -- C:\WINDOWS\System32\tools.dll
[2010-12-23 09:35:31 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\CommonDL.dll
[2010-12-23 09:35:31 | 000,002,413 | ---- | C] () -- C:\WINDOWS\System32\lgAxconfig.ini
[2010-10-05 01:59:32 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\StarOpen.sys
[2010-09-30 15:48:46 | 000,000,068 | ---- | C] () -- C:\WINDOWS\iltwain.ini
[2010-09-30 15:48:26 | 000,000,086 | ---- | C] () -- C:\WINDOWS\System32\ToleSec.ini
[2010-09-30 15:48:25 | 000,000,438 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\Sls.ini
[2008-11-28 13:57:44 | 000,002,596 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Config.nt.bak
[2008-11-28 13:57:44 | 000,001,734 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\Autoexec.nt.bak
[2008-11-28 13:57:44 | 000,000,742 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\hosts.bak
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2012-07-10 08:15:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\admin\Dane aplikacji\hellomoto
[2012-06-12 14:12:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AlawarWrapper
[2012-05-22 10:39:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ASGVIS
[2012-03-16 14:34:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Autodesk
[2011-02-21 10:44:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Canneverbe Limited
[2012-03-15 18:30:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\firebird
[2011-01-03 09:53:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\G DATA
[2010-08-09 09:15:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\GARMIN
[2011-12-02 11:40:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla
[2010-12-23 09:36:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\LGMOBILEAX
[2011-01-19 09:42:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\NCH Swift Sound
[2012-04-16 11:43:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Ralink Driver
[2011-12-02 10:00:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\RDRM
[2010-03-02 11:09:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ScanSoft
[2009-11-23 11:06:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SITEguard
[2009-11-24 09:57:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\STOPzilla!
[2012-07-09 18:29:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP
[2010-09-16 09:56:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Zeon
[2012-05-18 09:50:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Audacity
[2010-01-21 12:45:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Autodesk
[2010-03-16 15:50:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Blender Foundation
[2009-10-26 15:37:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Broad Intelligence
[2011-02-21 10:44:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Canneverbe Limited
[2011-09-21 09:29:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\com.smallblueprinter.gardenPlanner3
[2010-08-09 09:22:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\GARMIN
[2011-03-04 16:47:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\GrabIt
[2010-05-31 11:45:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Graphisoft
[2012-07-06 14:27:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\hellomoto
[2012-06-27 12:43:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Indigo Renderer
[2011-12-07 16:44:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\ipla
[2011-01-19 10:04:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\NCH Swift Sound
[2008-12-16 12:30:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\OpenOffice.org
[2010-06-11 18:58:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\PC-FAX TX
[2010-05-28 12:51:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\pdfMachine
[2011-01-19 10:02:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Recordpad
[2010-09-16 09:55:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\ScanSoft
[2012-05-29 11:53:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\SpyShelter
[2012-06-12 14:08:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Super-Cow
[2012-07-06 15:13:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\uTorrent
[2011-08-10 10:44:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\YouTube Downloader
[2010-09-16 09:56:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Zeon
[2012-04-19 13:47:09 | 000,000,272 | ---- | M] () -- C:\WINDOWS\Tasks\switchDowngrade.job
[2012-01-12 13:47:13 | 000,000,272 | ---- | M] () -- C:\WINDOWS\Tasks\switchShakeIcon.job
[2012-07-10 09:09:00 | 000,000,456 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{B6FCEA59-7523-4B8E-889B-A4237B160548}.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:C43ED645

< End of report >