OTL logfile created on: 2012-07-15 16:59:26 - Run 4 OTL by OldTimer - Version 3.2.54.0 Folder = C:\Documents and Settings\Sebastian\Pulpit Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.2180) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1015,23 Mb Total Physical Memory | 477,57 Mb Available Physical Memory | 47,04% Memory free 2,39 Gb Paging File | 1,97 Gb Available in Paging File | 82,46% Paging File free Paging file location(s): C:\pagefile.sys 1524 3048 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 48,83 Gb Total Space | 3,19 Gb Free Space | 6,52% Space Free | Partition Type: NTFS Drive D: | 100,21 Gb Total Space | 1,51 Gb Free Space | 1,51% Space Free | Partition Type: NTFS Computer Name: SEBASTIA-DF3C88 | User Name: Sebastian | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-07-14 16:16:17 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Sebastian\Pulpit\OTL.exe PRC - [2012-07-03 13:19:28 | 000,160,944 | R--- | M] (Skype Technologies) -- C:\Program Files\Skype\Updater\Updater.exe PRC - [2012-04-25 11:35:12 | 000,067,408 | R--- | M] (iS3, Inc.) -- C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe PRC - [2012-01-26 20:23:00 | 002,077,536 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgtray.exe PRC - [2010-11-25 10:45:16 | 000,725,344 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgcsrvx.exe PRC - [2010-10-22 19:48:56 | 000,621,920 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgnsx.exe PRC - [2010-10-22 19:48:56 | 000,515,424 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgrsx.exe PRC - [2010-10-22 19:48:52 | 000,308,136 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgwdsvc.exe PRC - [2010-10-22 19:48:49 | 000,921,952 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgemc.exe PRC - [2010-10-22 19:48:48 | 001,101,152 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgchsvx.exe PRC - [2010-10-22 19:48:48 | 000,842,592 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgam.exe PRC - [2007-02-22 00:26:20 | 000,043,008 | ---- | M] () -- C:\Program Files\BitTorrent\bittorrent.exe PRC - [2004-08-04 00:44:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2007-02-22 00:26:20 | 000,043,008 | ---- | M] () -- C:\Program Files\BitTorrent\bittorrent.exe MOD - [2006-10-20 22:19:04 | 000,090,112 | ---- | M] () -- C:\Program Files\BitTorrent\_ctypes.pyd MOD - [2006-10-18 17:35:26 | 000,049,152 | ---- | M] () -- C:\Program Files\BitTorrent\_socket.pyd MOD - [2006-10-18 17:35:14 | 000,069,632 | ---- | M] () -- C:\Program Files\BitTorrent\zlib.pyd MOD - [2006-10-18 17:35:10 | 001,871,872 | ---- | M] () -- C:\Program Files\BitTorrent\python24.dll MOD - [2006-10-18 17:18:58 | 000,499,712 | ---- | M] () -- C:\Program Files\BitTorrent\_ssl.pyd MOD - [2006-02-13 05:29:48 | 000,009,216 | ---- | M] () -- C:\Program Files\BitTorrent\_zope_interface_coptimizations.pyd MOD - [2006-01-19 02:03:38 | 000,073,728 | ---- | M] () -- C:\Program Files\BitTorrent\win32api.pyd MOD - [2006-01-11 13:28:38 | 000,131,072 | ---- | M] () -- C:\Program Files\BitTorrent\shell.pyd MOD - [2006-01-11 13:27:22 | 000,319,488 | ---- | M] () -- C:\Program Files\BitTorrent\pythoncom24.dll MOD - [2006-01-11 13:20:00 | 000,081,920 | ---- | M] () -- C:\Program Files\BitTorrent\win32file.pyd MOD - [2006-01-11 13:19:40 | 000,102,400 | ---- | M] () -- C:\Program Files\BitTorrent\pywintypes24.dll MOD - [2004-08-04 00:44:04 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ) SRV - [2012-07-12 01:43:43 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2012-07-03 13:19:28 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2012-04-25 11:35:12 | 000,067,408 | R--- | M] (iS3, Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe -- (szserver) SRV - [2010-10-22 19:48:52 | 000,308,136 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG9\avgwdsvc.exe -- (avg9wd) SRV - [2010-10-22 19:48:49 | 000,921,952 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG9\avgemc.exe -- (avg9emc) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - [2012-04-25 11:21:26 | 000,073,136 | R--- | M] (iS3, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\SZKGFS.sys -- (szkgfs) DRV - [2012-02-24 15:28:26 | 000,099,728 | R--- | M] (iS3 Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\SZKG.sys -- (szkg5) DRV - [2012-02-24 15:28:26 | 000,099,728 | R--- | M] (iS3 Inc.) [Kernel | Boot | Stopped] -- C:\WINDOWS\system32\drivers\is3srv.sys -- (is3srv) DRV - [2011-09-13 10:11:54 | 000,029,712 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\avgmfx86.sys -- (AvgMfx86) DRV - [2011-06-08 14:32:49 | 000,243,152 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgtdix.sys -- (AvgTdiX) DRV - [2010-10-22 19:48:49 | 000,216,400 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgldx86.sys -- (AvgLdx86) DRV - [2010-10-22 19:39:50 | 000,052,872 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\avgrkx86.sys -- (AvgRkx86) DRV - [2006-09-12 19:27:00 | 004,381,184 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.Sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2005-11-16 16:08:00 | 000,078,976 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTL8023xp) DRV - [2005-02-11 10:24:24 | 000,079,488 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k750obex.sys -- (k750obex) DRV - [2005-02-11 10:22:48 | 000,081,728 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k750mgmt.sys -- (k750mgmt) DRV - [2005-02-11 10:21:10 | 000,089,872 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k750mdm.sys -- (k750mdm) DRV - [2005-02-11 10:21:02 | 000,006,576 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k750mdfl.sys -- (k750mdfl) DRV - [2005-02-11 10:19:20 | 000,055,216 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k750bus.sys -- (k750bus) Sony Ericsson 750 driver (WDM) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://google.com/ IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultenginename: "" FF - prefs.js..browser.search.defaulturl: "" FF - prefs.js..browser.search.order.1: "" FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=937811&ilc=12" FF - prefs.js..browser.search.selectedEngine: "" FF - prefs.js..browser.startup.homepage: "google.pl" FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:9.0.0.911 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}:6.0.29 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22 FF - prefs.js..keyword.URL: "http://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=937811&p=" FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: "" FF - prefs.js..sweetim.toolbar.previous.browser.search.defaulturl: "" FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: "Yahoo" FF - prefs.js..browser.startup.homepage: "" FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_3_300_265.dll () FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.0.50917.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files\AVG\AVG9\Firefox [2011-09-13 14:55:04 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.25\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-12-21 19:05:02 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.25\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-12-21 19:05:03 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Documents and Settings\Sebastian\Dane aplikacji\IDM\idmmzcc3 [2010-10-22 19:18:16 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Sebastian\Dane aplikacji\Mozilla\Extensions [2012-07-15 16:25:09 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Sebastian\Dane aplikacji\Mozilla\Firefox\Profiles\leldoaaq.default\extensions [2012-07-15 16:27:27 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2011-11-16 00:03:14 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} [2011-06-21 17:05:01 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} [2011-11-04 10:03:48 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} [2011-09-13 14:55:04 | 000,000,000 | ---D | M] (AVG Safe Search) -- C:\PROGRAM FILES\AVG\AVG9\FIREFOX [2011-06-21 17:03:06 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [2007-02-01 02:41:46 | 000,049,152 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\mozilla firefox\plugins\npbittorrent.dll [2011-10-03 06:06:04 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2011-12-20 15:21:21 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2011-12-20 15:21:21 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2011-12-20 15:21:21 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2011-12-20 15:21:21 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2011-12-20 15:21:21 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2011-12-20 15:21:21 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - homepage: http://google.com/ CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms} CHR - homepage: http://google.com/ CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\Sebastian\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\20.0.1132.57\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll CHR - plugin: Java Deployment Toolkit 6.0.260.3 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 6 U26 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\4.0.50917.0\npctrl.dll CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Documents and Settings\Sebastian\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\20.0.1132.57\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\Sebastian\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\20.0.1132.57\pdf.dll CHR - plugin: BitTorrent (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npbittorrent.dll CHR - plugin: Microsoft DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll CHR - plugin: Microsoft DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll CHR - plugin: Google Update (Enabled) = C:\Documents and Settings\Sebastian\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.79\npGoogleUpdate3.dll CHR - plugin: Default Plug-in (Enabled) = default_plugin CHR - Extension: Skype Click to Call = C:\Documents and Settings\Sebastian\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\ O1 HOSTS File: ([2001-10-26 15:45:16 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.) O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (STOPzilla Browser Helper Object) - {E3215F20-3212-11D6-9F8B-00D0B743919D} - C:\Program Files\STOPzilla!\SZIEBHO.dll (iS3, Inc.) O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [AVG9_TRAY] C:\Program Files\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.) O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh) O4 - HKCU..\Run: [BitTorrent] C:\Program Files\BitTorrent\bittorrent.exe () O4 - Startup: C:\Documents and Settings\Sebastian\Menu Start\Programy\Autostart\OpenOffice.org 3.3.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe () O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\control panel present O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\restrictions present O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\control panel present O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\restrictions present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0 O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 File not found O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9D23E4C4-4426-4193-A477-A33BBC8E0CFC}: DhcpNameServer = 192.168.2.1 O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O20 - Winlogon\Notify\avgrsstarter: DllName - (avgrsstx.dll) - C:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2010-10-22 18:46:25 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKCU\...exe [@ = exefile] -- Reg Error: Key error. File not found O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-07-15 16:06:42 | 000,000,000 | ---D | C] -- C:\_OTL [2012-07-14 16:16:17 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Sebastian\Pulpit\OTL.exe [2012-07-14 14:07:02 | 000,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy [2012-07-14 14:07:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Spybot - Search & Destroy [2012-07-14 13:20:41 | 000,101,112 | R--- | C] (GFI Software) -- C:\WINDOWS\System32\drivers\SBREDrv.sys [2012-07-14 13:20:41 | 000,042,864 | R--- | C] (GFI Software) -- C:\WINDOWS\System32\SBBD.EXE [2012-07-14 13:20:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\STOPzilla [2012-07-14 13:20:34 | 000,000,000 | ---D | C] -- C:\Program Files\STOPzilla! [2012-07-14 13:20:34 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\iS3 [2012-07-14 13:20:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\STOPzilla! [2012-07-14 12:30:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\HitmanPro [2012-07-14 01:08:02 | 000,000,000 | ---D | C] -- D:\Moje, moje, moje\METALCORE [2012-07-14 01:04:12 | 000,000,000 | ---D | C] -- D:\Moje, moje, moje\Propaganda [2012-07-14 01:04:00 | 000,000,000 | ---D | C] -- D:\Moje, moje, moje\Bands [2012-07-14 00:54:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sebastian\Pulpit\Rockell [2012-07-12 01:39:19 | 000,426,184 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe [2012-07-09 06:14:03 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype [2012-07-09 06:14:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Skype [2012-07-06 00:30:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sebastian\Ustawienia lokalne\Dane aplikacji\DOSBox [2012-07-06 00:30:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\DOSBox-0.74 [2012-07-06 00:30:18 | 000,000,000 | ---D | C] -- C:\Program Files\DOSBox-0.74 [2012-07-06 00:30:09 | 001,448,809 | ---- | C] (DOSBox Team) -- C:\DOSBox0.74-win32-installer.exe [2012-07-06 00:23:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Sebastian\Pulpit\Polanie [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-07-15 16:57:43 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2012-07-15 16:51:37 | 101,552,148 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm [2012-07-15 16:43:46 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat [2012-07-15 16:34:22 | 000,624,883 | ---- | M] () -- C:\Documents and Settings\Sebastian\Pulpit\adwcleaner.exe [2012-07-15 13:02:21 | 000,000,521 | ---- | M] () -- C:\Documents and Settings\Sebastian\Pulpit\AQQ.lnk [2012-07-15 12:50:37 | 012,752,508 | ---- | M] () -- C:\Documents and Settings\Sebastian\Pulpit\AQQ_MT_24150.exe [2012-07-14 20:24:01 | 000,357,203 | ---- | M] () -- C:\Documents and Settings\Sebastian\Pulpit\1210271530needforspeedc.jpg [2012-07-14 16:38:35 | 000,054,156 | -H-- | M] () -- C:\WINDOWS\QTFont.qfn [2012-07-14 16:16:17 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Sebastian\Pulpit\OTL.exe [2012-07-14 15:57:22 | 000,000,245 | -HS- | M] () -- C:\boot.ini [2012-07-14 15:45:48 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2012-07-14 15:43:03 | 000,000,930 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job [2012-07-14 13:08:38 | 000,100,352 | ---- | M] () -- C:\Documents and Settings\Sebastian\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-07-14 13:01:58 | 000,300,440 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2012-07-13 01:00:31 | 000,017,098 | ---- | M] () -- C:\WINDOWS\Sebastian.acl [2012-07-12 01:43:39 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe [2012-07-12 01:43:39 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl [2012-07-11 22:04:28 | 000,001,409 | ---- | M] () -- C:\WINDOWS\QTFont.for [2012-07-09 06:14:05 | 000,001,880 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk [2012-07-09 06:09:27 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2012-07-06 00:30:19 | 000,001,581 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\DOSBox 0.74.lnk [2012-07-06 00:30:09 | 001,448,809 | ---- | M] (DOSBox Team) -- C:\DOSBox0.74-win32-installer.exe [2012-07-05 00:22:14 | 000,124,551 | ---- | M] () -- D:\Moje, moje, moje\ashlynn_brooke_6.jpg [2012-07-04 22:49:54 | 000,990,630 | ---- | M] () -- D:\Moje, moje, moje\2u595co.gif [2012-07-03 00:46:52 | 000,555,057 | ---- | M] () -- C:\Documents and Settings\Sebastian\Pulpit\ek0xv.jpg [2012-06-26 01:49:03 | 000,053,486 | ---- | M] () -- D:\Moje, moje, moje\13325889-1697x1131.jpeg [2012-06-26 01:44:18 | 000,100,535 | ---- | M] () -- D:\Moje, moje, moje\13325895-1697x1131.jpeg [2012-06-26 01:26:21 | 000,055,422 | ---- | M] () -- D:\Moje, moje, moje\318222_133220596813570_1893946737_n.jpg [2012-06-26 01:26:17 | 000,047,111 | ---- | M] () -- D:\Moje, moje, moje\524940_133222126813417_708471009_n.jpg [2012-06-26 01:26:08 | 000,063,278 | ---- | M] () -- D:\Moje, moje, moje\538254_10150845066418173_476778942_n.jpg [2012-06-26 01:26:04 | 000,043,957 | ---- | M] () -- D:\Moje, moje, moje\599734_3840465764264_64477585_n.jpg [2012-06-26 01:25:58 | 000,036,234 | ---- | M] () -- D:\Moje, moje, moje\303652_10151847261640164_770283950_n.jpg [2012-06-26 01:25:14 | 000,073,188 | ---- | M] () -- D:\Moje, moje, moje\247023_166981680032417_7622700_n.jpg [2012-06-23 01:04:10 | 001,114,769 | ---- | M] () -- C:\Documents and Settings\Sebastian\Pulpit\DSCN5875.JPG [2012-06-19 21:51:06 | 059,202,309 | ---- | M] () -- D:\Moje, moje, moje\AS-TLBFW.rar [2012-06-19 13:43:10 | 003,389,035 | ---- | M] () -- D:\Moje, moje, moje\eMule0.50a-Installer.exe [2012-06-18 12:52:00 | 000,005,946 | ---- | M] () -- D:\Moje, moje, moje\1283_7.JPG [2012-06-17 22:55:47 | 000,068,273 | ---- | M] () -- D:\Moje, moje, moje\8847_ae19.jpeg [2012-06-17 22:55:42 | 000,100,150 | ---- | M] () -- D:\Moje, moje, moje\4296_7ab6.jpeg [2012-06-17 22:55:38 | 000,086,695 | ---- | M] () -- D:\Moje, moje, moje\tumblr_m54063Hu8m1qi7x2xo1_500.jpg [2012-06-17 22:55:34 | 000,062,292 | ---- | M] () -- D:\Moje, moje, moje\2658_3dc4.jpeg [2012-06-17 22:55:30 | 000,108,303 | ---- | M] () -- D:\Moje, moje, moje\4795_8373.jpeg [2012-06-17 22:55:24 | 000,100,063 | ---- | M] () -- D:\Moje, moje, moje\tumblr_lms7uuavJI1qed3i8o1_500.jpg [2012-06-17 22:55:22 | 000,048,203 | ---- | M] () -- D:\Moje, moje, moje\tumblr_lo2bdm9Adi1qzcac7o1_500.jpg [2012-06-17 22:55:18 | 000,207,425 | ---- | M] () -- D:\Moje, moje, moje\tumblr_lobmkwdDSY1qjmr4bo1_500.png [2012-06-17 22:55:14 | 000,042,585 | ---- | M] () -- D:\Moje, moje, moje\tumblr_m36ivlwqcU1qhw1yoo1_500.jpg [2012-06-17 22:54:54 | 000,050,903 | ---- | M] () -- D:\Moje, moje, moje\2002_cfd3.jpeg [2012-06-17 22:54:50 | 000,029,883 | ---- | M] () -- D:\Moje, moje, moje\0895_56f0.jpeg [2012-06-17 22:54:45 | 000,083,704 | ---- | M] () -- D:\Moje, moje, moje\2677_026f_500.jpeg [2012-06-17 22:54:40 | 000,199,351 | ---- | M] () -- D:\Moje, moje, moje\3179_56f3_500.jpeg [2012-06-17 22:54:37 | 000,127,663 | ---- | M] () -- D:\Moje, moje, moje\7326_1b7c_500.jpeg [2012-06-17 22:54:33 | 000,107,138 | ---- | M] () -- D:\Moje, moje, moje\6330_cbd1.jpeg [2012-06-17 22:54:30 | 000,053,484 | ---- | M] () -- D:\Moje, moje, moje\7141_9757_500.jpeg [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-07-15 16:34:19 | 000,624,883 | ---- | C] () -- C:\Documents and Settings\Sebastian\Pulpit\adwcleaner.exe [2012-07-15 12:50:14 | 012,752,508 | ---- | C] () -- C:\Documents and Settings\Sebastian\Pulpit\AQQ_MT_24150.exe [2012-07-14 20:24:00 | 000,357,203 | ---- | C] () -- C:\Documents and Settings\Sebastian\Pulpit\1210271530needforspeedc.jpg [2012-07-12 01:39:22 | 000,000,930 | ---- | C] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job [2012-07-11 22:04:28 | 000,054,156 | -H-- | C] () -- C:\WINDOWS\QTFont.qfn [2012-07-11 22:04:28 | 000,001,409 | ---- | C] () -- C:\WINDOWS\QTFont.for [2012-07-09 06:14:05 | 000,001,880 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk [2012-07-06 00:30:19 | 000,001,581 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\DOSBox 0.74.lnk [2012-07-04 22:49:54 | 000,990,630 | ---- | C] () -- D:\Moje, moje, moje\2u595co.gif [2012-07-03 00:46:51 | 000,555,057 | ---- | C] () -- C:\Documents and Settings\Sebastian\Pulpit\ek0xv.jpg [2012-06-26 01:49:03 | 000,053,486 | ---- | C] () -- D:\Moje, moje, moje\13325889-1697x1131.jpeg [2012-06-26 01:44:16 | 000,100,535 | ---- | C] () -- D:\Moje, moje, moje\13325895-1697x1131.jpeg [2012-06-26 01:26:21 | 000,055,422 | ---- | C] () -- D:\Moje, moje, moje\318222_133220596813570_1893946737_n.jpg [2012-06-26 01:26:17 | 000,047,111 | ---- | C] () -- D:\Moje, moje, moje\524940_133222126813417_708471009_n.jpg [2012-06-26 01:26:08 | 000,063,278 | ---- | C] () -- D:\Moje, moje, moje\538254_10150845066418173_476778942_n.jpg [2012-06-26 01:26:04 | 000,043,957 | ---- | C] () -- D:\Moje, moje, moje\599734_3840465764264_64477585_n.jpg [2012-06-26 01:25:58 | 000,036,234 | ---- | C] () -- D:\Moje, moje, moje\303652_10151847261640164_770283950_n.jpg [2012-06-26 01:25:14 | 000,073,188 | ---- | C] () -- D:\Moje, moje, moje\247023_166981680032417_7622700_n.jpg [2012-06-25 14:50:23 | 001,309,289 | ---- | C] () -- D:\Moje, moje, moje\DSCN6105.JPG [2012-06-25 14:49:58 | 001,218,333 | ---- | C] () -- D:\Moje, moje, moje\DSCN6119.JPG [2012-06-25 14:49:56 | 001,237,557 | ---- | C] () -- D:\Moje, moje, moje\DSCN6118.JPG [2012-06-25 14:49:55 | 001,175,570 | ---- | C] () -- D:\Moje, moje, moje\DSCN6117.JPG [2012-06-25 14:49:53 | 001,229,906 | ---- | C] () -- D:\Moje, moje, moje\DSCN6116.JPG [2012-06-25 14:49:52 | 001,302,381 | ---- | C] () -- D:\Moje, moje, moje\DSCN6115.JPG [2012-06-25 14:49:50 | 001,229,450 | ---- | C] () -- D:\Moje, moje, moje\DSCN6114.JPG [2012-06-25 14:49:49 | 001,184,102 | ---- | C] () -- D:\Moje, moje, moje\DSCN6113.JPG [2012-06-25 14:49:47 | 001,289,425 | ---- | C] () -- D:\Moje, moje, moje\DSCN6112.JPG [2012-06-25 14:49:46 | 001,183,517 | ---- | C] () -- D:\Moje, moje, moje\DSCN6111.JPG [2012-06-25 14:49:44 | 001,222,366 | ---- | C] () -- D:\Moje, moje, moje\DSCN6110.JPG [2012-06-25 14:49:43 | 001,268,959 | ---- | C] () -- D:\Moje, moje, moje\DSCN6109.JPG [2012-06-25 14:49:41 | 001,372,282 | ---- | C] () -- D:\Moje, moje, moje\DSCN6108.JPG [2012-06-25 14:49:40 | 001,310,332 | ---- | C] () -- D:\Moje, moje, moje\DSCN6107.JPG [2012-06-25 14:49:38 | 001,237,337 | ---- | C] () -- D:\Moje, moje, moje\DSCN6106.JPG [2012-06-23 01:04:09 | 001,114,769 | ---- | C] () -- C:\Documents and Settings\Sebastian\Pulpit\DSCN5875.JPG [2012-06-19 13:48:10 | 059,202,309 | ---- | C] () -- D:\Moje, moje, moje\AS-TLBFW.rar [2012-06-19 13:42:59 | 003,389,035 | ---- | C] () -- D:\Moje, moje, moje\eMule0.50a-Installer.exe [2012-06-18 12:52:00 | 000,005,946 | ---- | C] () -- D:\Moje, moje, moje\1283_7.JPG [2012-06-17 22:55:47 | 000,068,273 | ---- | C] () -- D:\Moje, moje, moje\8847_ae19.jpeg [2012-06-17 22:55:42 | 000,100,150 | ---- | C] () -- D:\Moje, moje, moje\4296_7ab6.jpeg [2012-06-17 22:55:38 | 000,086,695 | ---- | C] () -- D:\Moje, moje, moje\tumblr_m54063Hu8m1qi7x2xo1_500.jpg [2012-06-17 22:55:34 | 000,062,292 | ---- | C] () -- D:\Moje, moje, moje\2658_3dc4.jpeg [2012-06-17 22:55:30 | 000,108,303 | ---- | C] () -- D:\Moje, moje, moje\4795_8373.jpeg [2012-06-17 22:55:24 | 000,100,063 | ---- | C] () -- D:\Moje, moje, moje\tumblr_lms7uuavJI1qed3i8o1_500.jpg [2012-06-17 22:55:22 | 000,048,203 | ---- | C] () -- D:\Moje, moje, moje\tumblr_lo2bdm9Adi1qzcac7o1_500.jpg [2012-06-17 22:55:18 | 000,207,425 | ---- | C] () -- D:\Moje, moje, moje\tumblr_lobmkwdDSY1qjmr4bo1_500.png [2012-06-17 22:55:14 | 000,042,585 | ---- | C] () -- D:\Moje, moje, moje\tumblr_m36ivlwqcU1qhw1yoo1_500.jpg [2012-06-17 22:54:54 | 000,050,903 | ---- | C] () -- D:\Moje, moje, moje\2002_cfd3.jpeg [2012-06-17 22:54:50 | 000,029,883 | ---- | C] () -- D:\Moje, moje, moje\0895_56f0.jpeg [2012-06-17 22:54:45 | 000,083,704 | ---- | C] () -- D:\Moje, moje, moje\2677_026f_500.jpeg [2012-06-17 22:54:40 | 000,199,351 | ---- | C] () -- D:\Moje, moje, moje\3179_56f3_500.jpeg [2012-06-17 22:54:37 | 000,127,663 | ---- | C] () -- D:\Moje, moje, moje\7326_1b7c_500.jpeg [2012-06-17 22:54:33 | 000,107,138 | ---- | C] () -- D:\Moje, moje, moje\6330_cbd1.jpeg [2012-06-17 22:54:29 | 000,053,484 | ---- | C] () -- D:\Moje, moje, moje\7141_9757_500.jpeg [2012-06-02 19:20:19 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat [2012-04-15 15:14:32 | 000,000,000 | ---- | C] () -- C:\WINDOWS\iPlayer.INI [2011-10-05 21:34:57 | 000,009,752 | ---- | C] () -- C:\Documents and Settings\Sebastian\Dane aplikacji\VMCP.SPF [2010-11-14 11:11:04 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2010-11-09 19:15:32 | 000,000,048 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat [2010-10-24 14:28:25 | 000,000,022 | ---- | C] () -- C:\WINDOWS\exchng.ini [2010-10-24 14:28:23 | 000,000,626 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2010-10-22 20:38:46 | 000,004,484 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2010-10-22 20:37:30 | 000,300,440 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010-10-22 19:41:30 | 000,100,352 | ---- | C] () -- C:\Documents and Settings\Sebastian\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-10-22 19:15:40 | 000,204,800 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4764.dll [2010-10-22 19:14:54 | 000,143,360 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll [2010-10-22 19:14:54 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe [2010-10-22 18:56:21 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat [2010-10-22 18:48:53 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2010-10-22 18:43:15 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [color=#E56717]========== Files - Unicode (All) ==========[/color] [2011-12-02 11:47:52 | 002,576,045 | ---- | M] ()(D:\Moje, moje, moje\Jan Paweł 2 zajebał mi szlugi??.flv) -- D:\Moje, moje, moje\Jan Paweł 2 zajebał mi szlugi‬‏.flv [2011-12-02 11:47:43 | 002,576,045 | ---- | C] ()(D:\Moje, moje, moje\Jan Paweł 2 zajebał mi szlugi??.flv) -- D:\Moje, moje, moje\Jan Paweł 2 zajebał mi szlugi‬‏.flv < End of report >