OTL logfile created on: 2012-07-20 17:46:02 - Run 5
OTL by OldTimer - Version 3.2.54.0     Folder = f:\OTL
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
2,99 Gb Total Physical Memory | 2,72 Gb Available Physical Memory | 90,82% Memory free
4,33 Gb Paging File | 4,24 Gb Available in Paging File | 98,04% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 21,41 Gb Total Space | 5,29 Gb Free Space | 24,71% Space Free | Partition Type: NTFS
Drive D: | 53,12 Gb Total Space | 34,94 Gb Free Space | 65,78% Space Free | Partition Type: NTFS
Drive F: | 119,64 Mb Total Space | 22,63 Mb Free Space | 18,92% Space Free | Partition Type: FAT32
 
Computer Name: TE00238JXTCX3J | User Name: wito | NOT logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-07-19 17:12:30 | 000,596,480 | ---- | M] (OldTimer Tools) -- f:\OTL\OTL_2_54.exe
PRC - [2010-12-17 08:56:10 | 003,707,808 | ---- | M] (Ghisler Software GmbH) -- C:\totalcmd\TOTALCMD.EXE
PRC - [2008-04-14 22:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [Auto | Unknown] -- C:\Program Files\Btc\eAudytor\eAgent\Bin\eAgentInternal.exe )##'Az'@F2.0sM# -- (agent2)
SRV - [2012-01-07 12:15:16 | 000,218,624 | ---- | M] () [Auto | Unknown] -- C:\Program Files\Mobile Partner\UpdateDog\ouc.exe -- (Mobile Partner. RunOuc)
SRV - [2011-06-02 09:02:40 | 000,198,520 | ---- | M] (Juniper Networks) [Auto | Unknown] -- C:\Program Files\Common Files\Juniper Networks\JUNS\dsAccessService.exe -- (JuniperAccessService)
SRV - [2010-12-08 14:31:06 | 000,628,736 | ---- | M] (Nokia) [On_Demand | Unknown] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2010-11-16 15:37:38 | 000,264,704 | ---- | M] () [Auto | Unknown] -- C:\Documents and Settings\All Users\Dane aplikacji\DatacardService\HWDeviceService.exe -- (HWDeviceService.exe)
SRV - [2010-09-15 14:17:06 | 000,471,040 | ---- | M] (Nokia Siemens Networks) [Auto | Unknown] -- C:\Program Files\Nokia\GCS\GCSServer.exe -- (GCSR4)
SRV - [2010-09-15 12:35:38 | 000,192,512 | ---- | M] (Nokia Siemens Networks) [Auto | Unknown] -- C:\Program Files\Nokia\GCS\gcssync.exe -- (GCSSYNC)
SRV - [2010-09-15 12:32:10 | 000,188,416 | ---- | M] (Nokia Siemens Networks) [Auto | Unknown] -- C:\Program Files\Nokia\GCS\Q1DBService.exe -- (Q1DBService)
SRV - [2010-01-06 21:07:00 | 000,147,472 | ---- | M] (McAfee, Inc.) [Auto | Unknown] -- C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe -- (McShield)
SRV - [2010-01-06 21:07:00 | 000,070,728 | ---- | M] (McAfee, Inc.) [Auto | Unknown] -- C:\WINDOWS\system32\mfevtps.exe -- (mfevtp)
SRV - [2010-01-06 21:07:00 | 000,066,896 | ---- | M] (McAfee, Inc.) [Auto | Unknown] -- C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe -- (McTaskManager)
SRV - [2010-01-06 21:07:00 | 000,022,816 | ---- | M] (McAfee, Inc.) [Auto | Unknown] -- C:\Program Files\McAfee\VirusScan Enterprise\EngineServer.exe -- (McAfeeEngineService)
SRV - [2008-11-10 17:00:00 | 000,103,744 | ---- | M] (McAfee, Inc.) [Auto | Unknown] -- C:\Program Files\McAfee\Common Framework\FrameworkService.exe -- (McAfeeFramework)
SRV - [2008-06-25 18:47:22 | 000,188,416 | ---- | M] (Nokia Siemens Networks) [Auto | Unknown] -- C:\NOKIAMGR\SYSTEM32\Q1DBService.exe -- (GCSQ1DB)
SRV - [2008-04-14 22:51:00 | 000,088,576 | ---- | M] (Microsoft Corporation) [Unknown (-1) | Unknown] -- C:\WINDOWS\system32\wbem\wmiaprpl.dll -- (WmiApRpl)
SRV - [2008-04-11 11:57:14 | 000,124,264 | ---- | M] (TOSHIBA CORPORATION) [Auto | Unknown] -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service)
SRV - [2007-09-26 17:23:26 | 002,999,664 | ---- | M] (Symantec Corporation) [On_Demand | Unknown] -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE -- (LiveUpdate)
SRV - [2007-09-26 17:23:26 | 000,554,352 | ---- | M] (Symantec Corporation) [Auto | Unknown] -- C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe -- (Harmonogram automatycznej usługi LiveUpdate)
SRV - [2007-05-10 10:23:50 | 000,094,208 | ---- | M] (SigmaTel, Inc.) [Auto | Unknown] -- C:\Program Files\SigmaTel\C-Major Audio\DellXPM_5515v131\WDM\stacsv.exe -- (STacSV)
SRV - [2007-03-28 21:41:24 | 003,290,728 | ---- | M] (Symantec Corporation) [Auto | Unknown] -- C:\Program Files\Norton Ghost\Agent\VProSvc.exe -- (Norton Ghost)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Unknown] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand | Unknown] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Unknown] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Unknown] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Unknown] --  -- (PDCOMP)
DRV - File not found [Kernel | System | Unknown] --  -- (PCIDump)
DRV - File not found [Kernel | On_Demand | Unknown] -- system32\DRIVERS\NETw4x32.sys -- (NETw4x32) Sterownik karty Intel(R)
DRV - File not found [Kernel | System | Unknown] --  -- (lbrtfdc)
DRV - File not found [Kernel | System | Unknown] --  -- (i2omgmt)
DRV - File not found [Kernel | System | Unknown] --  -- (Changer)
DRV - File not found [Kernel | On_Demand | Unknown] -- C:\DOCUME~1\admin\USTAWI~1\Temp\catchme.sys -- (catchme)
DRV - [2012-01-07 12:15:24 | 000,072,576 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Unknown] -- C:\WINDOWS\system32\drivers\ew_jubusenum.sys -- (huawei_enumerator)
DRV - [2012-01-07 12:15:24 | 000,011,136 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Unknown] -- C:\WINDOWS\system32\drivers\ew_usbenumfilter.sys -- (ew_usbenumfilter)
DRV - [2012-01-07 12:15:23 | 000,117,504 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Unknown] -- C:\WINDOWS\system32\drivers\ewusbnet.sys -- (ewusbnet)
DRV - [2012-01-07 12:15:23 | 000,102,784 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Unknown] -- C:\WINDOWS\system32\drivers\ew_hwusbdev.sys -- (ew_hwusbdev)
DRV - [2012-01-07 12:15:22 | 000,106,496 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Unknown] -- C:\WINDOWS\system32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2010-09-01 17:55:28 | 000,040,560 | ---- | M] (Belcarra Technologies) [Kernel | On_Demand | Unknown] -- C:\WINDOWS\system32\drivers\btblan.sys -- (EricssonUSBLan)
DRV - [2010-07-30 14:16:46 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Unknown] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2010-07-30 14:16:44 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Unknown] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2010-07-30 14:16:42 | 000,023,040 | ---- | M] (Nokia) [Kernel | On_Demand | Unknown] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2010-07-30 14:16:38 | 000,018,048 | ---- | M] (Nokia) [Kernel | On_Demand | Unknown] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2010-01-06 21:07:00 | 000,343,920 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Unknown] -- C:\WINDOWS\system32\drivers\mfehidk.sys -- (mfehidk)
DRV - [2010-01-06 21:07:00 | 000,091,832 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Unknown] -- C:\WINDOWS\system32\drivers\mfeavfk.sys -- (mfeavfk)
DRV - [2010-01-06 21:07:00 | 000,075,704 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Unknown] -- C:\WINDOWS\system32\drivers\mfeapfk.sys -- (mfeapfk)
DRV - [2010-01-06 21:07:00 | 000,066,600 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Unknown] -- C:\WINDOWS\system32\drivers\mferkdet.sys -- (mferkdet)
DRV - [2010-01-06 21:07:00 | 000,064,208 | ---- | M] (McAfee, Inc.) [Kernel | System | Unknown] -- C:\WINDOWS\system32\drivers\mfetdik.sys -- (mfetdik)
DRV - [2010-01-06 21:07:00 | 000,043,288 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Unknown] -- C:\WINDOWS\system32\drivers\mfebopk.sys -- (mfebopk)
DRV - [2008-08-26 09:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Unknown] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2008-06-02 11:42:52 | 001,287,552 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Unknown] -- C:\WINDOWS\system32\drivers\BCMWL5.SYS -- (BCM43XX)
DRV - [2008-06-02 11:42:50 | 000,033,664 | ---- | M] (CACE Technologies) [Kernel | Auto | Unknown] -- C:\WINDOWS\system32\drivers\BCMWLNPF.SYS -- (BCMWLNPF)
DRV - [2008-04-23 17:15:26 | 000,131,712 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Unknown] -- C:\WINDOWS\system32\drivers\tosrfbd.sys -- (tosrfbd)
DRV - [2008-04-14 22:51:00 | 000,088,576 | ---- | M] (Microsoft Corporation) [Unknown (-1) | Unknown (-1) | Unknown] -- C:\WINDOWS\system32\wbem\wmiaprpl.dll -- (WmiApRpl)
DRV - [2008-03-25 13:54:02 | 000,041,472 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Unknown] -- C:\WINDOWS\system32\drivers\tosporte.sys -- (tosporte)
DRV - [2008-03-19 11:38:24 | 000,074,112 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Unknown] -- C:\WINDOWS\system32\drivers\Tosrfhid.sys -- (Tosrfhid)
DRV - [2008-01-22 20:57:48 | 000,054,144 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Unknown] -- C:\WINDOWS\system32\drivers\TosRfSnd.sys -- (TosRfSnd)
DRV - [2007-11-29 09:45:44 | 000,036,608 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Unknown] -- C:\WINDOWS\system32\drivers\tosrfbnp.sys -- (tosrfbnp)
DRV - [2007-10-18 14:25:00 | 000,041,856 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Unknown] -- C:\WINDOWS\system32\drivers\tosrfusb.sys -- (Tosrfusb)
DRV - [2007-10-02 11:43:22 | 000,064,128 | ---- | M] (TOSHIBA Corporation) [Kernel | System | Unknown] -- C:\WINDOWS\system32\drivers\tosrfcom.sys -- (Tosrfcom)
DRV - [2007-08-02 17:35:12 | 000,989,952 | R--- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Unknown] -- C:\WINDOWS\system32\drivers\HSF_DPV.sys -- (HSF_DPV)
DRV - [2007-08-02 17:34:30 | 000,211,200 | R--- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Unknown] -- C:\WINDOWS\system32\drivers\HSFHWAZL.sys -- (HSFHWAZL)
DRV - [2007-08-02 17:34:26 | 000,731,136 | R--- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Unknown] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf)
DRV - [2007-05-10 10:24:34 | 001,222,840 | ---- | M] (SigmaTel, Inc.) [Kernel | On_Demand | Unknown] -- C:\WINDOWS\system32\drivers\sthda.sys -- (STHDA)
DRV - [2007-03-28 21:49:42 | 000,128,104 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Unknown] -- C:\WINDOWS\system32\drivers\WimFltr.sys -- (WimFltr)
DRV - [2007-03-28 21:29:12 | 000,131,944 | ---- | M] (StorageCraft) [File_System | Boot | Unknown] -- C:\WINDOWS\system32\drivers\symsnap.sys -- (symsnap)
DRV - [2007-03-28 21:29:10 | 000,037,864 | ---- | M] (Symantec Corporation) [Kernel | Auto | Unknown] -- C:\WINDOWS\system32\drivers\v2imount.sys -- (v2imount)
DRV - [2007-03-28 21:23:50 | 000,014,072 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Unknown] -- C:\WINDOWS\system32\drivers\vproeventmonitor.sys -- (VProEventMonitor)
DRV - [2007-03-26 10:19:00 | 000,062,208 | ---- | M] (O2Micro) [Kernel | On_Demand | Unknown] -- C:\WINDOWS\system32\drivers\oz776.sys -- (guardian2)
DRV - [2007-02-16 15:46:00 | 000,160,256 | R--- | M] (Broadcom Corporation) [Kernel | On_Demand | Unknown] -- C:\WINDOWS\system32\drivers\b57xp32.sys -- (b57w2k)
DRV - [2005-12-06 03:10:00 | 000,030,720 | ---- | M] (NEC Corporation) [Kernel | On_Demand | Unknown] -- C:\WINDOWS\system32\drivers\pncom.sys -- (pnmdm)
DRV - [2005-01-07 05:42:00 | 000,018,612 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Unknown] -- C:\WINDOWS\system32\drivers\tosrfnds.sys -- (tosrfnds)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
 
 
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-2316472290-732305755-849041327-1947\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\S-1-5-21-2316472290-732305755-849041327-1947\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-2316472290-732305755-849041327-1947\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-2316472290-732305755-849041327-1947\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.startup.homepage: "about:home"
FF - prefs.js..extensions.enabledItems: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20100908
FF - prefs.js..network.proxy.type: 0
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Documents and Settings\wito\Ustawienia lokalne\Dane aplikacji\Mozilla Firefox\components [2012-06-20 19:54:32 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Documents and Settings\wito\Ustawienia lokalne\Dane aplikacji\Mozilla Firefox\plugins
 
[2010-12-23 02:04:23 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\wito\Dane aplikacji\Mozilla\Extensions
[2012-05-19 17:16:05 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\wito\Dane aplikacji\Mozilla\Firefox\Profiles\5clyon6v.default\extensions
[2010-12-26 23:41:16 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\wito\Dane aplikacji\Mozilla\Firefox\Profiles\5clyon6v.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2012-05-19 17:16:05 | 000,000,000 | ---D | M] (WOT) -- C:\Documents and Settings\wito\Dane aplikacji\Mozilla\Firefox\Profiles\5clyon6v.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2012-02-08 22:46:21 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
 
O1 HOSTS File: ([2012-07-17 22:27:41 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan Enterprise\scriptsn.dll (McAfee, Inc.)
O4 - HKLM..\Run: [ITSecMng] C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe ( TOSHIBA CORPORATION)
O4 - HKLM..\Run: [McAfeeUpdaterUI] C:\Program Files\McAfee\Common Framework\udaterui.exe (McAfee, Inc.)
O4 - HKLM..\Run: [ShStatEXE] C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE (McAfee, Inc.)
O4 - HKLM..\Run: [SigmatelSysTrayApp] C:\Program Files\SigmaTel\C-Major Audio\WDM\stsystra.exe (SigmaTel, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Bluetooth Manager.lnk = C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe (TOSHIBA CORPORATION.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O7 - HKU\S-1-5-21-2316472290-732305755-849041327-1947\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2316472290-732305755-849041327-1947\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O7 - HKU\S-1-5-21-2316472290-732305755-849041327-1947\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-2316472290-732305755-849041327-1947\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-2316472290-732305755-849041327-1947\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1342131411296 (WUWebControl Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1342131403375 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E5F5D008-DD2C-4D32-977D-1A0ADF03058B} https://juniper.net/dana-cached/setup/JuniperSetupSP1.cab (JuniperSetupControlXP Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = el.local
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{356C3EEF-6007-48EC-9915-1EEEBB9855D1}: DhcpNameServer = 192.168.1.1
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\wito\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\wito\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008-06-18 14:47:19 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2011-12-16 14:29:50 | 000,000,000 | R--D | M] - C:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2011-12-16 14:29:50 | 000,000,000 | R--D | M] - D:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2010-11-12 10:07:50 | 000,000,000 | ---D | M] - F:\autorun.inf -- [ FAT32 ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012-07-20 17:36:13 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2012-07-19 08:02:26 | 000,000,000 | ---D | C] -- C:\WINDOWS\temp
[2012-07-18 21:58:46 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss
[2012-07-13 00:17:14 | 000,015,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuapi.dll.mui
[2012-07-12 23:54:37 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2012-07-12 23:54:34 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2012-07-12 23:54:34 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2012-07-12 23:54:34 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2012-07-12 23:53:31 | 000,000,000 | ---D | C] -- C:\Qoobox
[2012-07-12 23:53:23 | 000,000,000 | R--D | C] -- C:\Documents and Settings\wito\Menu Start\Programy\Narzędzia administracyjne
[2012-07-12 23:53:12 | 000,000,000 | ---D | C] -- C:\WINDOWS\erdnt
[2012-07-07 11:36:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\OnlineUpdate
[2012-07-07 11:36:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\log
[2012-06-22 21:06:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Nokia
[2012-06-22 20:38:25 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Flexi EDGE BTS Manager
[2012-06-22 19:43:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\wito\Pulpit\Awarie
[2012-06-21 14:00:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\wito\Pulpit\DS Emitel
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012-07-20 17:38:40 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012-07-20 17:38:07 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012-07-20 17:23:50 | 000,008,212 | ---- | M] () -- C:\WINDOWS\mfebcdata
[2012-07-18 22:46:03 | 000,000,211 | -HS- | M] () -- C:\boot.ini
[2012-07-17 22:27:41 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2012-07-15 22:16:34 | 000,002,539 | ---- | M] () -- C:\Documents and Settings\wito\Pulpit\Microsoft Office Word 2003.lnk
[2012-07-13 00:27:15 | 000,274,968 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012-07-13 00:22:06 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2012-07-12 09:32:00 | 000,000,790 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Malwarebytes Anti-Malware.lnk
[2012-07-11 22:59:31 | 000,135,469 | ---- | M] () -- C:\Documents and Settings\wito\Pulpit\6050 Bitum.pdf
[2012-07-11 22:57:47 | 000,154,356 | ---- | M] () -- C:\Documents and Settings\wito\Pulpit\6010 Bitum.pdf
[2012-07-11 22:54:49 | 000,028,694 | ---- | M] () -- C:\Documents and Settings\wito\Pulpit\zywica.pdf
[2012-07-07 17:40:20 | 000,002,561 | ---- | M] () -- C:\Documents and Settings\wito\Pulpit\Microsoft Office Outlook 2003.lnk
[2012-07-05 14:22:33 | 000,037,325 | RHS- | M] () -- C:\Documents and Settings\wito\ntuser.pol
[2012-07-03 13:46:44 | 000,022,344 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2012-06-25 16:05:34 | 000,069,560 | ---- | M] () -- C:\Documents and Settings\wito\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1_1234.DAT_1234
[2012-06-23 22:03:01 | 000,504,178 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2012-06-23 22:03:01 | 000,444,784 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012-06-23 22:03:01 | 000,090,714 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2012-06-23 22:03:01 | 000,072,660 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012-06-22 21:06:29 | 000,000,623 | ---- | M] () -- C:\WINDOWS\ODBC.INI
[2012-06-22 21:05:50 | 000,002,039 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\2G Flexi BTS Site Manager.lnk
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012-07-20 17:23:50 | 000,008,212 | ---- | C] () -- C:\WINDOWS\mfebcdata
[2012-07-12 23:54:37 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2012-07-12 23:54:35 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2012-07-12 23:54:34 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2012-07-12 23:54:34 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2012-07-12 23:54:34 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2012-07-11 22:59:31 | 000,135,469 | ---- | C] () -- C:\Documents and Settings\wito\Pulpit\6050 Bitum.pdf
[2012-07-11 22:57:47 | 000,154,356 | ---- | C] () -- C:\Documents and Settings\wito\Pulpit\6010 Bitum.pdf
[2012-07-11 22:54:49 | 000,028,694 | ---- | C] () -- C:\Documents and Settings\wito\Pulpit\zywica.pdf
[2012-06-22 21:05:50 | 000,002,039 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\2G Flexi BTS Site Manager.lnk
[2012-02-20 08:47:07 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012-01-12 17:44:21 | 000,000,078 | ---- | C] () -- C:\WINDOWS\init.ini
[2011-12-16 12:31:53 | 000,012,694 | ---- | C] () -- C:\Documents and Settings\wito\Ustawienia lokalne\Dane aplikacji\bbe270qu6ojs3_1234
[2011-09-01 15:16:49 | 000,000,537 | ---- | C] () -- C:\WINDOWS\UBHubMan.INI
[2011-09-01 14:39:39 | 000,000,000 | ---- | C] () -- C:\WINDOWS\FXCRRIMan.INI
[2011-09-01 14:39:02 | 000,000,100 | ---- | C] () -- C:\WINDOWS\FXCE1T1Man.INI
[2011-07-15 11:28:03 | 000,000,664 | ---- | C] () -- C:\Documents and Settings\wito\Ustawienia lokalne\Dane aplikacji\d3d9caps_1234.dat_1234
[2011-05-24 09:37:14 | 000,000,098 | ---- | C] () -- C:\WINDOWS\WirelessFTP.INI
[2011-01-14 17:28:22 | 000,030,720 | ---- | C] () -- C:\Documents and Settings\wito\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-12-24 18:35:56 | 000,069,560 | ---- | C] () -- C:\Documents and Settings\wito\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1_1234.DAT_1234
[2010-12-22 08:31:41 | 000,037,325 | RHS- | C] () -- C:\Documents and Settings\wito\ntuser.pol
[2010-12-22 08:31:00 | 000,023,330 | RHS- | C] () -- C:\Documents and Settings\All Users\ntuser.pol
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 88 bytes -> C:\Documents and Settings\wito\Pulpit\MinecraftSP.exe:SummaryInformation
@Alternate Data Stream - 21 bytes -> C:\Documents and Settings\wito\Moje dokumenty\Pobieranie:>*(@#)

< End of report >