OTL logfile created on: 2012-07-25 22:55:20 - Run 1 OTL by OldTimer - Version 3.2.54.1 Folder = C:\Users\acer\Desktop Windows Vista Home Basic Edition (Version = 6.0.6000) - Type = NTWorkstation Internet Explorer (Version = 7.0.6000.16386) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1013,81 Mb Total Physical Memory | 610,25 Mb Available Physical Memory | 60,19% Memory free 2,21 Gb Paging File | 1,99 Gb Available in Paging File | 90,02% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 51,01 Gb Total Space | 13,60 Gb Free Space | 26,65% Space Free | Partition Type: NTFS Drive D: | 51,01 Gb Total Space | 6,73 Gb Free Space | 13,20% Space Free | Partition Type: NTFS Computer Name: ACER-PC | User Name: acer | Logged in as Administrator. Boot Mode: SafeMode | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-07-25 21:23:22 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\acer\Desktop\OTL.exe PRC - [2006-11-02 11:45:07 | 002,923,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012-04-22 22:14:18 | 003,515,392 | ---- | M] () -- C:\Windows\System32\ffdshow.ax MOD - [2012-03-29 16:21:18 | 006,582,226 | ---- | M] () -- C:\Windows\System32\avcodec-lav-54.dll MOD - [2012-03-29 16:21:18 | 000,374,152 | ---- | M] () -- C:\Windows\System32\swscale-lav-2.dll MOD - [2012-03-29 16:21:18 | 000,207,872 | ---- | M] () -- C:\Windows\System32\avutil-lav-51.dll MOD - [2012-03-29 16:21:18 | 000,144,523 | ---- | M] () -- C:\Windows\System32\avfilter-lav-2.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Auto | Stopped] -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe -- (ekrn) SRV - File not found [On_Demand | Stopped] -- C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe -- (EHttpSrv) SRV - [2012-07-17 23:24:05 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2012-06-14 12:31:06 | 000,575,448 | ---- | M] (Threat Expert Ltd.) [Auto | Stopped] -- C:\Program Files\PC Tools\PC Tools Security\BDT\BDTUpdateService.exe -- (Browser Defender Update Service) SRV - [2012-05-11 11:13:38 | 001,118,648 | ---- | M] (PC Tools) [On_Demand | Stopped] -- C:\Program Files\PC Tools\PC Tools Security\pctsSvc.exe -- (sdCoreService) SRV - [2012-05-11 10:07:20 | 000,402,336 | ---- | M] (PC Tools) [On_Demand | Stopped] -- C:\Program Files\PC Tools\PC Tools Security\pctsAuxs.exe -- (sdAuxService) SRV - [2011-06-06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Auto | Stopped] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2009-11-25 00:51:35 | 000,138,680 | ---- | M] (ALWIL Software) [Auto | Stopped] -- C:\Program Files\Alwil Software\Avast4\ashServ.exe -- (avast! Antivirus) SRV - [2009-11-25 00:51:21 | 000,254,040 | ---- | M] (ALWIL Software) [On_Demand | Stopped] -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe -- (avast! Mail Scanner) SRV - [2009-11-25 00:48:48 | 000,352,920 | ---- | M] (ALWIL Software) [On_Demand | Stopped] -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe -- (avast! Web Scanner) SRV - [2009-11-25 00:43:56 | 000,018,752 | ---- | M] (ALWIL Software) [Auto | Stopped] -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe -- (aswUpdSv) SRV - [2009-04-07 14:11:58 | 000,241,664 | ---- | M] () [Auto | Stopped] -- D:\Program Files\blueconnect\AssistantServices.exe -- (UI Assistant Service) SRV - [2007-06-05 14:20:32 | 000,177,704 | ---- | M] () [Auto | Stopped] -- C:\Windows\System32\PSIService.exe -- (ProtexisLicensing) SRV - [2007-05-28 18:57:54 | 000,275,968 | ---- | M] (Rocket Division Software) [Auto | Stopped] -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE) SRV - [2007-03-06 10:35:02 | 000,198,168 | ---- | M] (InterVideo Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe -- (Capture Device Service) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp) DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\blbdrive.sys -- (blbdrive) DRV - [2012-07-25 20:54:30 | 000,040,776 | ---- | M] (Malwarebytes Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mbamswissarmy.sys -- (MBAMSwissArmy) DRV - [2012-06-14 12:31:38 | 000,070,768 | ---- | M] (PC Tools) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\PCTBD.sys -- (PCTBD) DRV - [2012-05-11 11:14:20 | 000,203,088 | ---- | M] (PC Tools) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\PCTSD.sys -- (PCTSD) DRV - [2012-04-23 12:36:50 | 000,383,368 | ---- | M] (PC Tools) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\PCTCore.sys -- (PCTCore) DRV - [2012-02-28 11:43:06 | 000,909,728 | ---- | M] (PC Tools) [File_System | Boot | Running] -- C:\Windows\System32\drivers\pctEFA.sys -- (pctEFA) DRV - [2012-02-28 11:43:00 | 000,342,168 | ---- | M] (PC Tools) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\pctDS.sys -- (pctDS) DRV - [2009-12-22 16:06:05 | 000,691,696 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\sptd.sys -- (sptd) DRV - [2009-11-25 00:50:12 | 000,114,768 | ---- | M] (ALWIL Software) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP) DRV - [2009-11-25 00:50:00 | 000,020,560 | ---- | M] (ALWIL Software) [File_System | Auto | Stopped] -- C:\Windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk) DRV - [2009-11-25 00:49:48 | 000,053,328 | ---- | M] (ALWIL Software) [File_System | Auto | Stopped] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt) DRV - [2009-11-25 00:49:07 | 000,048,560 | ---- | M] (ALWIL Software) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi) DRV - [2009-11-25 00:48:57 | 000,023,120 | ---- | M] (ALWIL Software) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\aswRdr.sys -- (aswRdr) DRV - [2009-01-12 09:12:56 | 000,105,344 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ZTEusbnmea.sys -- (ZTEusbnmea) DRV - [2009-01-05 09:59:54 | 000,022,528 | ---- | M] (Bytemobile, Inc.) [Kernel | Boot | Unknown] -- C:\Windows\System32\drivers\BMLoad.sys -- (BMLoad) DRV - [2009-01-05 09:59:54 | 000,018,816 | ---- | M] (Bytemobile, Inc.) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\tcpipBM.sys -- (tcpipBM) DRV - [2009-01-04 17:29:50 | 000,104,960 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ZTEusbser6k.sys -- (ZTEusbser6k) DRV - [2009-01-04 17:29:50 | 000,104,960 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ZTEusbmdm6k.sys -- (ZTEusbmdm6k) DRV - [2008-10-29 16:35:32 | 000,007,680 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\massfilter.sys -- (massfilter) DRV - [2008-06-19 17:24:30 | 000,028,544 | ---- | M] (Panda Security, S.L.) [File_System | Boot | Stopped] -- C:\Windows\System32\drivers\pavboot.sys -- (pavboot) DRV - [2008-02-20 11:11:14 | 000,054,280 | ---- | M] (ESET) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\epfwtdi.sys -- (epfwtdi) DRV - [2008-02-20 11:11:12 | 000,030,728 | ---- | M] (ESET) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\epfwndis.sys -- (Epfwndis) DRV - [2008-02-20 11:11:08 | 000,071,176 | ---- | M] (ESET) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\epfw.sys -- (epfw) DRV - [2008-02-20 11:01:30 | 000,039,944 | ---- | M] (ESET) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\eamon.sys -- (eamon) DRV - [2007-06-27 15:05:52 | 000,053,184 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ftdibus.sys -- (FTDIBUS) DRV - [2007-06-27 15:04:14 | 000,071,488 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ftser2k.sys -- (FTSER2K) DRV - [2003-12-08 11:53:48 | 000,053,600 | ---- | M] (THOMSON) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\alcan5wn.sys -- (alcan5wn) DRV - [2003-12-08 11:53:46 | 000,070,688 | ---- | M] (THOMSON) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\alcaudsl.sys -- (alcaudsl) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKCU\..\URLSearchHook: {472734EA-242A-422b-ADF8-83D1E48CC825} - C:\Program Files\PC Tools\PC Tools Security\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.) IE - HKCU\..\SearchScopes,DefaultScope = {CF739809-1C6C-47C0-85B9-569DBB141420} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKCU\..\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420}: "URL" = http://toolbar.ask.com/toolbarv/askRedirect?gct=&gc=1&q={searchTerms}&crm=1&toolbar=UT2 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "http://www.google.pl/" FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24 FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: D:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: D:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@pandasecurity.com/activescan: C:\Program Files\Panda Security\ActiveScan 2.0\npwrapper.dll File not found FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.448: C:\Program Files\VistaCodecPack\rm\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files\VistaCodecPack\rm\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=8: C:\Program Files\Google\Update\1.2.183.39\npGoogleOneClick8.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: D:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\ff-bmboc@bytemobile.com: D:\Program Files\blueconnect\addon [2010-05-03 15:50:13 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{cb84136f-9c44-433a-9048-c5cd9df1dc16}: C:\Program Files\PC Tools\PC Tools Security\BDT\Firefox\ [2012-06-28 16:53:34 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-07-17 23:24:06 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-06-27 09:29:02 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-07-17 23:24:06 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-06-27 09:29:02 | 000,000,000 | ---D | M] [2009-10-07 19:18:06 | 000,000,000 | ---D | M] (No name found) -- C:\Users\acer\AppData\Roaming\mozilla\Extensions [2012-05-02 12:37:54 | 000,000,000 | ---D | M] (No name found) -- C:\Users\acer\AppData\Roaming\mozilla\Firefox\Profiles\gd0l31oa.default\extensions [2012-02-18 01:27:13 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2012-07-17 23:24:06 | 000,136,672 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2012-02-18 01:26:07 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2012-06-25 11:18:33 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2012-06-25 11:18:33 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2012-06-25 11:18:33 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2012-06-25 11:18:33 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2012-06-25 11:18:33 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2012-06-25 11:18:33 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2006-09-18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.) O2 - BHO: (PC Tools Browser Guard BHO) - {2A0F3D1B-0909-4FF4-B272-609CCE6054E7} - C:\Program Files\PC Tools\PC Tools Security\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - D:\Program Files\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.) O3 - HKLM\..\Toolbar: (no name) - - No CLSID value found. O3 - HKLM\..\Toolbar: (PC Tools Browser Guard) - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Program Files\PC Tools\PC Tools Security\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.) O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) O4 - HKLM..\Run: [avast!] C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software) O4 - HKLM..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe (CANON INC.) O4 - HKLM..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe (CANON INC.) O4 - HKLM..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice File not found O4 - HKLM..\Run: [MSConfig] C:\Windows\System32\msconfig.exe (Microsoft Corporation) O4 - HKLM..\Run: [SpeedTouch USB Diagnostics] C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe (THOMSON Telecom Belgium) O4 - HKLM..\Run: [UIExec] D:\Program Files\blueconnect\UIExec.exe () O4 - HKCU..\Run: [ALLUpdate] D:\Program Files\ALLPlayer\ALLUpdate.exe () O4 - HKLM..\RunOnce: [Malwarebytes Anti-Malware (cleanup)] C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll (Malwarebytes Corporation) O4 - HKCU..\RunOnce: [6F638BC8000AF3E3025359A3C2E33E28] C:\ProgramData\6F638BC8000AF3E3025359A3C2E33E28\6F638BC8000AF3E3025359A3C2E33E28.exe () O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0 O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.) O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.) O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.) O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.) O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.) O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.) O10 - Protocol_Catalog9\Catalog_Entries\000000000026 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.) O13 - gopher Prefix: missing O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{81FEC30A-BBF2-4102-90EF-582AA34F26D9}: NameServer = 194.204.159.1 194.204.152.34 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKCU Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img34.jpg O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img34.jpg O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{5c116535-56ba-11df-9157-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{5c116535-56ba-11df-9157-806e6f6e6963}\Shell\AutoRun\command - "" = G:\Install.exe O33 - MountPoints2\{9c11a7e0-907a-11e0-9363-87dbc5f7d671}\Shell\AutoRun\command - "" = H:\RunClubSanDisk.exe O33 - MountPoints2\{ac2577bb-efe0-11de-85a9-d5629c725dac}\Shell - "" = AutoRun O33 - MountPoints2\{ac2577bb-efe0-11de-85a9-d5629c725dac}\Shell\AutoRun\command - "" = F:\Start.exe O33 - MountPoints2\{e4d28564-9ef9-11de-a59a-000000000000}\Shell\AutoRun\command - "" = WScript.exe .\`.vbs O33 - MountPoints2\{e4d28564-9ef9-11de-a59a-000000000000}\Shell\open\Command - "" = WScript.exe .\`.vbs O33 - MountPoints2\{ec1c7652-9bd0-11de-bec9-000000000000}\Shell\AutoRun\command - "" = F:\BORO\kawasaki.exe O33 - MountPoints2\{ec1c7652-9bd0-11de-bec9-000000000000}\Shell\explore\command - "" = F:\.////BORO/\\\\kawasaki.exe O33 - MountPoints2\{ec1c7652-9bd0-11de-bec9-000000000000}\Shell\open\command - "" = F:\BORO/////\\\\kawasaki.exe O33 - MountPoints2\{f6d74515-1699-11e0-ba12-ac772c65d42a}\Shell - "" = AutoRun O33 - MountPoints2\{f6d74515-1699-11e0-ba12-ac772c65d42a}\Shell\AutoRun\command - "" = G:\setup.exe O33 - MountPoints2\{f9f3963e-030f-11e1-a78e-b3733204c603}\Shell\AutoRun\command - "" = RunClubSanDisk.exe O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-07-25 21:23:05 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Users\acer\Desktop\OTL.exe [2012-07-25 20:54:30 | 000,040,776 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys [2012-07-25 20:54:28 | 000,000,000 | ---D | C] -- C:\Users\acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Live Security Platinum [2012-07-25 20:51:35 | 000,000,000 | ---D | C] -- C:\ProgramData\6F638BC8000AF3E3025359A3C2E33E28 [2012-07-25 20:40:35 | 000,000,000 | ---D | C] -- C:\Users\acer\Desktop\Wrath of the Titans (2012) [1080p] [2012-07-25 20:39:12 | 000,000,000 | ---D | C] -- C:\Users\acer\Desktop\Immortals (2011) DVDRip XviD-MAXSPEED [2012-07-19 23:23:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVIcodec [2012-07-19 23:23:30 | 000,000,000 | ---D | C] -- C:\Users\acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVIcodec [2012-07-19 23:21:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Player - Codec Pack [2012-07-19 23:21:40 | 000,000,000 | ---D | C] -- C:\Windows\System32\C2MP [2012-07-16 16:55:37 | 000,000,000 | ---D | C] -- C:\Users\acer\Documents\Ulead VideoStudio [2012-07-16 16:54:31 | 000,000,000 | ---D | C] -- C:\Users\acer\AppData\Roaming\Ulead Systems [2012-07-16 16:38:58 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\InterVideo [2012-07-16 16:37:27 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Media Components [2012-07-16 16:35:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Ulead Systems [2012-07-04 20:46:16 | 000,000,000 | ---D | C] -- C:\Users\acer\Impreza [2012-07-03 09:51:30 | 000,000,000 | ---D | C] -- C:\Users\acer\Desktop\muzyka [2012-07-02 20:09:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes [2012-07-02 20:07:33 | 000,000,000 | ---D | C] -- C:\Program Files\iPod [2012-07-02 13:05:08 | 000,000,000 | ---D | C] -- C:\Users\acer\Desktop\tel zdjęcia [2012-06-28 16:53:31 | 000,070,768 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\PCTBD.sys [2012-06-28 16:53:29 | 002,267,096 | ---- | C] (Threat Expert Ltd.) -- C:\Windows\PCTBDCore.dll [2012-06-28 16:53:29 | 001,681,368 | ---- | C] (Threat Expert Ltd.) -- C:\Windows\PCTBDRes.dll [2012-06-28 16:53:29 | 000,149,464 | ---- | C] (PC Tools) -- C:\Windows\SGDetectionTool.dll [2012-06-28 16:48:44 | 000,254,912 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\pctgntdi.sys [2012-06-28 16:48:43 | 000,107,864 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\pctwfpfilter.sys [2012-06-28 16:48:24 | 000,017,848 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\pctBTFix.sys [2012-06-28 16:48:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Tools Security [2012-06-28 16:48:10 | 000,070,536 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\pctplsg.sys [2012-06-28 16:24:02 | 000,909,728 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\pctEFA.sys [2012-06-28 16:24:02 | 000,342,168 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\pctDS.sys [2012-06-28 16:23:58 | 000,383,368 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\PCTCore.sys [2012-06-28 16:23:58 | 000,162,584 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\PCTAppEvent.sys [2012-06-28 16:23:55 | 000,203,088 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\PCTSD.sys [2012-06-28 16:23:55 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\PC Tools [2012-06-28 16:23:54 | 000,000,000 | ---D | C] -- C:\Program Files\PC Tools [2012-06-28 16:22:30 | 000,000,000 | ---D | C] -- C:\ProgramData\TEMP [2012-06-28 16:22:26 | 000,000,000 | ---D | C] -- C:\Users\acer\AppData\Roaming\TestApp [2012-06-28 16:22:26 | 000,000,000 | ---D | C] -- C:\ProgramData\PC Tools [2009-08-31 13:46:33 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\Users\acer\AppData\Local\bootinst.exe [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-07-25 22:53:32 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012-07-25 22:23:01 | 000,004,672 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2012-07-25 22:23:01 | 000,004,672 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2012-07-25 21:23:22 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\acer\Desktop\OTL.exe [2012-07-25 20:54:30 | 000,040,776 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys [2012-07-25 20:40:47 | 000,610,142 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2012-07-25 20:40:47 | 000,535,568 | ---- | M] () -- C:\Windows\System32\perfh015.dat [2012-07-25 20:40:47 | 000,086,416 | ---- | M] () -- C:\Windows\System32\perfc015.dat [2012-07-25 20:40:46 | 000,103,924 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2012-07-25 20:23:14 | 000,032,768 | ---- | M] () -- C:\Windows\System32\Ikeext.etl [2012-07-22 11:42:32 | 000,179,712 | ---- | M] () -- C:\Users\acer\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-07-21 15:31:44 | 000,773,120 | ---- | M] () -- C:\Users\acer\Grzibovo nowe.MSWMM [2012-07-21 15:31:25 | 170,942,600 | ---- | M] () -- C:\Users\acer\Desktop\Grzibovo.wmv [2012-07-19 23:24:16 | 000,000,069 | ---- | M] () -- C:\Windows\NeroDigital.ini [2012-07-19 19:20:25 | 000,000,704 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk [2012-07-16 20:46:25 | 000,293,824 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2012-07-03 13:46:44 | 000,022,344 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2012-07-02 20:09:26 | 000,001,498 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk [2012-07-02 20:02:41 | 000,723,002 | ---- | M] () -- C:\Windows\System32\drivers\Cat.DB [2012-06-28 16:48:24 | 000,001,951 | ---- | M] () -- C:\Users\Public\Desktop\PC Tools AntiVirus Free.lnk [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-07-25 20:55:53 | 000,013,312 | ---- | C] () -- C:\Windows\Installer\{0ed6ff29-813b-b116-4d47-cc34b5cce3a2}\U\80000000.@ [2012-07-25 20:55:53 | 000,001,712 | ---- | C] () -- C:\Windows\Installer\{0ed6ff29-813b-b116-4d47-cc34b5cce3a2}\U\00000001.@ [2012-07-21 14:02:53 | 170,942,600 | ---- | C] () -- C:\Users\acer\Desktop\Grzibovo.wmv [2012-07-21 13:28:27 | 000,773,120 | ---- | C] () -- C:\Users\acer\Grzibovo nowe.MSWMM [2012-07-19 23:24:16 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini [2012-07-06 22:49:02 | 000,000,704 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk [2012-07-02 20:09:26 | 000,001,498 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk [2012-06-28 16:53:30 | 000,767,960 | ---- | C] () -- C:\Windows\BDTSupport.dll [2012-06-28 16:53:29 | 000,003,488 | ---- | C] () -- C:\Windows\UDB.zip [2012-06-28 16:53:29 | 000,000,882 | ---- | C] () -- C:\Windows\RegSDImport.xml [2012-06-28 16:53:29 | 000,000,879 | ---- | C] () -- C:\Windows\RegISSImport.xml [2012-06-28 16:53:29 | 000,000,131 | ---- | C] () -- C:\Windows\IDB.zip [2012-06-28 16:48:24 | 000,001,951 | ---- | C] () -- C:\Users\Public\Desktop\PC Tools AntiVirus Free.lnk [2012-06-28 16:24:04 | 000,723,002 | ---- | C] () -- C:\Windows\System32\drivers\Cat.DB [2012-04-22 22:12:22 | 004,424,704 | ---- | C] () -- C:\Windows\System32\ffmpeg.dll [2012-04-09 01:40:36 | 000,079,360 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll [2012-04-09 01:39:46 | 000,260,608 | ---- | C] () -- C:\Windows\System32\TomsMoComp_ff.dll [2012-04-09 01:39:32 | 000,158,720 | ---- | C] () -- C:\Windows\System32\ff_unrar.dll [2012-04-09 01:39:32 | 000,099,840 | ---- | C] () -- C:\Windows\System32\ff_wmv9.dll [2012-04-09 01:39:30 | 001,525,248 | ---- | C] () -- C:\Windows\System32\ff_samplerate.dll [2012-04-09 01:39:30 | 000,146,944 | ---- | C] () -- C:\Windows\System32\ff_libmad.dll [2012-04-09 01:39:28 | 000,212,480 | ---- | C] () -- C:\Windows\System32\ff_libdts.dll [2012-04-09 01:39:28 | 000,115,200 | ---- | C] () -- C:\Windows\System32\ff_liba52.dll [2012-04-09 01:39:26 | 000,328,704 | ---- | C] () -- C:\Windows\System32\ff_libfaad2.dll [2012-03-29 16:21:26 | 000,172,032 | ---- | C] () -- C:\Windows\System32\libbluray.dll [2012-03-29 16:21:18 | 006,582,226 | ---- | C] () -- C:\Windows\System32\avcodec-lav-54.dll [2012-03-29 16:21:18 | 001,152,365 | ---- | C] () -- C:\Windows\System32\avformat-lav-54.dll [2012-03-29 16:21:18 | 000,374,152 | ---- | C] () -- C:\Windows\System32\swscale-lav-2.dll [2012-03-29 16:21:18 | 000,207,872 | ---- | C] () -- C:\Windows\System32\avutil-lav-51.dll [2012-03-29 16:21:18 | 000,144,523 | ---- | C] () -- C:\Windows\System32\avfilter-lav-2.dll [2012-03-21 22:18:17 | 000,091,632 | ---- | C] () -- C:\Users\acer\https___www.usosweb.uj.edu.pl_kontroler.pdf [2012-03-12 23:12:16 | 000,195,365 | ---- | C] () -- C:\Users\acer\CCF20120312_00000.jpg [2011-12-07 21:32:24 | 000,216,064 | ---- | C] ( ) -- C:\Windows\System32\Lagarith.dll [2011-11-27 00:20:08 | 000,258,048 | ---- | C] () -- C:\Windows\System32\libFLAC.dll [2011-09-08 16:00:52 | 000,150,528 | ---- | C] () -- C:\Windows\System32\mkx.dll [2011-09-08 16:00:48 | 000,142,336 | ---- | C] () -- C:\Windows\System32\mp4.dll [2011-09-08 16:00:42 | 000,123,392 | ---- | C] () -- C:\Windows\System32\ogm.dll [2011-09-08 16:00:38 | 000,249,856 | ---- | C] () -- C:\Windows\System32\dxr.dll [2011-09-08 16:00:34 | 000,113,152 | ---- | C] () -- C:\Windows\System32\dsmux.exe [2011-09-08 16:00:24 | 000,154,624 | ---- | C] () -- C:\Windows\System32\ts.dll [2011-09-08 16:00:10 | 000,137,728 | ---- | C] () -- C:\Windows\System32\mkv2vfr.exe [2011-09-08 16:00:06 | 000,358,400 | ---- | C] () -- C:\Windows\System32\gdsmux.exe [2011-09-08 15:59:54 | 000,080,384 | ---- | C] () -- C:\Windows\System32\mkzlib.dll [2011-09-08 15:59:52 | 000,024,576 | ---- | C] () -- C:\Windows\System32\mkunicode.dll [2011-05-30 15:42:50 | 000,240,640 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll [2011-05-23 09:46:30 | 000,645,632 | ---- | C] () -- C:\Windows\System32\xvidcore.dll [2011-05-01 00:07:39 | 000,723,981 | ---- | C] () -- C:\Users\acer\AppData\Local\unins000.exe [2011-05-01 00:07:39 | 000,004,052 | ---- | C] () -- C:\Users\acer\AppData\Local\unins000.dat [2011-03-03 13:39:56 | 000,109,568 | ---- | C] () -- C:\Windows\System32\avi.dll [2011-03-03 13:38:10 | 000,097,792 | ---- | C] () -- C:\Windows\System32\avs.dll [2011-03-03 13:37:50 | 000,093,184 | ---- | C] () -- C:\Windows\System32\avss.dll [2010-08-18 21:56:38 | 000,000,151 | ---- | C] () -- C:\Windows\System32\Registration.ini [2009-10-06 17:48:59 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2009-08-31 13:46:33 | 000,171,136 | ---- | C] () -- C:\Users\acer\AppData\Local\grldr [2009-08-31 13:46:33 | 000,002,731 | ---- | C] () -- C:\Users\acer\AppData\Local\Asus.xrm-ms [2009-08-31 13:45:10 | 000,179,712 | ---- | C] () -- C:\Users\acer\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-08-31 13:44:21 | 000,282,027 | ---- | C] () -- C:\Users\acer\aktywatro_VISTA_sp1_x32_x64_underface_04.11.2008.rar [2009-08-31 13:26:04 | 000,000,680 | ---- | C] () -- C:\Users\acer\AppData\Local\d3d9caps.dat [2006-11-02 10:31:23 | 000,002,048 | -HS- | C] () -- C:\Windows\Installer\{0ed6ff29-813b-b116-4d47-cc34b5cce3a2}\@ [2006-11-02 10:31:23 | 000,002,048 | -HS- | C] () -- C:\Users\acer\AppData\Local\{0ed6ff29-813b-b116-4d47-cc34b5cce3a2}\@ [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 155 bytes -> C:\ProgramData\TEMP:DFC5A2B2 @Alternate Data Stream - 127 bytes -> C:\ProgramData\TEMP:430C6D84 < End of report >