OTL logfile created on: 2012-07-29 10:41:46 - Run 2 OTL by OldTimer - Version 3.2.55.0 Folder = D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Pulpit\Anty viry Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3.00 Gb Total Physical Memory | 2.36 Gb Available Physical Memory | 78.82% Memory free 4.34 Gb Paging File | 3.80 Gb Available in Paging File | 87.56% Paging File free Paging file location(s): D:\pagefile.sys 1536 3072 [binary data] %SystemDrive% = D: | %SystemRoot% = D:\WINDOWS | %ProgramFiles% = D:\Program Files Drive D: | 37.26 Gb Total Space | 4.21 Gb Free Space | 11.29% Space Free | Partition Type: NTFS Drive F: | 37.27 Gb Total Space | 3.17 Gb Free Space | 8.51% Space Free | Partition Type: NTFS Computer Name: G-D81B3B7B737E4 | User Name: Gąsiorek | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-07-28 16:35:01 | 000,597,504 | ---- | M] (OldTimer Tools) -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Pulpit\Anty viry\OTL.exe PRC - [2012-07-19 21:39:07 | 000,913,888 | ---- | M] (Mozilla Corporation) -- D:\Program Files\Mozilla Firefox\firefox.exe PRC - [2012-07-19 15:21:18 | 001,091,976 | ---- | M] (Spigot, Inc.) -- D:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe PRC - [2012-07-19 15:10:36 | 000,792,512 | ---- | M] (Spigot, Inc.) -- D:\Program Files\Application Updater\ApplicationUpdater.exe PRC - [2012-01-03 16:31:34 | 001,391,272 | ---- | M] (Ask) -- D:\Program Files\Ask.com\Updater\Updater.exe PRC - [2011-12-09 21:41:42 | 000,296,056 | ---- | M] (RealNetworks, Inc.) -- D:\Program Files\Real\realplayer\Update\realsched.exe PRC - [2011-04-08 07:14:00 | 002,218,600 | ---- | M] (NVIDIA Corporation) -- D:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe PRC - [2009-07-21 14:34:33 | 000,185,089 | ---- | M] (Avira GmbH) -- D:\Program Files\Avira\AntiVir Desktop\avguard.exe PRC - [2009-05-13 16:48:22 | 000,108,289 | ---- | M] (Avira GmbH) -- D:\Program Files\Avira\AntiVir Desktop\sched.exe PRC - [2009-03-02 13:08:47 | 000,209,153 | ---- | M] (Avira GmbH) -- D:\Program Files\Avira\AntiVir Desktop\avgnt.exe PRC - [2008-09-24 14:32:48 | 000,935,208 | ---- | M] (Nero AG) -- D:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe PRC - [2007-03-06 11:35:02 | 000,198,168 | ---- | M] (InterVideo Inc.) -- D:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe PRC - [2007-02-13 16:20:50 | 001,205,840 | ---- | M] () -- D:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe PRC - [2005-05-17 12:48:32 | 000,077,824 | R--- | M] (Realtek Semiconductor Corp.) -- D:\WINDOWS\SOUNDMAN.EXE PRC - [2004-08-04 01:44:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- D:\WINDOWS\explorer.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012-07-19 21:39:06 | 002,003,424 | ---- | M] () -- D:\Program Files\Mozilla Firefox\mozjs.dll MOD - [2011-12-01 18:53:40 | 008,527,008 | ---- | M] () -- D:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll MOD - [2011-02-24 02:57:18 | 000,555,112 | ---- | M] () -- D:\Program Files\NVIDIA Corporation\nView\nvShell.dll MOD - [2009-04-24 04:55:14 | 000,176,235 | ---- | M] () -- D:\WINDOWS\system32\Primomonnt.dll MOD - [2009-01-28 16:03:49 | 000,326,401 | ---- | M] () -- D:\Program Files\Avira\AntiVir Desktop\sqlite3.dll MOD - [2007-02-13 16:20:50 | 001,205,840 | ---- | M] () -- D:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe MOD - [2006-11-27 14:20:36 | 000,094,208 | ---- | M] () -- D:\Program Files\SAGEM\SAGEM F@st 800-840\Languages\polish.dll MOD - [2004-08-04 01:44:04 | 000,014,336 | ---- | M] () -- D:\WINDOWS\system32\msdmo.dll MOD - [2001-10-28 17:42:30 | 000,116,224 | ---- | M] () -- D:\WINDOWS\system32\pdfcmnnt.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Auto | Stopped] -- C:\WINDOWS\system32\wuauserv.dll -- (wuauserv) SRV - File not found [Auto | Stopped] -- D:\ComboFix\pev.3XE EXEC /i D:\ComboFix\HIDEC.3XE D:\ComboFix\SWREG.3XE ACL HKEY_LOCAL_MACHINE\System\CurrentControlSet\Enum\Root\LEGACY_Beep /RESET /Q -- (PEVSystemStart) SRV - [2012-07-19 21:39:06 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- D:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2012-07-19 15:10:36 | 000,792,512 | ---- | M] (Spigot, Inc.) [Auto | Running] -- D:\Program Files\Application Updater\ApplicationUpdater.exe -- (Application Updater) SRV - [2012-07-03 13:19:28 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- D:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2011-06-29 15:59:18 | 000,155,344 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- D:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe -- (Sony Ericsson PCCompanion) SRV - [2011-04-08 07:14:00 | 002,218,600 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- D:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService) SRV - [2010-10-19 15:14:26 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- D:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2009-07-21 14:34:33 | 000,185,089 | ---- | M] (Avira GmbH) [Auto | Running] -- D:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2009-05-13 16:48:22 | 000,108,289 | ---- | M] (Avira GmbH) [Auto | Running] -- D:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2008-09-24 14:32:48 | 000,935,208 | ---- | M] (Nero AG) [Auto | Running] -- D:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0) SRV - [2007-03-06 11:35:02 | 000,198,168 | ---- | M] (InterVideo Inc.) [Auto | Running] -- D:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe -- (Capture Device Service) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | Disabled | Stopped] -- D:\WINDOWS\System32\Drivers\sptd.sys -- (sptd) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - [2011-04-30 13:59:56 | 000,012,184 | ---- | M] (Logitech, Inc.) [Kernel | Auto | Running] -- D:\WINDOWS\system32\drivers\LBeepKE.sys -- (LBeepKE) DRV - [2010-01-01 23:13:43 | 000,056,816 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- D:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt) DRV - [2009-12-25 14:39:20 | 000,025,512 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\ggsemc.sys -- (ggsemc) DRV - [2009-12-25 14:39:20 | 000,013,224 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\ggflt.sys -- (ggflt) DRV - [2009-07-28 20:23:54 | 000,004,096 | ---- | M] () [Kernel | On_Demand | Stopped] -- D:\WINDOWS\gdrv.sys -- (gdrv) DRV - [2009-05-25 14:34:56 | 000,090,280 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\s1029bus.sys -- (s1029bus) DRV - [2009-05-25 13:35:00 | 000,116,904 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\s1029unic.sys -- (s1029unic) DRV - [2009-05-25 13:34:56 | 000,122,280 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\s1029mdm.sys -- (s1029mdm) DRV - [2009-05-25 13:34:56 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\s1029mdfl.sys -- (s1029mdfl) DRV - [2009-05-25 13:34:54 | 000,115,880 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\s1029mgmt.sys -- (s1029mgmt) DRV - [2009-05-25 13:34:54 | 000,111,912 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\s1029obex.sys -- (s1029obex) DRV - [2009-05-25 13:34:54 | 000,026,024 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\s1029nd5.sys -- (s1029nd5) DRV - [2009-05-11 10:12:24 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- D:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv) DRV - [2009-03-30 10:33:07 | 000,096,104 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- D:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb) DRV - [2009-02-13 12:35:05 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- D:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio) DRV - [2008-08-18 19:54:00 | 000,145,952 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- D:\WINDOWS\system32\drivers\nvgts.sys -- (nvgts) DRV - [2008-08-01 12:36:00 | 000,054,784 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD) DRV - [2008-08-01 12:36:00 | 000,022,016 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus) DRV - [2008-05-16 11:33:14 | 000,115,752 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\s0016unic.sys -- (s0016unic) DRV - [2008-05-16 11:33:14 | 000,025,512 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\s0016nd5.sys -- (s0016nd5) DRV - [2008-05-16 11:33:14 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\s0016mdfl.sys -- (s0016mdfl) DRV - [2008-05-16 11:33:12 | 000,120,744 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\s0016mdm.sys -- (s0016mdm) DRV - [2008-05-16 11:33:12 | 000,114,216 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\s0016mgmt.sys -- (s0016mgmt) DRV - [2008-05-16 11:33:12 | 000,110,632 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\s0016obex.sys -- (s0016obex) DRV - [2008-05-16 11:33:12 | 000,089,256 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\s0016bus.sys -- (s0016bus) DRV - [2007-01-04 13:48:04 | 000,104,344 | ---- | M] (Analog Devices Inc.) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\e4usbaw.sys -- (e4usbaw) DRV - [2007-01-04 13:47:48 | 000,069,656 | ---- | M] (Analog Deivces) [Kernel | Auto | Stopped] -- D:\WINDOWS\system32\drivers\e4ldr.sys -- (E4LOADER) DRV - [2006-09-05 20:09:26 | 000,086,432 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\se59obex.sys -- (se59obex) DRV - [2006-09-05 20:08:40 | 000,088,624 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\se59mgmt.sys -- (se59mgmt) DRV - [2006-09-05 20:07:52 | 000,097,088 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\se59mdm.sys -- (se59mdm) DRV - [2006-09-05 20:07:48 | 000,009,360 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\se59mdfl.sys -- (se59mdfl) DRV - [2006-09-05 20:07:00 | 000,061,536 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\se59bus.sys -- (se59bus) DRV - [2006-09-05 20:06:28 | 000,018,704 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\se59nd5.sys -- (se59nd5) DRV - [2006-09-05 20:06:22 | 000,090,800 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\se59unic.sys -- (se59unic) DRV - [2006-02-17 21:34:24 | 000,083,344 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\k510obex.sys -- (k510obex) DRV - [2006-02-17 21:34:22 | 000,085,408 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\k510mgmt.sys -- (k510mgmt) DRV - [2006-02-17 21:34:18 | 000,094,064 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\k510mdm.sys -- (k510mdm) DRV - [2006-02-17 21:34:16 | 000,008,336 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\k510mdfl.sys -- (k510mdfl) DRV - [2006-02-17 21:34:10 | 000,058,288 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\k510bus.sys -- (k510bus) DRV - [2005-05-18 11:50:30 | 002,319,680 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM) DRV - [2001-08-17 23:51:32 | 000,018,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\irsir.sys -- (irsir) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKLM\..\SearchScopes\{93828653-F2E3-44B8-A636-6F12E7AC3706}: "URL" = http://startsear.ch/?aff=1&src=sp&cf=f78c88ba-4218-11e1-b6c5-4d6564696130&q={searchTerms} IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1757981266-1390067357-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ IE - HKU\S-1-5-21-1757981266-1390067357-725345543-1003\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - D:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) IE - HKU\S-1-5-21-1757981266-1390067357-725345543-1003\..\URLSearchHook: {B922D405-6D13-4A2B-AE89-08A030DA4402} - D:\Program Files\pdfforge Toolbar\IE\6.1\pdfforgeToolbarIE.dll (Spigot, Inc.) IE - HKU\S-1-5-21-1757981266-1390067357-725345543-1003\..\SearchScopes,DefaultScope = {93828653-F2E3-44B8-A636-6F12E7AC3706} IE - HKU\S-1-5-21-1757981266-1390067357-725345543-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC IE - HKU\S-1-5-21-1757981266-1390067357-725345543-1003\..\SearchScopes\{93828653-F2E3-44B8-A636-6F12E7AC3706}: "URL" = http://www.google.pl/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}&rlz=1I7SHCN_pl IE - HKU\S-1-5-21-1757981266-1390067357-725345543-1003\..\SearchScopes\{A6A59BB1-27A4-45B8-A6EA-E678637BC519}: "URL" = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=302398&p={searchTerms} IE - HKU\S-1-5-21-1757981266-1390067357-725345543-1003\..\SearchScopes\{D10CCC5C-9C3E-42A4-8C22-E82E7D8194F8}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=U3&apn_dtid=OSJ000YYPL&apn_uid=717A13C4-A12F-43C2-B021-B6F7856FA45B&apn_sauid=9DF6C4DE-D547-4A9F-9866-805F5DA40FA5 IE - HKU\S-1-5-21-1757981266-1390067357-725345543-1003\..\SearchScopes\{E1F3A6CC-33C5-4FAC-A4B1-CE4A0CE2AF49}: "URL" = http://www.google.pl/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}&rlz= IE - HKU\S-1-5-21-1757981266-1390067357-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1757981266-1390067357-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultengine: "Ask.com" FF - prefs.js..browser.search.defaultenginename: "Ask.com" FF - prefs.js..browser.search.order.1: "Ask.com" FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=302398&ilc=12" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.onet.pl/" FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198 FF - prefs.js..extensions.enabledItems: pdfforge@mybrowserbar.com:1.1.2 FF - prefs.js..extensions.enabledItems: searchsettings@spigot.com:1.2.3 FF - prefs.js..extensions.enabledItems: vshare@toolbar:1.0.0 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24 FF - prefs.js..keyword.URL: "http://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=302398&p=" FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: D:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: D:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: D:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: D:\Program Files\Microsoft Silverlight\5.0.61118.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: D:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.0.198: d:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.0.198: d:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.0.198: D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.0.198: D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=15.0.0.198: d:\program files\real\realplayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0: d:\Program Files\Sony\Media Go\npmediago.dll (Sony Creative Software Inc) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: D:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: D:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@zylom.com/ZylomGamesPlayer: D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll (Zylom) FF - HKLM\Software\MozillaPlugins\Adobe Reader: D:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-12-09 21:42:13 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: D:\Program Files\Mozilla Firefox\components [2012-07-19 21:39:07 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: D:\Program Files\Mozilla Firefox\plugins [2012-07-15 10:40:10 | 000,000,000 | ---D | M] [2009-10-15 21:13:47 | 000,000,000 | ---D | M] (No name found) -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Mozilla\Extensions [2009-10-15 21:13:47 | 000,000,000 | ---D | M] (No name found) -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Mozilla\Extensions\{a463f10c-3994-11da-9945-000d60ca027b} [2012-07-23 22:09:58 | 000,000,000 | ---D | M] (No name found) -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Mozilla\Firefox\Profiles\kir0upt0.default\extensions [2011-10-10 17:38:34 | 000,000,000 | ---D | M] (BitComet Video Downloader) -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Mozilla\Firefox\Profiles\kir0upt0.default\extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB} [2012-03-28 23:18:46 | 000,000,000 | ---D | M] (vShare) -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Mozilla\Firefox\Profiles\kir0upt0.default\extensions\vshare@toolbar [2012-01-03 16:27:44 | 000,002,333 | ---- | M] () -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Mozilla\Firefox\Profiles\kir0upt0.default\searchplugins\askcom.xml [2012-01-18 23:11:35 | 000,000,792 | ---- | M] () -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Mozilla\Firefox\Profiles\kir0upt0.default\searchplugins\startsear.xml [2011-02-28 21:58:43 | 000,001,583 | ---- | M] () -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Mozilla\Firefox\Profiles\kir0upt0.default\searchplugins\web-search.xml [2012-04-22 14:08:26 | 000,000,000 | ---D | M] (No name found) -- D:\Program Files\Mozilla Firefox\extensions [2012-07-23 22:09:58 | 000,000,000 | ---D | M] (Widgi Toolbar Platform) -- D:\PROGRAM FILES\COMMON FILES\SPIGOT\WTXPCOM [2012-04-21 16:25:11 | 000,000,000 | ---D | M] (Java Quick Starter) -- D:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [2012-07-23 22:09:58 | 000,000,000 | ---D | M] (pdfforge Toolbar) -- D:\PROGRAM FILES\PDFFORGE TOOLBAR\FF [2012-07-19 21:39:07 | 000,136,672 | ---- | M] (Mozilla Foundation) -- D:\Program Files\mozilla firefox\components\browsercomps.dll [2011-09-09 06:49:04 | 001,037,112 | ---- | M] (BitComet) -- D:\Program Files\mozilla firefox\plugins\npBitCometAgent.dll [2009-08-27 18:37:48 | 000,873,976 | ---- | M] (Ganymede Technologies) -- D:\Program Files\mozilla firefox\plugins\NPCARDS.dll [2012-04-21 16:25:10 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- D:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2011-10-03 11:14:54 | 000,083,456 | ---- | M] (vShare.tv ) -- D:\Program Files\mozilla firefox\plugins\npvsharetvplg.dll [2011-03-22 20:38:12 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- D:\Program Files\mozilla firefox\plugins\npwachk.dll [2006-09-26 14:03:14 | 000,098,304 | ---- | M] (Zylom) -- D:\Program Files\mozilla firefox\plugins\npzylomgamesplayer.dll [2012-06-28 19:26:12 | 000,002,767 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2012-06-28 19:26:12 | 000,001,406 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2012-06-28 19:26:12 | 000,000,917 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2012-06-28 19:26:12 | 000,000,858 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2012-06-28 19:26:12 | 000,001,183 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2012-06-28 19:26:12 | 000,001,683 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2001-10-26 17:45:16 | 000,000,742 | ---- | M]) - D:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - D:\Program Files\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll (Google Inc.) O2 - BHO: (pdfforge Toolbar) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - D:\Program Files\pdfforge Toolbar\IE\6.1\pdfforgeToolbarIE.dll (Spigot, Inc.) O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - D:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) O2 - BHO: (EpsonToolBandKicker Class) - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - D:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION) O3 - HKLM\..\Toolbar: (pdfforge Toolbar) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - D:\Program Files\pdfforge Toolbar\IE\6.1\pdfforgeToolbarIE.dll (Spigot, Inc.) O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - D:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) O3 - HKLM\..\Toolbar: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - D:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION) O3 - HKU\S-1-5-21-1757981266-1390067357-725345543-1003\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - D:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) O3 - HKU\S-1-5-21-1757981266-1390067357-725345543-1003\..\Toolbar\WebBrowser: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - D:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [ApnUpdater] D:\Program Files\Ask.com\Updater\Updater.exe (Ask) O4 - HKLM..\Run: [avgnt] D:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [DAEMON Tools] "D:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 File not found O4 - HKLM..\Run: [NvCplDaemon] D:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] D:\WINDOWS\System32\nvmctray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] D:\Program Files\NVIDIA Corporation\nView\nwiz.exe () O4 - HKLM..\Run: [SearchSettings] D:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.) O4 - HKLM..\Run: [SoundMan] D:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [TkBellExe] D:\program files\real\realplayer\update\realsched.exe (RealNetworks, Inc.) O4 - HKLM..\Run: [zkgjxtcnxnplisg] D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\zkgjxtcn.exe File not found O4 - HKU\S-1-5-21-1757981266-1390067357-725345543-1003..\Run: [AdobeBridge] File not found O4 - HKU\S-1-5-21-1757981266-1390067357-725345543-1003..\Run: [ALLUpdate] "D:\Program Files\ALLPlayer\ALLUpdate.exe" "sleep" File not found O4 - HKU\S-1-5-21-1757981266-1390067357-725345543-1003..\Run: [googletalk] D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Google Talk\googletalk.exe /autostart File not found O4 - HKU\S-1-5-21-1757981266-1390067357-725345543-1003..\Run: [NVIDIA driver monitor] d:\windows\nvsvc32.exe File not found O4 - HKU\S-1-5-21-1757981266-1390067357-725345543-1003..\Run: [zkgjxtcnxnplisg] D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\zkgjxtcn.exe File not found O4 - Startup: D:\Documents and Settings\All Users.WINDOWS\Menu Start\Programy\Autostart\DSLMON.lnk = D:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1757981266-1390067357-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-21-1757981266-1390067357-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-21-1757981266-1390067357-725345543-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - D:\Program Files\Bonjour\mdnsNSP.dll (Apple Computer, Inc.) O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control) O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} http://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab (System Requirements Lab Class) O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control) O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} http://www.nvidia.com/content/DriverDownload/nforce/NvidiaSmartScan.cab (NVIDIA Smart Scan) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_02-windows-i586.cab (Java Plug-in 1.5.0_02) O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2761FD97-EB2B-4FB9-866E-087DAC2A28E3}: DhcpNameServer = 192.168.1.254 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20 - HKLM Winlogon: Shell - (Explorer.exe) - D:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (D:\WINDOWS\system32\userinit.exe) - D:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: O24 - Desktop BackupWallPaper: O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-05-15 17:38:59 | 000,000,000 | ---- | M] () - D:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{06ce3e4f-a1b6-11e1-b94b-4d6564696130}\Shell - "" = AutoRun O33 - MountPoints2\{06ce3e4f-a1b6-11e1-b94b-4d6564696130}\Shell\AutoRun\command - "" = E:\Startme.exe O33 - MountPoints2\{811c1aa6-4548-11df-abbb-4d6564696130}\Shell - "" = AutoRun O33 - MountPoints2\{811c1aa6-4548-11df-abbb-4d6564696130}\Shell\AutoRun\command - "" = J:\Startme.exe O33 - MountPoints2\{b3312b69-aa9d-11de-a861-4d6564696130}\Shell\AutoRun\command - "" = ucivd6xi.bat O33 - MountPoints2\{b3312b69-aa9d-11de-a861-4d6564696130}\Shell\open\Command - "" = ucivd6xi.bat O33 - MountPoints2\{de6d1e08-6e3e-11df-ac88-4d6564696130}\Shell - "" = AutoRun O33 - MountPoints2\{de6d1e08-6e3e-11df-ac88-4d6564696130}\Shell\AutoRun\command - "" = D:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL kserO.EXE O33 - MountPoints2\{e3220ac0-51bb-11e1-b726-4d6564696130}\Shell\AutoRun\command - "" = gusto/unavez.exe O33 - MountPoints2\{e3220ac0-51bb-11e1-b726-4d6564696130}\Shell\Explore\command - "" = gusto/unavez.exe O33 - MountPoints2\{e3220ac0-51bb-11e1-b726-4d6564696130}\Shell\Open\command - "" = gusto/unavez.exe O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-07-29 10:38:51 | 000,000,000 | ---D | C] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Pulpit\Anty viry [2012-07-28 15:46:29 | 000,518,144 | ---- | C] (SteelWerX) -- D:\WINDOWS\SWREG.exe [2012-07-28 15:46:29 | 000,406,528 | ---- | C] (SteelWerX) -- D:\WINDOWS\SWSC.exe [2012-07-28 15:46:29 | 000,212,480 | ---- | C] (SteelWerX) -- D:\WINDOWS\SWXCACLS.exe [2012-07-28 15:46:29 | 000,060,416 | ---- | C] (NirSoft) -- D:\WINDOWS\NIRCMD.exe [2012-07-28 13:04:04 | 000,000,000 | ---D | C] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Malwarebytes [2012-07-28 13:03:52 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users.WINDOWS\Menu Start\Programy\Malwarebytes' Anti-Malware [2012-07-28 13:03:52 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Malwarebytes [2012-07-28 13:03:51 | 000,022,344 | ---- | C] (Malwarebytes Corporation) -- D:\WINDOWS\System32\drivers\mbam.sys [2012-07-28 13:03:51 | 000,000,000 | ---D | C] -- D:\Program Files\Malwarebytes' Anti-Malware [2012-07-28 13:01:37 | 010,652,120 | ---- | C] (Malwarebytes Corporation ) -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Pulpit\mbam-setup-1.62.0.1300.exe [2012-07-28 12:54:19 | 000,000,000 | ---D | C] -- D:\Qoobox [2012-07-28 12:53:23 | 004,719,842 | R--- | C] (Swearware) -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Pulpit\ComboFix.exe [2012-07-28 12:06:25 | 000,000,000 | ---D | C] -- D:\WINDOWS\CSC [2012-07-28 11:31:25 | 000,000,000 | R--D | C] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Menu Start\Programy\Narzędzia administracyjne [2012-07-28 11:31:02 | 000,000,000 | ---D | C] -- D:\WINDOWS\erdnt [2012-07-23 22:09:59 | 000,000,000 | ---D | C] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Search Settings [2012-07-23 22:09:52 | 000,000,000 | ---D | C] -- D:\Program Files\Common Files\Spigot [2012-07-23 22:09:52 | 000,000,000 | ---D | C] -- D:\Program Files\pdfforge Toolbar [2012-07-23 22:09:52 | 000,000,000 | ---D | C] -- D:\Program Files\Application Updater [2012-07-20 18:40:00 | 000,000,000 | ---D | C] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Pulpit\p. Gąsiorek [2012-07-15 10:39:51 | 000,000,000 | -HSD | C] -- D:\Config.Msi [6 D:\WINDOWS\System32\*.tmp files -> D:\WINDOWS\System32\*.tmp -> ] [5 D:\WINDOWS\*.tmp files -> D:\WINDOWS\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-07-29 10:48:00 | 000,000,240 | ---- | M] () -- D:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job [2012-07-29 10:11:00 | 000,001,040 | ---- | M] () -- D:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2012-07-29 09:52:05 | 000,000,284 | ---- | M] () -- D:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1757981266-1390067357-725345543-1003.job [2012-07-29 09:52:04 | 000,001,036 | ---- | M] () -- D:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2012-07-29 09:52:00 | 000,000,006 | -H-- | M] () -- D:\WINDOWS\tasks\SA.DAT [2012-07-29 09:51:56 | 000,002,048 | --S- | M] () -- D:\WINDOWS\bootstat.dat [2012-07-29 09:43:02 | 014,680,064 | ---- | M] () -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\ntuser.dat [2012-07-29 09:43:02 | 000,000,188 | -HS- | M] () -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\ntuser.ini [2012-07-29 09:16:31 | 003,175,002 | -H-- | M] () -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Ustawienia lokalne\Dane aplikacji\IconCache.db [2012-07-28 17:17:40 | 000,004,343 | ---- | M] () -- D:\WINDOWS\wincmd.ini [2012-07-28 13:54:58 | 002,374,840 | ---- | M] () -- D:\WINDOWS\System32\FNTCACHE.DAT [2012-07-28 13:03:52 | 000,000,784 | ---- | M] () -- D:\Documents and Settings\All Users.WINDOWS\Pulpit\Malwarebytes Anti-Malware.lnk [2012-07-28 13:02:59 | 010,652,120 | ---- | M] (Malwarebytes Corporation ) -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Pulpit\mbam-setup-1.62.0.1300.exe [2012-07-28 10:30:22 | 004,719,842 | R--- | M] (Swearware) -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Pulpit\ComboFix.exe [2012-07-25 19:15:07 | 000,000,292 | ---- | M] () -- D:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1757981266-1390067357-725345543-1003.job [2012-07-22 20:03:04 | 000,002,206 | ---- | M] () -- D:\WINDOWS\System32\wpa.dbl [2012-07-21 12:59:02 | 000,000,284 | ---- | M] () -- D:\WINDOWS\tasks\AppleSoftwareUpdate.job [2012-07-15 10:40:10 | 000,001,729 | ---- | M] () -- D:\Documents and Settings\All Users.WINDOWS\Pulpit\Adobe Reader 9.lnk [2012-07-13 21:16:38 | 000,077,824 | ---- | M] () -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-07-12 11:21:08 | 000,002,267 | ---- | M] () -- D:\Documents and Settings\All Users.WINDOWS\Pulpit\Skype.lnk [2012-07-03 13:46:44 | 000,022,344 | ---- | M] (Malwarebytes Corporation) -- D:\WINDOWS\System32\drivers\mbam.sys [6 D:\WINDOWS\System32\*.tmp files -> D:\WINDOWS\System32\*.tmp -> ] [5 D:\WINDOWS\*.tmp files -> D:\WINDOWS\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-07-28 15:46:29 | 000,256,000 | ---- | C] () -- D:\WINDOWS\PEV.exe [2012-07-28 15:46:29 | 000,208,896 | ---- | C] () -- D:\WINDOWS\MBR.exe [2012-07-28 15:46:29 | 000,098,816 | ---- | C] () -- D:\WINDOWS\sed.exe [2012-07-28 15:46:29 | 000,080,412 | ---- | C] () -- D:\WINDOWS\grep.exe [2012-07-28 15:46:29 | 000,068,096 | ---- | C] () -- D:\WINDOWS\zip.exe [2012-07-28 13:03:52 | 000,000,784 | ---- | C] () -- D:\Documents and Settings\All Users.WINDOWS\Pulpit\Malwarebytes Anti-Malware.lnk [2012-01-06 14:43:32 | 000,000,069 | ---- | C] () -- D:\WINDOWS\NeroDigital.ini [2012-01-03 21:21:47 | 000,000,029 | ---- | C] () -- D:\WINDOWS\DEBUGSM.INI [2011-12-09 23:28:39 | 003,175,002 | -H-- | C] () -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Ustawienia lokalne\Dane aplikacji\IconCache.db [2010-12-28 14:53:42 | 000,000,736 | ---- | C] () -- D:\WINDOWS\SamsungMaster.INI [2010-12-28 14:45:31 | 000,008,704 | ---- | C] () -- D:\WINDOWS\System32\vidccleaner.exe [2010-10-30 16:09:33 | 000,000,038 | ---- | C] () -- D:\WINDOWS\avisplitter.ini [2010-10-30 16:09:31 | 000,180,224 | ---- | C] () -- D:\WINDOWS\System32\xvidvfw.dll [2010-10-30 16:09:30 | 000,108,032 | ---- | C] () -- D:\WINDOWS\System32\ff_vfw.dll [2010-10-30 16:09:30 | 000,000,547 | ---- | C] () -- D:\WINDOWS\System32\ff_vfw.dll.manifest [2010-10-07 09:45:24 | 000,116,224 | ---- | C] () -- D:\WINDOWS\System32\pdfcmnnt.dll [2010-09-05 09:37:17 | 000,259,604 | ---- | C] () -- D:\WINDOWS\System32\nvdrsdb0.bin [2010-09-05 09:37:14 | 000,259,604 | ---- | C] () -- D:\WINDOWS\System32\nvdrsdb1.bin [2010-09-05 09:37:14 | 000,000,001 | ---- | C] () -- D:\WINDOWS\System32\nvdrssel.bin [2010-04-17 20:22:20 | 000,000,600 | ---- | C] () -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\winscp.rnd [2010-03-15 00:11:02 | 014,680,064 | ---- | C] () -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\ntuser.dat [2010-03-02 20:08:35 | 000,001,763 | ---- | C] () -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\QTSBandwidthCache [2009-12-27 12:06:22 | 000,000,088 | RHS- | C] () -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\980DA43522.sys [2009-09-20 22:04:19 | 000,006,570 | ---- | C] () -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\PrimoPDFSet.xml [2009-08-21 20:45:33 | 000,000,149 | ---- | C] () -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Ustawienia lokalne\Dane aplikacji\fusioncache.dat [2009-07-29 09:12:52 | 000,077,824 | ---- | C] () -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-07-28 20:35:05 | 000,090,984 | ---- | C] () -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT [2009-07-28 19:35:55 | 000,000,188 | -HS- | C] () -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\ntuser.ini [color=#E56717]========== LOP Check ==========[/color] [2009-07-30 22:16:55 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\AlawarWrapper [2012-04-21 16:25:45 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Ask [2011-03-05 14:01:49 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Autodesk [2011-06-19 21:47:57 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Avanquest [2010-04-11 13:29:53 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\BVRP Software [2011-12-28 12:07:08 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\DAEMON Tools Lite [2011-02-20 11:11:38 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Electronic Arts [2009-07-31 08:36:36 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\EPSON [2009-10-20 22:35:50 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\ESET [2010-07-20 00:11:26 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Gadu-Gadu 10 [2010-04-22 17:37:38 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\GoldWaveCDDB [2012-03-09 11:33:05 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\ipla [2010-02-25 21:25:01 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\LGMOBILEAX [2011-01-03 18:36:44 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\MythPeople [2011-01-03 18:34:49 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\n7-89-o9-3r-4t-r9 [2012-03-25 20:22:37 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\OpenFM [2012-03-09 11:33:09 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\RDRM [2010-03-02 20:03:31 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\SmartSound Software Inc [2009-07-31 08:27:42 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\UDL [2010-03-13 22:50:44 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Ulead Systems [2011-01-03 18:36:24 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users.WINDOWS\Dane aplikacji\Zylom [2009-09-23 21:03:52 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\AD ON Multimedia [2010-03-06 16:16:57 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Autodesk [2012-07-13 21:16:41 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\BESTplayer [2011-08-13 22:55:15 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\BitComet [2010-09-05 16:27:20 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Blender Foundation [2009-11-01 19:47:50 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Cream Software [2011-12-28 12:08:10 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\DAEMON Tools Lite [2011-11-01 11:02:02 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\EAC [2009-08-30 19:45:15 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\EPSON [2009-10-20 22:36:50 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\ESET [2010-12-25 22:36:45 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Flock [2011-10-21 21:20:07 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Gadu-Gadu 10 [2011-01-03 18:34:27 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\GameHouse [2009-09-30 19:37:08 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\GanymedeNet [2010-04-22 17:37:38 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\GoldWaveCDDB [2011-03-06 19:12:44 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Helios [2012-05-17 17:46:18 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\ipla [2011-07-06 23:41:27 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Leadertech [2010-03-28 18:22:13 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Nowe Gadu-Gadu [2011-12-28 12:07:59 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\OpenCandy [2010-07-20 00:27:27 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\OpenFM [2010-10-07 10:12:33 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\pdfforge [2011-04-21 20:29:51 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\runic games [2012-07-23 22:09:59 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Search Settings [2010-04-11 13:28:47 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Sony [2010-04-11 13:20:10 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Sony Setup [2010-04-11 14:02:15 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Teleca [2010-03-02 22:36:21 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Ulead Systems [2012-03-05 11:18:26 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Wise Disk Cleaner [2012-03-05 11:21:36 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Wise Registry Cleaner [2012-06-24 21:14:14 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\wtxpcom [2010-09-12 09:26:24 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\YoudaGames [2011-01-03 18:36:32 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Gąsiorek.G-D81B3B7B737E4\Dane aplikacji\Zylom [2010-03-15 18:27:09 | 000,000,000 | ---D | M] -- D:\Documents and Settings\TEMP\Dane aplikacji\Teleca [2012-07-29 10:48:00 | 000,000,240 | ---- | M] () -- D:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job [color=#E56717]========== Purity Check ==========[/color] < End of report >