OTL logfile created on: 2012-07-30 22:32:22 - Run 1 OTL by OldTimer - Version 3.2.55.0 Folder = C:\Documents and Settings\Jozef\Desktop Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 1,37 Gb Available Physical Memory | 68,72% Memory free 3,85 Gb Paging File | 3,21 Gb Available in Paging File | 83,38% Paging File free Paging file location(s): C:\pagefile.sys 0 0 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 931,51 Gb Total Space | 612,60 Gb Free Space | 65,76% Space Free | Partition Type: NTFS Computer Name: TWOJA-966CD6AF5 | User Name: Jozef | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-07-30 21:42:36 | 000,597,504 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jozef\Desktop\OTL.exe PRC - [2012-07-16 16:31:33 | 002,280,872 | ---- | M] (TeamViewer GmbH) -- c:\Program Files\TeamViewer\Version7\TeamViewer_Desktop.exe PRC - [2012-07-16 16:31:32 | 007,445,416 | ---- | M] (TeamViewer GmbH) -- C:\Program Files\TeamViewer\Version7\TeamViewer.exe PRC - [2012-07-16 16:31:32 | 002,673,064 | ---- | M] (TeamViewer GmbH) -- C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe PRC - [2012-07-16 16:22:42 | 000,106,408 | ---- | M] (TeamViewer GmbH) -- C:\Program Files\TeamViewer\Version7\tv_w32.exe PRC - [2012-07-05 18:41:46 | 003,048,136 | ---- | M] (Skype Technologies S.A.) -- C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe PRC - [2012-07-03 18:21:30 | 004,273,976 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe PRC - [2012-07-03 18:21:29 | 000,044,808 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe PRC - [2012-07-03 13:46:44 | 000,655,944 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe PRC - [2012-04-04 18:47:32 | 000,161,664 | ---- | M] (Oracle Corporation) -- C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe PRC - [2012-04-02 16:30:00 | 001,242,448 | ---- | M] (Valve Corporation) -- C:\Program Files\Steam\steam.exe PRC - [2011-01-25 10:48:30 | 000,380,416 | ---- | M] () -- C:\Program Files\Philips\Philips Songbird Resources\Autolauncher\PhilipsDeviceListener.exe PRC - [2010-05-08 22:08:47 | 000,202,256 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe PRC - [2009-04-02 18:05:22 | 000,102,400 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe PRC - [2009-03-31 09:39:36 | 000,233,472 | ---- | M] (Teruten) -- C:\WINDOWS\system32\FsUsbExService.Exe PRC - [2008-05-15 17:26:02 | 000,095,536 | ---- | M] (OLYMPUS IMAGING CORP.) -- C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe PRC - [2008-04-14 02:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2006-05-16 17:51:04 | 000,057,344 | ---- | M] (OLYMPUS IMAGING CORP.) -- C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe PRC - [2006-01-19 17:54:34 | 000,925,696 | ---- | M] ( ) -- C:\Program Files\SAGEM WiFi manager\WLANUTL.EXE PRC - [2005-02-25 16:54:48 | 000,131,072 | ---- | M] (Alcor Micro, Corp.) -- C:\Program Files\Multimedia Card Reader\shwicon2k.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012-07-30 12:07:53 | 020,313,384 | ---- | M] () -- C:\Program Files\Steam\bin\libcef.dll MOD - [2012-07-30 12:07:51 | 001,099,576 | ---- | M] () -- C:\Program Files\Steam\bin\avcodec-53.dll MOD - [2012-07-30 12:07:51 | 000,895,312 | ---- | M] () -- C:\Program Files\Steam\bin\chromehtml.dll MOD - [2012-07-30 12:07:51 | 000,190,776 | ---- | M] () -- C:\Program Files\Steam\bin\avformat-53.dll MOD - [2012-07-30 12:07:51 | 000,123,192 | ---- | M] () -- C:\Program Files\Steam\bin\avutil-51.dll MOD - [2012-07-30 09:56:59 | 001,789,440 | ---- | M] () -- C:\Program Files\Alwil Software\Avast5\defs\12073000\algo.dll MOD - [2011-11-03 17:28:36 | 001,292,288 | ---- | M] () -- C:\WINDOWS\system32\quartz.dll MOD - [2011-02-04 18:48:32 | 000,456,192 | ---- | M] () -- C:\WINDOWS\system32\encdec.dll MOD - [2011-02-04 18:48:30 | 000,291,840 | ---- | M] () -- C:\WINDOWS\system32\sbe.dll MOD - [2011-01-25 10:48:30 | 000,380,416 | ---- | M] () -- C:\Program Files\Philips\Philips Songbird Resources\Autolauncher\PhilipsDeviceListener.exe MOD - [2009-08-04 16:28:32 | 000,141,312 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll MOD - [2009-02-10 16:53:10 | 003,112,448 | ---- | M] () -- C:\Program Files\K-Lite Codec Pack\ffdshow\ffdshow.ax MOD - [2008-04-14 02:11:59 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll MOD - [2008-04-14 02:11:51 | 000,059,904 | ---- | M] () -- C:\WINDOWS\system32\devenum.dll MOD - [2006-07-23 00:49:26 | 000,005,376 | ---- | M] () -- C:\WINDOWS\system32\antiwpa.dll MOD - [2006-01-18 15:09:40 | 000,045,056 | ---- | M] () -- C:\Program Files\SAGEM WiFi manager\ZDWlan.dll MOD - [2006-01-18 15:09:36 | 000,212,992 | ---- | M] () -- C:\Program Files\SAGEM WiFi manager\dot1x_dll.dll MOD - [2005-11-28 23:44:30 | 000,102,400 | R--- | M] () -- C:\WINDOWS\system32\hcwXDS.dll MOD - [2005-10-20 11:36:08 | 000,077,824 | R--- | M] () -- C:\Program Files\HP\Digital Imaging\bin\crm\xmltok.dll MOD - [2005-10-20 11:36:08 | 000,065,536 | R--- | M] () -- C:\Program Files\HP\Digital Imaging\bin\crm\xmlparse.dll MOD - [2005-08-05 14:01:54 | 000,167,936 | ---- | M] () -- C:\WINDOWS\system32\wstpager.ax MOD - [2005-08-05 14:01:54 | 000,159,744 | ---- | M] () -- C:\WINDOWS\system32\VBICodec.ax MOD - [2005-08-05 13:06:50 | 000,165,376 | ---- | M] () -- C:\WINDOWS\system32\mpg2splt.ax [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2012-07-30 19:55:45 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2012-07-16 16:31:32 | 002,673,064 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe -- (TeamViewer7) SRV - [2012-07-05 18:41:46 | 003,048,136 | ---- | M] (Skype Technologies S.A.) [Auto | Running] -- C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service) SRV - [2012-07-03 18:21:29 | 000,044,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus) SRV - [2012-07-03 13:46:44 | 000,655,944 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService) SRV - [2012-06-07 19:12:14 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2012-04-04 18:47:32 | 000,161,664 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe -- (JavaQuickStarterService) SRV - [2010-03-27 22:51:37 | 000,316,888 | ---- | M] (Protection Technology) [Auto | Stopped] -- C:\WINDOWS\System32\appdrvrem01.exe -- (appdrvrem01) SRV - [2009-03-31 09:39:36 | 000,233,472 | ---- | M] (Teruten) [Auto | Running] -- C:\WINDOWS\system32\FsUsbExService.Exe -- (FsUsbExService) SRV - [2008-04-07 09:17:30 | 000,430,592 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2006-03-03 22:03:10 | 000,069,632 | ---- | M] (HP) [Auto | Stopped] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12) SRV - [2005-10-06 18:46:38 | 000,856,064 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Media Connect 2\wmccds.exe -- (WMConnectCDS) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\ZDPNDIS5.SYS -- (ZDPNDIS5) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\ZDCndis5.SYS -- (ZDCndis5) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | Boot | Stopped] -- system32\DRIVERS\videX32.sys -- (videX32) DRV - File not found [Kernel | Disabled | Stopped] -- system32\DRIVERS\vtmini.sys -- (viagfx) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\Senfilt.sys -- (SenFiltService) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\PCANDIS5.SYS -- (PCANDIS5) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\AEAudio.sys -- (AEAudioService) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\ADIHdAud.sys -- (ADIHdAudAddService) DRV - [2012-07-03 18:21:54 | 000,054,232 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi) DRV - [2012-07-03 18:21:53 | 000,721,000 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx) DRV - [2012-07-03 18:21:53 | 000,353,688 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP) DRV - [2012-07-03 18:21:53 | 000,097,608 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2) DRV - [2012-07-03 18:21:53 | 000,035,928 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr) DRV - [2012-07-03 18:21:53 | 000,021,256 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk) DRV - [2012-07-03 18:21:52 | 000,025,256 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4) DRV - [2012-07-03 13:46:44 | 000,022,344 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mbam.sys -- (MBAMProtector) DRV - [2012-05-24 19:55:53 | 000,017,488 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\gdrv.sys -- (gdrv) DRV - [2011-03-22 09:58:42 | 000,065,136 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\l1c51x86.sys -- (L1c) DRV - [2010-12-14 11:17:30 | 006,281,832 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) DRV - [2010-03-27 22:51:37 | 002,627,760 | ---- | M] (Protection Technology) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\appdrv01.sys -- (appdrv01) DRV - [2010-01-27 04:09:02 | 000,050,704 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\npf.sys -- (npf) DRV - [2009-11-18 01:17:00 | 001,395,800 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt) DRV - [2009-11-18 01:16:00 | 001,691,480 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt) DRV - [2009-03-31 09:39:36 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\FsUsbExDisk.Sys -- (FsUsbExDisk) DRV - [2009-03-20 10:01:26 | 000,121,856 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bmdm.sys -- (ss_bmdm) DRV - [2009-03-20 10:01:26 | 000,090,112 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bbus.sys -- (ss_bbus) DRV - [2009-03-20 10:01:26 | 000,014,976 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bmdfl.sys -- (ss_bmdfl) DRV - [2009-03-18 17:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi) DRV - [2008-04-13 20:45:34 | 000,046,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\irbus.sys -- (IrBus) DRV - [2008-04-13 20:40:25 | 000,020,480 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\flpydisk.sys -- (Flpydisk) DRV - [2007-09-17 15:53:26 | 000,021,632 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2007-02-22 10:15:56 | 000,137,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcd.sys -- (nmwcd) DRV - [2007-02-22 10:15:14 | 000,012,288 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdcm.sys -- (nmwcdcm) DRV - [2007-02-22 10:15:14 | 000,012,288 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdcj.sys -- (nmwcdcj) DRV - [2007-02-22 10:15:14 | 000,008,320 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdc.sys -- (nmwcdc) DRV - [2006-05-20 00:16:14 | 000,042,880 | ---- | M] (JMicron Technology Corp.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\jraid.sys -- (JRAID) DRV - [2006-04-13 22:47:36 | 000,168,064 | R--- | M] (Hauppauge Computer Works, Inc.) [23|25|26]xxx) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hcwPP2.sys -- (hcwPP2) DRV - [2006-02-24 21:48:02 | 000,004,608 | ---- | M] (NVIDIA Corporation.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\nvport.sys -- (nvport) DRV - [2006-02-08 12:55:24 | 000,009,856 | ---- | M] (Padus, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\pfc.sys -- (pfc) DRV - [2006-02-08 03:52:58 | 000,006,912 | ---- | M] (JMicron ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\JGOGO.sys -- (JGOGO) DRV - [2006-01-18 15:09:40 | 000,017,664 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ZDPSp50.sys -- (ZDPSp50) DRV - [2005-12-22 15:45:18 | 000,402,432 | ---- | M] (ZyDAS Technology Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WlanBZXP.sys -- (SG762_XP) DRV - [2005-12-22 10:22:18 | 000,005,685 | R--- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AsIO.sys -- (AsIO) DRV - [2005-08-10 14:44:04 | 000,050,688 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sfdrv01.sys -- (sfdrv01) DRV - [2005-05-16 15:20:39 | 000,006,656 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sfhlp02.sys -- (sfhlp02) DRV - [2005-01-07 17:07:16 | 000,145,920 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Hdaudio.sys -- (HdAudAddService) DRV - [2004-12-08 19:16:30 | 000,038,468 | ---- | M] (Alcor Micro Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Sunkfilt.sys -- (SunkFilt) DRV - [2004-08-13 12:56:20 | 000,005,810 | R--- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ASACPI.sys -- (MTsensor) DRV - [2004-08-10 14:00:00 | 000,018,688 | ---- | M] () [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\cdaudio.sys -- (Cdaudio) DRV - [2004-08-04 00:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) DRV - [2004-07-16 16:47:14 | 000,014,165 | ---- | M] (Pinnacle Systems GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\Pclepci.sys -- (PCLEPCI) DRV - [2004-03-10 15:27:18 | 000,011,264 | ---- | M] (Pinnacle Systems GmbH) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\asapiW2k.sys -- (ASAPIW2k) DRV - [2004-03-08 13:55:50 | 000,013,567 | ---- | M] (B.H.A Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\CDRBSDRV.SYS -- (cdrbsdrv) DRV - [2001-08-17 13:51:32 | 000,018,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\irsir.sys -- (irsir) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.funmoods.com/results.php?f=4&a=nv1&q={searchTerms} IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&barid={B5305033-66B6-42C2-A912-2EDEB47B7CBC} IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.pl/ IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.vobis.pl/ IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.pl/ IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.vobis.pl/ IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.pl/ IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.vobis.pl/ IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.pl/ IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.vobis.pl/ IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2567241484-2555261958-2837169219-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie IE - HKU\S-1-5-21-2567241484-2555261958-2837169219-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com IE - HKU\S-1-5-21-2567241484-2555261958-2837169219-1005\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google IE - HKU\S-1-5-21-2567241484-2555261958-2837169219-1005\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 IE - HKU\S-1-5-21-2567241484-2555261958-2837169219-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ IE - HKU\S-1-5-21-2567241484-2555261958-2837169219-1005\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKU\S-1-5-21-2567241484-2555261958-2837169219-1005\..\SearchScopes,DefaultScope = {785DDCEE-754F-4BE4-8068-45EEB4CA5702} IE - HKU\S-1-5-21-2567241484-2555261958-2837169219-1005\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-21-2567241484-2555261958-2837169219-1005\..\SearchScopes\{0D7562AE-8EF6-416d-A838-AB665251703A}: "URL" = http://start.funmoods.com/?a=nv1&s={searchTerms}&f=4 IE - HKU\S-1-5-21-2567241484-2555261958-2837169219-1005\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&AF=119999&babsrc=SP_ss&mntrId=04d106970000000000000060b34d5512 IE - HKU\S-1-5-21-2567241484-2555261958-2837169219-1005\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKU\S-1-5-21-2567241484-2555261958-2837169219-1005\..\SearchScopes\{785DDCEE-754F-4BE4-8068-45EEB4CA5702}: "URL" = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8&rlz=1I7RNTN_plPL343 IE - HKU\S-1-5-21-2567241484-2555261958-2837169219-1005\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3031817 IE - HKU\S-1-5-21-2567241484-2555261958-2837169219-1005\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&barid={B5305033-66B6-42C2-A912-2EDEB47B7CBC} IE - HKU\S-1-5-21-2567241484-2555261958-2837169219-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaulturl: "" FF - prefs.js..browser.search.order.1: "Search the web (Babylon)" FF - prefs.js..extensions.enabledItems: {EEE6C361-6118-11DC-9C72-001320C79847}:1.2.0.2 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:1.0.2 FF - prefs.js..extensions.enabledItems: ffxtlbr@babylon.com:1.2.0 FF - prefs.js..extensions.enabledItems: {5c5b9468-d672-4eb7-b52f-b5afabf28c5b}:3.6.0.10 FF - prefs.js..keyword.URL: "http://search.babylon.com/?AF=100482&babsrc=adbartrp&mntrId=04d106970000000000000060b34d5512&q=" FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: "" FF - prefs.js..sweetim.toolbar.previous.browser.search.defaulturl: "" FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: "" FF - prefs.js..browser.startup.homepage: "http://www.wyborcza.pl/0,0.html?p=110" FF - prefs.js..sweetim.toolbar.previous.keyword.URL: "chrome://browser-region/locale/region.properties" FF - prefs.js..browser.startup.homepage: "http://start.funmoods.com/?f=1&a=nv1" FF - prefs.js..browser.search.selectedEngine: "Search" FF - prefs.js..browser.search.defaultenginename: "Search" FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.4.1: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.4.1: C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.732: c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.3.732: c:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=1.0.0.0: C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.732: c:\program files\real\realplayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\Alwil Software\Avast5\WebRep\FF [2012-07-27 10:32:30 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2010-05-08 22:09:52 | 000,000,000 | ---D | M] [2011-12-26 21:45:23 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Jozef\Application Data\mozilla\Extensions [2011-12-26 21:45:23 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Jozef\Application Data\mozilla\Extensions\songbird@songbirdnest.com [2012-05-24 20:50:38 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Jozef\Application Data\mozilla\Firefox\Profiles\karxteyf.default\extensions [2010-02-10 19:41:36 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Jozef\Application Data\mozilla\Firefox\Profiles\karxteyf.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2012-01-18 12:39:21 | 000,000,000 | ---D | M] (SFT_Polska Community Toolbar) -- C:\Documents and Settings\Jozef\Application Data\mozilla\Firefox\Profiles\karxteyf.default\extensions\{5c5b9468-d672-4eb7-b52f-b5afabf28c5b} [2011-10-08 12:51:53 | 000,000,000 | ---D | M] (SweetIM Toolbar for Firefox) -- C:\Documents and Settings\Jozef\Application Data\mozilla\Firefox\Profiles\karxteyf.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847} [2012-01-24 14:46:01 | 000,000,000 | ---D | M] (Babylon) -- C:\Documents and Settings\Jozef\Application Data\mozilla\Firefox\Profiles\karxteyf.default\extensions\ffxtlbr@babylon.com [2012-05-12 11:57:23 | 000,000,000 | ---D | M] (Funmoods.com) -- C:\Documents and Settings\Jozef\Application Data\mozilla\Firefox\Profiles\karxteyf.default\extensions\ffxtlbr@funmoods.com [2012-05-12 11:57:14 | 000,001,797 | ---- | M] () -- C:\Documents and Settings\Jozef\Application Data\Mozilla\Firefox\Profiles\karxteyf.default\searchplugins\funmoods.xml [2011-10-08 12:51:57 | 000,003,915 | ---- | M] () -- C:\Documents and Settings\Jozef\Application Data\Mozilla\Firefox\Profiles\karxteyf.default\searchplugins\SweetIM Search.xml [2011-10-08 12:51:50 | 000,003,915 | ---- | M] () -- C:\Documents and Settings\Jozef\Application Data\Mozilla\Firefox\Profiles\karxteyf.default\searchplugins\sweetim.xml File not found (No name found) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF File not found (No name found) -- C:\PROGRAM FILES\REALNETWORKS\REALDOWNLOADER\BROWSERPLUGINS\FIREFOX\EXT [2009-07-31 14:06:48 | 001,654,784 | ---- | M] (LizardTech) -- C:\Program Files\mozilla firefox\plugins\npdjvu.dll [2012-03-26 20:38:27 | 000,002,310 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml O1 HOSTS File: ([2011-12-06 23:05:26 | 000,000,781 | RHS- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: 127.0.0.1 mpa.one.microsoft.com O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation) O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software) O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll (Google Inc.) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation) O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software) O3 - HKU\S-1-5-21-2567241484-2555261958-2837169219-1005\..\Toolbar\ShellBrowser: (no name) - {C4069E3A-68F1-403E-B40E-20066696354B} - No CLSID value found. O3 - HKU\S-1-5-21-2567241484-2555261958-2837169219-1005\..\Toolbar\WebBrowser: (no name) - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No CLSID value found. O3 - HKU\S-1-5-21-2567241484-2555261958-2837169219-1005\..\Toolbar\WebBrowser: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found. O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software) O4 - HKLM..\Run: [High Definition Audio Property Page Shortcut] C:\WINDOWS\System32\HdAShCut.exe (Windows (R) Server 2003 DDK provider) O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe () O4 - HKLM..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe (OLYMPUS IMAGING CORP.) O4 - HKLM..\Run: [OM2_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe (OLYMPUS IMAGING CORP.) O4 - HKLM..\Run: [Philips Device Listener] C:\Program Files\Philips\Philips Songbird Resources\Autolauncher\PhilipsDeviceListener.exe () O4 - HKLM..\Run: [PinnacleDriverCheck] C:\WINDOWS\System32\PSDrvCheck.exe () O4 - HKLM..\Run: [Sunkist2k] C:\Program Files\Multimedia Card Reader\shwicon2k.exe (Alcor Micro, Corp.) O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.) O4 - HKU\.DEFAULT..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe (Time Information Services Ltd.) O4 - HKU\S-1-5-18..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe (Time Information Services Ltd.) O4 - HKU\S-1-5-21-2567241484-2555261958-2837169219-1005..\Run: [AutoStartNPSAgent] C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe (Samsung Electronics Co., Ltd.) O4 - HKU\S-1-5-21-2567241484-2555261958-2837169219-1005..\Run: [Gadu-Gadu] C:\Program Files\Gadu-Gadu\gg.exe (Gadu-Gadu S.A.) O4 - HKU\S-1-5-21-2567241484-2555261958-2837169219-1005..\Run: [Media Finder] "C:\Program Files\Media Finder\Media Finder.exe" /opentotray File not found O4 - HKU\S-1-5-21-2567241484-2555261958-2837169219-1005..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe (OLYMPUS IMAGING CORP.) O4 - HKU\S-1-5-21-2567241484-2555261958-2837169219-1005..\Run: [OM2_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe (OLYMPUS IMAGING CORP.) O4 - HKU\S-1-5-21-2567241484-2555261958-2837169219-1005..\Run: [Steam] C:\Program Files\Steam\Steam.exe (Valve Corporation) O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\MCE Video Settings.lnk = C:\Program Files\OABsoftware\MCE VideoProcAmp\MCEVideoProcAmp.exe (OABsoftware) O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Program sieciowy dla SAGEM Wi-Fi 11g USB adapter.lnk = C:\Program Files\SAGEM WiFi manager\WLANUTL.EXE ( ) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallVisualStyle = C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles (Microsoft) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallTheme = C:\WINDOWS\Resources\Themes\Royale.theme () O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-2567241484-2555261958-2837169219-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: Download with &Media Finder - C:\Program Files\Media Finder\hook.html File not found O8 - Extra context menu item: Search the Web - C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\MenuExt.html () O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - Reg Error: Key error. File not found O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O15 - HKU\S-1-5-21-2567241484-2555261958-2837169219-1005\..Trusted Domains: polbank24.pl ([www] https in Trusted sites) O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab (Reg Error: Key error.) O16 - DPF: {3D3B42C2-11BF-4732-A304-A01384B70D68} http://picasaweb.google.com/s/v/56.42/uploader2.cab (UploadListView Class) O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} http://www.nvidia.com/content/DriverDownload/nforce/NvidiaSmartScan.cab (NVIDIA Smart Scan) O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (Reg Error: Key error.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_04-windows-i586.cab (Java Plug-in 1.7.0_04) O16 - DPF: {CAFEEFAC-0017-0000-0004-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_04-windows-i586.cab (Java Plug-in 1.7.0_04) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_04-windows-i586.cab (Java Plug-in 1.7.0_04) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{36FB9BDE-FBB0-441C-AB5E-16A194B475DC}: DhcpNameServer = 213.25.67.5 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{38621920-D2D2-4897-A17F-135CA2F8F9F5}: DhcpNameServer = 192.168.0.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3CE8970D-A3F5-4FF3-B062-4C6138865FE2}: DhcpNameServer = 192.168.1.1 0.0.0.0 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B0F8EA0E-7C0C-43EB-8558-4F0C7041D1DE}: DhcpNameServer = 213.25.67.5 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E02A233B-DC14-4619-AC6C-748E3FB83E22}: DhcpNameServer = 192.168.0.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E07480D0-0020-401D-A1E0-CDDE2CB8C168}: DhcpNameServer = 192.168.1.1 0.0.0.0 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O20 - Winlogon\Notify\Antiwpa: DllName - (antiwpa.dll) - C:\WINDOWS\System32\antiwpa.dll () O24 - Desktop WallPaper: C:\Documents and Settings\Jozef\Local Settings\Application Data\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Jozef\Local Settings\Application Data\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006-08-08 16:18:07 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{110b210b-abf3-11db-bd4a-806d6172696f}\Shell - "" = AutoRun O33 - MountPoints2\{110b210b-abf3-11db-bd4a-806d6172696f}\Shell\AutoRun\command - "" = D:\vcd_play.exe O33 - MountPoints2\{f848be46-92a0-11df-9b96-0060b34d5512}\Shell\AutoRun\command - "" = I:\wa.exe O33 - MountPoints2\{f848be46-92a0-11df-9b96-0060b34d5512}\Shell\open\Command - "" = I:\wa.exe O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-07-30 21:42:33 | 000,597,504 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Jozef\Desktop\OTL.exe [2012-07-30 21:39:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\LastGood [2012-07-30 19:55:44 | 000,426,184 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe [2012-07-30 08:55:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jozef\temp [2012-07-30 08:55:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jozef\Application Data\TeamViewer [2012-07-30 08:55:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\TeamViewer 7 [2012-07-30 08:55:33 | 000,000,000 | ---D | C] -- C:\Program Files\TeamViewer [2012-07-30 08:42:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jozef\Application Data\Pixmantec [2012-07-28 12:24:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage [2012-07-27 20:46:50 | 000,000,000 | -HSD | C] -- C:\WINDOWS\CSC [2012-07-27 19:27:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Office Genuine Advantage [2012-07-27 11:13:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jozef\Application Data\Malwarebytes [2012-07-27 11:13:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes' Anti-Malware [2012-07-27 11:13:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes [2012-07-27 11:13:20 | 000,022,344 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2012-07-27 11:13:20 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2012-07-24 13:33:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jozef\Desktop\Download [2012-07-24 13:33:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Media Finder [2012-07-24 13:33:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jozef\Application Data\Media Finder [2012-07-09 19:27:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jozef\riotsGamesLogs [2012-02-16 00:39:28 | 002,368,760 | ---- | C] (DownVision ) -- C:\Documents and Settings\Jozef\Local Settings\Application Data\setup.exe [2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\Documents and Settings\Jozef\My Documents\*.tmp files -> C:\Documents and Settings\Jozef\My Documents\*.tmp -> ] [1 C:\Documents and Settings\Jozef\*.tmp files -> C:\Documents and Settings\Jozef\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-07-30 22:32:04 | 000,000,318 | -H-- | M] () -- C:\WINDOWS\tasks\avast! Emergency Update.job [2012-07-30 22:16:00 | 000,001,036 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2012-07-30 22:12:00 | 000,000,930 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job [2012-07-30 22:01:02 | 000,000,286 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-2567241484-2555261958-2837169219-1005.job [2012-07-30 22:01:02 | 000,000,278 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-2567241484-2555261958-2837169219-1005.job [2012-07-30 21:42:36 | 000,597,504 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jozef\Desktop\OTL.exe [2012-07-30 21:35:20 | 000,000,422 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{911E3A34-F5B9-41EA-AC78-9449C7148262}.job [2012-07-30 21:33:08 | 000,045,378 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml [2012-07-30 21:32:37 | 000,001,032 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2012-07-30 21:32:36 | 000,000,300 | ---- | M] () -- C:\WINDOWS\tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2567241484-2555261958-2837169219-1005.job [2012-07-30 21:32:36 | 000,000,280 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-18.job [2012-07-30 21:32:25 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2012-07-30 21:32:22 | 2145,898,496 | -HS- | M] () -- C:\hiberfil.sys [2012-07-30 21:26:21 | 000,001,230 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2012-07-30 21:26:04 | 000,000,424 | RHS- | M] () -- C:\boot.ini [2012-07-30 21:03:22 | 000,444,638 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2012-07-30 21:03:22 | 000,072,514 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2012-07-30 19:55:44 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe [2012-07-30 19:55:44 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl [2012-07-30 08:55:35 | 000,000,824 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\TeamViewer 7.lnk [2012-07-30 07:44:19 | 000,270,192 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2012-07-30 01:52:15 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2012-07-30 00:28:16 | 000,920,096 | ---- | M] () -- C:\Documents and Settings\Jozef\Desktop\Norton_Removal_Tool.exe [2012-07-27 11:13:23 | 000,000,807 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk [2012-07-27 10:32:34 | 000,002,639 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT [2012-07-26 20:22:00 | 000,000,288 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-18.job [2012-07-26 18:03:37 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2012-07-25 20:01:03 | 000,023,552 | ---- | M] () -- C:\Documents and Settings\Jozef\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-07-23 13:56:30 | 000,004,156 | ---- | M] () -- C:\WINDOWS\cdplayer.ini [2012-07-11 12:48:00 | 000,000,326 | ---- | M] () -- C:\WINDOWS\tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-2567241484-2555261958-2837169219-1005.job [2012-07-03 18:21:54 | 000,054,232 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys [2012-07-03 18:21:53 | 000,721,000 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSnx.sys [2012-07-03 18:21:53 | 000,353,688 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSP.sys [2012-07-03 18:21:53 | 000,097,608 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys [2012-07-03 18:21:53 | 000,089,624 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswmon.sys [2012-07-03 18:21:53 | 000,035,928 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys [2012-07-03 18:21:53 | 000,021,256 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys [2012-07-03 18:21:52 | 000,025,256 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys [2012-07-03 18:21:32 | 000,041,224 | ---- | M] (AVAST Software) -- C:\WINDOWS\avastSS.scr [2012-07-03 18:21:28 | 000,227,648 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe [2012-07-03 13:46:44 | 000,022,344 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\Documents and Settings\Jozef\My Documents\*.tmp files -> C:\Documents and Settings\Jozef\My Documents\*.tmp -> ] [1 C:\Documents and Settings\Jozef\*.tmp files -> C:\Documents and Settings\Jozef\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-07-30 21:32:22 | 2145,898,496 | -HS- | C] () -- C:\hiberfil.sys [2012-07-30 19:55:46 | 000,000,930 | ---- | C] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job [2012-07-30 08:55:35 | 000,000,824 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\TeamViewer 7.lnk [2012-07-30 00:28:09 | 000,920,096 | ---- | C] () -- C:\Documents and Settings\Jozef\Desktop\Norton_Removal_Tool.exe [2012-07-28 12:07:59 | 000,005,376 | ---- | C] () -- C:\WINDOWS\System32\antiwpa.dll [2012-07-27 11:13:23 | 000,000,807 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk [2012-07-27 10:32:32 | 000,000,318 | -H-- | C] () -- C:\WINDOWS\tasks\avast! Emergency Update.job [2012-02-16 16:10:21 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll [2012-01-21 12:12:45 | 000,000,008 | RHS- | C] () -- C:\WINDOWS\System32\7448F1DB3A.sys [2012-01-12 09:31:23 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Jozef\Local Settings\Application Data\{CAE4DB5F-FB2A-48AC-AE45-0C390DBC2DEC} [2012-01-07 12:37:54 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Jozef\Local Settings\Application Data\{58BEB704-7EEF-4CFB-8C38-11896290B96A} [2011-12-26 21:44:50 | 000,011,264 | ---- | C] () -- C:\WINDOWS\System32\rockusbCoInstaller.dll [2011-12-07 17:47:07 | 000,001,508 | ---- | C] () -- C:\Documents and Settings\Jozef\Application Data\Zeznanie_podatkowe_2011-12-07 16-47-02.dpit [2011-12-07 00:12:01 | 000,031,272 | ---- | C] () -- C:\WINDOWS\System32\AppleChargerSrv.exe [2011-12-07 00:12:01 | 000,018,544 | ---- | C] () -- C:\WINDOWS\System32\drivers\AppleCharger.sys [2011-12-07 00:08:34 | 000,207,400 | ---- | C] () -- C:\WINDOWS\GSetup.exe [2011-12-07 00:08:34 | 000,000,019 | ---- | C] () -- C:\WINDOWS\GSetup.ini [2011-01-13 01:13:10 | 000,000,552 | ---- | C] () -- C:\WINDOWS\System32\d3d8caps.dat [2010-04-16 14:55:55 | 000,002,422 | ---- | C] () -- C:\Documents and Settings\Jozef\intlname.ols [2009-08-20 21:10:14 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\Jozef\Application Data\$_hpcst$.hpc [2009-08-04 16:00:53 | 000,001,755 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache [2009-04-24 22:10:13 | 000,035,564 | ---- | C] () -- C:\Documents and Settings\Jozef\Application Data\Urząd Skarbowy 05-800 Pruszków, ul. Staszica 1__2009-04-24 22-09-59.dpit [2009-04-24 22:10:13 | 000,000,618 | ---- | C] () -- C:\Documents and Settings\Jozef\Application Data\Urząd Skarbowy 05-800 Pruszków, ul. Staszica 1__2009-04-24 22-09-59.dpite [2009-03-22 16:10:07 | 000,082,628 | ---- | C] () -- C:\Documents and Settings\Jozef\Application Data\PIT-37.pdf [2009-03-22 16:10:06 | 000,130,695 | ---- | C] () -- C:\Documents and Settings\Jozef\Application Data\PIT-O.pdf [2009-03-22 15:35:09 | 000,036,114 | ---- | C] () -- C:\Documents and Settings\Jozef\Application Data\Borkowski Urząd Skarbowy 05-800 Pruszków, ul. Staszica 1__2009-03-22 14-34-44.dpit [2007-01-24 23:46:38 | 002,715,966 | ---- | C] () -- C:\Documents and Settings\Jozef\MSSecure.XML [2007-01-24 23:46:38 | 000,023,552 | ---- | C] () -- C:\Documents and Settings\Jozef\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2007-01-24 23:46:38 | 000,000,128 | ---- | C] () -- C:\Documents and Settings\Jozef\Local Settings\Application Data\fusioncache.dat [color=#E56717]========== LOP Check ==========[/color] [2011-12-05 22:24:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Opera [2006-08-11 13:53:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Otto [2010-09-01 22:20:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Alwil Software [2012-01-24 14:45:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Babylon [2012-07-25 20:19:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\boost_interprocess [2011-04-03 12:44:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\e-file [2010-12-28 15:58:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\EA Core [2010-12-28 15:57:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Electronic Arts [2008-03-30 22:53:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Installations [2012-05-17 23:28:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ipla [2006-08-11 13:53:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Otto [2011-12-30 19:42:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PC Suite [2010-04-08 13:06:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\phenomedia [2006-08-12 10:35:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Pinnacle [2011-07-05 09:31:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\RDRM [2012-05-24 20:25:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SmartSound Software Inc [2012-05-24 20:50:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Tarma Installer [2006-08-11 13:53:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Default User\Application Data\Otto [2006-08-11 13:53:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Guest\Application Data\Otto [2012-04-15 20:33:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\.minecraft [2012-01-24 14:45:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\Babylon [2009-10-20 19:13:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\BESTplayer [2009-07-15 22:48:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\CoSoSys [2007-07-07 18:14:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\Gadu-Gadu [2010-01-04 21:03:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\Gadu-Gadu 10 [2012-01-27 01:48:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\Image Zone Express [2012-05-24 19:57:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\ipla [2012-04-21 22:01:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\LolClient [2012-05-24 22:19:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\LolClient2 [2011-12-27 16:17:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\maxup [2012-07-30 00:31:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\Media Finder [2012-04-05 14:15:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\Moje pliki Bitwy o ĹšrĂłdziemie™ II [2012-04-05 14:15:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\Moje pliki Bitwy o Śródziemie™ II [2010-09-20 21:04:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\Moje pliki gry Władca Pierścieni, Król Nazguli [2008-04-12 11:09:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\Moje pliki zapisu Bitwy o Śródziemie [2010-03-13 22:01:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\Mount&Blade [2012-04-26 22:57:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\Multibooki.NE [2007-07-01 22:02:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\My Games [2008-04-16 21:57:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\Nokia [2008-03-30 23:12:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\Nokia Multimedia Player [2007-02-25 19:44:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\OLYMPUS [2010-01-30 22:38:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\Opera [2012-05-24 20:57:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\Oracle [2006-08-11 13:53:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\Otto [2009-04-26 17:19:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\PC Suite [2011-12-26 21:46:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\Philips [2011-12-26 21:45:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\Philips-Songbird [2012-03-25 15:22:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\PITy2011 [2012-07-30 08:42:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\Pixmantec [2012-03-25 14:54:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\Podatnik.info [2012-05-24 20:18:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\PriceGong [2010-11-23 21:07:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\RDRM [2009-08-20 21:10:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\Samsung [2012-01-18 12:39:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\Songbird2 [2012-07-30 08:55:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\TeamViewer [2012-04-02 16:47:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\Trine2 [2012-06-15 15:21:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\TuxPaint [2012-07-12 17:50:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\uTorrent [2012-06-01 13:05:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\WB Games [2012-04-26 22:08:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jozef\Application Data\YDP [2012-07-30 22:32:04 | 000,000,318 | -H-- | M] () -- C:\WINDOWS\Tasks\avast! Emergency Update.job [2012-07-30 21:35:20 | 000,000,422 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{911E3A34-F5B9-41EA-AC78-9449C7148262}.job [color=#E56717]========== Purity Check ==========[/color] < End of report >