OTL logfile created on: 2012-07-31 13:11:07 - Run 2
OTL by OldTimer - Version 3.2.55.0     Folder = C:\Documents and Settings\Einstain\Pulpit
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
511,48 Mb Total Physical Memory | 147,90 Mb Available Physical Memory | 28,92% Memory free
1,22 Gb Paging File | 0,98 Gb Available in Paging File | 80,03% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 48,83 Gb Total Space | 5,02 Gb Free Space | 10,29% Space Free | Partition Type: NTFS
Drive D: | 48,83 Gb Total Space | 28,45 Gb Free Space | 58,26% Space Free | Partition Type: NTFS
Drive E: | 51,39 Gb Total Space | 49,66 Gb Free Space | 96,65% Space Free | Partition Type: NTFS
 
Computer Name: ANIA-86CE44D873 | User Name: Einstain | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-07-31 13:00:50 | 000,597,504 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Einstain\Pulpit\OTL.exe
PRC - [2012-07-28 14:15:25 | 000,913,888 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2008-04-15 00:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2012-07-28 14:15:22 | 002,003,424 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2012-04-04 07:54:04 | 000,300,544 | ---- | M] () -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.POL
MOD - [2009-07-18 05:21:00 | 003,883,424 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
MOD - [2005-12-08 10:53:00 | 000,466,944 | ---- | M] () -- C:\WINDOWS\system32\nvshell.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [Auto | Stopped] -- C:\Documents and Settings\All Users\Dane aplikacji\QuestService\questservice153.exe C:\Program Files\QuestService\questservice.dll riiemvcsoayi -- (QuestService Service)
SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ)
SRV - [2012-07-28 14:15:22 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012-06-07 19:12:14 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012-05-04 19:29:46 | 000,161,664 | ---- | M] (Oracle Corporation) [Auto | Stopped] -- C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2010-04-14 22:45:21 | 000,598,696 | ---- | M] ( ) [Auto | Stopped] -- C:\WINDOWS\system32\lxeacoms.exe -- (lxea_device)
SRV - [2010-04-14 22:45:14 | 000,193,192 | ---- | M] () [Auto | Stopped] -- C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxeaserv.exe -- (lxeaCATSCustConnectService)
SRV - [2009-06-02 10:10:08 | 000,637,952 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] --  -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] --  -- (Changer)
DRV - File not found [Kernel | System | Stopped] --  -- (Cdaudio)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\cdaudio.sys -- (AVPsys)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ar5211.sys -- (AR5211)
DRV - File not found [Kernel | On_Demand | Unknown] --  -- (a9kg5um3)
DRV - [2009-10-29 22:24:49 | 000,721,904 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sptd.sys -- (sptd)
DRV - [2009-07-28 18:23:40 | 000,094,208 | ---- | M] (VSO Software) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ezplay.sys -- (ezplay)
DRV - [2009-03-19 14:48:18 | 000,136,704 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdnsu.sys -- (nmwcdnsu)
DRV - [2009-03-19 14:48:12 | 000,008,320 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdnsuc.sys -- (nmwcdnsuc)
DRV - [2009-02-09 08:37:56 | 000,007,808 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2009-02-09 08:37:48 | 000,007,808 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2009-02-09 08:37:46 | 000,022,016 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2009-02-09 08:37:46 | 000,017,664 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2008-08-29 15:29:44 | 000,256,512 | ---- | M] (Vimicro Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\VMUVC.sys -- (VMUVC)
DRV - [2008-08-26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2008-07-01 11:12:32 | 000,398,720 | ---- | M] (Vimicro Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\vvftUVC.sys -- (vvftUVC)
DRV - [2008-05-02 10:48:56 | 000,062,208 | ---- | M] (Silicon Image, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\si3112.sys -- (Si3112)
DRV - [2008-05-02 10:48:38 | 000,105,344 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\nvatabus.sys -- (nvatabus)
DRV - [2008-04-14 02:26:08 | 000,088,320 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\nwlnkipx.sys -- (NwlnkIpx)
DRV - [2008-04-14 02:15:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2005-12-22 10:22:18 | 000,005,685 | ---- | M] () [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\AsIO.sys -- (AsIO)
DRV - [2005-08-18 11:52:06 | 000,093,568 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\nvata.sys -- (nvata)
DRV - [2005-06-20 22:08:44 | 002,324,480 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM)
DRV - [2005-04-05 21:22:30 | 000,012,928 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus)
DRV - [2005-04-05 21:22:28 | 000,033,536 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD)
DRV - [2005-03-09 15:53:00 | 000,043,008 | ---- | M] (Advanced Micro Devices) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8)
DRV - [2004-08-14 02:56:20 | 000,005,810 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ASACPI.sys -- (MTsensor)
DRV - [2001-08-18 01:54:18 | 000,063,232 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\nwlnknb.sys -- (NwlnkNb)
DRV - [2001-08-18 01:54:18 | 000,055,936 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\nwlnkspx.sys -- (NwlnkSpx)
DRV - [2001-08-18 00:00:04 | 000,002,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\msmpu401.sys -- (ms_mpu401)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://alawar.pl
IE - HKLM\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
IE - HKLM\..\SearchScopes,DefaultScope = {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKLM\..\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: "URL" = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&query={searchTerms}&invocationType=tb50winampie7
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://alawar.plhttp://www.google.pl [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://domredi.com/1/
IE - HKCU\..\URLSearchHook: {51a86bb3-6602-4c85-92a5-130ee4864f13} - C:\Program Files\BrotherSoft_Extreme\prxtbBro2.dll (Conduit Ltd.)
IE - HKCU\..\SearchScopes,DefaultScope = {19F2B849-4ADE-4d4b-85F9-C31C643DBDE9}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=113679&tt=060612_5_&babsrc=SP_def&mntrId=2c57ecd4000000000000001731380b6f
IE - HKCU\..\SearchScopes\{19F2B849-4ADE-4d4b-85F9-C31C643DBDE9}: "URL" = http://fastbrowsersearch.com/results/results.aspx?q={searchTerms}&c=web&s=DSP&v=9
IE - HKCU\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2776682
IE - HKCU\..\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: "URL" = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&query={searchTerms}&invocationType=tb50winampie7
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..extensions.enabledItems: onet-branding@flock.com:0.2
FF - prefs.js..extensions.enabledItems: {b01bf10c-302a-11da-b67b-000d60ca027b}:2.5.3
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.1: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1: C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Documents and Settings\Einstain\Ustawienia lokalne\Dane aplikacji\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\Einstain\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\Einstain\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\bkmrksync@nokia.com: C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\ [2009-07-28 19:00:34 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{40f1eb95-4de4-4f36-a826-054ee36bb905}: C:\Program Files\Gameztar Toolbar\2.1.1.5750\FFToolbar [2009-12-03 23:20:44 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{E63605FC-D583-4C81-867F-9457BDB3EA1B}: C:\Program Files\Web Search Operator\3.1.0.1840\FF [2009-12-03 23:21:30 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{8141440E-08F0-4339-9959-5C31C6A69F23}: C:\Program Files\Automated Content Enhancer\4.1.0.5190\FF [2009-12-03 23:21:49 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{E889F097-B0BE-471B-89AD-B86B6F04B506}: C:\Program Files\Customized Platform Advancer\3.1.0.1630\FF [2009-12-03 23:22:42 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Flock 2.5.3\extensions\\Components: C:\Program Files\Flock\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Flock 2.5.3\extensions\\Plugins: C:\Program Files\Flock\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-07-28 14:15:26 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-07-12 19:51:17 | 000,000,000 | ---D | M]
 
[2010-04-11 20:41:38 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Einstain\Dane aplikacji\Mozilla\Extensions
[2010-04-11 20:41:38 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Einstain\Dane aplikacji\Mozilla\Extensions\{a463f10c-3994-11da-9945-000d60ca027b}
[2012-07-16 16:18:06 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Einstain\Dane aplikacji\Mozilla\Firefox\Profiles\71bv19zt.default\extensions
[2012-07-16 16:18:06 | 000,000,000 | ---D | M] (BrotherSoft Extreme Community Toolbar) -- C:\Documents and Settings\Einstain\Dane aplikacji\Mozilla\Firefox\Profiles\71bv19zt.default\extensions\{51a86bb3-6602-4c85-92a5-130ee4864f13}
[2012-06-26 14:14:43 | 000,000,000 | ---D | M] (Babylon) -- C:\Documents and Settings\Einstain\Dane aplikacji\Mozilla\Firefox\Profiles\71bv19zt.default\extensions\ffxtlbr@babylon.com
[2010-08-22 20:09:42 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
File not found (No name found) -- C:\PROGRAM FILES\FLOCK\EXTENSIONS\ONET-BRANDING@FLOCK.COM
[2012-07-28 14:15:25 | 000,136,672 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012-07-12 19:51:03 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2012-06-26 14:18:19 | 000,002,353 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml
[2010-08-23 08:43:57 | 000,003,700 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fast.png
[2010-08-23 08:43:57 | 000,001,963 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fast.xml
[2012-07-12 19:51:03 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2012-07-12 19:51:03 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2012-07-12 19:51:03 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2012-07-12 19:51:03 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2012-07-12 19:51:03 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - homepage: http://domredi.com/1/
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}
CHR - homepage: 
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Documents and Settings\Einstain\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\20.0.1132.57\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\Einstain\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\20.0.1132.57\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\Einstain\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\20.0.1132.57\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Babylon ToolBar (Enabled) = C:\Documents and Settings\Einstain\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.7_0\BabylonChromeToolBar.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll
CHR - plugin: Facebook Video Calling Plugin (Enabled) = C:\Documents and Settings\Einstain\Ustawienia lokalne\Dane aplikacji\Facebook\Video\Skype\npFacebookVideoCalling.dll
CHR - plugin: Google Update (Enabled) = C:\Documents and Settings\Einstain\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: DivX Web Player (Enabled) = C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files\Google\Picasa3\npPicasa3.dll
CHR - plugin: Java(TM) Platform SE 7 U5 (Enabled) = C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll
CHR - plugin: Java Deployment Toolkit 7.0.50.255 (Enabled) = C:\WINDOWS\system32\npDeployJava1.dll
CHR - Extension: YouTube = C:\Documents and Settings\Einstain\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Szukaj w Google = C:\Documents and Settings\Einstain\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: Babylon Toolbar = C:\Documents and Settings\Einstain\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.7_0\
CHR - Extension: Gmail = C:\Documents and Settings\Einstain\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
 
O1 HOSTS File: ([2001-10-26 19:45:16 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Lexmark Pasek narzędzi) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
O2 - BHO: (Automated Content Enhancer) - {1D74E9DD-8987-448b-B2CB-67FFF2B8A932} - C:\Program Files\Automated Content Enhancer\4.1.0.5190\ACEIEAddOn.dll ()
O2 - BHO: (Winamp Toolbar Loader) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO)
O2 - BHO: (Customized Platform Advancer) - {42C7C39F-3128-4a17-BDB7-91C46032B5B9} - C:\Program Files\Customized Platform Advancer\3.1.0.1630\CPAIEAddOn.dll ()
O2 - BHO: (BrotherSoft Extreme  Toolbar) - {51a86bb3-6602-4c85-92a5-130ee4864f13} - C:\Program Files\BrotherSoft_Extreme\prxtbBro2.dll (Conduit Ltd.)
O2 - BHO: (Free Lunch Design Toolbar) - {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - C:\Program Files\Free_Lunch_Design\prxtbFre2.dll (Conduit Ltd.)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (gry Toolbar) - {8532a8b7-c06a-41bb-936a-8ce73e4711ed} - C:\Program Files\gry\tbgr0.dll File not found
O2 - BHO: (BrowserHelper Class) - {8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6} - C:\Program Files\SGPSA\SearchAssistant.dll (Make The Web Better, LLC)
O2 - BHO: (Content Management Wizard) - {B72681C0-A222-4b21-A0E2-53A5A5CA3D41} - C:\Program Files\Content Management Wizard\1.1.0.1870\CMWIE.dll ()
O2 - BHO: (TCP) - {CAC89FF9-34A9-4431-8CFE-292A47F843BC} - C:\Program Files\Textual Content Provider\1.1.0.1610\TCPIE.dll ()
O2 - BHO: (Lexmark ) - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll ()
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (Web Search Operator) - {EB4A577D-BCAD-4b1c-8AF2-9A74B8DD3431} - C:\Program Files\Web Search Operator\3.1.0.1840\WSO.dll ()
O2 - BHO: (Search Assistant) - {F0626A63-410B-45E2-99A1-3F2475B2D695} - C:\Program Files\SGPSA\BHO.dll (MTWB)
O2 - BHO: (Fast Browser Search Toolbar Helper) - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files\Fast Browser Search\IE\FBStoolbar.dll ()
O3 - HKLM\..\Toolbar: (Lexmark Pasek narzędzi) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
O3 - HKLM\..\Toolbar: (Fast Browser Search Toolbar) - {1BB22D38-A411-4B13-A746-C2A4F4EC7344} - C:\Program Files\Fast Browser Search\IE\FBStoolbar.dll ()
O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKLM\..\Toolbar: (BrotherSoft Extreme  Toolbar) - {51a86bb3-6602-4c85-92a5-130ee4864f13} - C:\Program Files\BrotherSoft_Extreme\prxtbBro2.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Free Lunch Design Toolbar) - {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - C:\Program Files\Free_Lunch_Design\prxtbFre2.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (gry Toolbar) - {8532a8b7-c06a-41bb-936a-8ce73e4711ed} - C:\Program Files\gry\tbgr0.dll File not found
O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.)
O3 - HKLM\..\Toolbar: (Gameztar Toolbar) - {D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2} - C:\Program Files\Gameztar Toolbar\2.1.1.5750\mvb0.dll ()
O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O3 - HKCU\..\Toolbar\ShellBrowser: (Lexmark Pasek narzędzi) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Lexmark Pasek narzędzi) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Fast Browser Search Toolbar) - {1BB22D38-A411-4B13-A746-C2A4F4EC7344} - C:\Program Files\Fast Browser Search\IE\FBStoolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Free Lunch Design Toolbar) - {57CC715D-37CA-44E4-9EC2-8C2CBDDB25EC} - C:\Program Files\Free_Lunch_Design\prxtbFre2.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (gry Toolbar) - {8532A8B7-C06A-41BB-936A-8CE73E4711ED} - C:\Program Files\gry\tbgr0.dll File not found
O3 - HKCU\..\Toolbar\WebBrowser: (Gameztar Toolbar) - {D45817B8-3EAD-4D1D-8FCA-EC63A8E35DE2} - C:\Program Files\Gameztar Toolbar\2.1.1.5750\mvb0.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Winamp Toolbar) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O4 - HKLM..\Run: [EzPrint] C:\Program Files\Lexmark S300-S400 Series\ezprint.exe ()
O4 - HKLM..\Run: [FBSearch] C:\Program Files\Search Guard Plus\SearchGuardPlus.exe ()
O4 - HKLM..\Run: [Internet Today Task] C:\Program Files\Internet Today\1.1.0.1190\InternetToday.exe ()
O4 - HKLM..\Run: [lxeamon.exe] C:\Program Files\Lexmark S300-S400 Series\lxeamon.exe ()
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [SGPUpdater] C:\Program Files\Search Guard PlusU\sgpUpdaters.exe ()
O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\soundman.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [VMonitorVMUVC] C:\Program Files\Vimicro Corporation\VMUVC\VMonitor.exe (Vimicro Corporation)
O4 - HKLM..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe ()
O4 - HKCU..\Run: [ares] C:\Program Files\Ares\Ares.exe (Ares Development Group)
O4 - HKCU..\Run: [cdoosoft] C:\WINDOWS\system32\olhrwef.exe ()
O4 - HKCU..\Run: [Facebook Update] C:\Documents and Settings\Einstain\Ustawienia lokalne\Dane aplikacji\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
O4 - HKCU..\Run: [IPLA!] C:\Program Files\ipla\ipla.exe (Redefine Sp z o.o.)
O4 - HKCU..\Run: [Microsoft Windows System] C:\Documents and Settings\Einstain\P-7-78-8964-9648-3874\windll.exe ()
O4 - HKCU..\Run: [Nowe Gadu-Gadu] "C:\Program Files\Nowe Gadu-Gadu\gg.exe" File not found
O4 - HKCU..\Run: [nrpkgvq] C:\Documents and Settings\Einstain\Ustawienia lokalne\Dane aplikacji\lfbbnf.exe ()
O4 - HKCU..\RunOnce: [6F63A58BD2E99EE3F6D9404281CB3EF3] C:\Documents and Settings\All Users\Dane aplikacji\6F63A58BD2E99EE3F6D9404281CB3EF3\6F63A58BD2E99EE3F6D9404281CB3EF3.exe ()
O4 - Startup: C:\Documents and Settings\Einstain\Menu Start\Programy\Autostart\ksrtb.exe ()
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B5D485E5-33FF-4910-8D72-4E00A0DC0EC5}: DhcpNameServer = 10.0.0.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: TaskMan - (C:\RECYCLER\S-1-5-21-3227714281-4180051107-543168277-2759\schl.exe) - C:\RECYCLER\S-1-5-21-3227714281-4180051107-543168277-2759\schl.exe ()
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Einstain\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Einstain\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O30 - LSA: Authentication Packages - (nwprovau) - C:\WINDOWS\System32\nwprovau.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-06-11 17:09:47 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2012-07-31 12:56:11 | 000,000,051 | RHS- | M] () - C:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2012-07-31 12:56:11 | 000,000,051 | RHS- | M] () - D:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2012-07-31 12:56:11 | 000,000,051 | RHS- | M] () - E:\autorun.inf -- [ NTFS ]
O33 - MountPoints2\{29cc6f9b-c3d6-11de-ae52-0019e084c062}\Shell\AutoRun\command - "" = H:\q9.cmd
O33 - MountPoints2\{29cc6f9b-c3d6-11de-ae52-0019e084c062}\Shell\open\Command - "" = H:\q9.cmd
O33 - MountPoints2\{7fefa85d-a0c9-11df-9b05-0019e084c062}\Shell\Auto\command - "" = H:\activexdebugger32.exe f
O33 - MountPoints2\{7fefa85d-a0c9-11df-9b05-0019e084c062}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL activexdebugger32.exe f
O33 - MountPoints2\{7fefa85d-a0c9-11df-9b05-0019e084c062}\Shell\explore\Command - "" = H:\activexdebugger32.exe f
O33 - MountPoints2\{7fefa85d-a0c9-11df-9b05-0019e084c062}\Shell\open\Command - "" = H:\activexdebugger32.exe f
O33 - MountPoints2\{8e8fde86-0f64-11df-af62-0019e084c062}\Shell\AutoRun\command - "" = H:\config/USB.exe
O33 - MountPoints2\{8e8fde86-0f64-11df-af62-0019e084c062}\Shell\explore\command - "" = H:\config/USB.exe
O33 - MountPoints2\{8e8fde86-0f64-11df-af62-0019e084c062}\Shell\open\command - "" = H:\config/USB.exe
O33 - MountPoints2\{b4c18fbc-abd3-11df-9b35-0019e084c062}\Shell\AutoRun\command - "" = H:\q9.cmd
O33 - MountPoints2\{b4c18fbc-abd3-11df-9b35-0019e084c062}\Shell\open\Command - "" = H:\q9.cmd
O33 - MountPoints2\{df77eb18-c4c8-11de-ae55-0019e084c062}\Shell\AutoRun\command - "" = H:\q9.cmd
O33 - MountPoints2\{df77eb18-c4c8-11de-ae55-0019e084c062}\Shell\open\Command - "" = H:\q9.cmd
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012-07-31 13:00:48 | 000,597,504 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Einstain\Pulpit\OTL.exe
[2012-07-31 12:57:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\CSC
[2012-07-30 22:28:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Einstain\Menu Start\Programy\Live Security Platinum
[2012-07-30 22:25:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\6F63A58BD2E99EE3F6D9404281CB3EF3
[2012-07-22 21:38:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Einstain\Pulpit\wydrukuj
[2012-07-22 21:28:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Einstain\Pulpit\Piknik
[2012-07-12 21:40:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Einstain\Menu Start\Programy\Google Chrome
[2012-07-12 20:06:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Einstain\Ustawienia lokalne\Dane aplikacji\Sun
[2012-07-12 19:51:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Mozilla
[2012-07-12 19:51:24 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Maintenance Service
[2012-07-07 15:21:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Sun
[2012-07-07 15:21:17 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2012-07-07 15:20:41 | 000,000,000 | ---D | C] -- C:\Program Files\Oracle
[2012-07-07 15:20:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Einstain\Dane aplikacji\Oracle
[2012-07-07 15:20:25 | 000,772,504 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\npDeployJava1.dll
[2012-07-07 15:20:25 | 000,687,504 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\deployJava1.dll
[2012-07-07 15:20:25 | 000,227,720 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javaws.exe
[2012-07-07 15:20:08 | 000,174,064 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javaw.exe
[2012-07-07 15:20:08 | 000,174,064 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\java.exe
[2012-07-05 19:47:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Einstain\Ustawienia lokalne\Dane aplikacji\Facebook
[2012-07-05 19:26:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Einstain\Dane aplikacji\Skype
[2012-07-05 19:26:05 | 000,000,000 | R--D | C] -- C:\Program Files\Skype
[2012-07-05 19:26:05 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2012-07-05 19:26:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Skype
[2012-07-05 14:58:57 | 000,893,936 | ---- | C] (Oracle Corporation) -- C:\Documents and Settings\Einstain\Pulpit\jre-7u5-windows-i586-iftw.exe
[2012-07-05 12:34:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Vimicro USB2.0 UVC PC Camera
[2012-07-05 12:34:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\VMUVC
[2012-07-05 12:34:27 | 000,073,728 | ---- | C] (Vimicro Corporation) -- C:\WINDOWS\System32\exvmuvc.ax
[2012-07-05 12:34:24 | 000,256,512 | ---- | C] (Vimicro Corporation) -- C:\WINDOWS\System32\drivers\VMUVC.sys
[2012-07-05 12:34:23 | 000,188,416 | ---- | C] (Vimicro Corporation) -- C:\WINDOWS\System32\vvftUVC.ax
[2012-07-05 12:34:19 | 000,094,208 | ---- | C] (Vimicro Cooperation) -- C:\WINDOWS\System32\VvFtCtrl.dll
[2012-07-05 12:34:18 | 000,516,096 | ---- | C] (vimicro) -- C:\WINDOWS\System32\VMUVC.ax
[2012-07-05 12:34:18 | 000,098,304 | ---- | C] (Vimicro Corporation) -- C:\WINDOWS\System32\VMCtrl.ax
[2012-07-05 12:34:18 | 000,011,776 | ---- | C] (Vimicro Corporation) -- C:\WINDOWS\System32\VMUVC.dll
[2012-07-05 12:34:17 | 000,398,720 | ---- | C] (Vimicro Corporation) -- C:\WINDOWS\System32\drivers\vvftUVC.sys
[2012-07-05 12:33:24 | 000,000,000 | ---D | C] -- C:\Program Files\Vimicro Corporation
[2012-07-05 12:32:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Einstain\Dane aplikacji\InstallShield
[2012-07-05 12:31:57 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ipsink.ax
[2012-07-05 12:31:48 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kswdmcap.ax
[2012-07-05 12:31:48 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vidcap.ax
[2012-07-05 12:31:47 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kstvtune.ax
[2012-07-05 12:31:46 | 000,054,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vfwwdm32.dll
[2012-07-05 12:31:46 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksxbar.ax
[2012-07-05 12:31:46 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dshowext.ax
[2012-07-04 17:55:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Einstain\P-7-78-8964-9648-3874
[2012-07-03 13:39:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Einstain\Pulpit\Angela i Nika
[5 C:\Documents and Settings\Einstain\Pulpit\*.tmp files -> C:\Documents and Settings\Einstain\Pulpit\*.tmp -> ]
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[12 C:\Documents and Settings\All Users\*.tmp files -> C:\Documents and Settings\All Users\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012-07-31 13:00:50 | 000,597,504 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Einstain\Pulpit\OTL.exe
[2012-07-31 12:57:53 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012-07-31 12:56:11 | 000,000,051 | RHS- | M] () -- C:\autorun.inf
[2012-07-31 12:53:37 | 000,093,184 | RHS- | M] () -- C:\WINDOWS\System32\nmdfgds0.dll
[2012-07-31 12:53:33 | 000,032,798 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2012-07-31 12:46:00 | 000,001,144 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-746137067-1177238915-1417001333-1006UA.job
[2012-07-31 11:01:00 | 000,001,164 | ---- | M] () -- C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-746137067-1177238915-1417001333-1006UA.job
[2012-07-31 10:29:12 | 000,002,265 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk
[2012-07-30 23:01:00 | 000,001,142 | ---- | M] () -- C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-746137067-1177238915-1417001333-1006Core.job
[2012-07-30 22:28:18 | 000,002,248 | ---- | M] () -- C:\Documents and Settings\Einstain\Pulpit\Live Security Platinum.lnk
[2012-07-30 21:46:00 | 000,001,092 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-746137067-1177238915-1417001333-1006Core.job
[2012-07-29 22:47:37 | 000,076,800 | ---- | M] () -- C:\Documents and Settings\Einstain\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-07-29 14:16:52 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012-07-27 20:51:51 | 006,686,334 | ---- | M] () -- C:\Documents and Settings\Einstain\Pulpit\Afromental - It's my life feat. VNM & Sound'n'Grace.mp3
[2012-07-27 17:44:17 | 000,025,152 | ---- | M] () -- C:\Documents and Settings\Einstain\Pulpit\Max.jpg
[2012-07-27 17:00:38 | 000,354,377 | ---- | M] () -- C:\Documents and Settings\Einstain\Pulpit\Zdjęcie0476.jpg
[2012-07-27 16:59:54 | 000,211,909 | ---- | M] () -- C:\Documents and Settings\Einstain\Pulpit\Zdjęcie0480.jpg
[2012-07-27 16:48:02 | 000,007,593 | ---- | M] () -- C:\Documents and Settings\Einstain\Pulpit\łozio.jpg
[2012-07-27 16:30:56 | 000,013,940 | ---- | M] () -- C:\Documents and Settings\Einstain\Pulpit\jakimowicz.jpg
[2012-07-25 22:23:59 | 000,106,792 | ---- | M] () -- C:\Documents and Settings\Einstain\Pulpit\życie.jpg
[2012-07-24 19:51:28 | 000,451,220 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2012-07-24 19:51:28 | 000,395,200 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012-07-24 19:51:28 | 000,075,486 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2012-07-24 19:51:28 | 000,059,440 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012-07-20 18:17:40 | 002,617,265 | ---- | M] () -- C:\Documents and Settings\Einstain\Moje dokumenty\Wijka.png
[2012-07-14 21:26:10 | 004,038,771 | ---- | M] () -- C:\Documents and Settings\Einstain\Pulpit\fun - we are young ft janelle monáe [official video].mp3
[2012-07-07 15:19:51 | 000,174,064 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javaw.exe
[2012-07-07 15:19:51 | 000,174,064 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\java.exe
[2012-07-07 15:16:02 | 000,893,936 | ---- | M] (Oracle Corporation) -- C:\Documents and Settings\Einstain\Pulpit\jre-7u5-windows-i586-iftw.exe
[2012-07-05 12:34:53 | 000,001,718 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\amcap.lnk
[2012-07-03 17:01:54 | 000,047,616 | ---- | M] () -- C:\Documents and Settings\Einstain\Pulpit\Nowy Dokument programu Microsoft Office Publisher.pub
[2012-07-02 19:49:00 | 000,094,977 | ---- | M] () -- C:\Documents and Settings\Einstain\Pulpit\Ania2.JPG
[2012-07-02 19:47:52 | 000,069,910 | ---- | M] () -- C:\Documents and Settings\Einstain\Pulpit\Ania.JPG
[5 C:\Documents and Settings\Einstain\Pulpit\*.tmp files -> C:\Documents and Settings\Einstain\Pulpit\*.tmp -> ]
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[12 C:\Documents and Settings\All Users\*.tmp files -> C:\Documents and Settings\All Users\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012-07-31 11:27:27 | 000,000,676 | ---- | C] () -- C:\Documents and Settings\Einstain\Pulpit\Winamp.lnk
[2012-07-30 22:28:17 | 000,002,248 | ---- | C] () -- C:\Documents and Settings\Einstain\Pulpit\Live Security Platinum.lnk
[2012-07-29 23:46:11 | 006,686,334 | ---- | C] () -- C:\Documents and Settings\Einstain\Pulpit\Afromental - It's my life feat. VNM & Sound'n'Grace.mp3
[2012-07-27 20:41:14 | 000,104,239 | RHS- | C] () -- C:\q9.cmd
[2012-07-27 17:44:11 | 000,025,152 | ---- | C] () -- C:\Documents and Settings\Einstain\Pulpit\Max.jpg
[2012-07-27 17:00:34 | 000,354,377 | ---- | C] () -- C:\Documents and Settings\Einstain\Pulpit\Zdjęcie0476.jpg
[2012-07-27 16:59:50 | 000,211,909 | ---- | C] () -- C:\Documents and Settings\Einstain\Pulpit\Zdjęcie0480.jpg
[2012-07-27 16:47:59 | 000,007,593 | ---- | C] () -- C:\Documents and Settings\Einstain\Pulpit\łozio.jpg
[2012-07-27 16:30:55 | 000,013,940 | ---- | C] () -- C:\Documents and Settings\Einstain\Pulpit\jakimowicz.jpg
[2012-07-25 22:24:17 | 000,106,792 | ---- | C] () -- C:\Documents and Settings\Einstain\Pulpit\życie.jpg
[2012-07-24 19:59:49 | 003,502,195 | ---- | C] () -- C:\Documents and Settings\Einstain\Pulpit\jarzębina-koko euro spoko.mp3
[2012-07-24 19:57:09 | 004,556,609 | ---- | C] () -- C:\Documents and Settings\Einstain\Pulpit\sami - zakręć mnie(2).mp3
[2012-07-24 19:49:45 | 004,038,771 | ---- | C] () -- C:\Documents and Settings\Einstain\Pulpit\fun - we are young ft janelle monáe [official video].mp3
[2012-07-20 18:17:21 | 002,617,265 | ---- | C] () -- C:\Documents and Settings\Einstain\Moje dokumenty\Wijka.png
[2012-07-12 21:35:25 | 000,001,144 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-746137067-1177238915-1417001333-1006UA.job
[2012-07-12 21:35:23 | 000,001,092 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-746137067-1177238915-1417001333-1006Core.job
[2012-07-12 19:51:22 | 000,000,730 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Mozilla Firefox.lnk
[2012-07-05 19:47:15 | 000,001,164 | ---- | C] () -- C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-746137067-1177238915-1417001333-1006UA.job
[2012-07-05 19:47:15 | 000,001,142 | ---- | C] () -- C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-746137067-1177238915-1417001333-1006Core.job
[2012-07-05 19:26:06 | 000,002,265 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk
[2012-07-05 12:34:53 | 000,001,718 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\amcap.lnk
[2012-07-02 19:49:00 | 000,094,977 | ---- | C] () -- C:\Documents and Settings\Einstain\Pulpit\Ania2.JPG
[2012-07-02 19:47:52 | 000,069,910 | ---- | C] () -- C:\Documents and Settings\Einstain\Pulpit\Ania.JPG
[2012-06-19 19:44:43 | 000,145,412 | R-S- | C] () -- C:\Documents and Settings\Einstain\Ustawienia lokalne\Dane aplikacji\lfbbnf.exe
[2012-03-27 20:51:13 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Einstain\_DSC7999.JPG
[2012-03-27 20:48:41 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Einstain\_DSC7672.JPG
[2012-01-04 21:26:24 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Einstain\DSC08714.JPG
[2012-01-04 21:26:22 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Einstain\DSC08713.JPG
[2012-01-04 21:26:19 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Einstain\DSC08712.JPG
[2011-12-23 19:01:55 | 000,000,044 | -H-- | C] () -- C:\WINDOWS\System32\lxearwrd.ini
[2011-12-23 19:01:54 | 000,331,776 | ---- | C] () -- C:\WINDOWS\System32\LXEAinst.dll
[2011-12-23 19:01:51 | 000,372,736 | ---- | C] ( ) -- C:\WINDOWS\System32\lxeacomm.dll
[2011-12-23 19:00:49 | 000,299,008 | R--- | C] () -- C:\WINDOWS\System32\lxeasm.dll
[2011-12-23 19:00:49 | 000,024,576 | R--- | C] () -- C:\WINDOWS\System32\lxeasmr.dll
[2011-12-23 19:00:43 | 000,356,352 | R--- | C] ( ) -- C:\WINDOWS\System32\lxeahcp.dll
[2011-12-23 19:00:42 | 000,442,368 | R--- | C] ( ) -- C:\WINDOWS\System32\lxeacoin.dll
[2011-10-29 22:41:22 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Einstain\ja7.JPG
[2011-10-29 22:40:40 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Einstain\ja1.jpg
[2011-10-29 22:40:32 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Einstain\ja2.jpg
[2011-10-29 22:40:23 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Einstain\ja3.jpg
[2011-10-29 22:40:14 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Einstain\ja4.jpg
[2011-10-29 22:40:05 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Einstain\ja5.JPG
[2011-10-29 22:39:56 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Einstain\ja6.JPG
[2011-07-21 13:11:14 | 000,000,060 | ---- | C] () -- C:\WINDOWS\SIERRA.INI
[2011-07-21 13:10:42 | 000,000,043 | ---- | C] () -- C:\WINDOWS\KA.INI
[2011-06-20 18:36:17 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Einstain\100_5431.JPG
[2011-06-07 20:46:26 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Einstain\Zdjęcie0011.jpg
[2011-06-07 20:46:24 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Einstain\Zdjęcie0010.jpg
[2011-06-07 20:46:22 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Einstain\Zdjęcie0009.jpg
[2011-06-07 20:03:18 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Einstain\31032011755.jpg
[2011-06-07 20:03:06 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Einstain\31032011758.jpg
[2011-03-25 12:25:50 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2011-01-30 00:52:39 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Einstain\37798_1239183117961_1780786019_479092_3494175_n[1].jpg
[2011-01-10 22:54:25 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Einstain\CC46EF60.jpg.gif
[2010-12-28 21:22:46 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Einstain\03-armin_van_buuren_feat._christian_burns-this_light_between_us by Forest club-nation.eu.mp3
[2010-12-28 21:19:50 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Einstain\Armin Van Buuren - Communication (DJ Tiesto Mix).mp3
[2010-12-28 21:18:41 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Einstain\A State of Trance - 186 - Armin Van Buuren - Live @ ID&T radio - [03.03.2005].mp3
[2010-11-06 19:07:48 | 000,002,150 | ---- | C] () -- C:\Documents and Settings\Einstain\.recently-used.xbel
[2010-08-19 23:08:41 | 000,093,184 | RHS- | C] () -- C:\WINDOWS\System32\nmdfgds1.dll
[2010-08-18 16:58:37 | 000,104,239 | RHS- | C] () -- C:\WINDOWS\System32\olhrwef.exe
[2010-08-18 16:58:37 | 000,093,184 | RHS- | C] () -- C:\WINDOWS\System32\nmdfgds0.dll
[2010-02-15 15:04:00 | 000,076,800 | ---- | C] () -- C:\Documents and Settings\Einstain\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2012-07-30 22:27:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\6F63A58BD2E99EE3F6D9404281CB3EF3
[2010-02-10 00:57:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AlawarWrapper
[2009-06-12 13:45:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ashampoo
[2012-06-26 14:13:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Babylon
[2009-10-29 22:28:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite
[2009-06-12 18:57:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Electronic Arts
[2009-12-29 20:06:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\FarmFrenzy2
[2010-11-29 16:46:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\FarmFrenzy3
[2012-04-30 20:19:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\FileOpen
[2012-05-06 14:15:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Firefly Studios
[2010-08-31 14:10:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10
[2009-07-28 18:58:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Installations
[2012-06-06 20:33:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla
[2012-03-15 21:26:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Lexmark S300-S400 Series
[2010-10-02 00:35:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM
[2009-10-02 21:14:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Suite
[2010-06-07 22:05:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PopCap Games
[2010-05-25 14:02:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\QuestService
[2012-03-04 10:07:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\RDRM
[2009-12-03 23:21:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{09E43F98-1DEA-4220-AB2B-AB6AD067E5D3}
[2010-05-19 21:23:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Einstain\Dane aplikacji\Ashampoo
[2012-06-26 14:13:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Einstain\Dane aplikacji\Babylon
[2012-07-02 16:54:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Einstain\Dane aplikacji\BabylonToolbar
[2010-12-18 14:00:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Einstain\Dane aplikacji\DAEMON Tools Lite
[2010-04-11 20:41:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Einstain\Dane aplikacji\Flock
[2012-04-25 22:32:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Einstain\Dane aplikacji\Gadu-Gadu 10
[2011-12-24 21:34:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Einstain\Dane aplikacji\GetRightToGo
[2012-07-31 10:25:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Einstain\Dane aplikacji\ipla
[2010-07-23 00:04:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Einstain\Dane aplikacji\Nowe Gadu-Gadu
[2010-05-16 13:12:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Einstain\Dane aplikacji\OpenFM
[2011-04-19 16:35:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Einstain\Dane aplikacji\Opera
[2012-07-07 15:20:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Einstain\Dane aplikacji\Oracle
[2010-08-31 21:38:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Einstain\Dane aplikacji\PC Suite
[2012-07-05 15:32:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Einstain\Dane aplikacji\PriceGong
[2011-03-25 12:26:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Einstain\Dane aplikacji\RDRM
[2012-07-30 23:01:00 | 000,001,142 | ---- | M] () -- C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-746137067-1177238915-1417001333-1006Core.job
[2012-07-31 11:01:00 | 000,001,164 | ---- | M] () -- C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-746137067-1177238915-1417001333-1006UA.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 

< End of report >