OTL logfile created on: 2012-08-02 07:57:35 - Run 1
OTL by OldTimer - Version 3.2.55.0     Folder = F:\
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
2,96 Gb Total Physical Memory | 2,72 Gb Available Physical Memory | 91,85% Memory free
4,81 Gb Paging File | 4,75 Gb Available in Paging File | 98,75% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 97,65 Gb Total Space | 83,32 Gb Free Space | 85,32% Space Free | Partition Type: NTFS
Drive D: | 199,35 Gb Total Space | 176,20 Gb Free Space | 88,39% Space Free | Partition Type: NTFS
Drive F: | 7,45 Gb Total Space | 0,03 Gb Free Space | 0,34% Space Free | Partition Type: FAT32
 
Computer Name: PC-E219E4E7C089 | User Name: pc | Logged in as Administrator.
Boot Mode: SafeMode | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-07-30 13:04:08 | 000,597,504 | ---- | M] (OldTimer Tools) -- F:\OTL.exe
PRC - [2010-01-17 22:37:16 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2010-01-17 22:37:16 | 000,026,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\userinit.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2009-02-27 20:04:20 | 000,311,296 | ---- | M] () -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\pdfshell.POL
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - [2012-07-18 10:55:37 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2011-10-02 22:00:24 | 000,246,112 | ---- | M] () [Auto | Stopped] -- C:\Program Files\PLAY ONLINE\UpdateDog\ouc.exe -- (PLAY ONLINE. RunOuc)
SRV - [2011-03-14 17:27:28 | 000,271,712 | ---- | M] () [Auto | Stopped] -- C:\Documents and Settings\All Users\Dane aplikacji\DatacardService\HWDeviceService.exe -- (HWDeviceService.exe)
SRV - [2010-02-16 15:14:32 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010-02-11 17:59:31 | 000,552,064 | ---- | M] (Eset ) [Auto | Stopped] -- C:\Program Files\ESET\nod32krn.exe -- (NOD32krn)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\Rts5161ccid.sys -- (USBCCID)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\Rts516xIR.sys -- (Rts516xIR)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\Drivers\RTS5121.sys -- (RSUSBSTOR)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)
DRV - File not found [Kernel | Boot | Stopped] --  -- (mv91xx)
DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] --  -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] --  -- (Changer)
DRV - [2011-10-02 22:00:31 | 000,102,784 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ew_hwusbdev.sys -- (ew_hwusbdev)
DRV - [2011-10-02 22:00:31 | 000,073,216 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ew_jubusenum.sys -- (huawei_enumerator)
DRV - [2011-10-02 22:00:30 | 000,235,392 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ewusbnet.sys -- (ewusbnet)
DRV - [2011-10-02 22:00:30 | 000,194,816 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2010-02-11 17:59:32 | 000,512,096 | ---- | M] (Eset ) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\amon.sys -- (AMON)
DRV - [2010-02-11 17:59:31 | 000,015,424 | ---- | M] () [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\nod32drv.sys -- (nod32drv)
DRV - [2010-01-17 22:37:16 | 000,215,856 | ---- | M] (Silicon Image, Inc) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\Si3132r5.sys -- (Si3132r5)
DRV - [2010-01-17 22:37:16 | 000,212,520 | ---- | M] (Silicon Image, Inc) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\Si3531.sys -- (Si3531)
DRV - [2010-01-17 22:37:16 | 000,195,072 | ---- | M] (Silicon Image, Inc) [Kernel | Boot | Stopped] -- C:\WINDOWS\System32\drivers\Si3114r5.sys -- (Si3114r5)
DRV - [2010-01-17 22:37:16 | 000,074,672 | ---- | M] (Silicon Image, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\si3132.sys -- (Si3132)
DRV - [2010-01-17 22:37:16 | 000,069,248 | ---- | M] (Silicon Image, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\si3124.sys -- (Si3124)
DRV - [2010-01-17 22:37:16 | 000,062,336 | ---- | M] (Silicon Image, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\si3112.sys -- (Si3112)
DRV - [2009-06-25 23:12:18 | 001,168,880 | ---- | M] (Bison Electronics. Inc. ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\BisonC07.sys -- (Cam5607)
DRV - [2009-04-23 11:54:36 | 000,814,592 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CHDAU32.sys -- (CnxtHdAudService)
DRV - [2008-10-23 14:49:18 | 000,187,392 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\b57xp32.sys -- (b57w2k)
DRV - [2008-09-10 20:14:48 | 001,386,624 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\BCMWL5.SYS -- (BCM43XX)
DRV - [2008-03-14 22:23:12 | 000,169,008 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Apfiltr.sys -- (ApfiltrService)
DRV - [2008-01-11 15:58:42 | 000,009,472 | ---- | M] (Lenovo Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AcpiVpc.sys -- (ACPIVPC)
DRV - [2007-12-10 13:21:26 | 000,539,640 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btaudio.sys -- (btaudio)
DRV - [2007-11-27 16:40:38 | 000,074,688 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB)
DRV - [2007-11-21 11:51:30 | 000,879,624 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL)
DRV - [2007-06-29 12:38:30 | 000,156,392 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btwdndis.sys -- (BTWDNDIS)
DRV - [2007-03-31 13:02:40 | 000,055,352 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btwhid.sys -- (btwhid)
DRV - [2007-03-23 10:50:08 | 000,037,424 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btport.sys -- (BTDriver)
DRV - [2006-11-02 17:51:58 | 000,013,560 | ---- | M] (Cyberlink Corp.) [Kernel | Auto | Stopped] -- C:\Program Files\CyberLink\PowerDVD\000.fcl -- ({95808DC4-FA4A-4c74-92FE-5B863F82066B})
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
 
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.startup.homepage: "http://www.onet.pl/"
FF - prefs.js..extensions.enabledItems: {B13721C7-F507-4982-B2E5-502A71474FED}:3.3.0.3971
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60129.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.69: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.69: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-07-18 10:55:38 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-03-31 20:12:22 | 000,000,000 | ---D | M]
 
[2010-02-10 22:02:21 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\pc\Dane aplikacji\Mozilla\Extensions
[2012-05-04 17:53:01 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\pc\Dane aplikacji\Mozilla\Firefox\Profiles\fjsgh42z.default\extensions
[2012-03-29 00:06:34 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012-07-18 10:55:38 | 000,136,672 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012-06-24 10:39:42 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2012-06-24 10:39:42 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2012-06-24 10:39:42 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2012-06-24 10:39:42 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2012-06-24 10:39:42 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2012-06-24 10:39:42 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2010-01-17 22:37:16 | 000,000,775 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: 127.0.0.1	mpa.one.microsoft.com
O4 - HKLM..\Run: [BisonMnt] C:\WINDOWS\BisonC07\BisonM07.exe ()
O4 - HKLM..\Run: [Energy Management] C:\Program Files\Lenovo\Energy Management\Energy Management.exe (Lenovo (Beijing) Limited)
O4 - HKLM..\Run: [EnergyUtility] C:\Program Files\Lenovo\Energy Management\utility.exe (Lenovo(Beijing)Limited)
O4 - HKLM..\Run: [nod32kui] C:\Program Files\Eset\nod32kui.exe (Eset )
O4 - HKLM..\Run: [UpdateReminder] C:\Program Files\ESET\UpdateReminder.exe (ESET, spol. s r.o.)
O4 - HKLM..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u File not found
O4 - HKLM..\Run: [varotwpmdqvnbmu] C:\Documents and Settings\All Users\Dane aplikacji\varotwpm.exe ()
O4 - HKCU..\Run: [Gadu-Gadu 10] C:\Program Files\Gadu-Gadu 10\gg.exe (GG Network S.A.)
O4 - HKCU..\Run: [IPLA!] C:\Program Files\ipla\ipla.exe (Redefine Sp z o.o.)
O4 - HKCU..\Run: [varotwpmdqvnbmu] C:\Documents and Settings\All Users\Dane aplikacji\varotwpm.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\BTTray.lnk = C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Camera Monitor SD.lnk = C:\Program Files\PIXELA\Everio MediaBrowser\MBCameraMonitor.exe (PIXELA CORPORATION)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Wyślij do interfejsu Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O8 - Extra context menu item: Wyślij do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Computer, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\WINDOWS\System32\imon.dll (Eset )
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\WINDOWS\System32\imon.dll (Eset )
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\WINDOWS\System32\imon.dll (Eset )
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\System32\imon.dll (Eset )
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\System32\imon.dll (Eset )
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\WINDOWS\System32\imon.dll (Eset )
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 89.108.202.21 89.108.195.21
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{770D74F4-7F01-40BF-A057-86B6342C1F63}: DhcpNameServer = 89.108.202.21 89.108.195.21
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\pc\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\pc\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010-02-11 03:51:05 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{152783da-7fb4-11df-850b-00265edbc6e8}\Shell - "" = AutoRun
O33 - MountPoints2\{152783da-7fb4-11df-850b-00265edbc6e8}\Shell\AutoRun\command - "" = H:\LaunchU3.exe -a
O33 - MountPoints2\{318347be-f78e-11e0-862f-00265edbc6e8}\Shell - "" = AutoRun
O33 - MountPoints2\{318347be-f78e-11e0-862f-00265edbc6e8}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{3404f02e-ed33-11e0-8627-00265edbc6e8}\Shell - "" = AutoRun
O33 - MountPoints2\{3404f02e-ed33-11e0-8627-00265edbc6e8}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{39441f36-ed30-11e0-8625-00265edbc6e8}\Shell - "" = AutoRun
O33 - MountPoints2\{39441f36-ed30-11e0-8625-00265edbc6e8}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{53f608e8-9600-11e1-8717-0c607699f922}\Shell - "" = AutoRun
O33 - MountPoints2\{53f608e8-9600-11e1-8717-0c607699f922}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{690e682c-5594-11e0-85b2-00265edbc6e8}\Shell - "" = AutoRun
O33 - MountPoints2\{690e682c-5594-11e0-85b2-00265edbc6e8}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{7d1cedf4-c311-11df-8549-00265edbc6e8}\Shell - "" = AutoRun
O33 - MountPoints2\{7d1cedf4-c311-11df-8549-00265edbc6e8}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{b36b5593-1a5b-11df-8450-00265edbc6e8}\Shell - "" = AutoRun
O33 - MountPoints2\{b36b5593-1a5b-11df-8450-00265edbc6e8}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{b36b5594-1a5b-11df-8450-00265edbc6e8}\Shell - "" = AutoRun
O33 - MountPoints2\{b36b5594-1a5b-11df-8450-00265edbc6e8}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{efb8b71c-1a51-11df-844f-00265edbc6e8}\Shell - "" = AutoRun
O33 - MountPoints2\{efb8b71c-1a51-11df-844f-00265edbc6e8}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{efb8b71f-1a51-11df-844f-00265edbc6e8}\Shell - "" = AutoRun
O33 - MountPoints2\{efb8b71f-1a51-11df-844f-00265edbc6e8}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{efb8b722-1a51-11df-844f-00265edbc6e8}\Shell - "" = AutoRun
O33 - MountPoints2\{efb8b722-1a51-11df-844f-00265edbc6e8}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{efb8b723-1a51-11df-844f-00265edbc6e8}\Shell - "" = AutoRun
O33 - MountPoints2\{efb8b723-1a51-11df-844f-00265edbc6e8}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012-08-01 23:52:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\qnlwbjxudlomiit
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012-08-02 07:56:53 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012-08-02 00:01:53 | 000,451,802 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2012-08-02 00:01:53 | 000,395,534 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012-08-02 00:01:53 | 000,075,904 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2012-08-02 00:01:53 | 000,059,774 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012-08-01 23:52:22 | 000,000,051 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\xfhnqovzzcxrhfb
[2012-08-01 23:52:04 | 000,061,440 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\varotwpm.exe
[2012-08-01 23:52:04 | 000,061,440 | ---- | M] () -- C:\Documents and Settings\pc\ms.exe
[2012-08-01 23:52:04 | 000,061,440 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\eyiqlatx.exe
[2012-08-01 23:52:04 | 000,061,440 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\bggfniuz.exe
[2012-08-01 00:19:03 | 000,000,012 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\ReminderNextRun
[2012-08-01 00:18:44 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012-07-27 16:46:16 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012-07-21 09:58:05 | 002,943,050 | ---- | M] () -- C:\Documents and Settings\pc\Pulpit\Sebastian Ingrosso - Calling -Lose My Mind- -zvukoff.ru-.mp3
[2012-07-18 10:57:00 | 003,349,556 | ---- | M] () -- C:\Documents and Settings\pc\Pulpit\Krzysztof Krawczyk amp- Bohdan Smole- - Dziewczyny ktlre mam na my-li  .mp3
[2012-07-18 09:16:00 | 004,212,192 | ---- | M] () -- C:\Documents and Settings\pc\Pulpit\Stachurski - Bez ko-ca  .mp3
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012-08-01 23:52:22 | 000,061,440 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\varotwpm.exe
[2012-08-01 23:52:21 | 000,061,440 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\eyiqlatx.exe
[2012-08-01 23:52:05 | 000,061,440 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\bggfniuz.exe
[2012-08-01 23:52:05 | 000,000,051 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\xfhnqovzzcxrhfb
[2012-08-01 23:52:03 | 000,061,440 | ---- | C] () -- C:\Documents and Settings\pc\ms.exe
[2012-07-27 10:36:08 | 004,212,192 | ---- | C] () -- C:\Documents and Settings\pc\Pulpit\Stachurski - Bez ko-ca  .mp3
[2012-07-23 19:52:54 | 003,349,556 | ---- | C] () -- C:\Documents and Settings\pc\Pulpit\Krzysztof Krawczyk amp- Bohdan Smole- - Dziewczyny ktlre mam na my-li  .mp3
[2012-07-22 03:13:24 | 002,943,050 | ---- | C] () -- C:\Documents and Settings\pc\Pulpit\Sebastian Ingrosso - Calling -Lose My Mind- -zvukoff.ru-.mp3
[2011-07-18 23:17:24 | 000,000,012 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\ReminderNextRun
[2010-09-15 23:07:19 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2010-02-17 20:44:53 | 000,001,755 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\QTSBandwidthCache
[2010-02-16 17:50:41 | 000,000,022 | ---- | C] () -- C:\Documents and Settings\pc\Ustawienia lokalne\Dane aplikacji\kodakpcd.ini
[2010-02-15 19:46:34 | 000,007,168 | ---- | C] () -- C:\Documents and Settings\pc\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

< End of report >