OTL logfile created on: 2010-11-18 00:23:49 - Run 2
OTL by OldTimer - Version 3.2.17.3     Folder = C:\Documents and Settings\Prezes\Pulpit
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
511,00 Mb Total Physical Memory | 115,00 Mb Available Physical Memory | 22,00% Memory free
1,00 Gb Paging File | 1,00 Gb Available in Paging File | 55,00% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 17,95 Gb Total Space | 4,97 Gb Free Space | 27,70% Space Free | Partition Type: NTFS
Drive D: | 37,31 Gb Total Space | 17,14 Gb Free Space | 45,95% Space Free | Partition Type: NTFS
Drive F: | 9,77 Gb Total Space | 1,23 Gb Free Space | 12,55% Space Free | Partition Type: NTFS
Drive G: | 29,29 Gb Total Space | 0,03 Gb Free Space | 0,10% Space Free | Partition Type: NTFS
Drive H: | 18,20 Gb Total Space | 1,66 Gb Free Space | 9,13% Space Free | Partition Type: NTFS
Drive K: | 7,50 Gb Total Space | 7,29 Gb Free Space | 97,13% Space Free | Partition Type: FAT32
 
Computer Name: PREZESXP | User Name: Prezes | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2010-11-13 08:15:21 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Prezes\Pulpit\OTL.exe
PRC - [2010-07-05 13:43:41 | 000,908,248 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2010-06-18 18:38:22 | 000,619,800 | ---- | M] (http://tortoisesvn.net) -- C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
PRC - [2009-12-31 00:24:34 | 000,703,488 | ---- | M] (FileZilla Project) -- C:\Program Files\FileZilla Server\FileZilla server.exe
PRC - [2009-12-05 19:33:55 | 011,940,528 | ---- | M] (Mozilla Messaging) -- C:\Program Files\Mozilla Thunderbird\thunderbird.exe
PRC - [2009-11-25 00:51:40 | 000,081,000 | ---- | M] (ALWIL Software) -- C:\Program Files\Avast4\ashDisp.exe
PRC - [2009-11-25 00:51:35 | 000,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Avast4\ashServ.exe
PRC - [2009-11-25 00:48:48 | 000,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Avast4\ashWebSv.exe
PRC - [2009-11-25 00:43:56 | 000,018,752 | ---- | M] (ALWIL Software) -- C:\Program Files\Avast4\aswUpdSv.exe
PRC - [2009-06-15 14:32:18 | 002,514,944 | ---- | M] (INTERIA.PL S.A.) -- C:\Program Files\INTERIAPL\Stefan\Stefan.exe
PRC - [2008-04-14 23:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2004-12-14 01:12:02 | 000,483,328 | ---- | M] (Adobe Systems Inc.) -- D:\Program Files\Adobe\Acrobat 7.0\Distillr\acrotray.exe
PRC - [2000-05-20 16:58:02 | 000,065,536 | ---- | M] (E-Color, Inc. formerly Sonnetech Ltd.) -- C:\Program Files\ViewSonicColor\Colorific\hgcctl95.exe
PRC - [2000-03-06 12:19:32 | 000,221,184 | ---- | M] (E-Color, Inc.) -- C:\Program Files\ViewSonicColor\True Internet Color\TICIcon.exe
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - [2010-11-13 08:15:21 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Prezes\Pulpit\OTL.exe
MOD - [2009-06-15 14:32:18 | 000,004,096 | ---- | M] (Scott Seligman <scott@scottandmichelle.net>) -- C:\Program Files\INTERIAPL\Stefan\lib\SimHook.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [Disabled | Stopped] -- C:\WINDOWS\System32\hidserv.dll -- (HidServ)
SRV - [2009-12-31 00:24:34 | 000,703,488 | ---- | M] (FileZilla Project) [Auto | Running] -- C:\Program Files\FileZilla Server\FileZilla Server.exe -- (FileZilla Server)
SRV - [2009-11-25 00:51:35 | 000,138,680 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Avast4\ashServ.exe -- (avast! Antivirus)
SRV - [2009-11-25 00:51:21 | 000,254,040 | ---- | M] (ALWIL Software) [On_Demand | Stopped] -- C:\Program Files\Avast4\ashMaiSv.exe -- (avast! Mail Scanner)
SRV - [2009-11-25 00:48:48 | 000,352,920 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Avast4\ashWebSv.exe -- (avast! Web Scanner)
SRV - [2009-11-25 00:43:56 | 000,018,752 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Avast4\aswUpdSv.exe -- (aswUpdSv)
SRV - [2009-10-20 19:19:48 | 000,117,264 | ---- | M] (CACE Technologies, Inc.) [On_Demand | Stopped] -- C:\Program Files\WinPcap\rpcapd.exe -- (rpcapd) Remote Packet Capture Protocol v.0 (experimental)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2010-04-12 20:59:51 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2009-12-27 01:00:08 | 000,011,936 | ---- | M] (Highresolution Enterprises [www.highrez.co.uk]) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\inpout32.sys -- (inpout32)
DRV - [2009-11-25 00:50:59 | 000,094,160 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2009-11-25 00:50:12 | 000,114,768 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2009-11-25 00:50:00 | 000,020,560 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2009-11-25 00:49:07 | 000,048,560 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2009-11-25 00:48:57 | 000,023,120 | ---- | M] (ALWIL Software) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2009-11-25 00:47:54 | 000,027,408 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2009-11-19 14:33:20 | 000,051,200 | ---- | M] (Prolific Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ser2pl.sys -- (Ser2pl)
DRV - [2009-10-22 15:11:14 | 000,057,800 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ftdibus.sys -- (FTDIBUS)
DRV - [2009-10-22 15:09:34 | 000,072,520 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ftser2k.sys -- (FTSER2K)
DRV - [2009-10-20 19:19:44 | 000,050,704 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\npf.sys -- (NPF)
DRV - [2009-03-05 17:59:32 | 000,005,248 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\giveio.sys -- (giveio)
DRV - [2009-02-28 15:35:40 | 000,028,672 | ---- | M] (http://libusb-win32.sourceforge.net) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\libusb0.sys -- (libusb0)
DRV - [2008-12-18 12:44:49 | 000,097,792 | ---- | M] (T0r0 & Tecar Forum 2009) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\NSHE.SYS -- (NSHE)
DRV - [2008-04-14 01:15:14 | 000,060,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\USBAUDIO.sys -- (usbaudio) Sterownik audio USB (WDM)
DRV - [2008-04-14 01:10:32 | 000,096,512 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\atapi.sys -- (atapi)
DRV - [2008-04-13 23:15:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2008-04-13 23:05:30 | 000,036,224 | ---- | M] (ADMtek Incorporated.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\an983.sys -- (AN983)
DRV - [2008-04-13 23:04:32 | 001,897,408 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2007-05-11 02:10:50 | 000,034,704 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\blueletaudio.sys -- (BlueletAudio)
DRV - [2007-05-09 00:59:40 | 000,036,496 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btcusb.sys -- (Btcsrusb)
DRV - [2007-03-05 05:00:04 | 000,027,792 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\BlueletSCOAudio.sys -- (BlueletSCOAudio)
DRV - [2007-03-05 04:59:04 | 000,018,320 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btnetdrv.sys -- (BT)
DRV - [2007-03-05 04:56:18 | 000,035,600 | ---- | M] (IVT Corporation.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\BTHidMgr.sys -- (BTHidMgr)
DRV - [2007-03-05 04:55:12 | 000,020,880 | ---- | M] (IVT Corporation.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\vbtenum.sys -- (BTHidEnum)
DRV - [2007-03-05 04:53:18 | 000,044,304 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\VcommMgr.sys -- (VcommMgr)
DRV - [2007-03-05 04:52:18 | 000,034,448 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\VComm.sys -- (VComm)
DRV - [2005-08-18 00:00:00 | 000,007,168 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files\EVEREST Home Edition\kerneld.wnt -- (EverestDriver)
DRV - [2005-07-28 07:18:40 | 000,685,056 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\hardlock.sys -- (Hardlock)
DRV - [2004-04-30 08:37:02 | 000,160,640 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\a347bus.sys -- (a347bus)
DRV - [2004-04-30 08:33:00 | 000,005,248 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\a347scsi.sys -- (a347scsi)
DRV - [2002-12-10 11:53:24 | 000,236,121 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CamDrL21.sys -- (PhilCam8116) Logitech QuickCam Pro 3000(PID_08B0)
DRV - [2002-05-31 02:21:32 | 001,152,916 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\sbext.sys -- (sbext)
DRV - [2002-05-01 07:33:44 | 000,378,314 | R--- | M] (C-Media Inc) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\cmaudio.sys -- (cmpci) C-Media PCI Audio Driver (WDM)
DRV - [2001-08-17 21:14:24 | 000,444,416 | ---- | M] (AVM GmbH) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\fpcibase.sys -- (fpcibase)
DRV - [2001-08-17 21:13:48 | 000,037,568 | ---- | M] (AVM GmbH) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\avmwan.sys -- (AVMWAN)
DRV - [1999-12-17 02:00:00 | 000,006,752 | ---- | M] (Creative Technology Ltd.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\PFMODNT.SYS -- (PfModNT)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-1409082233-527237240-1644491937-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.update: false
FF - prefs.js..browser.startup.homepage: "interia.pl"
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2.2
 
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.10\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-09-22 22:55:14 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.10\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010-09-10 23:11:10 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.0\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2009-12-29 16:27:43 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.0\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins
 
[2009-12-29 16:27:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Prezes\Dane aplikacji\Mozilla\Extensions
[2009-12-29 16:27:46 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Prezes\Dane aplikacji\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2010-09-30 19:38:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Prezes\Dane aplikacji\Mozilla\Firefox\Profiles\cd3uw3r3.default\extensions
[2010-09-27 16:53:47 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\Prezes\Dane aplikacji\Mozilla\Firefox\Profiles\cd3uw3r3.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010-09-27 16:53:55 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2010-07-05 13:43:53 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml
[2010-07-05 13:43:53 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml
[2010-07-05 13:43:53 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml
[2010-07-05 13:43:53 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml
[2010-07-05 13:43:53 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml
[2010-07-05 13:43:53 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2001-10-26 19:45:16 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (AcroIEToolbarHelper Class) - {AE7CD045-E861-484f-8273-0445EE161910} - D:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - D:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKU\S-1-5-21-1409082233-527237240-1644491937-1003\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - D:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Acrobat Assistant 7.0] D:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe (Adobe Systems Inc.)
O4 - HKLM..\Run: [AudCtrl] C:\WINDOWS\System32\AudCtrl.dll ()
O4 - HKLM..\Run: [avast!] C:\Program Files\Avast4\ashDisp.exe (ALWIL Software)
O4 - HKLM..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb06.exe (HP)
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [UpdReg] C:\WINDOWS\Updreg.EXE (Creative Technology Ltd.)
O4 - HKU\S-1-5-21-1409082233-527237240-1644491937-1003..\Run: [ALLUpdate] C:\Program Files\ALLPlayer\ALLUpdate.exe ()
O4 - HKU\S-1-5-21-1409082233-527237240-1644491937-1003..\Run: [Komunikator] C:\Program Files\Tlen.pl\tlen.exe File not found
O4 - HKU\S-1-5-21-1409082233-527237240-1644491937-1003..\Run: [Stefan] C:\Program Files\INTERIAPL\Stefan\Stefan.exe (INTERIA.PL S.A.)
O4 - HKU\.DEFAULT..\RunOnce: [nltide_2]  File not found
O4 - HKU\S-1-5-18..\RunOnce: [nltide_2]  File not found
O4 - HKU\S-1-5-19..\RunOnce: [nltide_2]  File not found
O4 - HKU\S-1-5-20..\RunOnce: [nltide_2]  File not found
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Acrobat Speed Launcher.lnk = C:\WINDOWS\Installer\{AC76BA86-1033-0000-7760-000000000002}\SC_Acrobat.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Colorific.lnk = C:\Program Files\ViewSonicColor\Colorific\hgcctl95.exe (E-Color, Inc. formerly Sonnetech Ltd.)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\SonnReg.lnk = C:\Program Files\ViewSonicColor\Registration\SonnReg.exe (E-Color, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\True Internet Color Icon.lnk = C:\Program Files\ViewSonicColor\True Internet Color\TICIcon.exe (E-Color, Inc.)
O4 - Startup: C:\Documents and Settings\Prezes\Menu Start\Programy\Autostart\restart_vs.lnk = D:\Viewsonic.exe File not found
O4 - Startup: C:\Documents and Settings\Prezes\Menu Start\Programy\Autostart\thunderbird.exe.lnk = C:\Program Files\Mozilla Thunderbird\thunderbird.exe (Mozilla Messaging)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer:  = 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = _ [binary data]
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1409082233-527237240-1644491937-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Convert link target to Adobe PDF - D:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert link target to existing PDF - D:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert selected links to Adobe PDF - D:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert selected links to existing PDF - D:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert selection to Adobe PDF - D:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert selection to existing PDF - D:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert to Adobe PDF - D:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert to existing PDF - D:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 194.204.159.1 194.204.152.34
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Prezes\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Prezes\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 0
O32 - AutoRun File - [2009-12-21 16:21:47 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2010-11-17 17:35:01 | 000,000,000 | ---D | C] -- C:\_OTL
[2010-11-16 20:53:38 | 000,000,000 | ---D | C] -- C:\UsbFix
[2010-11-16 20:53:28 | 001,219,767 | ---- | C] (El Desaparecido & C_XX) -- C:\Documents and Settings\Prezes\Pulpit\UsbFix.exe
[2010-11-13 08:15:20 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Prezes\Pulpit\OTL.exe
[2010-11-07 22:40:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Prezes\Pulpit\sharan ekstra
[2010-11-05 23:25:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Prezes\Pulpit\sharan
[2010-11-05 00:50:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Prezes\Pulpit\cabrio
[2010-11-04 00:41:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Prezes\Pulpit\tkacka
[2010-11-03 22:58:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Prezes\Pulpit\s
[2010-10-29 10:57:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Prezes\Pulpit\Nowy folder
[2010-06-03 15:40:04 | 000,160,640 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\a347bus.sys
[2010-06-03 15:40:04 | 000,005,248 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\a347scsi.sys
[2009-12-21 19:32:22 | 000,065,536 | ---- | C] ( ) -- C:\WINDOWS\System32\a3d.dll
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2010-11-17 18:29:41 | 008,405,015 | ---- | M] () -- C:\WINDOWS\TempFile
[2010-11-17 18:29:31 | 000,002,195 | ---- | M] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Acrobat Speed Launcher.lnk
[2010-11-17 18:29:27 | 000,000,266 | ---- | M] () -- C:\WINDOWS\tasks\Mozilla Thunderbird.job
[2010-11-17 18:29:26 | 000,000,312 | -HS- | M] () -- C:\WINDOWS\tasks\VMPQ.job
[2010-11-17 18:28:51 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010-11-17 18:28:46 | 536,383,488 | -HS- | M] () -- C:\hiberfil.sys
[2010-11-17 17:50:23 | 000,135,112 | ---- | M] () -- C:\Documents and Settings\Prezes\Pulpit\otlskrypt.jpg
[2010-11-16 20:53:33 | 001,219,767 | ---- | M] (El Desaparecido & C_XX) -- C:\Documents and Settings\Prezes\Pulpit\UsbFix.exe
[2010-11-15 16:14:39 | 000,192,000 | ---- | M] () -- C:\Documents and Settings\Prezes\Pulpit\netart.pdf
[2010-11-15 16:02:05 | 000,054,027 | ---- | M] () -- C:\Documents and Settings\Prezes\Pulpit\wirus3.jpg
[2010-11-13 08:25:08 | 000,172,815 | ---- | M] () -- C:\Documents and Settings\Prezes\Pulpit\wirus2.JPG
[2010-11-13 08:24:11 | 000,140,409 | ---- | M] () -- C:\Documents and Settings\Prezes\Pulpit\wirus.JPG
[2010-11-13 08:15:21 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Prezes\Pulpit\OTL.exe
[2010-11-13 00:15:57 | 000,184,519 | ---- | M] () -- C:\Documents and Settings\Prezes\Pulpit\karta_produktu.pdf
[2010-11-12 22:42:09 | 000,296,448 | ---- | M] () -- C:\Documents and Settings\Prezes\Pulpit\toy9ct7d.exe
[2010-11-12 22:42:05 | 000,288,107 | ---- | M] () -- C:\Documents and Settings\Prezes\Pulpit\gmer.zip
[2010-11-12 00:19:04 | 000,023,030 | ---- | M] () -- C:\Documents and Settings\Prezes\.recently-used.xbel
[2010-11-11 22:21:43 | 000,000,439 | ---- | M] () -- C:\WINDOWS\WINCMD.INI
[2010-11-11 04:17:29 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2010-11-09 20:53:52 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010-11-08 00:04:14 | 000,027,968 | ---- | M] () -- C:\Documents and Settings\Prezes\Pulpit\sexcylinder_silver.jpg
[2010-11-06 11:28:20 | 000,102,732 | ---- | M] () -- C:\Documents and Settings\Prezes\Pulpit\nysa.jpg
[2010-11-04 23:31:49 | 000,014,336 | ---- | M] () -- C:\Documents and Settings\Prezes\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-11-03 23:01:32 | 003,935,225 | ---- | M] () -- C:\Documents and Settings\Prezes\Pulpit\nakaz.pdf
[2010-11-03 21:55:15 | 000,004,843 | ---- | M] () -- C:\Documents and Settings\Prezes\Pulpit\FV_COPY.pdf
[2010-11-03 21:55:03 | 000,004,855 | ---- | M] () -- C:\Documents and Settings\Prezes\Pulpit\FV_ORI.pdf
[2010-11-01 23:40:37 | 000,537,326 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2010-11-01 23:40:36 | 000,479,372 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010-11-01 23:40:36 | 000,101,418 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2010-11-01 23:40:36 | 000,085,070 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2010-11-17 17:50:23 | 000,135,112 | ---- | C] () -- C:\Documents and Settings\Prezes\Pulpit\otlskrypt.jpg
[2010-11-15 16:14:37 | 000,192,000 | ---- | C] () -- C:\Documents and Settings\Prezes\Pulpit\netart.pdf
[2010-11-15 16:02:05 | 000,054,027 | ---- | C] () -- C:\Documents and Settings\Prezes\Pulpit\wirus3.jpg
[2010-11-13 08:25:08 | 000,172,815 | ---- | C] () -- C:\Documents and Settings\Prezes\Pulpit\wirus2.JPG
[2010-11-13 08:24:10 | 000,140,409 | ---- | C] () -- C:\Documents and Settings\Prezes\Pulpit\wirus.JPG
[2010-11-13 00:15:55 | 000,184,519 | ---- | C] () -- C:\Documents and Settings\Prezes\Pulpit\karta_produktu.pdf
[2010-11-12 22:42:09 | 000,296,448 | ---- | C] () -- C:\Documents and Settings\Prezes\Pulpit\toy9ct7d.exe
[2010-11-12 22:42:03 | 000,288,107 | ---- | C] () -- C:\Documents and Settings\Prezes\Pulpit\gmer.zip
[2010-11-12 00:19:04 | 000,023,030 | ---- | C] () -- C:\Documents and Settings\Prezes\.recently-used.xbel
[2010-11-08 00:04:13 | 000,027,968 | ---- | C] () -- C:\Documents and Settings\Prezes\Pulpit\sexcylinder_silver.jpg
[2010-11-07 23:21:07 | 000,140,940 | ---- | C] () -- C:\Documents and Settings\Prezes\Pulpit\P1050212_1.JPG
[2010-11-06 22:28:19 | 000,194,972 | ---- | C] () -- C:\Documents and Settings\Prezes\Pulpit\3.JPG
[2010-11-04 00:38:24 | 005,849,618 | ---- | C] () -- C:\Documents and Settings\Prezes\Pulpit\P9290773.JPG
[2010-11-03 23:37:03 | 011,971,560 | ---- | C] () -- C:\Documents and Settings\Prezes\Pulpit\SUNP0002.AVI
[2010-11-03 23:34:22 | 009,152,104 | ---- | C] () -- C:\Documents and Settings\Prezes\Pulpit\SUNP0001.AVI
[2010-11-03 23:01:21 | 003,935,225 | ---- | C] () -- C:\Documents and Settings\Prezes\Pulpit\nakaz.pdf
[2010-10-24 10:05:19 | 000,102,732 | ---- | C] () -- C:\Documents and Settings\Prezes\Pulpit\nysa.jpg
[2010-09-09 20:47:19 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2010-08-16 18:39:10 | 000,000,103 | ---- | C] () -- C:\WINDOWS\CTRec.INI
[2010-06-24 10:40:44 | 000,881,664 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2010-06-24 10:40:44 | 000,258,048 | ---- | C] () -- C:\WINDOWS\System32\libFLAC.dll
[2010-06-07 14:16:39 | 000,000,439 | ---- | C] () -- C:\WINDOWS\WINCMD.INI
[2010-05-02 15:58:37 | 000,014,336 | ---- | C] () -- C:\Documents and Settings\Prezes\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-04-26 20:27:14 | 000,000,025 | ---- | C] () -- C:\WINDOWS\mixerdef.ini
[2010-04-19 16:28:49 | 000,005,248 | ---- | C] () -- C:\WINDOWS\giveio.sys
[2010-04-19 16:14:58 | 000,005,248 | ---- | C] () -- C:\WINDOWS\System32\drivers\giveio.sys
[2010-04-12 21:08:21 | 000,001,039 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2010-04-12 20:59:49 | 000,691,696 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2010-01-19 01:48:13 | 000,001,241 | ---- | C] () -- C:\WINDOWS\SYSWIN.INI
[2009-12-21 20:34:32 | 000,011,653 | ---- | C] () -- C:\WINDOWS\System32\lvcoinst.ini
[2009-12-21 20:25:43 | 000,000,029 | ---- | C] () -- C:\WINDOWS\VSWizard.ini
[2009-12-21 19:33:16 | 000,000,231 | ---- | C] () -- C:\WINDOWS\AC3API.INI
[2009-12-21 19:32:22 | 000,047,897 | ---- | C] () -- C:\WINDOWS\System32\AudCtrl.dll
[2009-12-21 19:32:22 | 000,004,501 | ---- | C] () -- C:\WINDOWS\System32\EXTIGY.INI
[2009-12-21 19:32:16 | 000,000,196 | ---- | C] () -- C:\WINDOWS\SBWIN.INI
[2009-12-21 17:28:35 | 000,000,175 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2009-12-21 16:49:15 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2009-10-20 19:19:30 | 000,053,299 | ---- | C] () -- C:\WINDOWS\System32\pthreadVC.dll
[2008-04-14 01:10:32 | 000,096,512 | ---- | C] () -- C:\WINDOWS\System32\drivers\atapi.sys
[2003-02-26 15:47:14 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\MimicICM.dll
[1999-01-27 13:39:06 | 000,065,024 | ---- | C] () -- C:\WINDOWS\System32\indounin.dll
[1997-06-13 07:56:08 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\Iyvu9_32.dll
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2010-06-22 16:22:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Bluetooth
[2010-04-24 01:42:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Canneverbe Limited
[2010-04-12 20:58:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite
[2010-06-24 10:13:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Tlen.pl
[2010-08-17 09:29:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Viper
[2010-09-10 19:29:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Prezes\Dane aplikacji\Anything3D Corp
[2010-01-13 00:05:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Prezes\Dane aplikacji\CadSoft
[2010-04-24 01:42:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Prezes\Dane aplikacji\Canneverbe Limited
[2010-04-12 21:05:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Prezes\Dane aplikacji\DAEMON Tools Lite
[2010-01-18 20:53:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Prezes\Dane aplikacji\Dev-Cpp
[2010-09-02 22:20:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Prezes\Dane aplikacji\Drimar
[2010-11-12 00:22:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Prezes\Dane aplikacji\FileZilla
[2009-12-21 20:34:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Prezes\Dane aplikacji\FotoWire
[2010-09-24 11:30:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Prezes\Dane aplikacji\Gadu-Gadu 10
[2010-11-12 00:13:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Prezes\Dane aplikacji\gtk-2.0
[2009-12-27 00:31:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Prezes\Dane aplikacji\ICSharpCode
[2010-07-21 18:12:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Prezes\Dane aplikacji\inkscape
[2010-04-20 10:40:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Prezes\Dane aplikacji\INTERIAPL
[2010-05-07 19:32:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Prezes\Dane aplikacji\KeePass
[2010-05-30 12:29:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Prezes\Dane aplikacji\Nokia
[2009-12-21 20:02:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Prezes\Dane aplikacji\OpenOffice.org
[2010-07-02 20:04:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Prezes\Dane aplikacji\Subversion
[2009-12-29 16:27:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Prezes\Dane aplikacji\Thunderbird
[2010-09-11 09:54:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Prezes\Dane aplikacji\uTorrent
[2010-11-13 00:03:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Prezes\Dane aplikacji\XnView
[2010-11-17 18:29:26 | 000,000,312 | -HS- | M] () -- C:\WINDOWS\Tasks\VMPQ.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 9408 bytes -> C:\Documents and Settings\Prezes\Pulpit\P1050212_1.JPG:Q30lsldxJoudresxAaaqpcawXc
@Alternate Data Stream - 48 bytes -> C:\Documents and Settings\All Users\DRM:مايكروسوفت

< End of report >