OTL logfile created on: 2012-08-13 19:42:57 - Run 1
OTL by OldTimer - Version 3.2.53.1     Folder = C:\Users\Optimus\Pulpit
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
1021,77 Mb Total Physical Memory | 479,89 Mb Available Physical Memory | 46,97% Memory free
2,25 Gb Paging File | 1,89 Gb Available in Paging File | 83,98% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 174,05 Gb Total Space | 29,71 Gb Free Space | 17,07% Space Free | Partition Type: NTFS
Drive E: | 7,45 Gb Total Space | 7,39 Gb Free Space | 99,12% Space Free | Partition Type: NTFS
Drive G: | 58,84 Gb Total Space | 1,21 Gb Free Space | 2,06% Space Free | Partition Type: NTFS
 
Computer Name: WŁAŚCICIEL-PC | User Name: Optimus | Logged in as Administrator.
Boot Mode: SafeMode | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-07-07 02:47:01 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Users\Optimus\Pulpit\OTL.exe
PRC - [2011-08-12 01:38:07 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SASCore.exe
PRC - [2009-04-11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2008-01-19 09:33:11 | 000,498,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\HelpPane.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [On_Demand | Stopped] -- C:\Users\Optimus\AppData\Local\Temp\YLZRSJKDRFDERY.exe -- (YLZRSJKDRFDERY)
SRV - File not found [On_Demand | Stopped] -- C:\Users\Optimus\AppData\Local\Temp\XWEVZFDJKC.exe -- (XWEVZFDJKC)
SRV - File not found [On_Demand | Stopped] -- C:\Users\Optimus\AppData\Local\Temp\ENYXGILWAMMM.exe -- (ENYXGILWAMMM)
SRV - [2012-08-02 19:37:00 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012-07-03 18:21:29 | 000,044,808 | ---- | M] (AVAST Software) [Auto | Stopped] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2012-06-15 19:44:02 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012-06-07 19:12:14 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012-04-04 15:56:40 | 000,654,408 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2011-08-12 01:38:07 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Program Files\SUPERAntiSpyware\SASCore.exe -- (!SASCORE)
SRV - [2011-05-21 07:01:00 | 002,214,504 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2009-09-06 13:38:06 | 000,071,096 | ---- | M] () [Auto | Stopped] -- C:\Program Files\CDBurnerXP\NMSAccessU.exe -- (NMSAccessU)
SRV - [2009-01-21 14:08:06 | 001,095,560 | ---- | M] (PC Tools) [On_Demand | Stopped] -- C:\Program Files\Spyware Doctor\pctsSvc.exe -- (sdCoreService)
SRV - [2009-01-07 13:40:56 | 000,348,752 | ---- | M] (PC Tools) [On_Demand | Stopped] -- C:\Program Files\Spyware Doctor\pctsAuxs.exe -- (sdAuxService)
SRV - [2008-03-10 12:40:10 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2008-01-19 09:38:24 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | System | Stopped] -- c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{7A229DA6-A466-4D68-AE89-77627804F0B6}\MpKslb88a0d16.sys -- (MpKslb88a0d16)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\F2B1.tmp -- (MEMSWEEP2)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilDrv10822.sys -- (EraserUtilDrv10822)
DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\blbdrive.sys -- (blbdrive)
DRV - [2012-07-03 18:21:54 | 000,054,232 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2012-07-03 18:21:53 | 000,721,000 | ---- | M] (AVAST Software) [File_System | System | Stopped] -- C:\Windows\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2012-07-03 18:21:53 | 000,353,688 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2012-07-03 18:21:53 | 000,057,656 | ---- | M] (AVAST Software) [File_System | Auto | Stopped] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2012-07-03 18:21:53 | 000,035,928 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2012-07-03 18:21:53 | 000,021,256 | ---- | M] (AVAST Software) [File_System | Auto | Stopped] -- C:\Windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2012-04-04 15:56:40 | 000,022,344 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2011-07-22 18:27:02 | 000,012,880 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Stopped] -- C:\Program Files\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV)
DRV - [2011-07-12 23:55:22 | 000,067,664 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Stopped] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2011-05-21 07:01:00 | 010,589,800 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2009-12-15 01:02:00 | 000,273,728 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\V0530Vid.sys -- (V0530Dev)
DRV - [2009-11-12 14:48:56 | 000,007,168 | ---- | M] () [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\StarOpen.sys -- (StarOpen)
DRV - [2009-09-01 14:29:50 | 000,128,016 | ---- | M] (Kaspersky Lab) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\kl1.sys -- (kl1)
DRV - [2009-06-07 14:29:01 | 000,085,969 | ---- | M] (GMER) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\gmer.sys -- (gmer)
DRV - [2009-04-03 12:18:26 | 000,130,936 | ---- | M] (PC Tools) [File_System | Boot | Running] -- C:\Windows\System32\drivers\PCTCore.sys -- (PCTCore)
DRV - [2008-08-12 15:50:36 | 000,135,616 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CtClsFlt.sys -- (CtClsFlt)
DRV - [2007-06-18 15:18:26 | 000,023,680 | ---- | M] (Motorola) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\motmodem.sys -- (motmodem)
DRV - [2006-11-02 09:30:56 | 000,044,544 | ---- | M] (Realtek Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)
DRV - [2004-04-01 17:30:46 | 000,010,368 | ---- | M] (Padus, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\pfc.sys -- (pfc)
DRV - [2002-07-17 15:20:32 | 000,084,832 | ---- | M] (Adaptec) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\ASPI32.SYS -- (ASPI32)
DRV - [2002-07-17 15:20:32 | 000,084,832 | ---- | M] (Adaptec) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ASPI32.SYS -- (ASPI)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
 
 
IE - HKU\.DEFAULT\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - No CLSID value found
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - No CLSID value found
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-2042426303-485688656-2643295286-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKU\S-1-5-21-2042426303-485688656-2643295286-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.com/spbasic.htm
IE - HKU\S-1-5-21-2042426303-485688656-2643295286-1000\SOFTWARE\Microsoft\Internet Explorer\Main,start page = http://www.google.pl/
IE - HKU\S-1-5-21-2042426303-485688656-2643295286-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-2042426303-485688656-2643295286-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKU\S-1-5-21-2042426303-485688656-2643295286-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKU\S-1-5-21-2042426303-485688656-2643295286-1000\..\URLSearchHook: {0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL (Ask.com)
IE - HKU\S-1-5-21-2042426303-485688656-2643295286-1000\..\SearchScopes,DefaultScope = {29ABB7E9-A612-445F-8FFA-C37FCB7B174A}
IE - HKU\S-1-5-21-2042426303-485688656-2643295286-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-2042426303-485688656-2643295286-1000\..\SearchScopes\{29ABB7E9-A612-445F-8FFA-C37FCB7B174A}: "URL" = http://www.ask.com/web?o=14120&l=dis&q={searchTerms}
IE - HKU\S-1-5-21-2042426303-485688656-2643295286-1000\..\SearchScopes\{67ACF757-58FC-40ab-B500-2A913545A829}: "URL" = http://home.speedbit.com/search.aspx?aff=206&q={searchTerms}
IE - HKU\S-1-5-21-2042426303-485688656-2643295286-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.pl/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7GGLL_en
IE - HKU\S-1-5-21-2042426303-485688656-2643295286-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-2042426303-485688656-2643295286-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
IE - HKU\S-1-5-21-2042426303-485688656-2643295286-1007\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
IE - HKU\S-1-5-21-2042426303-485688656-2643295286-1007\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://pl.msn.com/?ocid=iehp
IE - HKU\S-1-5-21-2042426303-485688656-2643295286-1007\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = pl
IE - HKU\S-1-5-21-2042426303-485688656-2643295286-1007\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = AD 1F B3 E8 A2 D7 C9 01  [binary data]
IE - HKU\S-1-5-21-2042426303-485688656-2643295286-1007\..\URLSearchHook: *{0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2} - No CLSID value found
IE - HKU\S-1-5-21-2042426303-485688656-2643295286-1007\..\URLSearchHook: *{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - No CLSID value found
IE - HKU\S-1-5-21-2042426303-485688656-2643295286-1007\..\URLSearchHook: {0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL (Ask.com)
IE - HKU\S-1-5-21-2042426303-485688656-2643295286-1007\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKU\S-1-5-21-2042426303-485688656-2643295286-1007\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-2042426303-485688656-2643295286-1007\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.pl/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7GGLL_en
IE - HKU\S-1-5-21-2042426303-485688656-2643295286-1007\..\SearchScopes\{F1CED3F9-9020-4278-AA7D-3A9D0E90C585}: "URL" = http://us.yhs.search.yahoo.com/avg/search?fr=yhs-avg-chrome&type=yahoo_avg_hs2-tb-web_chrome_us&p={searchTerms}
IE - HKU\S-1-5-21-2042426303-485688656-2643295286-1007\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultenginename: "Yahoo! Search"
FF - prefs.js..browser.search.defaulturl: "http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&invocationType=tb50ffwinampie7&query="
FF - prefs.js..browser.search.update: false
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.google.pl/webhp?client=firefox-a&rls=org.mozilla:pl:official&channel=s&hl=pl&source=hp&lr=&btnG=Szukaj+w+Google"
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.8
FF - prefs.js..extensions.enabledItems: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1
FF - prefs.js..extensions.enabledItems: 6
FF - prefs.js..extensions.enabledItems: 2
FF - prefs.js..extensions.enabledItems: 48
FF - prefs.js..extensions.enabledItems: {0b457cAA-602d-484a-8fe7-c1d894a011ba}:0.90
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: fdm_ffext@freedownloadmanager.org:1.3.2
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: {19503e42-ca3c-4c27-b1e2-9cdb2170ee34}:1.3.0.1
FF - prefs.js..extensions.enabledItems: {5A170DD3-63CA-4c58-93B7-DE9FF536C2FF}:1.8.71
FF - prefs.js..keyword.URL: "http://home.speedbit.com/search.aspx?aff=206&q="
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_270.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.1: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1: C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.450: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKLM\Software\MozillaPlugins\@real.com/RhapsodyPlayerEngine,version=1.1: C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-07-06 12:06:31 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-06-15 19:44:05 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-08-03 12:08:31 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{A89AED22-9133-424c-88E7-C8235C5FF302}: C:\Program Files\AdVantage\{A89AED22-9133-424c-88E7-C8235C5FF302}\
FF - HKEY_CURRENT_USER\software\mozilla\Thunderbird\Extensions\\{380AE6CB-09B9-4373-B360-D01C2462A6E7}: C:\Program Files\BullGuard Ltd\BullGuard\backup\thunderbirdbkplugin
FF - HKEY_CURRENT_USER\software\mozilla\Thunderbird\Extensions\\{0E810812-F4BB-4309-942A-755587587A5E}: C:\Program Files\BullGuard Ltd\BullGuard\antispam\tbspamfilter
 
[2008-11-02 14:55:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Optimus\AppData\Roaming\mozilla\Extensions
[2012-04-04 17:19:53 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Optimus\AppData\Roaming\mozilla\Firefox\Profiles\2118uojh.default\extensions
[2011-09-29 10:59:35 | 000,000,000 | ---D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Users\Optimus\AppData\Roaming\mozilla\Firefox\Profiles\2118uojh.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2008-11-02 14:56:16 | 000,001,196 | ---- | M] () -- C:\Users\Optimus\AppData\Roaming\Mozilla\Firefox\Profiles\2118uojh.default\searchplugins\winamp-search.xml
[2012-06-15 19:44:09 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011-08-25 12:33:22 | 000,343,785 | ---- | M] () (No name found) -- C:\USERS\OPTIMUS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\2118UOJH.DEFAULT\EXTENSIONS\{19503E42-CA3C-4C27-B1E2-9CDB2170EE34}.XPI
[2011-07-02 12:56:25 | 000,608,840 | ---- | M] () (No name found) -- C:\USERS\OPTIMUS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\2118UOJH.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
[2012-06-15 19:44:04 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2010-07-12 18:33:56 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll
[2012-06-15 19:43:59 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2012-06-15 19:43:59 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2012-06-15 19:43:59 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2012-06-15 19:43:59 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2012-06-15 19:43:59 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2012-06-15 19:43:59 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\20.0.1132.47\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Java Deployment Toolkit 6.0.260.3 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U26 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll
CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit)  (Enabled) = C:\Program Files\Google\Chrome\Application\plugins\nppl3260.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\Google\Chrome\Application\plugins\nprpjplug.dll
CHR - plugin: 2007 Microsoft Office system (Enabled) = C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL
CHR - plugin: Microsoft Office Live Plug-in for Firefox (Enabled) = C:\Program Files\Microsoft\Office Live\npOLW.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\20.0.1132.47\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\20.0.1132.47\pdf.dll
CHR - plugin: Skype Toolbars (Enabled) = C:\Users\Optimus\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\npSkypeChromePlugin.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll
CHR - plugin: Winamp Application Detector (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npwachk.dll
CHR - plugin: getPlusPlus for Adobe 16248 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\np_gp.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files\Google\Picasa3\npPicasa3.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: YouTube = C:\Users\Optimus\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Szukaj w Google = C:\Users\Optimus\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: avast! WebRep = C:\Users\Optimus\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1426_0\
CHR - Extension: avast! WebRep = C:\Users\Optimus\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1456_0\
CHR - Extension: Skype Click to Call = C:\Users\Optimus\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\
CHR - Extension: Gmail = C:\Users\Optimus\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
 
O1 HOSTS File: ([2006-09-18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O2 - BHO: (Ask Search Assistant BHO) - {0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL (Ask.com)
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (FGCatchUrl) - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll (www.flashget.com)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (FDMIECookiesBHO Class) - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll ()
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (FlashGet GetFlash Class) - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll (www.flashget.com)
O3 - HKLM\..\Toolbar: (FireShot) - {6E6E744E-4D20-4ce3-9A7A-26DFFFE22F68} - C:\Users\Optimus\AppData\Roaming\Mozilla\Firefox\Profiles\2118uojh.default\extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba}\library\fsaddin-0.78.dll File not found
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKU\S-1-5-21-2042426303-485688656-2643295286-1000\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found.
O3 - HKU\S-1-5-21-2042426303-485688656-2643295286-1000\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKU\S-1-5-21-2042426303-485688656-2643295286-1000\..\Toolbar\WebBrowser: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No CLSID value found.
O3 - HKU\S-1-5-21-2042426303-485688656-2643295286-1000\..\Toolbar\WebBrowser: (no name) - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - No CLSID value found.
O3 - HKU\S-1-5-21-2042426303-485688656-2643295286-1000\..\Toolbar\WebBrowser: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - No CLSID value found.
O3 - HKU\S-1-5-21-2042426303-485688656-2643295286-1000\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKU\S-1-5-21-2042426303-485688656-2643295286-1000\..\Toolbar\WebBrowser: (no name) - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - No CLSID value found.
O3 - HKU\S-1-5-21-2042426303-485688656-2643295286-1000\..\Toolbar\WebBrowser: (no name) - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - No CLSID value found.
O3 - HKU\S-1-5-21-2042426303-485688656-2643295286-1007\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKU\S-1-5-21-2042426303-485688656-2643295286-1007\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe (CANON INC.)
O4 - HKLM..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe (CANON INC.)
O4 - HKLM..\Run: [Gene USB Monitor] C:\Windows\System32\UMonit2K.exe (General)
O4 - HKLM..\Run: [Live! Central] C:\Program Files\Creative\Creative Live! Cam\Live! Central\CTLVCentral.exe (Creative Technology Ltd.)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [OpwareSE4] C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [V0530Mon.exe] C:\Windows\V0530Mon.exe (Creative Technology Ltd.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-2042426303-485688656-2643295286-1000..\Run: [fsm]  File not found
O4 - HKU\S-1-5-21-2042426303-485688656-2643295286-1000..\Run: [Komunikator] C:\Program Files\Tlen.pl\tlen.exe File not found
O4 - HKU\S-1-5-21-2042426303-485688656-2643295286-1000..\Run: [wrznjvvoputwiwh] C:\ProgramData\wrznjvvo.exe ()
O4 - HKU\S-1-5-21-2042426303-485688656-2643295286-1007..\RunOnce: [FlashPlayerUpdate] C:\Windows\System32\Macromed\Flash\FlashUtil10b.exe (Adobe Systems, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 28
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O7 - HKU\S-1-5-21-2042426303-485688656-2643295286-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O8 - Extra context menu item: &Ściągnij przy pomocy FlashGet'a - C:\Program Files\FlashGet\JC_LINK.HTM ()
O8 - Extra context menu item: &Ściągnij wszystko przy pomocy FlashGet'a - C:\Program Files\FlashGet\JC_ALL.HTM ()
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Free YouTube Download - C:\Users\Optimus\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html File not found
O8 - Extra context menu item: Pobierz plik wideo we Free Download Manager - C:\Program Files\Free Download Manager\dlfvideo.htm ()
O8 - Extra context menu item: Pobierz w Free Download Manager - C:\Program Files\Free Download Manager\dllink.htm ()
O8 - Extra context menu item: Pobierz wszystkie pliki w Free Download Manager - C:\Program Files\Free Download Manager\dlall.htm ()
O8 - Extra context menu item: Pobierz zaznaczone w Free Download Manager - C:\Program Files\Free Download Manager\dlselected.htm ()
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2iexp.dll ()
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\flashget.exe (FlashGet.com)
O9 - Extra 'Tools' menuitem : FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\flashget.exe (FlashGet.com)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 10.5.1)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 1.6.0_03)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 10.5.1)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 95.160.170.92 88.156.222.92 82.139.8.40
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2D22B0B4-BB3B-439F-9A86-4036A8FBBE5B}: DhcpNameServer = 95.160.170.92 88.156.222.92 82.139.8.40
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - (C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL) - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O24 - Desktop WallPaper: C:\Users\Optimus\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O24 - Desktop BackupWallPaper: C:\Users\Optimus\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006-09-18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{64fe009e-07ce-11de-ba23-001617ee9869}\Shell\AutoRun\command - "" = E:\luk1ylq.com
O33 - MountPoints2\{64fe009e-07ce-11de-ba23-001617ee9869}\Shell\open\Command - "" = E:\luk1ylq.com
O33 - MountPoints2\{64fe00a4-07ce-11de-ba23-001617ee9869}\Shell\AutoRun\command - "" = F:\luk1ylq.com
O33 - MountPoints2\{64fe00a4-07ce-11de-ba23-001617ee9869}\Shell\open\Command - "" = F:\luk1ylq.com
O33 - MountPoints2\{c5763fc3-cd65-11df-aa66-001617ee9869}\Shell - "" = AutoRun
O33 - MountPoints2\{c5763fc3-cd65-11df-aa66-001617ee9869}\Shell\AutoRun\command - "" = F:\LaunchU3.exe -a
O33 - MountPoints2\{e8305084-97ec-11de-acce-001617ee9869}\Shell\AutoRun\command - "" = E:\mt2.exe
O33 - MountPoints2\{e8305084-97ec-11de-acce-001617ee9869}\Shell\open\Command - "" = E:\mt2.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012-08-13 19:42:17 | 000,595,968 | ---- | C] (OldTimer Tools) -- C:\Users\Optimus\Pulpit\OTL.exe
[2012-08-12 16:35:45 | 000,000,000 | ---D | C] -- C:\ProgramData\jcnlraniptyfvge
[2012-08-03 12:09:46 | 000,000,000 | ---D | C] -- C:\Program Files\Oracle
[2012-08-03 12:08:31 | 000,772,544 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\npDeployJava1.dll
[2012-08-03 12:08:31 | 000,227,760 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaws.exe
[2012-08-03 12:07:45 | 000,174,064 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaw.exe
[2012-08-03 12:07:45 | 000,174,064 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\java.exe
[2012-08-02 16:28:02 | 000,000,000 | ---D | C] -- C:\Users\Optimus\AppData\Local\Macromedia
[2012-08-02 16:27:03 | 000,426,184 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012-08-13 19:45:35 | 000,001,356 | ---- | M] () -- C:\Users\Optimus\AppData\Local\d3d9caps.dat
[2012-08-13 19:40:48 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012-08-13 19:39:32 | 006,291,456 | -HS- | M] () -- C:\Users\Optimus\NTUSER.DAT
[2012-08-13 19:39:32 | 000,524,288 | -HS- | M] () -- C:\Users\Optimus\NTUSER.DAT{920183db-3e61-11e0-9ded-001617ee9869}.TMContainer00000000000000000001.regtrans-ms
[2012-08-13 19:39:32 | 000,065,536 | -HS- | M] () -- C:\Users\Optimus\NTUSER.DAT{920183db-3e61-11e0-9ded-001617ee9869}.TM.blf
[2012-08-13 19:35:00 | 000,000,468 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{DBB341F3-EA9B-47D1-9942-B615F50E8A9D}.job
[2012-08-13 19:33:13 | 000,001,038 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012-08-13 19:30:54 | 000,004,032 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012-08-13 19:30:54 | 000,004,032 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012-08-13 19:30:48 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2012-08-13 19:24:29 | 001,495,264 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
[2012-08-13 19:24:29 | 000,671,902 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2012-08-13 19:24:29 | 000,595,798 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012-08-13 19:24:29 | 000,130,310 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2012-08-13 19:24:29 | 000,103,872 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012-08-13 19:20:19 | 000,001,034 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012-08-13 18:53:11 | 001,617,632 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2012-08-13 09:45:51 | 000,236,032 | ---- | M] () -- C:\Users\Optimus\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-08-12 16:42:11 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012-08-12 16:36:32 | 106,225,063 | -H-- | M] () -- C:\Users\Optimus\Pulpit\Za kulisami pizzerii.mp4
[2012-08-12 16:36:31 | 083,333,366 | -H-- | M] () -- C:\Users\Optimus\Pulpit\Konkurs.mp4
[2012-08-12 16:35:46 | 000,000,051 | ---- | M] () -- C:\ProgramData\iypsydfnrahmepa
[2012-08-12 16:35:38 | 000,053,248 | ---- | M] () -- C:\ProgramData\wrznjvvo.exe
[2012-08-12 16:35:38 | 000,053,248 | ---- | M] () -- C:\Users\Optimus\ms.exe
[2012-08-12 08:45:12 | 000,001,789 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2012-08-12 08:45:09 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt
[2012-08-11 02:28:57 | 2204,459,008 | -H-- | M] () -- C:\Users\Optimus\Pulpit\File.aspx
[2012-08-07 18:25:00 | 000,000,472 | ---- | M] () -- C:\Windows\tasks\Ad-Aware Update (Weekly).job
[2012-08-07 09:00:00 | 000,000,386 | ---- | M] () -- C:\Windows\tasks\rpc.job
[2012-08-03 12:07:09 | 000,174,064 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaw.exe
[2012-08-03 12:07:09 | 000,174,064 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\java.exe
[2012-08-02 19:36:59 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2012-08-02 19:36:58 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2012-07-26 15:17:56 | 000,001,138 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2042426303-485688656-2643295286-1003.job
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012-08-13 19:42:24 | 000,591,235 | ---- | C] () -- C:\Users\Optimus\Pulpit\adwcleaner.exe
[2012-08-12 16:35:46 | 000,053,248 | ---- | C] () -- C:\ProgramData\wrznjvvo.exe
[2012-08-12 16:35:40 | 000,000,051 | ---- | C] () -- C:\ProgramData\iypsydfnrahmepa
[2012-08-12 16:35:37 | 000,053,248 | ---- | C] () -- C:\Users\Optimus\ms.exe
[2012-08-12 16:35:10 | 106,225,063 | -H-- | C] () -- C:\Users\Optimus\Pulpit\Za kulisami pizzerii.mp4
[2012-08-12 16:34:36 | 083,333,366 | -H-- | C] () -- C:\Users\Optimus\Pulpit\Konkurs.mp4
[2012-08-11 02:26:27 | 2204,459,008 | -H-- | C] () -- C:\Users\Optimus\Pulpit\File.aspx
[2012-08-02 16:27:05 | 000,000,930 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2011-12-08 14:43:55 | 000,871,281 | ---- | C] () -- C:\Windows\System32\drivers\sfi.dat
[2011-02-22 10:56:33 | 000,524,288 | -HS- | C] () -- C:\Users\Optimus\NTUSER.DAT{920183db-3e61-11e0-9ded-001617ee9869}.TMContainer00000000000000000002.regtrans-ms
[2011-02-22 10:56:33 | 000,524,288 | -HS- | C] () -- C:\Users\Optimus\NTUSER.DAT{920183db-3e61-11e0-9ded-001617ee9869}.TMContainer00000000000000000001.regtrans-ms
[2011-02-22 10:56:32 | 000,065,536 | -HS- | C] () -- C:\Users\Optimus\NTUSER.DAT{920183db-3e61-11e0-9ded-001617ee9869}.TM.blf
[2009-03-12 10:20:22 | 000,000,020 | -HS- | C] () -- C:\Users\Optimus\ntuser.ini
[2008-03-21 15:12:05 | 000,000,266 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2008-02-01 13:02:06 | 000,022,673 | ---- | C] () -- C:\Users\Optimus\AppData\Roaming\UserTile.png
[2007-10-17 16:47:24 | 000,236,032 | ---- | C] () -- C:\Users\Optimus\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007-08-13 18:06:32 | 000,064,208 | ---- | C] () -- C:\Users\Optimus\AppData\Local\GDIPFONTCACHEV1.DAT
[2007-08-13 18:06:10 | 000,001,356 | ---- | C] () -- C:\Users\Optimus\AppData\Local\d3d9caps.dat
[2007-08-13 18:06:09 | 000,524,288 | -HS- | C] () -- C:\Users\Optimus\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000002.regtrans-ms
[2007-08-13 18:06:09 | 000,524,288 | -HS- | C] () -- C:\Users\Optimus\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms
[2007-08-13 18:06:09 | 000,065,536 | -HS- | C] () -- C:\Users\Optimus\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TM.blf
[2007-08-13 18:06:08 | 006,291,456 | -HS- | C] () -- C:\Users\Optimus\NTUSER.DAT
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2008-12-26 11:14:40 | 000,000,000 | ---D | M] -- C:\Users\Bożenna\AppData\Roaming\Expressivo
[2008-12-26 10:10:03 | 000,000,000 | ---D | M] -- C:\Users\Bożenna\AppData\Roaming\Gadu-Gadu
[2009-03-12 10:37:59 | 000,000,000 | ---D | M] -- C:\Users\Bożenna\AppData\Roaming\Nowe Gadu-Gadu
[2010-01-14 15:16:54 | 000,000,000 | ---D | M] -- C:\Users\Bożenna.Właściciel-PC\AppData\Roaming\Canneverbe_Limited
[2009-06-27 10:12:50 | 000,000,000 | ---D | M] -- C:\Users\Bożenna.Właściciel-PC\AppData\Roaming\Expressivo
[2012-05-18 16:17:51 | 000,000,000 | ---D | M] -- C:\Users\Bożenna.Właściciel-PC\AppData\Roaming\Free Download Manager
[2009-05-18 12:35:46 | 000,000,000 | ---D | M] -- C:\Users\Bożenna.Właściciel-PC\AppData\Roaming\Gadu-Gadu
[2010-06-14 22:57:25 | 000,000,000 | ---D | M] -- C:\Users\Bożenna.Właściciel-PC\AppData\Roaming\Gadu-Gadu 10
[2009-07-14 09:41:39 | 000,000,000 | ---D | M] -- C:\Users\Bożenna.Właściciel-PC\AppData\Roaming\Nowe Gadu-Gadu
[2008-09-19 17:31:14 | 000,000,000 | ---D | M] -- C:\Users\Optimus\AppData\Roaming\aAvgApi
[2012-07-11 21:02:50 | 000,000,000 | ---D | M] -- C:\Users\Optimus\AppData\Roaming\AIMP
[2010-01-08 10:39:52 | 000,000,000 | ---D | M] -- C:\Users\Optimus\AppData\Roaming\AnvSoft
[2009-11-22 19:51:14 | 000,000,000 | ---D | M] -- C:\Users\Optimus\AppData\Roaming\Any Video Converter
[2007-12-23 16:28:29 | 000,000,000 | ---D | M] -- C:\Users\Optimus\AppData\Roaming\Azureus
[2011-02-27 12:12:27 | 000,000,000 | ---D | M] -- C:\Users\Optimus\AppData\Roaming\BESTplayer
[2009-10-08 14:26:19 | 000,000,000 | ---D | M] -- C:\Users\Optimus\AppData\Roaming\Bump Technologies, Inc
[2009-12-31 10:52:50 | 000,000,000 | ---D | M] -- C:\Users\Optimus\AppData\Roaming\Canneverbe_Limited
[2007-12-22 20:03:53 | 000,000,000 | ---D | M] -- C:\Users\Optimus\AppData\Roaming\Canon
[2009-07-31 14:39:33 | 000,000,000 | ---D | M] -- C:\Users\Optimus\AppData\Roaming\ChomikBox
[2010-06-12 12:29:24 | 000,000,000 | ---D | M] -- C:\Users\Optimus\AppData\Roaming\Cool Record Edit Pro
[2011-09-29 10:59:45 | 000,000,000 | ---D | M] -- C:\Users\Optimus\AppData\Roaming\DVDVideoSoft
[2011-09-29 10:59:34 | 000,000,000 | ---D | M] -- C:\Users\Optimus\AppData\Roaming\DVDVideoSoftIEHelpers
[2007-12-22 19:11:06 | 000,000,000 | ---D | M] -- C:\Users\Optimus\AppData\Roaming\eMule
[2008-04-10 16:02:48 | 000,000,000 | ---D | M] -- C:\Users\Optimus\AppData\Roaming\Expressivo
[2009-10-05 14:31:41 | 000,000,000 | ---D | M] -- C:\Users\Optimus\AppData\Roaming\FireShot
[2007-12-27 11:46:03 | 000,000,000 | ---D | M] -- C:\Users\Optimus\AppData\Roaming\FlashGet
[2010-12-30 18:39:03 | 000,000,000 | ---D | M] -- C:\Users\Optimus\AppData\Roaming\foobar2000
[2012-08-12 16:36:30 | 000,000,000 | ---D | M] -- C:\Users\Optimus\AppData\Roaming\Free Download Manager
[2010-06-12 12:24:53 | 000,000,000 | ---D | M] -- C:\Users\Optimus\AppData\Roaming\Free Sound Recorder
[2007-12-20 21:57:05 | 000,000,000 | ---D | M] -- C:\Users\Optimus\AppData\Roaming\Gadu-Gadu
[2011-12-09 19:55:28 | 000,000,000 | ---D | M] -- C:\Users\Optimus\AppData\Roaming\Gadu-Gadu 10
[2010-08-10 18:40:31 | 000,000,000 | ---D | M] -- C:\Users\Optimus\AppData\Roaming\GetRightToGo
[2012-04-06 14:24:52 | 000,000,000 | ---D | M] -- C:\Users\Optimus\AppData\Roaming\gtk-2.0
[2008-01-17 19:14:11 | 000,000,000 | ---D | M] -- C:\Users\Optimus\AppData\Roaming\IrfanView
[2008-08-30 14:02:12 | 000,000,000 | ---D | M] -- C:\Users\Optimus\AppData\Roaming\NCH Swift Sound
[2010-03-25 13:14:59 | 000,000,000 | ---D | M] -- C:\Users\Optimus\AppData\Roaming\Nowe Gadu-Gadu
[2009-09-26 20:59:53 | 000,000,000 | ---D | M] -- C:\Users\Optimus\AppData\Roaming\OpenFM
[2008-02-01 13:02:06 | 000,000,000 | ---D | M] -- C:\Users\Optimus\AppData\Roaming\PeerNetworking
[2007-12-22 19:44:10 | 000,000,000 | ---D | M] -- C:\Users\Optimus\AppData\Roaming\ScanSoft
[2007-12-29 21:46:27 | 000,000,000 | ---D | M] -- C:\Users\Optimus\AppData\Roaming\Softplicity
[2010-12-29 11:42:34 | 000,000,000 | ---D | M] -- C:\Users\Optimus\AppData\Roaming\Software Informer
[2008-03-25 14:20:55 | 000,000,000 | ---D | M] -- C:\Users\Optimus\AppData\Roaming\Songbird1
[2008-03-17 23:58:00 | 000,000,000 | ---D | M] -- C:\Users\Optimus\AppData\Roaming\Sports Interactive
[2011-11-23 13:50:41 | 000,000,000 | ---D | M] -- C:\Users\Optimus\AppData\Roaming\TestApp
[2009-05-25 17:26:07 | 000,000,000 | ---D | M] -- C:\Users\Optimus\AppData\Roaming\Thinstall
[2008-01-17 20:43:51 | 000,000,000 | ---D | M] -- C:\Users\Optimus\AppData\Roaming\Tlen.pl
[2011-09-22 22:07:38 | 000,000,000 | ---D | M] -- C:\Users\Optimus\AppData\Roaming\Windows Live Writer
[2009-03-12 13:25:23 | 000,000,000 | ---D | M] -- C:\Users\TEMP\AppData\Roaming\Expressivo
[2012-08-07 18:25:00 | 000,000,472 | ---- | M] () -- C:\Windows\Tasks\Ad-Aware Update (Weekly).job
[2012-08-07 09:00:00 | 000,000,386 | ---- | M] () -- C:\Windows\Tasks\rpc.job
[2012-08-12 19:47:46 | 000,032,562 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2012-08-13 19:35:00 | 000,000,468 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{DBB341F3-EA9B-47D1-9942-B615F50E8A9D}.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 98 bytes -> C:\ProgramData\TEMP:88050731
@Alternate Data Stream - 127 bytes -> C:\ProgramData\TEMP:430C6D84
@Alternate Data Stream - 114 bytes -> C:\ProgramData\TEMP:0F8F5844
@Alternate Data Stream - 112 bytes -> C:\ProgramData\TEMP:DFC5A2B2
@Alternate Data Stream - 105 bytes -> C:\ProgramData\TEMP:A9662AE0
@Alternate Data Stream - 100 bytes -> C:\ProgramData\TEMP:3553E6B8

< End of report >