OTL logfile created on: 2012-08-25 14:14:55 - Run 2
OTL by OldTimer - Version 3.2.58.1     Folder = C:\Users\Lusi\Desktop
Windows Vista Home Premium Edition  (Version = 6.0.6000) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18882)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
1014,72 Mb Total Physical Memory | 691,76 Mb Available Physical Memory | 68,17% Memory free
2,22 Gb Paging File | 2,02 Gb Available in Paging File | 90,95% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 48,83 Gb Total Space | 9,94 Gb Free Space | 20,36% Space Free | Partition Type: NTFS
Drive D: | 62,96 Gb Total Space | 50,87 Gb Free Space | 80,80% Space Free | Partition Type: NTFS
Drive E: | 4,10 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
 
Computer Name: LUSI-PC | User Name: Lusi | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-08-24 19:08:28 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Lusi\Desktop\OTL.exe
PRC - [2010-02-17 18:42:10 | 002,923,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - [2012-08-19 16:52:54 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2010-07-26 15:15:26 | 000,217,088 | ---- | M] (Teruten) [Auto | Stopped] -- C:\Windows\System32\FsUsbExService.Exe -- (FsUsbExService)
SRV - [2010-02-17 19:09:09 | 000,265,912 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007-06-11 10:13:20 | 000,073,728 | ---- | M] (OLYMPUS IMAGING CORP.) [Auto | Stopped] -- C:\Program Files\Olympus\DeviceDetector\DM1Service.exe -- (DM1Service)
SRV - [2006-11-02 11:45:35 | 000,009,216 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\System32\regedt32.exe -- (.EsetTrialReset)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\RTKVHDA.sys -- (IntcAzAudAddService)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\dgderdrv.sys -- (dgderdrv)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Lusi\AppData\Local\Temp\catchme.sys -- (catchme)
DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\blbdrive.sys -- (blbdrive)
DRV - [2011-02-18 06:47:42 | 000,180,672 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssudobex.sys -- (ssudobex)
DRV - [2011-02-18 06:47:42 | 000,180,672 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssudmdm.sys -- (ssudmdm)
DRV - [2011-02-18 06:47:42 | 000,066,112 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssudbus.sys -- (dg_ssudbus)
DRV - [2011-01-03 10:38:36 | 000,136,680 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadmdm.sys -- (ssadmdm)
DRV - [2011-01-03 10:38:36 | 000,121,192 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadbus.sys -- (ssadbus)
DRV - [2011-01-03 10:38:36 | 000,114,152 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadserd.sys -- (ssadserd)
DRV - [2011-01-03 10:38:36 | 000,012,776 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadmdfl.sys -- (ssadmdfl)
DRV - [2010-12-21 07:55:02 | 000,030,312 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadadb.sys -- (androidusb)
DRV - [2010-07-26 15:15:26 | 000,036,640 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2010-04-27 04:25:16 | 000,123,648 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_bmdm.sys -- (ss_bmdm)
DRV - [2010-04-27 04:25:16 | 000,100,224 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_bserd.sys -- (ss_bserd)
DRV - [2010-04-27 04:25:16 | 000,098,432 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_bbus.sys -- (ss_bbus)
DRV - [2010-04-27 04:25:16 | 000,014,848 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_bmdfl.sys -- (ss_bmdfl)
DRV - [2007-07-31 03:39:00 | 000,007,680 | ---- | M] (ATK0100) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ATKACPI.sys -- (MTsensor)
DRV - [2006-11-14 18:35:20 | 000,037,376 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rixdptsk.sys -- (rismxdp)
DRV - [2006-11-02 10:55:05 | 000,031,616 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUSB)
DRV - [2006-11-02 09:30:56 | 000,044,544 | ---- | M] (Realtek Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)
DRV - [2006-11-02 09:30:54 | 001,781,760 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NETw3v32.sys -- (NETw3v32)
DRV - [2006-01-17 20:50:08 | 010,221,952 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\snp2sxp.sys -- (SNP2STD)
DRV - [2004-04-13 11:39:22 | 000,006,912 | ---- | M] (IET Tech. Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ITECIR.sys -- (ITECIR)
DRV - [2001-01-30 18:34:38 | 000,025,381 | ---- | M] (OLYMPUS OPTICAL CO.,LTD.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\DSSUSBF.sys -- (DSSUSBF)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.funmoods.com/?f=1&a=abnew&chnl=abnew&cd=2XzutAtN2Y1L1QzutDtDtC0B0F0CtD0FyE0E0FtAzy0FyE0DtN0D0TzutBtDtCtBtDyDtCyD&cr=1133593900
IE - HKLM\..\URLSearchHook: {d43723ae-1ae1-4a25-a6a4-bf0929273cab} - C:\Program Files\Ashampoo_PO\prxtbAsha.dll (Conduit Ltd.)
IE - HKLM\..\SearchScopes,Backup.Old.DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847}
IE - HKLM\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKLM\..\SearchScopes\{7030B229-644A-22C1-DAE9-40BE2E0F8FF6}: "URL" = http://search.sweetim.com/search.asp?src=6&crg=3.1010000&q={searchTerms}&barid={0435B848-9D31-11E1-A011-001A921BE031}
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2530240
IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://start.funmoods.com/results.php?f=4&q={searchTerms}&a=abnew&chnl=abnew&cd=2XzutAtN2Y1L1QzutDtDtC0B0F0CtD0FyE0E0FtAzy0FyE0DtN0D0TzutBtDtCtBtDyDtCyD&cr=1133593900
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Backup.Old.Start Page = http://search.babylon.com/?affID=110819&tt=100512_2_&babsrc=HP_ss&mntrId=1cb89f4d000000000000001a921be031
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=110819&tt=3012_4&babsrc=HP_ss&mntrId=1cb89f4d0000000000000019d2dc9fce
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook: {d43723ae-1ae1-4a25-a6a4-bf0929273cab} - C:\Program Files\Ashampoo_PO\prxtbAsha.dll (Conduit Ltd.)
IE - HKCU\..\SearchScopes,Backup.Old.DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKCU\..\SearchScopes,DefaultScope = {7030B229-644A-22C1-DAE9-40BE2E0F8FF6}
IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=110819&tt=3012_4&babsrc=SP_ss&mntrId=1cb89f4d0000000000000019d2dc9fce
IE - HKCU\..\SearchScopes\{7030B229-644A-22C1-DAE9-40BE2E0F8FF6}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7SUNC_pl
IE - HKCU\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2530240
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_271.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@bittorrent.com/BitTorrentDNA: C:\Users\Lusi\Program Files\DNA\plugins\npbtdna.dll (BitTorrent, Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Lusi\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Lusi\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{d5bc46d8-67c7-11dc-8c1d-0097498c2b7a}: C:\Users\Lusi\Program Files\DNA [2010-08-30 15:04:35 | 000,000,000 | ---D | M]
 
[2012-05-20 15:52:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Lusi\AppData\Roaming\mozilla\Firefox\Profiles\0\extensions
[2012-05-15 18:37:02 | 000,000,000 | ---D | M] (Babylon) -- C:\Users\Lusi\AppData\Roaming\mozilla\Firefox\Profiles\0\extensions\ffxtlbr@babylon.com
[2012-05-08 15:21:21 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - homepage: http://search.babylon.com/?affID=110819&tt=3012_4&babsrc=HP_ss&mntrId=1cb89f4d0000000000000019d2dc9fce
CHR - default_search_provider: Search the web (Babylon) (Enabled)
CHR - default_search_provider: search_url = http://search.babylon.com/?q={searchTerms}&babsrc=SP_crm
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - homepage: http://search.babylon.com/?affID=110819&tt=3012_4&babsrc=HP_ss&mntrId=1cb89f4d0000000000000019d2dc9fce
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Lusi\AppData\Local\Google\Chrome\Application\21.0.1180.83\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Lusi\AppData\Local\Google\Chrome\Application\21.0.1180.83\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Lusi\AppData\Local\Google\Chrome\Application\21.0.1180.83\gcswf32.dll
CHR - plugin: Shockwave Flash (Disabled) = C:\Users\Lusi\AppData\Local\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.210.7 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U21 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: DivX Web Player (Enabled) = C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll
CHR - plugin: Google Update (Enabled) = C:\Users\Lusi\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: DNA Plug-in (Enabled) = C:\Users\Lusi\Program Files\DNA\plugins\npbtdna.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - Extension: YouTube = C:\Users\Lusi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Szukaj w Google = C:\Users\Lusi\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: Funmoods = C:\Users\Lusi\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdloijijlkoblmigdofommgnheckmaki\1.6.0_0\
CHR - Extension: Funmoods = C:\Users\Lusi\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdloijijlkoblmigdofommgnheckmaki\1.6.0_0\funmoods\
CHR - Extension: Ashampoo PO = C:\Users\Lusi\AppData\Local\Google\Chrome\User Data\Default\Extensions\jinihaffgdhejchgkogpfkdmpldnmnji\2.3.15.10_0\
CHR - Extension: Gmail = C:\Users\Lusi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
 
O1 HOSTS File: ([2012-08-25 13:30:26 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O2 - BHO: (Ashampoo PO Toolbar) - {d43723ae-1ae1-4a25-a6a4-bf0929273cab} - C:\Program Files\Ashampoo_PO\prxtbAsha.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Ashampoo PO Toolbar) - {d43723ae-1ae1-4a25-a6a4-bf0929273cab} - C:\Program Files\Ashampoo_PO\prxtbAsha.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (Ashampoo PO Toolbar) - {D43723AE-1AE1-4A25-A6A4-BF0929273CAB} - C:\Program Files\Ashampoo_PO\prxtbAsha.dll (Conduit Ltd.)
O4 - HKLM..\Run: [snp2std] C:\Windows\vsnp2std.exe (Sonix)
O4 - HKCU..\Run: [thawbrkr] C:\Users\Lusi\AppData\Local\Microsoft\Windows\1357\thawbrkr.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Funkcja Google Sidewiki - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html File not found
O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab (MksSkanerOnline Class)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: {F9F6A5CD-76C1-4BE7-8F49-5D4183F9FAC5} https://www.otineo.com/resources/com.otineo.survey.ui.personal.softphone.SoftphonePanel/OtineoSoftphone.cab (OtineoSoftphone Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B37F48C3-9A68-40E2-8FBC-BDF1264C7961}: DhcpNameServer = 192.168.1.254
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img24.jpg
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img24.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006-09-18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012-08-25 13:54:00 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2012-08-25 13:54:00 | 000,000,000 | ---D | C] -- C:\Users\Lusi\AppData\Local\temp
[2012-08-25 13:53:01 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2012-08-25 13:18:02 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2012-08-25 13:18:01 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2012-08-25 13:18:01 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2012-08-25 13:18:01 | 000,212,480 | ---- | C] (SteelWerX) -- C:\Windows\SWXCACLS.exe
[2012-08-25 13:17:49 | 000,000,000 | ---D | C] -- C:\Qoobox
[2012-08-25 13:17:27 | 000,000,000 | ---D | C] -- C:\Windows\erdnt
[2012-08-25 13:16:08 | 004,738,846 | R--- | C] (Swearware) -- C:\Users\Lusi\Desktop\ComboFix.exe
[2012-08-24 19:08:28 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Users\Lusi\Desktop\OTL.exe
[2012-08-24 18:06:57 | 000,000,000 | ---D | C] -- C:\Users\Lusi\AppData\Roaming\hellomoto
[2012-08-20 18:16:59 | 000,000,000 | ---D | C] -- C:\Users\Lusi\AppData\Roaming\PeerNetworking
[2012-08-19 16:52:54 | 000,426,184 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2012-08-05 14:36:58 | 000,000,000 | ---D | C] -- C:\Users\Lusi\Desktop\Pszczyna, Kraków, Zakopane
[2012-08-04 20:15:47 | 000,000,000 | ---D | C] -- C:\Program Files\DownloadManager
[2012-07-31 19:04:34 | 000,000,000 | ---D | C] -- C:\Users\Lusi\Desktop\Janusz Radek - Z ust do ust
[2012-07-28 12:49:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Creator
[2012-07-28 12:49:26 | 000,000,000 | ---D | C] -- C:\Program1
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012-08-25 14:11:33 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012-08-25 14:04:39 | 000,004,032 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012-08-25 14:04:39 | 000,004,032 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012-08-25 13:30:26 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2012-08-25 13:16:23 | 004,738,846 | R--- | M] (Swearware) -- C:\Users\Lusi\Desktop\ComboFix.exe
[2012-08-25 13:13:22 | 000,000,680 | ---- | M] () -- C:\Users\Lusi\AppData\Local\d3d9caps.dat
[2012-08-24 19:08:28 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Lusi\Desktop\OTL.exe
[2012-08-24 18:47:25 | 000,000,836 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2012-08-24 18:32:54 | 000,610,142 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012-08-24 18:32:54 | 000,535,568 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2012-08-24 18:32:54 | 000,103,924 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012-08-24 18:32:54 | 000,086,416 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2012-08-24 18:18:07 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012-08-24 18:11:25 | 000,001,054 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2361805571-3733940301-1595978802-1000UA.job
[2012-08-23 19:11:00 | 000,001,002 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2361805571-3733940301-1595978802-1000Core.job
[2012-08-23 15:19:59 | 002,059,801 | ---- | M] () -- C:\Users\Lusi\Desktop\MOV00128.MP4
[2012-08-23 15:15:11 | 002,467,774 | ---- | M] () -- C:\Users\Lusi\Desktop\MOV00124.MP4
[2012-08-23 15:13:26 | 001,599,799 | ---- | M] () -- C:\Users\Lusi\Desktop\MOV00125.MP4
[2012-08-20 18:17:00 | 000,031,007 | ---- | M] () -- C:\Users\Lusi\AppData\Roaming\UserTile.png
[2012-08-19 16:52:54 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2012-08-19 16:52:54 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2012-08-05 18:13:32 | 000,081,408 | ---- | M] () -- C:\Users\Lusi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-08-05 15:02:41 | 005,945,556 | ---- | M] () -- C:\Users\Lusi\Documents\06 - Milosc Ma Milosc Ma.mp3
[2012-08-05 15:02:26 | 000,011,690 | -HS- | M] () -- C:\Users\Lusi\Documents\Folder.jpg
[2012-08-05 15:02:26 | 000,011,690 | -HS- | M] () -- C:\Users\Lusi\Documents\AlbumArt_{768BC784-CEC2-4601-872E-3E2373F71995}_Large.jpg
[2012-08-05 15:02:23 | 000,002,935 | -HS- | M] () -- C:\Users\Lusi\Documents\AlbumArtSmall.jpg
[2012-08-05 15:02:23 | 000,002,935 | -HS- | M] () -- C:\Users\Lusi\Documents\AlbumArt_{768BC784-CEC2-4601-872E-3E2373F71995}_Small.jpg
[2012-08-05 14:46:32 | 002,849,231 | ---- | M] () -- C:\Users\Lusi\Desktop\Loka - Prawdziwe powietrze.mp3
[2012-08-05 12:27:01 | 000,180,355 | ---- | M] () -- C:\Users\Lusi\Desktop\slownik.jar
[2012-08-05 12:07:50 | 000,532,741 | ---- | M] () -- C:\Users\Lusi\Desktop\Slownik polsko - angielski.jar
[2012-08-04 20:12:40 | 001,059,088 | ---- | M] () -- C:\Users\Lusi\Desktop\DownloadManagerSetup.exe
[2012-08-04 10:38:06 | 000,000,128 | ---- | M] () -- C:\Users\Public\Documents\DSSJobNo.Dat
[2012-07-28 13:45:45 | 000,002,839 | ---- | M] () -- C:\Users\Lusi\Desktop\Microsoft Office Document Scanning.lnk
[2012-07-28 12:57:09 | 000,001,343 | ---- | M] () -- C:\user.js
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012-08-25 13:18:02 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2012-08-25 13:18:02 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2012-08-25 13:18:01 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2012-08-25 13:18:01 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2012-08-25 13:18:01 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2012-08-25 13:13:22 | 000,000,680 | ---- | C] () -- C:\Users\Lusi\AppData\Local\d3d9caps.dat
[2012-08-23 15:19:58 | 002,059,801 | ---- | C] () -- C:\Users\Lusi\Desktop\MOV00128.MP4
[2012-08-23 15:15:10 | 002,467,774 | ---- | C] () -- C:\Users\Lusi\Desktop\MOV00124.MP4
[2012-08-23 15:13:26 | 001,599,799 | ---- | C] () -- C:\Users\Lusi\Desktop\MOV00125.MP4
[2012-08-20 18:17:00 | 000,031,007 | ---- | C] () -- C:\Users\Lusi\AppData\Roaming\UserTile.png
[2012-08-19 16:52:55 | 000,000,930 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012-08-05 15:02:29 | 000,011,690 | -HS- | C] () -- C:\Users\Lusi\Documents\Folder.jpg
[2012-08-05 15:02:29 | 000,011,690 | -HS- | C] () -- C:\Users\Lusi\Documents\AlbumArt_{768BC784-CEC2-4601-872E-3E2373F71995}_Large.jpg
[2012-08-05 15:02:29 | 000,002,935 | -HS- | C] () -- C:\Users\Lusi\Documents\AlbumArtSmall.jpg
[2012-08-05 15:02:29 | 000,002,935 | -HS- | C] () -- C:\Users\Lusi\Documents\AlbumArt_{768BC784-CEC2-4601-872E-3E2373F71995}_Small.jpg
[2012-08-05 14:46:04 | 002,849,231 | ---- | C] () -- C:\Users\Lusi\Desktop\Loka - Prawdziwe powietrze.mp3
[2012-08-05 12:40:32 | 005,945,556 | ---- | C] () -- C:\Users\Lusi\Documents\06 - Milosc Ma Milosc Ma.mp3
[2012-08-05 12:27:01 | 000,180,355 | ---- | C] () -- C:\Users\Lusi\Desktop\slownik.jar
[2012-08-05 12:07:50 | 000,532,741 | ---- | C] () -- C:\Users\Lusi\Desktop\Slownik polsko - angielski.jar
[2012-08-04 20:12:39 | 001,059,088 | ---- | C] () -- C:\Users\Lusi\Desktop\DownloadManagerSetup.exe
[2012-07-28 12:49:27 | 000,086,016 | ---- | C] () -- C:\Windows\System32\custmon32i.dll
[2012-05-15 18:44:51 | 000,031,470 | ---- | C] () -- C:\Users\Lusi\AppData\Local\funmoods.crx
[2012-04-25 22:19:52 | 000,296,192 | ---- | C] () -- C:\Windows\System32\drivers\sfi.dat
[2011-03-08 15:41:04 | 000,974,848 | ---- | C] () -- C:\Windows\System32\cis-2.4.dll
[2011-03-08 15:41:04 | 000,081,920 | ---- | C] () -- C:\Windows\System32\issacapi_bs-2.3.dll
[2011-03-08 15:41:04 | 000,065,536 | ---- | C] () -- C:\Windows\System32\issacapi_pe-2.3.dll
[2011-03-08 15:41:04 | 000,057,344 | ---- | C] () -- C:\Windows\System32\issacapi_se-2.3.dll
[2011-03-06 19:44:48 | 000,110,592 | ---- | C] () -- C:\Windows\System32\FsUsbExDevice.Dll
[2011-03-06 19:44:48 | 000,036,640 | ---- | C] () -- C:\Windows\System32\FsUsbExDisk.Sys
[2010-12-23 23:14:44 | 000,045,056 | ---- | C] () -- C:\Windows\System32\DM1USBAPIVB.dll
[2010-04-17 18:12:26 | 000,254,498 | ---- | C] () -- C:\Users\Lusi\umowa_izimany_20100417[1].pdf
[2010-02-14 17:13:45 | 000,081,408 | ---- | C] () -- C:\Users\Lusi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

< End of report >