OTL logfile created on: 10/1/2012 11:46:05 AM - Run OTLPE by OldTimer - Version 3.1.48.0 Folder = X:\Programs\OTLPE Microsoft Windows XP Dodatek Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM Internet Explorer (Version = 6.0.2900.5512) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1,022.00 Mb Total Physical Memory | 827.00 Mb Available Physical Memory | 81.00% Memory free 906.00 Mb Paging File | 851.00 Mb Available in Paging File | 94.00% Paging File free Paging file location(s): C:\pagefile.sys 1536 3072 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 67.83 Gb Total Space | 25.54 Gb Free Space | 37.65% Space Free | Partition Type: NTFS Drive D: | 7.45 Gb Total Space | 3.21 Gb Free Space | 43.02% Space Free | Partition Type: FAT32 Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS Computer Name: REATOGO | User Name: SYSTEM Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days Using ControlSet: ControlSet003 [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Disabled] -- -- (SQLWriter) SRV - File not found [Disabled] -- -- (SQLBrowser) SRV - File not found [Disabled] -- -- (MSSQLServerADHelper) SRV - File not found [Disabled] -- -- (MSSQLSERVER) SQL Server (MSSQLSERVER) SRV - File not found [Disabled] -- -- (HidServ) SRV - [2012/09/09 06:30:01 | 000,114,144 | ---- | M] (Mozilla Foundation) [On_Demand] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2012/01/04 08:32:36 | 000,718,888 | ---- | M] (Nokia) [On_Demand] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand] -- -- (WDICA) DRV - File not found [Kernel | On_Demand] -- -- (UIUSys) DRV - File not found [Kernel | On_Demand] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand] -- -- (PDCOMP) DRV - File not found [Kernel | System] -- -- (PCIDump) DRV - File not found [Kernel | System] -- -- (lbrtfdc) DRV - File not found [Kernel | System] -- -- (i2omgmt) DRV - File not found [Kernel | System] -- -- (Changer) DRV - File not found [Kernel | On_Demand] -- -- (catchme) DRV - [2011/05/20 04:26:26 | 000,436,792 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\sptd.sys -- (sptd) DRV - [2011/02/13 21:42:36 | 000,020,864 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\lgusbdiag.sys -- (UsbDiag) DRV - [2011/02/13 21:42:34 | 000,025,216 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\lgusbmodem.sys -- (USBModem) DRV - [2011/02/13 21:42:32 | 000,013,056 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\lgusbbus.sys -- (usbbus) DRV - [2008/08/26 04:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2008/04/13 19:10:52 | 000,149,376 | ---- | M] (M-Systems) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\tffsport.sys -- (tffsport) DRV - [2007/10/09 13:17:42 | 001,123,328 | ---- | M] (Broadcom Corp.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\BCMWL5.SYS -- (BCM43XX) DRV - [2007/05/10 04:24:34 | 001,222,840 | ---- | M] (SigmaTel, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\sthda.sys -- (STHDA) DRV - [2006/11/14 18:16:24 | 000,032,256 | ---- | M] (REDC) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\rimmptsk.sys -- (rimmptsk) DRV - [2006/11/14 13:42:46 | 000,043,520 | ---- | M] (REDC) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\rimsptsk.sys -- (rimsptsk) DRV - [2006/11/14 11:35:20 | 000,037,376 | ---- | M] (REDC) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\rixdptsk.sys -- (rismxdp) DRV - [2006/11/02 10:51:58 | 000,013,560 | ---- | M] (Cyberlink Corp.) [Kernel | Auto] -- C:\Program Files\CyberLink\PowerDVD\000.fcl -- ({95808DC4-FA4A-4c74-92FE-5B863F82066B}) DRV - [2006/05/23 16:06:36 | 001,578,496 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag) DRV - [2006/04/01 09:33:16 | 000,045,312 | R--- | M] (Broadcom Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\bcm4sbxp.sys -- (bcm4sbxp) DRV - [2005/03/14 01:01:38 | 000,041,984 | ---- | M] (DeviceGuys, Inc.) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\DGIVECP.SYS -- (DgiVecp) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\Administrator.DELL_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\User_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?AF=119998&babsrc=HP_ss&mntrId=78390d3e0000000000000018f3e3087b IE - HKU\User_ON_C\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) IE - HKU\User_ON_C\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTo2.dll (Conduit Ltd.) IE - HKU\User_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\User_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.450: C:\Program Files\Real Alternative\Browser\Plugins\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files\Real Alternative\Browser\Plugins\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/09/09 06:30:02 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/01/22 13:27:21 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 11.0.1\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2012/01/29 11:57:15 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 11.0.1\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2012/05/03 16:02:43 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2012/03/23 04:27:33 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions\ffxtlbr@babylon.com [2012/09/09 06:30:02 | 000,266,720 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2012/03/23 05:33:37 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2012/06/23 16:35:41 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2012/03/23 04:27:33 | 000,002,310 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml [2012/06/23 16:35:41 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2012/06/23 16:35:41 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2012/06/23 16:35:41 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2012/06/23 16:35:41 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2012/06/23 16:35:41 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2012/10/01 03:44:53 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (uTorrentBar Toolbar) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTo2.dll (Conduit Ltd.) O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.) O3 - HKLM\..\Toolbar: (uTorrentBar Toolbar) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTo2.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) O3 - HKU\User_ON_C\..\Toolbar\WebBrowser: (uTorrentBar Toolbar) - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - C:\Program Files\uTorrentBar\prxtbuTo2.dll (Conduit Ltd.) O3 - HKU\User_ON_C\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask) O4 - HKLM..\Run: [ApnUpdater] C:\Program Files\Ask.com\Updater\Updater.exe (Ask) O4 - HKLM..\Run: [LanguageShortcut] C:\Program Files\CyberLink\PowerDVD\Language\Language.exe () O4 - HKLM..\Run: [Malwarebytes Anti-Malware (reboot)] File not found O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Nero AG) O4 - HKLM..\Run: [Samsung PanelMgr] C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe () O4 - HKLM..\Run: [SigmatelSysTrayApp] C:\Program Files\SigmaTel\C-Major Audio\WDM\stsystra.exe (SigmaTel, Inc.) O4 - HKU\User_ON_C..\Run: [DAEMON Tools Lite] C:\Documents and Settings\User\Pulpit\USB_MultiBoot6\dl\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O4 - HKU\User_ON_C..\Run: [IPLA!] C:\Program Files\ipla\ipla.exe (Redefine Sp z o.o.) O4 - HKU\User_ON_C..\Run: [Software Informer] File not found O4 - HKU\User_ON_C..\Run: [yufwqibhwotoqur] C:\WINDOWS\yufwqibh.exe () O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe (Adobe Systems Incorporated) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\Administrator.DELL_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\LocalService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\NetworkService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\User_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\User_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\User_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab (Reg Error: Key error.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_12-windows-i586.cab (Java Plug-in 1.5.0_12) O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 194.204.152.34 194.204.159.1 O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2010/10/15 09:07:36 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012/10/01 04:33:08 | 000,600,576 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Administrator.DELL\Pulpit\OTL.exe [2012/10/01 04:31:33 | 000,600,576 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\User\Pulpit\OTL.exe [2012/10/01 03:49:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\Menu Start\Programy\CyberLink PowerDVD [2012/10/01 03:43:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\temp [2012/10/01 03:30:29 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe [2012/10/01 03:30:29 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe [2012/10/01 03:30:29 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe [2012/10/01 03:30:29 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe [2012/10/01 03:30:17 | 000,000,000 | ---D | C] -- C:\ComboFix [2012/10/01 03:30:11 | 000,000,000 | ---D | C] -- C:\Qoobox [2012/10/01 03:30:05 | 000,000,000 | R--D | C] -- C:\Documents and Settings\User\Menu Start\Programy\Narzędzia administracyjne [2012/10/01 03:29:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\erdnt [2012/09/29 12:06:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\djzwifppwtajjes [2012/09/07 11:37:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\User\Menu Start\Programy\GameSpy Arcade [2012/09/07 11:37:04 | 000,000,000 | ---D | C] -- C:\Program Files\GameSpy Arcade [2012/09/07 11:36:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Twierdza Deluxe [2012/09/07 11:32:48 | 000,000,000 | ---D | C] -- C:\Program Files\Twierdza Deluxe [4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012/10/01 04:34:10 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2012/10/01 04:24:19 | 000,492,698 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2012/10/01 04:24:19 | 000,433,974 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2012/10/01 04:24:19 | 000,085,146 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2012/10/01 04:24:19 | 000,068,546 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2012/10/01 04:18:50 | 000,600,576 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\User\Pulpit\OTL.exe [2012/10/01 04:18:50 | 000,600,576 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrator.DELL\Pulpit\OTL.exe [2012/10/01 04:11:00 | 000,000,232 | ---- | M] () -- C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job [2012/10/01 03:49:26 | 000,000,470 | ---- | M] () -- C:\WINDOWS\tasks\SDMsgUpdate (TE).job [2012/10/01 03:44:53 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts [2012/10/01 03:18:45 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2012/09/29 12:06:22 | 000,078,021 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\indrhersigzokrk [2012/09/29 12:06:17 | 000,072,704 | ---- | M] () -- C:\WINDOWS\yufwqibh.exe [2012/09/25 11:49:01 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job [2012/09/11 12:05:21 | 000,001,880 | -H-- | M] () -- C:\Documents and Settings\User\Moje dokumenty\Default.rdp [2012/09/07 15:14:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Menu Start\Programy\Microsoft Silverlight [2012/09/07 11:37:22 | 000,000,683 | ---- | M] () -- C:\Documents and Settings\User\Pulpit\GameSpy Arcade.lnk [2012/09/07 11:36:50 | 000,000,741 | ---- | M] () -- C:\Documents and Settings\User\Pulpit\Twierdza Deluxe.lnk [2012/09/07 11:36:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Menu Start\Programy\Twierdza Deluxe [4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012/10/01 03:30:29 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe [2012/10/01 03:30:29 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe [2012/10/01 03:30:29 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe [2012/10/01 03:30:29 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe [2012/10/01 03:30:29 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe [2012/09/29 12:06:21 | 000,072,704 | ---- | C] () -- C:\WINDOWS\yufwqibh.exe [2012/09/29 12:06:17 | 000,078,021 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\indrhersigzokrk [2012/09/07 11:37:22 | 000,000,683 | ---- | C] () -- C:\Documents and Settings\User\Pulpit\GameSpy Arcade.lnk [2012/09/07 11:36:50 | 000,000,741 | ---- | C] () -- C:\Documents and Settings\User\Pulpit\Twierdza Deluxe.lnk [2012/03/22 10:07:21 | 000,011,761 | ---- | C] () -- C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\unins000.msg [2012/03/22 10:07:21 | 000,002,157 | ---- | C] () -- C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\unins000.dat [2012/02/15 16:30:40 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll [2011/06/07 17:13:43 | 000,176,235 | ---- | C] () -- C:\WINDOWS\System32\Primomonnt.dll [2011/04/02 11:38:26 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini [2011/04/02 11:38:24 | 000,810,496 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2011/04/02 11:38:24 | 000,183,808 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2011/04/02 11:38:23 | 000,080,896 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2010/11/06 13:45:15 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat [2010/10/15 17:38:52 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2010/10/15 16:52:41 | 000,000,421 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2010/10/15 16:46:01 | 000,258,048 | ---- | C] () -- C:\WINDOWS\System32\libFLAC.dll [2010/10/15 16:45:18 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2010/10/15 16:01:16 | 000,033,280 | ---- | C] () -- C:\Documents and Settings\User\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010/10/15 14:06:32 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat [2010/10/15 12:30:15 | 000,139,264 | ---- | C] () -- C:\WINDOWS\System32\preflib.dll [2010/10/15 12:30:14 | 000,753,664 | ---- | C] () -- C:\WINDOWS\System32\bcm1xsup.dll [2010/10/15 12:30:14 | 000,024,064 | ---- | C] () -- C:\WINDOWS\System32\WLTRYSVC.EXE [2010/10/15 12:18:11 | 000,127,614 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat [2010/10/15 12:17:18 | 000,016,480 | ---- | C] () -- C:\WINDOWS\System32\rixdicon.dll [2010/10/15 10:57:46 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2010/10/15 10:56:32 | 000,138,848 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010/10/15 09:10:25 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2010/10/15 09:04:21 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2009/12/20 21:42:18 | 000,000,314 | ---- | C] () -- C:\WINDOWS\primopdf.ini [2004/08/03 20:56:48 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin [2004/08/02 10:20:40 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat [2001/10/26 14:15:16 | 000,492,698 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat [2001/10/26 14:15:16 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat [2001/10/26 14:15:16 | 000,085,146 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat [2001/10/26 14:15:16 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat [2001/08/23 11:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin [2001/08/23 11:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat [2001/08/17 19:30:24 | 000,433,974 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat [2001/08/17 19:30:24 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat [2001/08/17 19:30:24 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat [2001/08/17 19:30:22 | 000,068,546 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat [2001/08/17 19:15:38 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin [2001/07/21 20:36:48 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat [2001/07/21 20:36:04 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat [2001/07/21 20:24:16 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat [color=#E56717]========== LOP Check ==========[/color] [2011/11/15 08:12:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator.DELL\Dane aplikacji\URSoft [2012/03/23 04:27:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\Babylon [2012/07/03 15:15:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\BabylonToolbar [2010/10/25 09:29:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\DAEMON Tools Lite [2011/02/28 07:33:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\Docx2Rtf [2012/04/14 06:10:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\e-pity [2010/10/16 03:46:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\ESET [2011/02/09 16:16:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\Gadu-Gadu 10 [2012/10/01 03:49:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\ipla [2010/10/15 17:36:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\IrfanView [2012/03/23 07:13:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\Nokia [2011/06/07 17:13:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\OpenCandy [2012/03/23 07:18:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\PC Suite [2012/02/06 12:16:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\PrimoPDF [2011/03/30 19:42:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\RDRM [2011/04/27 10:39:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\SmartDraw [2011/04/02 12:28:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\Software Informer [2012/01/29 11:57:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\Thunderbird [2011/04/02 11:12:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\URSoft [2011/07/24 17:00:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\User\Dane aplikacji\uTorrent [2012/03/23 04:27:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Babylon [2010/10/25 08:59:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite [2012/09/29 12:06:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\djzwifppwtajjes [2010/10/15 17:43:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10 [2012/05/22 07:55:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla [2012/03/23 06:46:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\NokiaInstallerCache [2012/03/23 07:17:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Suite [2011/08/04 12:57:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\RDRM [2011/07/03 08:58:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{429CAD59-35B1-4DBC-BB6D-1DB246563521} [2012/10/01 04:11:00 | 000,000,232 | ---- | M] () -- C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job [2012/10/01 03:49:26 | 000,000,470 | ---- | M] () -- C:\WINDOWS\Tasks\SDMsgUpdate (TE).job [color=#E56717]========== Purity Check ==========[/color] < End of report >