O1 - Hosts:
O1 - Hosts: 90 more lines...
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\ALCMTR.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [AlcWzrd] C:\WINDOWS\ALCWZRD.EXE (RealTek Semicoductor Corp.)
O4 - HKLM..\Run: [Bron-Spizaetus] C:\WINDOWS\ShellNew\RakyatKelaparan.exe ()
O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKCU..\Run: [Tok-Cirrhatus] File not found
O4 - HKCU..\Run: [Tok-Cirrhatus-3444] C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\br7911on.exe ()
O4 - HKCU..\Run: [TransBar] C:\WINDOWS\TransBar.exe (AKSoftware)
O4 - Startup: C:\Documents and Settings\Administrator\Menu Start\Programy\Autostart\Empty.pif ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktopCleanupWizard = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoInternetOpenWith = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableStatusMessages = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: VerboseStatus = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyPictures = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFolderOptions = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F35D7F8B-2AB0-4290-BF08-097F5D1D0F08}: DhcpNameServer = 192.168.1.1
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - ("C:\WINDOWS\KesenjanganSosial.exe") - C:\WINDOWS\KesenjanganSosial.exe ()
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O31 - SafeBoot: AlternateShell - cmd-brontok.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2012-10-31 18:47:58 | 000,000,007 | -HS- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2001-07-28 07:07:38 | 000,000,000 | -HS- | M] () - E:\AUTOEXEC.BAT -- [ FAT32 ]
O32 - AutoRun File - [2004-04-30 23:01:14 | 000,000,053 | -HS- | M] () - E:\Autorun.inf -- [ FAT32 ]
O32 - AutoRun File - [2011-02-20 15:48:36 | 000,000,000 | ---- | M] () - F:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\E\Shell - "" = AutoRun
O33 - MountPoints2\E\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Info.exe protect.ed 480 480
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
[2012-10-31 18:24:10 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Administrator\Recent
[2012-10-31 18:06:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Bron.tok-16-31
[2012-10-25 18:37:29 | 000,000,000 | -H-D | C] -- C:\WINDOWS\System32\GroupPolicy
[2012-10-25 18:37:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\ApplicationHistory
[2012-10-25 18:32:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Ok-SendMail-Bron-tok
[2012-10-25 18:32:20 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Administrator\Menu Start\Programy\Narzędzia administracyjne
[2012-10-25 18:30:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Loc.Mail.Bron.Tok
[2012-10-25 18:04:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Bron.tok-16-25
[2012-10-25 18:04:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\Adobe
[2012-10-25 17:56:45 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Administrator\PrivacIE
[2012-10-25 17:45:06 | 000,000,000 | -HSD | C] -- C:\WINDOWS\CSC
[2012-10-25 17:38:01 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss
[2012-10-17 13:41:05 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\All Users\Dane aplikacji\lsass.exe
[2012-10-03 19:52:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10
[2012-10-03 19:51:59 | 000,000,000 | ---D | C] -- C:\Program Files\Gadu-Gadu 10
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
[2012-10-31 18:47:58 | 000,000,007 | -HS- | M] () -- C:\AUTOEXEC.BAT
[2012-10-31 18:47:41 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012-10-31 18:44:40 | 083,023,306 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\dsgsdgdsgdsgw.pad
[2012-10-31 18:18:41 | 000,497,586 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2012-10-31 18:18:41 | 000,438,750 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012-10-31 18:18:41 | 000,087,244 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2012-10-31 18:18:41 | 000,069,926 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012-10-31 18:06:11 | 000,002,184 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012-10-25 18:37:01 | 000,000,138 | ---- | M] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\fusioncache.dat
[2012-10-25 18:30:26 | 000,000,211 | -HS- | M] () -- C:\boot.ini
[2012-10-25 17:46:00 | 000,012,393 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2012-10-17 13:41:05 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\All Users\Dane aplikacji\lsass.exe
[2012-10-13 20:47:00 | 000,003,364 | ---- | M] () -- C:\WINDOWS\System32\NOTEPAD.ini
[2012-10-03 19:52:39 | 000,000,797 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\OpenFM.lnk
[2012-10-03 19:52:39 | 000,000,768 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Gadu-Gadu 10.lnk
[2012-10-03 13:41:53 | 000,282,104 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrB.xtr
[2012-10-03 13:21:11 | 000,139,424 | ---- | M] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2012-10-03 13:20:47 | 000,282,104 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrB.ex0
[2012-10-03 11:37:37 | 000,044,417 | -H-- | M] () -- C:\WINDOWS\KesenjanganSosial.exe
[2012-10-03 11:37:37 | 000,044,417 | ---- | M] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\winlogon.exe
[2012-10-03 11:37:37 | 000,044,417 | ---- | M] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\smss.exe
[2012-10-03 11:37:37 | 000,044,417 | ---- | M] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\services.exe
[2012-10-03 11:37:37 | 000,044,417 | ---- | M] () -- C:\Documents and Settings\Administrator\Moje dokumenty\Moje dokumenty.exe
[2012-10-03 11:37:37 | 000,044,417 | ---- | M] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\lsass.exe
[2012-10-03 11:37:37 | 000,044,417 | ---- | M] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\inetinfo.exe
[2012-10-03 11:37:37 | 000,044,417 | ---- | M] () -- C:\Documents and Settings\Administrator\Menu Start\Programy\Autostart\Empty.pif
[2012-10-03 11:37:37 | 000,044,417 | ---- | M] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\csrss.exe
[2012-10-03 11:37:37 | 000,044,417 | ---- | M] () -- C:\WINDOWS\System32\cmd-brontok.exe
[2012-10-03 11:37:37 | 000,044,417 | ---- | M] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\br7911on.exe
[2012-10-03 11:37:37 | 000,044,417 | ---- | M] () -- C:\WINDOWS\System32\adrian's Setting.scr
[2012-10-03 11:37:37 | 000,044,417 | ---- | M] () -- C:\WINDOWS\System32\Administrator's Setting.scr
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[color=#E56717]========== Files Created - No Company Name ==========[/color]
[2012-10-25 18:37:01 | 000,000,138 | ---- | C] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\fusioncache.dat
[2012-10-17 13:41:07 | 083,023,306 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\dsgsdgdsgdsgw.pad
[2012-10-03 19:52:39 | 000,000,797 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\OpenFM.lnk
[2012-10-03 19:52:39 | 000,000,768 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Gadu-Gadu 10.lnk
[2012-10-03 19:52:17 | 000,000,686 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Gadu-Gadu 10.lnk
[2012-09-25 13:08:37 | 000,139,424 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2012-09-25 13:08:16 | 000,282,104 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe
[2012-09-25 13:08:12 | 000,076,888 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe
[2012-09-22 08:50:49 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2012-09-22 00:16:34 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2012-09-22 00:16:10 | 000,283,648 | ---- | C] () -- C:\WINDOWS\NOTEPAD.EXE
[2012-09-22 00:15:02 | 000,107,808 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012-09-21 23:55:17 | 000,003,364 | ---- | C] () -- C:\WINDOWS\System32\NOTEPAD.ini
[2012-09-21 23:09:21 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin
[2012-09-21 23:07:00 | 000,156,672 | ---- | C] () -- C:\WINDOWS\System32\RTLCPAPI.dll
[2012-09-21 23:03:26 | 000,593,920 | ---- | C] () -- C:\WINDOWS\System32\ati2sgag.exe
[2012-09-21 22:56:58 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2012-09-21 22:47:59 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2012-09-21 22:44:10 | 000,002,272 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat
[2012-09-21 22:39:28 | 000,000,047 | ---- | C] () -- C:\WINDOWS\TransBar.ini
[2012-09-21 22:37:47 | 000,652,287 | ---- | C] () -- C:\WINDOWS\Nowe_konto.exe
[2012-09-21 22:33:22 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[1980-01-01 00:11:09 | 000,044,417 | ---- | C] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\winlogon.exe
[1980-01-01 00:11:09 | 000,044,417 | ---- | C] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\smss.exe
[1980-01-01 00:11:09 | 000,044,417 | ---- | C] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\services.exe
[1980-01-01 00:11:09 | 000,044,417 | ---- | C] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\lsass.exe
[1980-01-01 00:11:09 | 000,044,417 | ---- | C] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\inetinfo.exe
[1980-01-01 00:11:09 | 000,044,417 | ---- | C] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\csrss.exe
[1980-01-01 00:11:09 | 000,044,417 | ---- | C] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\br7911on.exe
[color=#E56717]========== ZeroAccess Check ==========[/color]
[2012-09-21 22:40:48 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2009-06-09 00:53:09 | 003,418,112 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009-07-05 00:06:28 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008-04-14 23:50:58 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
< End of report >