OTL logfile created on: 2012-11-09 23:18:19 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Ja\Pulpit Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1023,36 Mb Total Physical Memory | 374,98 Mb Available Physical Memory | 36,64% Memory free 2,39 Gb Paging File | 1,76 Gb Available in Paging File | 73,80% Paging File free Paging file location(s): C:\pagefile.sys 1524 3048 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 27,22 Gb Total Space | 9,51 Gb Free Space | 34,92% Space Free | Partition Type: NTFS Drive D: | 540,54 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS Drive E: | 28,68 Gb Total Space | 28,62 Gb Free Space | 99,78% Space Free | Partition Type: NTFS Computer Name: JA-90E329A7A8DD | User Name: Ja | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-11-09 23:17:58 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Ja\Pulpit\OTL.exe PRC - [2012-11-07 20:33:03 | 000,161,768 | ---- | M] (Oracle Corporation) -- C:\Program Files\Java\jre7\bin\jqs.exe PRC - [2012-10-02 12:13:44 | 003,064,000 | ---- | M] (Skype Technologies S.A.) -- C:\Documents and Settings\All Users\Dane aplikacji\Skype\Toolbars\Skype C2C Service\c2c_service.exe PRC - [2008-04-15 13:00:00 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2007-01-09 14:52:32 | 000,145,184 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\pthosttr.exe PRC - [2006-03-03 14:28:18 | 000,136,736 | ---- | M] (Infineon Technologies AG) -- C:\Program Files\ProtectTools\Embedded Security Software\PSDrt.exe PRC - [2006-02-27 16:02:06 | 000,581,693 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe PRC - [2006-02-27 16:00:58 | 001,265,748 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe PRC - [2006-01-16 21:01:46 | 000,053,248 | ---- | M] (Hewlett-Packard Corporation) -- C:\WINDOWS\system32\accelerometerST.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2006-02-27 16:03:28 | 000,053,248 | ---- | M] () -- C:\Program Files\WIDCOMM\Bluetooth Software\BTKeyInd.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ) SRV - [2012-11-07 20:33:03 | 000,161,768 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\Program Files\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService) SRV - [2012-10-19 16:14:08 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2012-10-02 12:13:44 | 003,064,000 | ---- | M] (Skype Technologies S.A.) [Auto | Running] -- C:\Documents and Settings\All Users\Dane aplikacji\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - [2009-02-13 23:49:34 | 003,565,056 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag) DRV - [2008-04-28 14:22:10 | 000,009,344 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\CPQBttn.sys -- (HBtnKey) DRV - [2008-03-13 02:25:36 | 002,530,176 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NETw4x32.sys -- (NETw4x32) DRV - [2007-12-14 08:21:56 | 000,290,816 | ---- | M] (Texas Instruments) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\tifm21.sys -- (tifm21) DRV - [2007-08-28 14:47:36 | 000,146,560 | ---- | M] (AuthenTec, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\atswpdrv.sys -- (ATSWPDRV) DRV - [2007-06-18 16:12:04 | 000,016,768 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HpqKbFiltr.sys -- (HpqKbFiltr) DRV - [2007-05-09 12:27:00 | 000,097,280 | ---- | M] (Texas Instruments) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gtipci21.sys -- (GTIPCI21) DRV - [2006-08-28 13:40:48 | 001,160,320 | ---- | M] (Agere Systems) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem) DRV - [2006-02-27 15:45:48 | 001,342,602 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL) DRV - [2006-02-27 15:43:06 | 000,057,096 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB) DRV - [2006-01-10 00:00:04 | 000,022,016 | ---- | M] (Hewlett-Packard Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Accelerometer.sys -- (Accelerometer) DRV - [2006-01-10 00:00:04 | 000,017,920 | ---- | M] (Hewlett-Packard Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\hpdskflt.sys -- (hpdskflt) DRV - [2005-11-29 15:56:28 | 000,036,768 | ---- | M] (Infineon Technologies AG) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\psd.sys -- (PersonalSecureDrive) DRV - [2005-10-26 09:01:02 | 000,142,720 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\b57xp32.sys -- (b57w2k) DRV - [2005-10-21 10:19:34 | 000,036,352 | ---- | M] (Infineon Technologies AG) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ifxtpm.sys -- (IFXTPM) DRV - [2003-09-25 17:00:00 | 000,174,530 | ---- | M] (OmniVision Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ov519vid.sys -- (ovt519) DRV - [2001-10-26 16:07:38 | 000,036,425 | ---- | M] (SMC) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\smcirda.sys -- (SMCIRDA) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ IE - HKCU\..\SearchScopes,DefaultScope = {2CA87779-D83E-4CDD-B38E-3A8947D5403A} IE - HKCU\..\SearchScopes\{2CA87779-D83E-4CDD-B38E-3A8947D5403A}: "URL" = http://www.google.pl/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage} IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) [2012-11-07 21:07:54 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [color=#E56717]========== Chrome ==========[/color] CHR - homepage: http://www.google.pl/ CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}&sugkey={google:suggestAPIKeyParameter} CHR - homepage: http://www.google.pl/ CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\23.0.1271.64\PepperFlash\pepflashplayer.dll CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\23.0.1271.64\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\23.0.1271.64\pdf.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll CHR - plugin: Java(TM) Platform SE 7 U9 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll CHR - plugin: Windows Presentation Foundation (Enabled) = C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll CHR - plugin: Java Deployment Toolkit 7.0.90.5 (Enabled) = C:\WINDOWS\system32\npDeployJava1.dll CHR - Extension: Dysk Google = C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\ CHR - Extension: YouTube = C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: Szukaj w Google = C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\ CHR - Extension: DealPly = C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\gaiilaahiahdejapggenmdmafpmbipje\3.0.7.2_0\ CHR - Extension: Gmail = C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2008-04-15 13:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (DealPly) - {A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} - C:\Program Files\DealPly\DealPlyIE.dll (DealPly Technologies Ltd) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found. O4 - HKLM..\Run: [AccelerometerSysTrayApplet] C:\WINDOWS\system32\accelerometerST.exe (Hewlett-Packard Corporation) O4 - HKLM..\Run: [PTHOSTTR] C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE (Hewlett-Packard Development Company, L.P.) O4 - HKCU..\Run: [AQQ] C:\Program Files\WapSter\WapSter AQQ\AQQ.exe () O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\BTTray.lnk = C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.) O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: Wyślij do interfejsu &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm () O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra 'Tools' menuitem : @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 8.8.8.8 8.8.4.4 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9A9A4E22-C6AB-477A-9180-250078B0EC99}: DhcpNameServer = 8.8.8.8 8.8.4.4 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F03AE6AD-201B-47B1-992C-18720E59C236}: DhcpNameServer = 217.30.129.149 217.30.137.200 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.) O20 - Winlogon\Notify\IfxWlxEN: DllName - (IfxWlxEN.dll) - C:\WINDOWS\System32\IfxWlxEN.dll (Infineon Technologies AG) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2011-07-18 15:51:56 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2007-04-26 10:41:01 | 000,279,236 | R--- | M] () - D:\autorun.cdd -- [ CDFS ] O32 - AutoRun File - [2007-04-26 10:41:00 | 002,408,448 | R--- | M] () - D:\autorun.exe -- [ CDFS ] O32 - AutoRun File - [2007-04-26 10:41:01 | 000,000,043 | R--- | M] () - D:\autorun.inf -- [ CDFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-11-09 23:17:51 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Ja\Pulpit\OTL.exe [2012-11-09 23:00:02 | 000,329,088 | ---- | C] (AVAST Software) -- C:\Documents and Settings\Ja\Moje dokumenty\aswclear.exe [2012-11-09 16:50:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Atomówki - Zwierzęca heca Mojo Jojo [2012-11-09 16:49:47 | 000,000,000 | ---D | C] -- C:\Program Files\Atomowki [2012-11-09 14:34:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Moje dokumenty\Downloads [2012-11-08 23:26:04 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Ja\Menu Start\Programy\Narzędzia administracyjne [2012-11-08 23:25:21 | 000,000,000 | -H-D | C] -- C:\WINDOWS\System32\GroupPolicy [2012-11-08 23:24:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\NtmsData [2012-11-08 19:36:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Google Chrome [2012-11-08 19:35:23 | 000,000,000 | ---D | C] -- C:\Program Files\Google [2012-11-08 19:35:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\Google [2012-11-08 19:35:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\Deployment [2012-11-08 19:31:58 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Ja\Recent [2012-11-08 19:23:51 | 000,005,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstee.sys [2012-11-08 19:23:48 | 000,010,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ndisip.sys [2012-11-08 19:23:47 | 000,015,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\streamip.sys [2012-11-08 19:23:46 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ipsink.ax [2012-11-08 19:23:46 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ipsink.ax [2012-11-08 19:23:45 | 000,011,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\slip.sys [2012-11-08 19:23:43 | 000,019,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wstcodec.sys [2012-11-08 19:23:41 | 000,085,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nabtsfec.sys [2012-11-08 19:23:39 | 000,017,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ccdecode.sys [2012-11-08 19:23:15 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kswdmcap.ax [2012-11-08 19:23:15 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kswdmcap.ax [2012-11-08 19:23:15 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kstvtune.ax [2012-11-08 19:23:15 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kstvtune.ax [2012-11-08 19:23:15 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vidcap.ax [2012-11-08 19:23:15 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\vidcap.ax [2012-11-08 19:23:15 | 000,000,000 | ---D | C] -- C:\WINDOWS\OvtCam [2012-11-08 19:23:14 | 000,054,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vfwwdm32.dll [2012-11-08 19:23:14 | 000,054,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\vfwwdm32.dll [2012-11-08 19:23:14 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksxbar.ax [2012-11-08 19:23:14 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ksxbar.ax [2012-11-08 19:23:00 | 000,000,000 | ---D | C] -- C:\Program Files\directx [2012-11-08 19:22:56 | 000,307,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\vidcap32.exe [2012-11-08 19:22:56 | 000,174,530 | ---- | C] (OmniVision Technologies, Inc.) -- C:\WINDOWS\System32\drivers\ov519vid.sys [2012-11-08 19:22:56 | 000,135,168 | ---- | C] (OmniVision Technologies, Inc.) -- C:\WINDOWS\ov519cap.exe [2012-11-08 19:22:56 | 000,061,440 | ---- | C] (OmniVision Technologies, Inc.) -- C:\WINDOWS\ov519dib.dll [2012-11-08 19:22:56 | 000,040,960 | ---- | C] (OmniVision Technologies Inc.) -- C:\WINDOWS\System32\ov519ext.dll [2012-11-08 19:22:56 | 000,025,211 | ---- | C] (OmniVision Technologies Inc.) -- C:\WINDOWS\System32\drivers\ov519cmd.sys [2012-11-08 19:22:56 | 000,025,099 | ---- | C] (OmniVision Technologies Inc.) -- C:\WINDOWS\System32\ov519ext.ax [2012-11-08 19:22:56 | 000,016,426 | ---- | C] (OmniVision Technologies Inc.) -- C:\WINDOWS\System32\ov519usd.dll [2012-11-08 19:22:56 | 000,000,000 | ---D | C] -- C:\Program Files\VGA USB Camera [2012-11-08 19:22:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\VGA USB Camera [2012-11-08 19:19:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\DealPly [2012-11-08 19:19:21 | 000,000,000 | ---D | C] -- C:\Program Files\DealPly [2012-11-08 19:14:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\PackageAware [2012-11-08 19:14:04 | 007,100,752 | ---- | C] (SmartTweak Software ) -- C:\Documents and Settings\Ja\Moje dokumenty\Win68791drv.exe [2012-11-08 18:01:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Pulpit\filmy [2012-11-08 17:47:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\WapSter [2012-11-08 17:47:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Menu Start\Programy\WapSter [2012-11-08 17:47:26 | 000,000,000 | ---D | C] -- C:\Program Files\WapSter [2012-11-08 17:41:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Pulpit\2012-03-02 [2012-11-08 17:41:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Pulpit\2012-04-29 [2012-11-08 17:39:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Pulpit\Originals [2012-11-08 17:39:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Pulpit\filmy2 [2012-11-08 17:39:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Pulpit\film flip [2012-11-08 17:39:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Pulpit\2012-07-08 [2012-11-08 17:39:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Pulpit\2012-05-25 [2012-11-08 17:39:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Pulpit\2012-05-24 [2012-11-08 17:39:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Pulpit\2012-05-19 [2012-11-08 17:38:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Pulpit\2012-02-17 [2012-11-08 17:21:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Pulpit\2011-07 [2012-11-08 17:21:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Pulpit\2010-11-19 [2012-11-08 17:19:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Pulpit\2011-04 [2012-11-08 17:19:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Pulpit\2011-01 [2012-11-08 17:19:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Pulpit\2011-11 [2012-11-08 17:19:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Pulpit\2010-12-02 [2012-11-08 17:18:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Pulpit\2012-01-19 [2012-11-08 17:18:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Pulpit\2011-12 [2012-11-08 17:18:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Pulpit\2011-09 [2012-11-08 17:18:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Pulpit\2011-05 [2012-11-08 17:17:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Pulpit\2011-02-27 [2012-11-08 17:17:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Pulpit\2010-12 [2012-11-08 17:17:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Pulpit\2010-10-09 [2012-11-08 17:09:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Pulpit\Świnoujście 2010.07 [2012-11-08 17:09:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Pulpit\Nowy folder [2012-11-08 17:07:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Pulpit\niechorze 2012 [2012-11-08 16:40:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\CCleaner [2012-11-08 16:40:08 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner [2012-11-08 07:15:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Dane aplikacji\Skype [2012-11-08 07:15:47 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype [2012-11-08 07:15:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Skype [2012-11-08 07:15:46 | 000,000,000 | R--D | C] -- C:\Program Files\Skype [2012-11-08 07:15:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Skype [2012-11-08 06:56:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\Sun [2012-11-07 21:14:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\appmgmt [2012-11-07 21:12:53 | 000,060,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbaudio.sys [2012-11-07 21:10:05 | 000,032,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbccgp.sys [2012-11-07 21:08:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Dane aplikacji\VideoConverterPackages [2012-11-07 21:08:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Extensions [2012-11-07 21:08:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\searchplugins [2012-11-07 21:07:54 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox [2012-11-07 21:07:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Dane aplikacji\Babylon [2012-11-07 21:07:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Babylon [2012-11-07 20:33:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Ask [2012-11-07 20:33:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Sun [2012-11-07 20:33:31 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java [2012-11-07 20:33:26 | 000,821,736 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\npDeployJava1.dll [2012-11-07 20:33:26 | 000,746,984 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\deployJava1.dll [2012-11-07 20:33:26 | 000,246,760 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javaws.exe [2012-11-07 20:33:26 | 000,143,872 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javacpl.cpl [2012-11-07 20:33:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Dane aplikacji\.minecraft [2012-11-07 20:33:11 | 000,174,056 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javaw.exe [2012-11-07 20:33:11 | 000,174,056 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\java.exe [2012-11-07 20:33:11 | 000,093,672 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\WindowsAccessBridge.dll [2012-11-07 20:32:57 | 000,000,000 | ---D | C] -- C:\Program Files\Java [2012-11-07 20:30:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Dane aplikacji\Sun [2012-11-07 18:52:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Pulpit\rzeczy dziwne i muzyka [2012-11-07 17:58:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Pulpit\gry Patryka i Weroniki [2012-11-07 16:00:25 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Ja\IECompatCache [2012-11-06 12:49:40 | 000,521,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jsdbgui.dll [2012-11-06 12:45:05 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$hf_mig$ [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-11-09 23:17:58 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Ja\Pulpit\OTL.exe [2012-11-09 23:17:50 | 127,375,208 | ---- | M] () -- C:\Documents and Settings\Ja\Moje dokumenty\avast_internet_security_setup.exe [2012-11-09 23:07:34 | 000,012,598 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2012-11-09 23:07:15 | 000,001,024 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2012-11-09 23:07:10 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2012-11-09 23:02:45 | 000,002,596 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT [2012-11-09 23:00:12 | 000,329,088 | ---- | M] (AVAST Software) -- C:\Documents and Settings\Ja\Moje dokumenty\aswclear.exe [2012-11-09 22:40:01 | 000,001,028 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2012-11-09 17:30:45 | 000,002,267 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk [2012-11-08 19:37:01 | 000,001,819 | ---- | M] () -- C:\Documents and Settings\Ja\Pulpit\Google Chrome.lnk [2012-11-08 19:14:36 | 007,100,752 | ---- | M] (SmartTweak Software ) -- C:\Documents and Settings\Ja\Moje dokumenty\Win68791drv.exe [2012-11-08 17:38:23 | 000,005,120 | ---- | M] () -- C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-11-08 16:40:10 | 000,000,682 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\CCleaner.lnk [2012-11-07 21:07:06 | 001,153,808 | ---- | M] () -- C:\Documents and Settings\Ja\Moje dokumenty\VideoConverterSetup.exe [2012-11-07 20:33:03 | 000,093,672 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\WindowsAccessBridge.dll [2012-11-07 20:33:02 | 000,246,760 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javaws.exe [2012-11-07 20:33:02 | 000,174,056 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javaw.exe [2012-11-07 20:33:02 | 000,174,056 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\java.exe [2012-11-07 20:33:02 | 000,143,872 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javacpl.cpl [2012-11-07 20:33:01 | 000,821,736 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\npDeployJava1.dll [2012-11-07 20:33:01 | 000,746,984 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\deployJava1.dll [2012-11-07 19:56:59 | 000,000,815 | ---- | M] () -- C:\Documents and Settings\Ja\Pulpit\Internet Patryka.lnk [2012-11-07 17:54:46 | 000,491,314 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2012-11-07 17:54:46 | 000,433,138 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2012-11-07 17:54:46 | 000,084,526 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2012-11-07 17:54:46 | 000,068,094 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2012-11-07 17:49:52 | 000,096,664 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2012-11-02 11:16:42 | 000,012,540 | ---- | M] () -- C:\WINDOWS\System32\wpa.bak [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-11-09 23:17:42 | 127,375,208 | ---- | C] () -- C:\Documents and Settings\Ja\Moje dokumenty\avast_internet_security_setup.exe [2012-11-08 19:37:01 | 000,001,819 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\Google Chrome.lnk [2012-11-08 19:35:26 | 000,001,028 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2012-11-08 19:35:26 | 000,001,024 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2012-11-08 19:22:56 | 000,200,704 | ---- | C] () -- C:\WINDOWS\sel3110.exe [2012-11-08 19:22:56 | 000,040,960 | ---- | C] () -- C:\WINDOWS\CleanDev.exe [2012-11-08 19:22:56 | 000,032,528 | ---- | C] () -- C:\WINDOWS\amcap.exe [2012-11-08 17:38:22 | 000,005,120 | ---- | C] () -- C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-11-08 16:40:10 | 000,000,682 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\CCleaner.lnk [2012-11-08 07:15:47 | 000,002,267 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk [2012-11-07 21:06:54 | 001,153,808 | ---- | C] () -- C:\Documents and Settings\Ja\Moje dokumenty\VideoConverterSetup.exe [2012-11-07 19:56:59 | 000,000,815 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\Internet Patryka.lnk [2012-11-06 12:45:05 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll [2012-11-06 12:45:05 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\dllcache\iacenc.dll [2011-07-21 14:30:21 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin [2011-07-18 17:41:51 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2011-07-18 17:40:37 | 000,096,664 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2011-07-18 17:05:21 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4926.dll [2011-07-18 15:54:30 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2011-07-18 15:48:53 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [color=#E56717]========== ZeroAccess Check ==========[/color] [2011-07-19 09:46:44 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shdocvw.dll -- [2011-04-25 15:47:33 | 001,510,400 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009-02-09 11:53:44 | 000,473,600 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008-04-15 13:00:00 | 000,273,920 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [color=#E56717]========== LOP Check ==========[/color] [2012-11-07 20:33:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Ask [2012-11-07 21:07:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Babylon [2011-07-18 16:59:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Infineon [2011-07-21 15:23:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PassMark [2012-11-08 19:29:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP [2012-11-09 16:42:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\.minecraft [2012-11-07 21:07:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Babylon [2011-07-18 16:59:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Infineon [2012-11-07 21:08:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\VideoConverterPackages [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 122 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:BC359956 < End of report >