OTL logfile created on: 2012-11-11 18:37:35 - Run 1 OTL by OldTimer - Version 3.2.53.1 Folder = D:\Użytki\P O L I C J A _ H E L P Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 502,80 Mb Total Physical Memory | 329,48 Mb Available Physical Memory | 65,53% Memory free 1,20 Gb Paging File | 1,08 Gb Available in Paging File | 90,30% Paging File free Paging file location(s): C:\pagefile.sys 756 1512 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 41,01 Gb Total Space | 25,99 Gb Free Space | 63,37% Space Free | Partition Type: NTFS Drive D: | 465,76 Gb Total Space | 62,73 Gb Free Space | 13,47% Space Free | Partition Type: NTFS Drive E: | 145,29 Gb Total Space | 13,91 Gb Free Space | 9,58% Space Free | Partition Type: NTFS Computer Name: SYMFONIA | User Name: raddor71 | Logged in as Administrator. Boot Mode: SafeMode | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-08-03 10:21:08 | 000,595,968 | ---- | M] (OldTimer Tools) -- D:\Użytki\P O L I C J A _ H E L P\OTL_[www.programosy.pl].exe PRC - [2009-04-22 19:58:28 | 001,850,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012-10-11 12:17:06 | 002,069,528 | ---- | M] () -- c:\Documents and Settings\All Users\Dane aplikacji\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.dll MOD - [2010-01-30 01:41:12 | 004,254,560 | ---- | M] () -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF MOD - [2009-02-27 15:34:20 | 000,311,296 | ---- | M] () -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\pdfshell.POL MOD - [2008-05-02 05:15:37 | 000,010,240 | ---- | M] () -- C:\Program Files\Unlocker\UnlockerCOM.dll MOD - [2008-03-29 13:12:20 | 000,159,744 | ---- | M] () -- C:\Program Files\SubEdit-Player\codec\MatroskaSplitter\mmfinfo.dll MOD - [2008-03-29 13:11:52 | 000,023,552 | ---- | M] () -- C:\Program Files\SubEdit-Player\codec\MatroskaSplitter\mkunicode.dll MOD - [2005-07-22 07:21:46 | 000,032,768 | ---- | M] () -- C:\Program Files\MP3 Player Utilities 4.00\AMVConverter\AmvTransform.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Auto | Stopped] -- C:\Program Files\mks_vir_9\bin\mks_services.exe -- (mks_services) SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ) SRV - [2012-11-10 21:51:48 | 000,250,808 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2012-11-09 05:38:34 | 000,711,112 | ---- | M] () [Auto | Stopped] -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\13.2.0\ToolbarUpdater.exe -- (vToolbarUpdater13.2.0) SRV - [2012-10-27 19:04:23 | 000,115,168 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2012-10-11 12:17:59 | 002,312,216 | ---- | M] () [Auto | Stopped] -- C:\Documents and Settings\All Users\Dane aplikacji\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe -- (Browser Manager) SRV - [2012-10-02 12:13:44 | 003,064,000 | ---- | M] (Skype Technologies S.A.) [Auto | Stopped] -- C:\Documents and Settings\All Users\Dane aplikacji\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service) SRV - [2012-09-15 23:04:55 | 000,161,768 | ---- | M] (Oracle Corporation) [Auto | Stopped] -- C:\Program Files\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService) SRV - [2012-08-13 02:24:48 | 005,167,736 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Stopped] -- C:\Program Files\AVG\AVG2012\avgidsagent.exe -- (AVGIDSAgent) SRV - [2012-07-13 12:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2012-05-10 17:04:59 | 000,008,192 | ---- | M] () [Auto | Stopped] -- C:\WINDOWS\system32\srvany.exe -- (KMService) SRV - [2012-02-14 03:53:38 | 000,193,288 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Stopped] -- C:\Program Files\AVG\AVG2012\avgwdsvc.exe -- (avgwd) SRV - [2010-03-25 09:25:22 | 030,969,208 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service) SRV - [2010-01-15 13:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - [2012-11-09 05:38:35 | 000,026,984 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgtpx86.sys -- (avgtp) DRV - [2012-08-24 14:43:18 | 000,301,920 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\avgtdix.sys -- (Avgtdix) DRV - [2012-07-26 02:21:30 | 000,237,408 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\avgldx86.sys -- (Avgldx86) DRV - [2012-04-19 03:50:26 | 000,024,896 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\avgidshx.sys -- (AVGIDSHX) DRV - [2012-01-31 03:46:50 | 000,031,952 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\avgrkx86.sys -- (Avgrkx86) DRV - [2011-12-23 12:32:14 | 000,041,040 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Stopped] -- C:\WINDOWS\system32\drivers\avgmfx86.sys -- (Avgmfx86) DRV - [2011-12-23 12:32:08 | 000,017,232 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\avgidsshimx.sys -- (AVGIDSShim) DRV - [2011-12-23 12:32:06 | 000,024,144 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\avgidsfilterx.sys -- (AVGIDSFilter) DRV - [2011-12-23 12:32:00 | 000,139,856 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\avgidsdriverx.sys -- (AVGIDSDriver) DRV - [2010-11-29 12:22:44 | 005,117,056 | ---- | M] (Etron) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ETdrv.sys -- (USBET) DRV - [2010-04-12 09:44:34 | 000,059,388 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\scdemu.sys -- (SCDEmu) DRV - [2008-05-02 05:15:44 | 000,004,096 | ---- | M] () [Kernel | Unavailable | Unknown] -- C:\Program Files\Unlocker\UnlockerDriver5.sys -- (UnlockerDriver5) DRV - [2002-06-13 04:37:16 | 000,045,568 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\R8139n51.sys -- (rtl8139) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://startsear.ch/?aff=2&cf=9fb6fc0e-fc41-11e1-9970-001966e0ca90 IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKLM\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://startsear.ch/?aff=2&src=sp&cf=9fb6fc0e-fc41-11e1-9970-001966e0ca90&q={searchTerms} IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/ IE - HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchURL\g, = http://www.google.com/search?q=%s IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/ IE - HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchURL\g, = http://www.google.com/search?q=%s IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/ IE - HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchURL\g, = http://www.google.com/search?q=%s IE - HKU\S-1-5-21-1801674531-1592454029-1177238915-1003\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page = http://isearch.babylon.com/?affID=116222&tt=4312_2&babsrc=HP_ss&mntrId=90bc6f86000000000000001966e0ca90 IE - HKU\S-1-5-21-1801674531-1592454029-1177238915-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://isearch.avg.com/?cid={67264E23-C096-4DC4-94DF-CBFC79EF4872}&mid=d5b227feaf9a47d0b4f9d15020042363-ad1491be2ce6c122f6b66faa90e70c2decf7d34c&lang=pl&ds=gm011&pr=sa&d=2012-05-24 10:46:46&v=12.2.5.32&sap=hp IE - HKU\S-1-5-21-1801674531-1592454029-1177238915-1003\Software\Microsoft\Internet Explorer\SearchURL\g, = http://www.google.com/search?q=%s IE - HKU\S-1-5-21-1801674531-1592454029-1177238915-1003\..\SearchScopes,bProtectorDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} IE - HKU\S-1-5-21-1801674531-1592454029-1177238915-1003\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} IE - HKU\S-1-5-21-1801674531-1592454029-1177238915-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-21-1801674531-1592454029-1177238915-1003\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://isearch.babylon.com/?q={searchTerms}&affID=116222&tt=4312_2&babsrc=SP_ss&mntrId=90bc6f86000000000000001966e0ca90 IE - HKU\S-1-5-21-1801674531-1592454029-1177238915-1003\..\SearchScopes\{318BBB24-68BA-4D87-A97C-A9ADE5B5127B}: "URL" = https://isearch.avg.com/search?cid={67264E23-C096-4DC4-94DF-CBFC79EF4872}&mid=d5b227feaf9a47d0b4f9d15020042363-ad1491be2ce6c122f6b66faa90e70c2decf7d34c&lang=pl&ds=gm011&pr=sa&d=2012-05-24 10:46:46&v=12.2.5.32&sap=dsp&q={searchTerms} IE - HKU\S-1-5-21-1801674531-1592454029-1177238915-1003\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://startsear.ch/?aff=2&src=sp&cf=9fb6fc0e-fc41-11e1-9970-001966e0ca90&q={searchTerms} IE - HKU\S-1-5-21-1801674531-1592454029-1177238915-1003\..\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}: "URL" = http://mystart.incredimail.com/?search={searchTerms}&loc=search_box_fs_IM2_TEST IE - HKU\S-1-5-21-1801674531-1592454029-1177238915-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultengine: "Web Search" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.startup.homepage: "http://www.onet.pl/" FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_5_502_110.dll () FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\13.2.0\\npsitesafety.dll () FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.2.72: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.2.72: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.2.72: C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.2.72: C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=15.0.2.72: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012-03-17 14:08:55 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files\AVG\AVG2012\Firefox4\ [2012-09-11 07:52:04 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\avg@toolbar: C:\Documents and Settings\All Users\Dane aplikacji\AVG Secure Search\FireFoxExt\13.2.0.5 [2012-11-09 05:39:46 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-10-27 19:04:24 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-10-13 03:10:30 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{b64982b1-d112-42b5-b1e4-d3867c4533f8}: C:\Documents and Settings\All Users\Dane aplikacji\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\FirefoxExtension [2012-10-24 09:58:22 | 000,000,000 | ---D | M] [2012-03-16 19:25:52 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\raddor71\Dane aplikacji\Mozilla\Extensions [2012-10-24 10:16:00 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\raddor71\Dane aplikacji\Mozilla\Firefox\Profiles\pemjf64e.default\extensions [2012-10-24 09:58:20 | 000,002,537 | ---- | M] () -- C:\Documents and Settings\raddor71\Dane aplikacji\Mozilla\Firefox\Profiles\pemjf64e.default\searchplugins\browsemngr.xml [2012-03-17 12:29:21 | 000,002,038 | ---- | M] () -- C:\Documents and Settings\raddor71\Dane aplikacji\Mozilla\Firefox\Profiles\pemjf64e.default\searchplugins\MyStart Search.xml [2012-09-11 19:51:21 | 000,000,792 | ---- | M] () -- C:\Documents and Settings\raddor71\Dane aplikacji\Mozilla\Firefox\Profiles\pemjf64e.default\searchplugins\startsear.xml [2012-10-13 03:10:19 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2012-11-03 13:36:27 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2012-11-09 05:39:46 | 000,000,000 | ---D | M] (AVG Security Toolbar) -- C:\DOCUMENTS AND SETTINGS\ALL USERS\DANE APLIKACJI\AVG SECURE SEARCH\FIREFOXEXT\13.2.0.5 [2012-03-17 14:08:55 | 000,000,000 | ---D | M] (RealPlayer Browser Record Plugin) -- C:\DOCUMENTS AND SETTINGS\ALL USERS\DANE APLIKACJI\REAL\REALPLAYER\BROWSERRECORDPLUGIN\FIREFOX\EXT [2012-10-27 19:04:24 | 000,261,600 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2011-10-27 14:45:50 | 000,083,456 | ---- | M] (LiveVDO ) -- C:\Program Files\mozilla firefox\plugins\npvsharetvplg.dll [2011-07-11 22:48:12 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll [2012-09-10 22:08:41 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2012-11-09 05:38:53 | 000,003,574 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\avg-secure-search.xml [2012-10-24 09:57:30 | 000,002,351 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml [2012-09-10 22:08:41 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2012-09-10 22:08:41 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2012-09-10 22:08:41 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2012-09-10 22:08:41 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2012-09-10 22:08:41 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms} CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\23.0.1271.64\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\23.0.1271.64\pdf.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\23.0.1271.64\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nppl3260.dll CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nprpjplug.dll CHR - plugin: RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) (Enabled) = C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll CHR - plugin: Java Deployment Toolkit 6.0.210.7 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 6 U21 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nprjplug.dll CHR - plugin: Winamp Application Detector (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npwachk.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll CHR - plugin: RealNetworks(tm) Chrome Background Extension Plug-In (32-bit) (Enabled) = C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll CHR - plugin: Foxit Reader Plugin for Mozilla (Enabled) = C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll CHR - plugin: Default Plug-in (Enabled) = default_plugin CHR - Extension: YouTube = C:\Documents and Settings\raddor71\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_1\ CHR - Extension: Szukaj w Google = C:\Documents and Settings\raddor71\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_1\ CHR - Extension: RealPlayer HTML5Video Downloader Extension = C:\Documents and Settings\raddor71\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0\ CHR - Extension: AVG Safe Search = C:\Documents and Settings\raddor71\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.2210_0\ CHR - Extension: AVG Secure Search = C:\Documents and Settings\raddor71\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\13.2.0.5_0\ CHR - Extension: AVG Secure Search = C:\Documents and Settings\raddor71\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\13.2.0.5_0\.bak CHR - Extension: LiveVDO plugin = C:\Documents and Settings\raddor71\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pbiamblgmkgbcgbcgejjgebalncpmhnp\1.3_0\ CHR - Extension: Settings Protector = C:\Documents and Settings\raddor71\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pgafcinpmmpklohkojmllohdhomoefph\1.0_0\ CHR - Extension: Gmail = C:\Documents and Settings\raddor71\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\ O1 HOSTS File: ([2008-04-15 13:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Dane aplikacji\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer) O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG2012\avgssie.dll (AVG Technologies CZ, s.r.o.) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (IE5BarLauncherBHO Class) - {78F3A323-798E-4AEA-9A57-88F4B05FD5DD} - C:\Program Files\StartSearch plugin\ssBarLcher.dll (StartSearch Inc.) O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\13.2.0.5\AVG Secure Search_toolbar.dll () O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O3 - HKLM\..\Toolbar: (StartSearchToolBar) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files\StartSearch plugin\ssBarLcher.dll (StartSearch Inc.) O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\13.2.0.5\AVG Secure Search_toolbar.dll () O3 - HKLM\..\Toolbar: (no name) - {98889811-442D-49dd-99D7-DC866BE87DBC} - No CLSID value found. O3 - HKU\S-1-5-21-1801674531-1592454029-1177238915-1003\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found. O3 - HKU\S-1-5-21-1801674531-1592454029-1177238915-1003\..\Toolbar\WebBrowser: (StartSearchToolBar) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files\StartSearch plugin\ssBarLcher.dll (StartSearch Inc.) O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.) O4 - HKLM..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd File not found O4 - HKLM..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe (Brother Industries, Ltd.) O4 - HKLM..\Run: [Onet.pl AutoUpdate] "C:\Program Files\Common Files\Onet.pl\NewAutoUpdate.exe" /updateexetsr File not found O4 - HKLM..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE (PowerISO Computing, Inc.) O4 - HKLM..\Run: [ROC_ROC_JULY_P1] C:\Program Files\AVG Secure Search\ROC_ROC_JULY_P1.exe () O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Real\RealPlayer\update\realsched.exe (RealNetworks, Inc.) O4 - HKLM..\Run: [vProt] C:\Program Files\AVG Secure Search\vprot.exe () O4 - HKU\S-1-5-21-1801674531-1592454029-1177238915-1003..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe (IncrediMail, Ltd.) O4 - HKU\S-1-5-21-1801674531-1592454029-1177238915-1003..\Run: [Xvid] C:\Program Files\Xvid\CheckUpdate.exe () O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe (McAfee, Inc.) O4 - Startup: C:\Documents and Settings\raddor71\Menu Start\Programy\Autostart\ctfmon.lnk = C:\Documents and Settings\All Users\Dane aplikacji\lsass.exe (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1 O7 - HKU\S-1-5-21-1801674531-1592454029-1177238915-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1801674531-1592454029-1177238915-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1 O7 - HKU\S-1-5-21-1801674531-1592454029-1177238915-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1 O7 - HKU\S-1-5-21-1801674531-1592454029-1177238915-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1 O7 - HKU\S-1-5-21-1801674531-1592454029-1177238915-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1 O8 - Extra context menu item: Add to AMV Convert Tool... - C:\Program Files\MP3 Player Utilities 4.00\AMVConverter\grab.html () O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 4.00\MediaManager\grab.html () O8 - Extra context menu item: Wyślij &do programu OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation) O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Reg Error: Value error.) O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 89.231.1.206 217.172.224.160 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A0576557-7AE2-4D95-A3F7-4AAAF0A9C739}: DhcpNameServer = 89.231.1.206 217.172.224.160 O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\13.2.0\ViProtocol.dll () O20 - AppInit_DLLs: (c:\docume~1\alluse~1\daneap~1\browse~1\23796~1.11\{16cdf~1\browse~1.dll) - c:\Documents and Settings\All Users\Dane aplikacji\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.dll () O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2012-03-16 18:01:05 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2012-09-26 13:04:30 | 000,016,356 | ---- | M] () - C:\AutoMapaSetupLog.txt -- [ NTFS ] O33 - MountPoints2\{43f8ee48-ac02-11e1-9817-001966e0ca90}\Shell\AutoRun\command - "" = I:\AdobeReader\DSCI5271.jpg O33 - MountPoints2\{43f8ee48-ac02-11e1-9817-001966e0ca90}\Shell\Explore\command - "" = I:\AdobeReader\DSCI5271.jpg O33 - MountPoints2\{607f44db-b658-11e1-983c-001966e0ca90}\Shell\AutoRun\command - "" = I:\AdobeReader\DSCI5271.jpg O33 - MountPoints2\{607f44db-b658-11e1-983c-001966e0ca90}\Shell\Explore\command - "" = I:\AdobeReader\DSCI5271.jpg O33 - MountPoints2\{7f5e2000-25cb-11e2-9a07-001966e0ca90}\Shell - "" = Autorun O33 - MountPoints2\{7f5e2000-25cb-11e2-9a07-001966e0ca90}\Shell\AutoRun\command - "" = I:\setup.exe O33 - MountPoints2\{a312f439-7119-11e1-971f-001966e0ca90}\Shell\AutoRun\command - "" = J:\AdobeReader\DSCI5271.jpg O33 - MountPoints2\{a312f439-7119-11e1-971f-001966e0ca90}\Shell\Explore\command - "" = J:\AdobeReader\DSCI5271.jpg O34 - HKLM BootExecute: (autocheck autochk *) O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG2012\avgrsx.exe /sync /restart) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-11-11 16:45:18 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\raddor71\Recent [2012-11-11 05:53:59 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT [2012-11-11 05:52:34 | 000,000,000 | ---D | C] -- C:\Qoobox [2012-11-11 05:52:07 | 000,000,000 | R--D | C] -- C:\Documents and Settings\raddor71\Menu Start\Programy\Narzędzia administracyjne [2012-11-10 21:53:03 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\All Users\Dane aplikacji\lsass.exe [2012-11-10 21:09:18 | 000,696,760 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe [2012-11-10 21:05:39 | 016,361,912 | ---- | C] (Adobe Systems Incorporated) -- C:\Documents and Settings\raddor71\Pulpit\install_flash_player_11_plugin.exe [2012-11-09 21:13:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\raddor71\Pulpit\ztisp [2012-11-09 19:57:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\raddor71\Menu Start\Programy\Pingwinek Kelvin [2012-11-09 19:57:31 | 000,000,000 | ---D | C] -- C:\Program Files\Pingwinek Kelvin [2012-11-05 18:55:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\raddor71\Pulpit\toyota [2012-10-28 15:26:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\raddor71\Pulpit\Wycinanki [2012-10-24 09:58:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\raddor71\Menu Start\Programy\Browser Manager [2012-10-24 09:58:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Browser Manager [2012-10-24 09:57:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Babylon [2012-10-24 09:57:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\raddor71\Dane aplikacji\Babylon [2012-10-24 09:56:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\raddor71\Dane aplikacji\GoforFiles [2012-10-22 09:27:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\raddor71\Pulpit\Nowy folder [2012-10-20 19:43:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\raddor71\Moje dokumenty\Hasbro [2012-10-16 08:50:57 | 000,000,000 | ---D | C] -- C:\Program Files\Tlen7 [2012-10-13 20:41:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\raddor71\Dane aplikacji\Tlen.pl [2012-10-13 03:10:17 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-11-11 18:26:07 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2012-11-11 18:24:51 | 083,023,306 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\dsgsdgdsgdsgw.pad [2012-11-11 18:24:16 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1801674531-1592454029-1177238915-1003.job [2012-11-11 18:24:12 | 000,001,036 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2012-11-11 18:24:02 | 000,000,282 | ---- | M] () -- C:\WINDOWS\tasks\Go for FilesUpdate.job [2012-11-11 18:23:57 | 000,000,320 | ---- | M] () -- C:\WINDOWS\tasks\momvgxxwcs.job [2012-11-11 16:11:35 | 000,001,040 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2012-11-11 05:49:12 | 000,000,930 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job [2012-11-11 05:31:39 | 000,001,324 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat [2012-11-10 21:53:54 | 000,001,058 | ---- | M] () -- C:\Documents and Settings\raddor71\Menu Start\Programy\Autostart\ctfmon.lnk [2012-11-10 21:53:03 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\All Users\Dane aplikacji\lsass.exe [2012-11-10 21:51:27 | 000,696,760 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe [2012-11-10 21:51:27 | 000,073,656 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl [2012-11-10 21:06:36 | 016,361,912 | ---- | M] (Adobe Systems Incorporated) -- C:\Documents and Settings\raddor71\Pulpit\install_flash_player_11_plugin.exe [2012-11-10 17:08:15 | 099,834,502 | ---- | M] () -- C:\WINDOWS\System32\drivers\AVG\incavi.avm [2012-11-09 19:57:50 | 000,001,575 | ---- | M] () -- C:\Documents and Settings\raddor71\Pulpit\Pingwinek Kelvin.lnk [2012-11-09 05:38:35 | 000,026,984 | ---- | M] (AVG Technologies) -- C:\WINDOWS\System32\drivers\avgtpx86.sys [2012-11-08 18:21:35 | 000,157,081 | ---- | M] () -- C:\WINDOWS\System32\drivers\AVG\iavichjg.avm [2012-11-07 23:22:39 | 000,003,176 | ---- | M] () -- C:\WINDOWS\VPlayer.INI [2012-11-07 23:22:38 | 000,000,085 | ---- | M] () -- C:\WINDOWS\VplayerINI.vpl [2012-11-07 08:52:22 | 000,022,016 | ---- | M] () -- C:\Documents and Settings\raddor71\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-11-05 22:54:21 | 000,512,115 | ---- | M] () -- C:\Documents and Settings\raddor71\Pulpit\W3.pdf [2012-11-05 06:54:46 | 000,000,087 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\ftstate.ini [2012-11-01 11:59:02 | 000,000,292 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1801674531-1592454029-1177238915-1003.job [2012-10-31 15:14:44 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2012-10-28 09:57:18 | 000,355,486 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2012-10-28 09:57:18 | 000,311,604 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2012-10-28 09:57:18 | 000,049,492 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2012-10-28 09:57:18 | 000,039,992 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2012-10-13 20:40:46 | 018,627,992 | ---- | M] () -- C:\Documents and Settings\raddor71\Pulpit\tlenwindows-7.0.2.1.exe [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-11-10 22:14:10 | 000,001,324 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat [2012-11-10 21:53:50 | 000,001,058 | ---- | C] () -- C:\Documents and Settings\raddor71\Menu Start\Programy\Autostart\ctfmon.lnk [2012-11-10 21:53:12 | 083,023,306 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\dsgsdgdsgdsgw.pad [2012-11-10 21:09:22 | 000,000,930 | ---- | C] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job [2012-11-09 19:57:50 | 000,001,575 | ---- | C] () -- C:\Documents and Settings\raddor71\Pulpit\Pingwinek Kelvin.lnk [2012-11-05 22:54:14 | 000,512,115 | ---- | C] () -- C:\Documents and Settings\raddor71\Pulpit\W3.pdf [2012-10-29 15:17:58 | 000,000,087 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\ftstate.ini [2012-10-24 10:07:42 | 000,000,320 | ---- | C] () -- C:\WINDOWS\tasks\momvgxxwcs.job [2012-10-24 09:56:39 | 000,000,282 | ---- | C] () -- C:\WINDOWS\tasks\Go for FilesUpdate.job [2012-10-13 20:40:18 | 018,627,992 | ---- | C] () -- C:\Documents and Settings\raddor71\Pulpit\tlenwindows-7.0.2.1.exe [2012-09-26 13:03:54 | 000,020,368 | ---- | C] () -- C:\Program Files\AutoMapa EU.md5 [2012-07-07 19:51:44 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Checkers3D.INI [2012-05-10 17:06:03 | 000,008,192 | ---- | C] () -- C:\WINDOWS\System32\srvany.exe [2012-04-23 21:49:35 | 000,032,256 | ---- | C] () -- C:\WINDOWS\System32\AVSredirect.dll [2012-04-23 11:50:29 | 000,107,520 | RHS- | C] () -- C:\WINDOWS\System32\TAKDSDecoder.dll [2012-04-13 08:01:26 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\iyvu9_32.dll [2012-03-19 14:58:41 | 000,122,884 | ---- | C] () -- C:\WINDOWS\UnGins.exe [2012-03-17 14:25:10 | 000,000,065 | ---- | C] () -- C:\Documents and Settings\raddor71\Dane aplikacji\AVSDVDPlayer.m3u [2012-03-17 14:13:40 | 000,645,632 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2012-03-17 14:13:40 | 000,240,640 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2012-03-16 19:25:47 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat [2012-03-16 19:25:02 | 000,022,016 | ---- | C] () -- C:\Documents and Settings\raddor71\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-03-16 18:44:55 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2012-03-16 18:43:50 | 000,284,520 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2012-03-16 18:23:48 | 000,000,800 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI [2012-03-16 18:23:48 | 000,000,027 | ---- | C] () -- C:\WINDOWS\BRPP2KA.INI [2012-03-16 18:22:07 | 000,000,050 | ---- | C] () -- C:\WINDOWS\System32\bridf07a.dat [2012-03-16 18:20:50 | 000,031,567 | ---- | C] () -- C:\WINDOWS\maxlink.ini [2012-03-16 18:14:33 | 000,233,472 | R--- | C] () -- C:\WINDOWS\System32\cmirmdrv.exe [2012-03-16 18:14:33 | 000,028,672 | R--- | C] () -- C:\WINDOWS\System32\cmirmdrv.dll [2012-03-16 18:14:26 | 000,000,092 | ---- | C] () -- C:\WINDOWS\CMISETUP.INI [2012-03-16 18:14:25 | 000,000,026 | ---- | C] () -- C:\WINDOWS\CMCDPLAY.INI [2012-03-16 18:14:23 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Wininit.ini [2012-03-16 18:14:17 | 000,266,240 | ---- | C] () -- C:\WINDOWS\CMIUninstall.exe [2012-03-16 18:14:17 | 000,225,280 | ---- | C] () -- C:\WINDOWS\CmiRmRedundDir.exe [2012-03-16 18:14:17 | 000,028,672 | ---- | C] () -- C:\WINDOWS\CMIRmDriver.dll [2012-03-16 18:12:08 | 000,003,494 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini [2012-03-16 18:12:07 | 000,010,288 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS [2012-03-16 18:06:13 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2012-03-16 18:05:07 | 010,111,999 | R--- | C] () -- C:\Program Files\KODEKI.exe [2012-03-16 18:02:08 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2012-03-16 17:57:27 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2012-03-16 17:35:28 | 000,003,176 | ---- | C] () -- C:\WINDOWS\VPlayer.INI [2012-03-16 17:03:07 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\ETCoInst.dll [2012-02-16 22:04:42 | 000,079,360 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [color=#E56717]========== LOP Check ==========[/color] [2012-03-17 14:11:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ashampoo [2012-03-19 06:31:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AVAST Software [2012-11-09 05:39:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AVG Secure Search [2012-10-24 17:26:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AVG2012 [2012-10-24 09:57:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Babylon [2012-10-24 09:58:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Browser Manager [2012-03-29 11:11:06 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Common Files [2012-03-17 13:57:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite [2012-03-17 12:59:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10 [2012-03-17 12:32:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\IM [2012-03-17 12:29:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\IncrediMail [2012-03-17 13:00:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla [2012-08-09 15:33:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Jezyk [2012-11-10 17:08:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\MFAData [2012-11-04 13:17:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ScanSoft [2012-05-06 16:51:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\The-Dogies [2012-05-25 15:49:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TuneUp Software [2012-05-25 15:46:04 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{32364CEA-7855-4A3C-B674-53D8E9B97936} [2012-06-06 18:15:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Softland [2012-03-17 14:11:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\raddor71\Dane aplikacji\Ashampoo [2012-03-17 14:17:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\raddor71\Dane aplikacji\AutoUpdate [2012-05-24 09:46:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\raddor71\Dane aplikacji\AVG Secure Search [2012-03-29 11:13:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\raddor71\Dane aplikacji\AVG2012 [2012-10-24 09:57:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\raddor71\Dane aplikacji\Babylon [2012-03-17 13:57:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\raddor71\Dane aplikacji\DAEMON Tools Lite [2012-11-10 21:12:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\raddor71\Dane aplikacji\Foxit Software [2012-03-17 13:05:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\raddor71\Dane aplikacji\Gadu-Gadu 10 [2012-10-24 09:56:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\raddor71\Dane aplikacji\GoforFiles [2012-03-17 13:01:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\raddor71\Dane aplikacji\ipla [2012-09-08 06:32:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\raddor71\Dane aplikacji\Kamerzysta [2012-03-19 08:13:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\raddor71\Dane aplikacji\Opera [2012-08-14 22:25:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\raddor71\Dane aplikacji\Oracle [2012-03-17 13:00:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\raddor71\Dane aplikacji\RDRM [2012-05-30 10:12:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\raddor71\Dane aplikacji\ScanSoft [2012-06-06 18:15:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\raddor71\Dane aplikacji\Softland [2012-10-13 20:53:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\raddor71\Dane aplikacji\Tlen.pl [2012-05-25 15:47:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\raddor71\Dane aplikacji\TuneUp Software [2012-11-11 18:24:02 | 000,000,282 | ---- | M] () -- C:\WINDOWS\Tasks\Go for FilesUpdate.job [2012-11-11 18:23:57 | 000,000,320 | ---- | M] () -- C:\WINDOWS\Tasks\momvgxxwcs.job [color=#E56717]========== Purity Check ==========[/color] < End of report >