OTL logfile created on: 2012-11-29 21:37:37 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = F:\ Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.2180) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 511,48 Mb Total Physical Memory | 121,58 Mb Available Physical Memory | 23,77% Memory free 1,22 Gb Paging File | 0,89 Gb Available in Paging File | 72,73% Paging File free Paging file location(s): D:\pagefile.sys 768 1536 [binary data] %SystemDrive% = D: | %SystemRoot% = D:\WINDOWS | %ProgramFiles% = D:\Program Files Drive C: | 17,88 Gb Total Space | 13,09 Gb Free Space | 73,19% Space Free | Partition Type: NTFS Drive D: | 56,64 Gb Total Space | 26,73 Gb Free Space | 47,20% Space Free | Partition Type: NTFS Drive F: | 3,73 Gb Total Space | 3,26 Gb Free Space | 87,43% Space Free | Partition Type: FAT32 Computer Name: XFGSJHNS-53D622 | User Name: daniel | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-11-14 18:04:56 | 000,602,112 | ---- | M] (OldTimer Tools) -- F:\OTL.exe PRC - [2010-12-16 06:19:28 | 012,984,928 | ---- | M] (GG Network S.A.) -- D:\Program Files\Gadu-Gadu 10\gg.exe PRC - [2010-10-13 16:21:08 | 000,111,928 | R--- | M] (SweetIM Technologies Ltd.) -- D:\Program Files\SweetIM\Messenger\SweetIM.exe PRC - [2010-10-06 20:42:25 | 000,185,872 | ---- | M] (RealNetworks, Inc.) -- D:\Program Files\Common Files\Real\Update_OB\realsched.exe PRC - [2005-05-10 18:31:22 | 000,241,664 | ---- | M] (Stardock) -- D:\Program Files\Common Files\stardock\SDMCP.exe PRC - [2005-04-29 18:22:26 | 000,266,240 | ---- | M] (NVIDIA Corporation) -- D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe PRC - [2005-04-29 18:21:06 | 000,139,264 | ---- | M] () -- D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe PRC - [2005-04-29 18:18:24 | 000,131,136 | ---- | M] (NVIDIA) -- D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe PRC - [2005-04-29 18:18:08 | 000,057,412 | ---- | M] (NVIDIA) -- D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe PRC - [2004-12-31 23:08:10 | 008,109,800 | ---- | M] (MediaGet LLC) -- D:\Documents and Settings\daniel\Ustawienia lokalne\Dane aplikacji\MediaGet2\mediaget.exe PRC - [2004-11-30 11:08:56 | 000,020,543 | ---- | M] (Apache Software Foundation) -- D:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe PRC - [2004-08-03 23:44:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- D:\WINDOWS\explorer.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2011-05-05 09:46:46 | 002,293,248 | ---- | M] () -- D:\Documents and Settings\daniel\Ustawienia lokalne\Dane aplikacji\MediaGet2\QtCore4.dll MOD - [2011-03-30 11:48:38 | 000,220,672 | ---- | M] () -- D:\Documents and Settings\daniel\Ustawienia lokalne\Dane aplikacji\MediaGet2\imageformats\qmng4.dll MOD - [2011-03-30 11:48:22 | 000,026,624 | ---- | M] () -- D:\Documents and Settings\daniel\Ustawienia lokalne\Dane aplikacji\MediaGet2\imageformats\qgif4.dll MOD - [2011-03-30 11:48:14 | 000,196,608 | ---- | M] () -- D:\Documents and Settings\daniel\Ustawienia lokalne\Dane aplikacji\MediaGet2\imageformats\qjpeg4.dll MOD - [2011-03-30 08:16:34 | 008,173,568 | ---- | M] () -- D:\Documents and Settings\daniel\Ustawienia lokalne\Dane aplikacji\MediaGet2\QtGui4.dll MOD - [2011-03-30 07:59:26 | 000,971,776 | ---- | M] () -- D:\Documents and Settings\daniel\Ustawienia lokalne\Dane aplikacji\MediaGet2\QtNetwork4.dll MOD - [2011-03-30 07:57:58 | 000,339,968 | ---- | M] () -- D:\Documents and Settings\daniel\Ustawienia lokalne\Dane aplikacji\MediaGet2\QtXml4.dll MOD - [2010-12-16 06:20:20 | 000,217,696 | ---- | M] () -- D:\Program Files\Gadu-Gadu 10\gglog.dll MOD - [2010-12-16 06:20:18 | 000,123,488 | ---- | M] () -- D:\Program Files\Gadu-Gadu 10\ggipcradioproxy.dll MOD - [2010-12-16 06:20:16 | 000,017,504 | ---- | M] () -- D:\Program Files\Gadu-Gadu 10\ggipc.dll MOD - [2010-12-16 06:20:12 | 000,027,744 | ---- | M] () -- D:\Program Files\Gadu-Gadu 10\ggcrypto.dll MOD - [2010-12-16 06:20:10 | 000,356,960 | ---- | M] () -- D:\Program Files\Gadu-Gadu 10\ggcommon.dll MOD - [2010-08-06 20:01:42 | 002,404,352 | ---- | M] () -- D:\Program Files\Gadu-Gadu 10\QtCore4.dll MOD - [2010-08-06 20:01:42 | 001,515,520 | ---- | M] () -- D:\Program Files\Gadu-Gadu 10\QtScript4.dll MOD - [2010-08-06 20:01:42 | 001,040,384 | ---- | M] () -- D:\Program Files\Gadu-Gadu 10\QtNetwork4.dll MOD - [2010-08-06 20:01:42 | 000,389,120 | ---- | M] () -- D:\Program Files\Gadu-Gadu 10\QtXml4.dll MOD - [2010-08-06 20:01:42 | 000,323,584 | ---- | M] () -- D:\Program Files\Gadu-Gadu 10\QtSvg4.dll MOD - [2010-08-06 20:01:40 | 013,553,664 | ---- | M] () -- D:\Program Files\Gadu-Gadu 10\QtWebKit4.dll MOD - [2010-08-06 20:01:38 | 008,818,688 | ---- | M] () -- D:\Program Files\Gadu-Gadu 10\QtGui4.dll MOD - [2010-08-06 20:01:22 | 003,334,144 | ---- | M] () -- D:\Program Files\Gadu-Gadu 10\QtXmlPatterns4.dll MOD - [2010-08-06 20:00:32 | 000,311,296 | ---- | M] () -- D:\Program Files\Gadu-Gadu 10\imageformats\qtiff4.dll MOD - [2010-08-06 20:00:32 | 000,274,432 | ---- | M] () -- D:\Program Files\Gadu-Gadu 10\imageformats\qmng4.dll MOD - [2010-08-06 20:00:32 | 000,143,360 | ---- | M] () -- D:\Program Files\Gadu-Gadu 10\imageformats\qjpeg4.dll MOD - [2010-08-06 20:00:32 | 000,027,648 | ---- | M] () -- D:\Program Files\Gadu-Gadu 10\imageformats\qgif4.dll MOD - [2010-08-06 20:00:32 | 000,018,944 | ---- | M] () -- D:\Program Files\Gadu-Gadu 10\imageformats\qsvg4.dll MOD - [2010-03-19 08:33:38 | 000,059,904 | ---- | M] () -- D:\Program Files\Gadu-Gadu 10\zlib1.dll MOD - [2009-02-27 20:04:20 | 000,311,296 | ---- | M] () -- D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\pdfshell.POL MOD - [2005-04-29 18:21:06 | 000,139,264 | ---- | M] () -- D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe MOD - [2005-04-29 17:52:32 | 000,024,691 | ---- | M] () -- D:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_auth.so MOD - [2004-12-31 23:08:21 | 011,742,440 | ---- | M] () -- D:\Documents and Settings\daniel\Ustawienia lokalne\Dane aplikacji\MediaGet2\QtWebKit4.dll MOD - [2004-12-31 23:08:14 | 002,267,368 | ---- | M] () -- D:\Documents and Settings\daniel\Ustawienia lokalne\Dane aplikacji\MediaGet2\libvlccore.dll MOD - [2004-12-31 23:08:11 | 000,105,192 | ---- | M] () -- D:\Documents and Settings\daniel\Ustawienia lokalne\Dane aplikacji\MediaGet2\libvlc.dll MOD - [2004-11-30 11:08:58 | 000,876,544 | ---- | M] () -- D:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\libeay32.dll MOD - [2004-11-30 11:08:58 | 000,159,744 | ---- | M] () -- D:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\ssleay32.dll MOD - [2004-08-03 23:44:04 | 000,014,336 | ---- | M] () -- D:\WINDOWS\system32\msdmo.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV - File not found [On_Demand | Stopped] -- %ProgramFiles%\WinPcap\rpcapd.exe -- (rpcapd) SRV - [2011-06-08 12:02:00 | 000,633,856 | ---- | M] (Nokia) [On_Demand | Stopped] -- D:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2005-04-29 18:21:06 | 000,139,264 | ---- | M] () [Auto | Running] -- D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe -- (ForceWare Intelligent Application Manager (IAM) SRV - [2005-04-29 18:18:24 | 000,131,136 | ---- | M] (NVIDIA) [Auto | Running] -- D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe -- (nSvcIp) SRV - [2005-04-29 18:18:08 | 000,057,412 | ---- | M] (NVIDIA) [Auto | Running] -- D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe -- (nSvcLog) SRV - [2004-11-30 11:08:56 | 000,020,543 | ---- | M] (Apache Software Foundation) [Auto | Running] -- D:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe -- (ForcewareWebInterface) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\XDva390.sys -- (XDva390) DRV - File not found [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\XDva389.sys -- (XDva389) DRV - File not found [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\XDva388.sys -- (XDva388) DRV - File not found [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\XDva386.sys -- (XDva386) DRV - File not found [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\XDva385.sys -- (XDva385) DRV - File not found [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\XDva383.sys -- (XDva383) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | On_Demand | Stopped] -- D:\DOCUME~1\daniel\USTAWI~1\Temp\u\1298543519\ntportio.sys -- (ntportio) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - File not found [Kernel | On_Demand | Unknown] -- D:\DOCUME~1\daniel\USTAWI~1\Temp\axxyafow.sys -- (axxyafow) DRV - File not found [Kernel | On_Demand | Stopped] -- D:\huadio.tmp -- (autorun) DRV - [2009-03-31 09:39:36 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\FsUsbExDisk.Sys -- (FsUsbExDisk) DRV - [2009-03-20 10:01:26 | 000,121,856 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\ss_bmdm.sys -- (ss_bmdm) DRV - [2009-03-20 10:01:26 | 000,090,112 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\ss_bbus.sys -- (ss_bbus) DRV - [2009-03-20 10:01:26 | 000,014,976 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\ss_bmdfl.sys -- (ss_bmdfl) DRV - [2008-12-26 12:56:04 | 000,017,792 | ---- | M] (Avnex) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\vcsvad.sys -- (VCSVADHWSer) DRV - [2008-08-26 09:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2006-08-29 15:56:20 | 000,032,377 | ---- | M] (B-phreaks) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\prodigy.sys -- (PRODIGY) DRV - [2005-05-17 10:45:08 | 000,092,800 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- D:\WINDOWS\system32\drivers\nvata.sys -- (nvata) DRV - [2005-04-05 20:22:30 | 000,012,928 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus) DRV - [2005-04-05 20:22:28 | 000,033,536 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD) DRV - [2004-08-13 03:56:20 | 000,005,810 | R--- | M] () [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\ASACPI.sys -- (MTsensor) DRV - [2004-08-04 00:08:22 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum) DRV - [2004-08-03 22:07:46 | 000,223,616 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- D:\WINDOWS\system32\drivers\tcpip6.sys -- (Tcpip6) DRV - [2004-08-03 22:03:36 | 000,088,448 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- D:\WINDOWS\system32\drivers\nwlnkipx.sys -- (NwlnkIpx) DRV - [2004-08-03 21:59:52 | 000,040,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\nmnt.sys -- (nm) DRV - [2001-08-17 23:00:04 | 000,002,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\msmpu401.sys -- (ms_mpu401) DRV - [2001-08-17 22:54:18 | 000,063,232 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- D:\WINDOWS\system32\drivers\nwlnknb.sys -- (NwlnkNb) DRV - [2001-08-17 22:54:18 | 000,055,936 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- D:\WINDOWS\system32\drivers\nwlnkspx.sys -- (NwlnkSpx) DRV - [2001-08-17 20:53:42 | 000,004,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\loop.sys -- (msloop) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.toggle.com/en/index.php?rvs=google IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=a4a215c80000000000000015f21798a6&tlver=1.4.23.10&affID=19591 IE - HKLM\..\SearchScopes,DefaultScope = {CA6A6E26-CFD5-494F-A81D-B1B248C6D71E} IE - HKLM\..\SearchScopes\{CA6A6E26-CFD5-494F-A81D-B1B248C6D71E}: "URL" = http://www.toggle.com/en/index.php?rvs=google IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&q={searchTerms} IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.bearshare.com/sidebar.html?src=ssb&sysid=2 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.toggle.com/en/index.php?rvs=google IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?babsrc=HP_ss&mntrId=a4a215c80000000000000015f21798a6&tlver=1.4.23.10&affID=19591 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb&sysid=2 IE - HKCU\..\URLSearchHook: {c2db4fe6-8409-45ce-8010-189a7b5cce86} - D:\Program Files\NCH\tbNCH.dll (Conduit Ltd.) IE - HKCU\..\URLSearchHook: {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - D:\Program Files\Softonic-Polska\tbSoft.dll (Conduit Ltd.) IE - HKCU\..\URLSearchHook: {d1fce654-5fd1-48ad-b13c-5064736120b7} - D:\Program Files\Soft32\prxtbSoft.dll (Conduit Ltd.) IE - HKCU\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - D:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll (SweetIM Technologies Ltd.) IE - HKCU\..\URLSearchHook: {F4F10C1D-87C7-404A-B4B3-000000000000} - SOFTWARE\Classes\CLSID\{F4F10C1D-87C7-404A-B4B3-000000000000}\InprocServer32 File not found IE - HKCU\..\SearchScopes,DefaultScope = {1F096B29-E9DA-4D64-8D63-936BE7762CC5} IE - HKCU\..\SearchScopes\{0D7562AE-8EF6-416d-A838-AB665251703A}: "URL" = http://start.facemoods.com/?a=ddr&s={searchTerms}&f=4 IE - HKCU\..\SearchScopes\{1F096B29-E9DA-4D64-8D63-936BE7762CC5}: "URL" = http://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=a4a215c80000000000000015f21798a6&tlver=1.4.23.10&affID=19591 IE - HKCU\..\SearchScopes\{7C9020A9-51F0-4dcd-8150-62C274A0D22A}: "URL" = http://home.speedbit.com/search.aspx?aff=106&q={searchTerms} IE - HKCU\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2117678 IE - HKCU\..\SearchScopes\{CA6A6E26-CFD5-494F-A81D-B1B248C6D71E}: "URL" = http://www.toggle.com/en/index.php?rvs=google IE - HKCU\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&q={searchTerms} IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..network.proxy.type: 0 FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: D:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: D:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: D:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.69: D:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.3.69: D:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.69: D:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: D:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: D:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: D:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: D:\Documents and Settings\daniel\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: D:\Documents and Settings\daniel\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: D:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: D:\Program Files\Real\RealPlayer\browserrecord [2010-10-06 20:42:33 | 000,000,000 | ---D | M] [2010-10-27 23:02:07 | 000,000,000 | ---D | M] (No name found) -- D:\Documents and Settings\daniel\Dane aplikacji\Mozilla\Extensions [2011-02-15 10:18:30 | 000,000,000 | ---D | M] (No name found) -- D:\Documents and Settings\daniel\Dane aplikacji\Mozilla\Firefox\Profiles\prbwnevz.default\extensions [2011-01-13 09:23:20 | 000,000,000 | ---D | M] (SweetIM Toolbar for Firefox) -- D:\Documents and Settings\daniel\Dane aplikacji\Mozilla\Firefox\Profiles\prbwnevz.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847} [2011-02-11 09:43:40 | 000,000,000 | ---D | M] (Facemoods) -- D:\Documents and Settings\daniel\Dane aplikacji\Mozilla\Firefox\Profiles\prbwnevz.default\extensions\ffxtlbr@Facemoods.com [2010-10-10 15:46:56 | 000,004,669 | ---- | M] () (No name found) -- D:\Documents and Settings\daniel\Dane aplikacji\Mozilla\Firefox\Profiles\prbwnevz.default\extensions\ffxtlbr@Facemoods.com\content\xpiInstallLgc.js [2011-06-23 08:01:20 | 000,000,000 | ---D | M] (No name found) -- D:\Program Files\Mozilla Firefox\extensions [2011-06-23 08:01:24 | 000,000,000 | ---D | M] (Babylon) -- D:\Program Files\Mozilla Firefox\extensions\ffxtlbr@babylon.com [2011-06-23 08:01:27 | 000,002,423 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\babylon.xml [2010-12-13 13:36:54 | 000,002,035 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\fcmdSrchddr.xml [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms} CHR - plugin: Shockwave Flash (Enabled) = D:\Documents and Settings\daniel\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\17.0.963.56\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = D:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll CHR - plugin: Java Deployment Toolkit 6.0.230.5 (Enabled) = D:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 6 U23 (Enabled) = D:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll CHR - plugin: Adobe Acrobat (Disabled) = D:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = D:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll CHR - plugin: RealPlayer Version Plugin (Enabled) = D:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = D:\PFiles\Plugins\np-mswmp.dll CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = D:\Documents and Settings\daniel\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\17.0.963.56\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = D:\Documents and Settings\daniel\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\17.0.963.56\pdf.dll CHR - plugin: Babylon Chrome Plugin (Enabled) = D:\Documents and Settings\daniel\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.0_0\BabylonChromePI.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = D:\Program Files\Windows Media Player\npdrmv2.dll CHR - plugin: Microsoft\u00AE DRM (Enabled) = D:\Program Files\Windows Media Player\npwmsdrm.dll CHR - plugin: Google Update (Enabled) = D:\Documents and Settings\daniel\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.69\npGoogleUpdate3.dll CHR - plugin: Google Earth Plugin (Enabled) = D:\Program Files\Google\Google Earth\plugin\npgeplugin.dll CHR - plugin: Pando Web Plugin (Enabled) = D:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll CHR - plugin: RealJukebox NS Plugin (Enabled) = D:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll CHR - plugin: Default Plug-in (Enabled) = default_plugin O1 HOSTS File: ([2011-02-21 14:35:59 | 000,000,740 | ---- | M]) - D:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (MediaBar) - {0974BA1E-64EC-11DE-B2A5-E43756D89593} - D:\PROGRA~1\BEARSH~1\MediaBar\ToolBar\BearshareMediabarDx.dll File not found O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - D:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll (RealPlayer) O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - D:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O2 - BHO: (NCH Toolbar) - {c2db4fe6-8409-45ce-8010-189a7b5cce86} - D:\Program Files\NCH\tbNCH.dll (Conduit Ltd.) O2 - BHO: (Softonic-Polska Toolbar) - {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - D:\Program Files\Softonic-Polska\tbSoft.dll (Conduit Ltd.) O2 - BHO: (Soft32 Toolbar) - {d1fce654-5fd1-48ad-b13c-5064736120b7} - D:\Program Files\Soft32\prxtbSoft.dll (Conduit Ltd.) O2 - BHO: (SweetIM Toolbar Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - D:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O3 - HKLM\..\Toolbar: (MediaBar) - {0974BA1E-64EC-11DE-B2A5-E43756D89593} - D:\PROGRA~1\BEARSH~1\MediaBar\ToolBar\BearshareMediabarDx.dll File not found O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - D:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (NCH Toolbar) - {c2db4fe6-8409-45ce-8010-189a7b5cce86} - D:\Program Files\NCH\tbNCH.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Softonic-Polska Toolbar) - {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - D:\Program Files\Softonic-Polska\tbSoft.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Soft32 Toolbar) - {d1fce654-5fd1-48ad-b13c-5064736120b7} - D:\Program Files\Soft32\prxtbSoft.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - D:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (NCH Toolbar) - {C2DB4FE6-8409-45CE-8010-189A7B5CCE86} - D:\Program Files\NCH\tbNCH.dll (Conduit Ltd.) O3 - HKCU\..\Toolbar\WebBrowser: (Softonic-Polska Toolbar) - {C86EB8A9-CCC2-4B6C-B75D-73576ED591BF} - D:\Program Files\Softonic-Polska\tbSoft.dll (Conduit Ltd.) O3 - HKCU\..\Toolbar\WebBrowser: (Soft32 Toolbar) - {D1FCE654-5FD1-48AD-B13C-5064736120B7} - D:\Program Files\Soft32\prxtbSoft.dll (Conduit Ltd.) O3 - HKCU\..\Toolbar\WebBrowser: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - D:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O4 - HKLM..\Run: [avast5] "D:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui File not found O4 - HKLM..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k File not found O4 - HKLM..\Run: [NiwradSoft Welcome] D:\WINDOWS\NiwradSoft Shell Pack\Tools\NS Welcome.exe File not found O4 - HKLM..\Run: [nTrayFw] D:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe (NVIDIA Corporation) O4 - HKLM..\Run: [NvCplDaemon] D:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] D:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NWEReboot] File not found O4 - HKLM..\Run: [RAM Idle Professional] D:\Program Files\RAM Idle LE\RAM_XP.exe File not found O4 - HKLM..\Run: [SweetIM] D:\Program Files\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.) O4 - HKLM..\Run: [TkBellExe] D:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.) O4 - HKCU..\Run: [ares] "D:\Program Files\Ares\Ares.exe" -h File not found O4 - HKCU..\Run: [Gadu-Gadu 10] D:\Program Files\Gadu-Gadu 10\gg.exe (GG Network S.A.) O4 - HKCU..\Run: [MediaGet2] D:\Documents and Settings\daniel\Ustawienia lokalne\Dane aplikacji\MediaGet2\mediaget.exe (MediaGet LLC) O4 - HKCU..\Run: [PKTray] D:\Program Files\Przyspiesz Komputer\PKTray.exe File not found O4 - HKCU..\Run: [Real Desktop] "D:\Program Files\Real Desktop\Real Desktop.exe" File not found O4 - HKCU..\Run: [Rubin] D:\Documents and Settings\daniel\Ustawienia lokalne\Dane aplikacji\Rubin\rubin.exe silent File not found O4 - HKCU..\Run: [SpeedConnectStartUp] File not found O4 - HKCU..\Run: [TZ Spyware Remover] D:\Program Files\TrackZapper.com\TZ Spyware Remover\SpyRem.exe /STARTUP File not found O4 - HKCU..\Run: [VoipDiscount] "D:\program files\voipdiscount.com\voipdiscount\voipdiscount.exe" -nosplash -minimized File not found O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRemoteRecursiveEvents = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStrCmpLogical = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoClose = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunStartupScriptSync = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SynchronousMachineGroupPolicy = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SynchronousUserGroupPolicy = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMBalloonTip = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSaveSettings = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: CDRAutoRun = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: MemCheckBoxInRunDlg = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoClose = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoAutoTrayNotify = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWelcomeScreen = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsNetHood = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktopCleanupWizard = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSharedDocuments = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoThemesTab = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoColorChoice = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispCPL = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispSettingsPage = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispScrSavPage = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoVisualStyleChoice = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoSizeChoice = 0 O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - D:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - D:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - D:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - D:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - D:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - D:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - D:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - D:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - D:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - D:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - D:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - D:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - D:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - D:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - D:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - D:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - D:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - D:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - D:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - D:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - D:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - D:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - D:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000023 - D:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000024 - D:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000025 - D:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000026 - D:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000027 - D:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000028 - D:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000029 - D:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000030 - D:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000031 - D:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000032 - D:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000033 - D:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000034 - D:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000035 - D:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000036 - D:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000073 - D:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8D6164D1-18A5-4B19-A09D-1B8BA1EE5476}: NameServer = 192.168.10.254 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C364FFCC-4405-437C-BC6E-C6E8AFD6FE90}: NameServer = 192.168.10.254 O20 - HKLM Winlogon: Shell - (explorer.exe) - D:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (D:\WINDOWS\system32\userinit.exe) - D:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O20 - Winlogon\Notify\MCPClient: DllName - (D:\PROGRA~1\COMMON~1\Stardock\mcpstub.dll) - D:\Program Files\Common Files\stardock\MCPStub.dll (Stardock) O21 - SSODL: 0aMCPClient - {F5DF91F9-15E9-416B-A7C3-7519B11ECBFC} - D:\Program Files\Common Files\stardock\MCPCore.dll (Stardock) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - Reg Error: Invalid data type. File not found O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: O24 - Desktop BackupWallPaper: O30 - LSA: Authentication Packages - (nwprovau) - D:\WINDOWS\System32\nwprovau.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-01-26 10:37:31 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2012-11-16 11:37:08 | 000,000,016 | -H-- | M] () - F:\AUTORUN.INF -- [ FAT32 ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [1 D:\WINDOWS\System32\*.tmp files -> D:\WINDOWS\System32\*.tmp -> ] [1 D:\WINDOWS\*.tmp files -> D:\WINDOWS\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-11-29 21:07:31 | 000,066,795 | ---- | M] () -- D:\WINDOWS\System32\nvapps.xml [2012-11-29 21:06:54 | 000,002,206 | ---- | M] () -- D:\WINDOWS\System32\wpa.dbl [2012-11-29 21:06:51 | 000,002,048 | --S- | M] () -- D:\WINDOWS\bootstat.dat [1 D:\WINDOWS\System32\*.tmp files -> D:\WINDOWS\System32\*.tmp -> ] [1 D:\WINDOWS\*.tmp files -> D:\WINDOWS\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-06-27 08:13:29 | 000,000,552 | ---- | C] () -- D:\WINDOWS\System32\d3d8caps.dat [2011-02-23 13:34:35 | 000,006,144 | ---- | C] () -- D:\WINDOWS\System32\BReWErS.dll [2011-02-21 19:27:47 | 000,182,275 | ---- | C] () -- D:\WINDOWS\System32\d3d10core.dll [2011-02-21 19:27:47 | 000,124,931 | ---- | C] () -- D:\WINDOWS\System32\dxgi.dll [2011-02-21 19:27:44 | 000,376,832 | ---- | C] () -- D:\WINDOWS\System32\M2000Twn.dll [2011-02-21 19:27:41 | 000,073,728 | ---- | C] () -- D:\WINDOWS\System32\CompressATI2.dll [2011-02-21 19:27:40 | 000,730,121 | ---- | C] () -- D:\Program Files\Common Files\unins000.exe [2011-02-21 19:27:40 | 000,003,019 | ---- | C] () -- D:\Program Files\Common Files\unins000.dat [2011-02-14 16:08:19 | 000,000,022 | ---- | C] () -- D:\WINDOWS\Resecik.ini [2011-02-14 14:20:02 | 000,130,048 | ---- | C] () -- D:\WINDOWS\System32\SpoonUninstall.exe [2011-02-11 17:32:32 | 000,000,023 | ---- | C] () -- D:\WINDOWS\DownloadStudio.INI [2011-02-11 16:35:55 | 000,000,033 | ---- | C] () -- D:\WINDOWS\DownloadStudioScheduleMonitor.INI [2010-12-30 14:57:12 | 000,110,592 | ---- | C] () -- D:\WINDOWS\System32\FsUsbExDevice.Dll [2010-12-30 14:57:11 | 000,036,608 | ---- | C] () -- D:\WINDOWS\System32\FsUsbExDisk.Sys [2010-12-30 14:56:57 | 000,002,528 | ---- | C] () -- D:\Documents and Settings\daniel\Dane aplikacji\$_hpcst$.hpc [2010-12-30 14:05:21 | 000,000,001 | ---- | C] () -- D:\Documents and Settings\daniel\SI.bin [2010-12-28 19:00:42 | 000,000,414 | RHS- | C] () -- D:\Documents and Settings\All Users\ntuser.pol [2010-12-28 09:14:03 | 000,000,150 | ---- | C] () -- D:\WINDOWS\cdplayer.ini [2010-12-27 17:06:31 | 000,005,810 | R--- | C] () -- D:\WINDOWS\System32\drivers\ASACPI.sys [2010-12-27 17:06:30 | 000,017,837 | ---- | C] () -- D:\WINDOWS\Ascd_tmp.ini [2010-12-27 17:06:24 | 000,005,824 | ---- | C] () -- D:\WINDOWS\System32\drivers\ASUSHWIO.SYS [2010-10-06 20:41:14 | 000,026,624 | ---- | C] () -- D:\Documents and Settings\daniel\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-10-05 17:58:21 | 000,000,588 | ---- | C] () -- D:\Documents and Settings\daniel\Ustawienia lokalne\Dane aplikacji\FASTWiz.html [color=#E56717]========== ZeroAccess Check ==========[/color] [2011-02-15 13:28:35 | 000,000,227 | RHS- | M] () -- D:\WINDOWS\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\SHDOCVW.DLL -- [2004-08-03 23:44:10 | 001,483,264 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = D:\WINDOWS\system32\wbem\fastprox.dll -- [2004-08-03 23:43:58 | 000,472,064 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = D:\WINDOWS\system32\wbem\wbemess.dll -- [2004-08-03 23:44:14 | 000,273,920 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [color=#E56717]========== LOP Check ==========[/color] [2010-12-27 18:22:32 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\Alwil Software [2011-02-11 13:32:24 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\BearShare [2011-04-13 20:11:52 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10 [2011-08-18 10:56:54 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\Installations [2011-10-03 16:28:56 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\Media Get LLC [2011-10-03 16:28:06 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\NCH Swift Sound [2011-08-18 07:31:03 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\Nokia [2011-04-14 12:00:27 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\OpenFM [2010-12-30 15:08:40 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\PC Suite [2011-10-02 21:52:36 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\PMB Files [2011-02-15 09:06:17 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\SpeedBit [2011-02-09 13:52:23 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\SweetIM [2011-02-15 09:06:09 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\TEMP [2011-02-11 13:33:24 | 000,000,000 | -H-D | M] -- D:\Documents and Settings\All Users\Dane aplikacji\{2A54CD87-60D4-4933-A69B-6E3C5686055A} [2011-02-15 09:38:41 | 000,000,000 | ---D | M] -- D:\Documents and Settings\daniel\Dane aplikacji\AIMP [2011-01-13 14:49:24 | 000,000,000 | ---D | M] -- D:\Documents and Settings\daniel\Dane aplikacji\Audacity [2011-01-13 11:34:26 | 000,000,000 | ---D | M] -- D:\Documents and Settings\daniel\Dane aplikacji\Avnex [2011-06-23 17:50:17 | 000,000,000 | ---D | M] -- D:\Documents and Settings\daniel\Dane aplikacji\BabylonToolbar [2011-02-17 13:47:52 | 000,000,000 | ---D | M] -- D:\Documents and Settings\daniel\Dane aplikacji\BlackBean [2011-02-11 16:35:55 | 000,000,000 | ---D | M] -- D:\Documents and Settings\daniel\Dane aplikacji\Conceiva [2011-02-16 10:54:59 | 000,000,000 | ---D | M] -- D:\Documents and Settings\daniel\Dane aplikacji\DMCache [2011-02-11 12:44:58 | 000,000,000 | ---D | M] -- D:\Documents and Settings\daniel\Dane aplikacji\facemoods.com [2011-02-02 21:59:06 | 000,000,000 | ---D | M] -- D:\Documents and Settings\daniel\Dane aplikacji\Fighters [2011-04-13 19:59:36 | 000,000,000 | ---D | M] -- D:\Documents and Settings\daniel\Dane aplikacji\Gadu-Gadu [2011-04-13 21:28:18 | 000,000,000 | ---D | M] -- D:\Documents and Settings\daniel\Dane aplikacji\Gadu-Gadu 10 [2011-02-11 17:33:20 | 000,000,000 | ---D | M] -- D:\Documents and Settings\daniel\Dane aplikacji\GetRight Pro [2011-01-13 13:54:41 | 000,000,000 | ---D | M] -- D:\Documents and Settings\daniel\Dane aplikacji\GetRightToGo [2011-02-16 10:52:22 | 000,000,000 | ---D | M] -- D:\Documents and Settings\daniel\Dane aplikacji\IDM [2010-11-29 16:39:19 | 000,000,000 | ---D | M] -- D:\Documents and Settings\daniel\Dane aplikacji\LG Electronics [2011-10-03 16:28:56 | 000,000,000 | ---D | M] -- D:\Documents and Settings\daniel\Dane aplikacji\Media Get LLC [2011-10-03 16:32:43 | 000,000,000 | ---D | M] -- D:\Documents and Settings\daniel\Dane aplikacji\NCH Swift Sound [2011-08-18 11:13:10 | 000,000,000 | ---D | M] -- D:\Documents and Settings\daniel\Dane aplikacji\Nokia [2011-03-12 07:44:12 | 000,000,000 | ---D | M] -- D:\Documents and Settings\daniel\Dane aplikacji\OpenCandy [2011-04-14 10:15:50 | 000,000,000 | ---D | M] -- D:\Documents and Settings\daniel\Dane aplikacji\OpenFM [2010-12-30 15:08:39 | 000,000,000 | ---D | M] -- D:\Documents and Settings\daniel\Dane aplikacji\PC Suite [2011-01-21 10:49:55 | 000,000,000 | ---D | M] -- D:\Documents and Settings\daniel\Dane aplikacji\RegistryKeys [2010-12-30 16:14:46 | 000,000,000 | ---D | M] -- D:\Documents and Settings\daniel\Dane aplikacji\Samsung [2011-02-21 14:29:35 | 000,000,000 | ---D | M] -- D:\Documents and Settings\daniel\Dane aplikacji\Styler [2011-02-22 11:53:38 | 000,000,000 | ---D | M] -- D:\Documents and Settings\daniel\Dane aplikacji\Thinstall [2011-08-26 15:09:48 | 000,000,000 | ---D | M] -- D:\Documents and Settings\daniel\Dane aplikacji\TS3Client [2011-02-11 17:30:15 | 000,000,000 | ---D | M] -- D:\Documents and Settings\daniel\Dane aplikacji\VoipDiscount [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 105 bytes -> D:\Documents and Settings\All Users\Dane aplikacji\TEMP:A9662AE0 < End of report >