OTL logfile created on: 2012-12-02 17:19:50 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\user\Downloads Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation Internet Explorer (Version = 7.0.6001.18000) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 1,46 Gb Available Physical Memory | 72,91% Memory free 4,23 Gb Paging File | 3,82 Gb Available in Paging File | 90,35% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 92,77 Gb Total Space | 2,66 Gb Free Space | 2,86% Space Free | Partition Type: NTFS Drive E: | 92,07 Gb Total Space | 0,17 Gb Free Space | 0,19% Space Free | Partition Type: NTFS Computer Name: USER-PC | User Name: user | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-12-02 17:16:03 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\user\Downloads\OTL.exe PRC - [2011-04-28 19:36:37 | 000,307,672 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2008-01-18 22:33:12 | 002,927,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012-03-26 20:47:33 | 000,016,832 | ---- | M] () -- C:\Program Files\Adobe\Reader 9.0\Reader\ViewerPS.dll MOD - [2011-04-21 14:59:06 | 001,131,840 | ---- | M] () -- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\w28ynby2.default\extensions\DTToolbar@toolbarnet.com\components\DTToolbarFF.dll MOD - [2008-02-26 14:47:34 | 000,052,280 | ---- | M] () -- C:\Program Files\Eset\pr_imon.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV - File not found [Auto | Stopped] -- C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe -- (Harmonogram automatycznej usługi LiveUpdate) SRV - [2012-08-25 21:54:11 | 000,651,720 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2010-01-15 13:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService) SRV - [2009-04-02 11:47:04 | 000,234,888 | ---- | M] () [Auto | Stopped] -- C:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe -- (ASKUpgrade) SRV - [2008-02-26 14:47:32 | 000,552,064 | ---- | M] (Eset ) [Auto | Stopped] -- C:\Program Files\Eset\nod32krn.exe -- (NOD32krn) SRV - [2008-01-18 22:38:26 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2008-01-18 22:36:56 | 000,376,832 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- winhttp.dll -- (WinHttpAutoProxySvc) SRV - [2007-09-19 11:01:12 | 000,077,824 | ---- | M] (TOSHIBA Corporation) [Auto | Stopped] -- C:\Program Files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe -- (TNaviSrv) SRV - [2007-04-24 09:58:25 | 001,174,664 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe -- (Symantec Core LC) SRV - [2007-03-29 09:39:00 | 000,427,576 | ---- | M] (TOSHIBA Corporation) [Auto | Stopped] -- C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe -- (TosCoSrv) SRV - [2007-02-25 20:55:18 | 000,125,048 | ---- | M] (TOSHIBA CORPORATION) [Auto | Stopped] -- c:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service) SRV - [2007-02-12 13:38:04 | 000,355,096 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON) SRV - [2006-11-14 19:33:10 | 000,040,960 | ---- | M] (TOSHIBA CORPORATION) [Auto | Stopped] -- C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe -- (CFSvcs) SRV - [2006-10-05 05:10:12 | 000,009,216 | ---- | M] (Agere Systems) [Auto | Stopped] -- C:\Windows\System32\agrsmsvc.exe -- (AgereModemAudio) SRV - [2006-08-23 15:39:48 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper) SRV - [2006-05-25 18:30:16 | 000,114,688 | ---- | M] (TOSHIBA Corporation) [Auto | Stopped] -- C:\Windows\System32\TODDSrv.exe -- (TODDSrv) SRV - [2004-04-15 23:07:01 | 000,073,728 | ---- | M] (CrypKey (Canada) Ltd.) [Auto | Stopped] -- crypserv.exe -- (Crypkey License) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\TpChoice.sys -- (TpChoice) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp) DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\blbdrive.sys -- (blbdrive) DRV - [2010-10-28 15:11:38 | 000,691,696 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\sptd.sys -- (sptd) DRV - [2010-01-27 03:09:02 | 000,050,704 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\npf.sys -- (npf) DRV - [2009-10-22 16:11:14 | 000,057,800 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ftdibus.sys -- (FTDIBUS) DRV - [2009-10-22 16:09:34 | 000,072,520 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ftser2k.sys -- (FTSER2K) DRV - [2008-09-26 17:04:10 | 000,101,760 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard) DRV - [2008-02-26 14:47:33 | 000,512,096 | ---- | M] (Eset ) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\amon.sys -- (AMON) DRV - [2008-02-26 14:47:32 | 000,015,424 | ---- | M] () [Kernel | System | Stopped] -- C:\Windows\System32\drivers\nod32drv.sys -- (nod32drv) DRV - [2007-12-10 14:22:22 | 000,100,648 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s3017obex.sys -- (s3017obex) DRV - [2007-12-10 14:22:18 | 000,110,632 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s3017mdm.sys -- (s3017mdm) DRV - [2007-12-10 14:22:18 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s3017mdfl.sys -- (s3017mdfl) DRV - [2007-12-10 14:22:14 | 000,083,880 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s3017bus.sys -- (s3017bus) DRV - [2007-09-20 17:56:22 | 003,077,632 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag) DRV - [2007-07-26 16:18:04 | 000,285,184 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\tos_sps32.sys -- (tos_sps32) DRV - [2007-06-18 18:03:32 | 000,737,280 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr) DRV - [2007-04-30 06:42:14 | 000,081,408 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169) DRV - [2007-04-16 10:19:10 | 000,011,776 | ---- | M] (Chicony Electronics Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\UVCFTR_S.SYS -- (UVCFTR) DRV - [2007-03-06 14:01:04 | 000,014,848 | ---- | M] (COMPAL ELECTRONIC INC.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\CplIR.sys -- (CplIR) DRV - [2007-03-01 15:53:12 | 000,073,728 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Tosrfhid.sys -- (Tosrfhid) DRV - [2007-02-28 21:27:06 | 000,041,344 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfusb.sys -- (Tosrfusb) DRV - [2007-02-22 18:56:24 | 000,113,920 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfbd.sys -- (tosrfbd) DRV - [2007-01-24 13:44:06 | 000,290,304 | ---- | M] (Texas Instruments) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tifm21.sys -- (tifm21) DRV - [2007-01-18 15:47:18 | 000,211,072 | ---- | M] (TOSHIBA CORPORATION) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\KR10N.sys -- (KR10N) DRV - [2007-01-18 15:40:56 | 000,219,392 | ---- | M] (TOSHIBA CORPORATION) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\KR10I.sys -- (KR10I) DRV - [2006-11-28 08:11:00 | 001,161,888 | ---- | M] (Agere Systems) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AGRSM.sys -- (AgereSoftModem) DRV - [2006-11-20 16:55:16 | 000,036,480 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfbnp.sys -- (tosrfbnp) DRV - [2006-10-23 15:32:20 | 000,009,216 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tosrfec.sys -- (tosrfec) DRV - [2006-10-18 11:50:04 | 000,016,128 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tdcmdpst.sys -- (tdcmdpst) DRV - [2006-10-10 18:33:00 | 000,041,600 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosporte.sys -- (tosporte) DRV - [2006-10-05 21:22:14 | 000,016,768 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\TVALZ_O.SYS -- (TVALZ) DRV - [2006-07-28 15:25:26 | 000,019,456 | ---- | M] (COMPAL ELECTRONIC INC.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\LPCFilter.sys -- (LPCFilter) DRV - [2005-08-01 15:45:00 | 000,064,896 | ---- | M] (TOSHIBA Corporation) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\tosrfcom.sys -- (Tosrfcom) DRV - [2005-01-06 12:42:00 | 000,018,612 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfnds.sys -- (tosrfnds) DRV - [2004-07-30 01:35:52 | 000,031,654 | ---- | M] () [Kernel | System | Stopped] -- C:\Windows\System32\Ckldrv.sys -- (NetworkX) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Local Page = http://www.iesearch.com/ IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Local Page Restore = http://www.iesearch.com/ IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://searchya.com/?chnl=ft-100&s=1&cr=1823226446&cd=2XzutAtN2Y1L1QzutDtDtC0Bzy0EzyyC0FtByCtAyD0FzzyCyBtN0D0TzutBtDtCtBtDtBtCyD&q= IE - HKLM\..\SearchScopes,DefaultScope = {C6961CA7-2C84-40F8-8E87-D320AAAD2137} IE - HKLM\..\SearchScopes\{A0B271A9-D8AA-8E74-7392-2164D6A1C03C}: "URL" = http://www.iesearch.com/s/?q={searchTerms} IE - HKLM\..\SearchScopes\{C6961CA7-2C84-40F8-8E87-D320AAAD2137}: "URL" = http://www.google.pl/search?q={searchTerms}&rls=com.microsoft:*:IE-SearchBox&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7; IE - HKLM\..\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420}: "URL" = http://toolbar.ask.com/toolbarv/askRedirect?o=13925&gct=&gc=1&q={searchTerms}&crm=1 IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-174478317-2899634280-2739803742-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie IE - HKU\S-1-5-21-174478317-2899634280-2739803742-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com IE - HKU\S-1-5-21-174478317-2899634280-2739803742-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?babsrc=HP_Prot IE - HKU\S-1-5-21-174478317-2899634280-2739803742-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore = http://google.bearshare.com/pl IE - HKU\S-1-5-21-174478317-2899634280-2739803742-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKU\S-1-5-21-174478317-2899634280-2739803742-1000\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990} IE - HKU\S-1-5-21-174478317-2899634280-2739803742-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/web/{searchTerms}?babsrc=browsersearch&AF=15627 IE - HKU\S-1-5-21-174478317-2899634280-2739803742-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.pl/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7GGLL_en IE - HKU\S-1-5-21-174478317-2899634280-2739803742-1000\..\SearchScopes\{A0B271A9-D8AA-8E74-7392-2164D6A1C03C}: "URL" = http://www.iesearch.com/s/?q={searchTerms} IE - HKU\S-1-5-21-174478317-2899634280-2739803742-1000\..\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB9}: "URL" = http://www.daemon-search.com/search/web?q={searchTerms} IE - HKU\S-1-5-21-174478317-2899634280-2739803742-1000\..\SearchScopes\{C6961CA7-2C84-40F8-8E87-D320AAAD2137}: "URL" = http://www.google.pl/search?q={searchTerms}&rls=com.microsoft:*:IE-SearchBox&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7; IE - HKU\S-1-5-21-174478317-2899634280-2739803742-1000\..\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420}: "URL" = http://toolbar.ask.com/toolbarv/askRedirect?o=13925&gct=&gc=1&q={searchTerms}&crm=1 IE - HKU\S-1-5-21-174478317-2899634280-2739803742-1000\..\SearchScopes\94A2AE90-7B04-4CE9-92A8-E74303397600: "URL" = http://searchya.com/?chnl=ft-100&s=1&cr=1823226446&cd=2XzutAtN2Y1L1QzutDtDtC0Bzy0EzyyC0FtByCtAyD0FzzyCyBtN0D0TzutBtDtCtBtDtBtCyD&q={searchTerms} IE - HKU\S-1-5-21-174478317-2899634280-2739803742-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-174478317-2899634280-2739803742-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "http://www.interia.pl/" FF - prefs.js..extensions.enabledItems: {E9A1DEE0-C623-4439-8932-001E7D17607D}:2.1.0.5 FF - prefs.js..extensions.enabledItems: ffxtlbr@babylon.com:1.1.2 FF - prefs.js..extensions.enabledItems: {33e0daa6-3af3-d8b5-6752-10e949c61516}:1.1 FF - prefs.js..extensions.enabledItems: DTToolbar@toolbarnet.com:1.1.8.0191 FF - prefs.js..extensions.enabledItems: {EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}:2.0 FF - prefs.js..extensions.enabledItems: {DB9127A2-3381-41ec-82B3-1B6ED4C6F29A}:1.0 FF - prefs.js..extensions.enabledItems: ffxtlbr@searchya.com:1.5.0 FF - prefs.js..keyword.URL: "http://utils.babylon.com/abt/index.php?url=" FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll () FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.0.19\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-10-29 10:47:51 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.0.19\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-10-29 10:47:51 | 000,000,000 | ---D | M] [2011-04-20 14:54:40 | 000,000,000 | ---D | M] (No name found) -- C:\Users\user\AppData\Roaming\mozilla\Extensions [2012-12-02 17:19:19 | 000,000,000 | ---D | M] (No name found) -- C:\Users\user\AppData\Roaming\mozilla\Firefox\Profiles\w28ynby2.default\extensions [2012-07-29 09:37:44 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\user\AppData\Roaming\mozilla\Firefox\Profiles\w28ynby2.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2012-02-15 13:42:24 | 000,000,000 | ---D | M] (Complitly - Speed up your search with your personal search suggestions tool) -- C:\Users\user\AppData\Roaming\mozilla\Firefox\Profiles\w28ynby2.default\extensions\{33e0daa6-3af3-d8b5-6752-10e949c61516} [2010-11-12 20:04:07 | 000,000,000 | ---D | M] (flashget3 Extension) -- C:\Users\user\AppData\Roaming\mozilla\Firefox\Profiles\w28ynby2.default\extensions\{DB9127A2-3381-41ec-82B3-1B6ED4C6F29A} [2009-05-20 15:49:36 | 000,000,000 | ---D | M] ("Ask Toolbar for Firefox") -- C:\Users\user\AppData\Roaming\mozilla\Firefox\Profiles\w28ynby2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D} [2012-02-15 13:42:22 | 000,000,000 | ---D | M] (DealPly) -- C:\Users\user\AppData\Roaming\mozilla\Firefox\Profiles\w28ynby2.default\extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF} [2012-07-29 09:37:43 | 000,000,000 | ---D | M] ("DAEMON Tools Toolbar") -- C:\Users\user\AppData\Roaming\mozilla\Firefox\Profiles\w28ynby2.default\extensions\DTToolbar@toolbarnet.com [2011-01-17 18:34:11 | 000,000,000 | ---D | M] (Babylon) -- C:\Users\user\AppData\Roaming\mozilla\Firefox\Profiles\w28ynby2.default\extensions\ffxtlbr@babylon.com [2012-02-15 13:41:19 | 000,000,000 | ---D | M] (searchya.com) -- C:\Users\user\AppData\Roaming\mozilla\Firefox\Profiles\w28ynby2.default\extensions\ffxtlbr@searchya.com [2010-03-24 10:42:00 | 000,057,418 | ---- | M] (flashget) (No name found) -- C:\Users\user\AppData\Roaming\mozilla\firefox\profiles\w28ynby2.default\extensions\{DB9127A2-3381-41ec-82B3-1B6ED4C6F29A}\components\FlashGetXPI.dll [2008-10-17 10:03:00 | 000,000,205 | ---- | M] () (No name found) -- C:\Users\user\AppData\Roaming\mozilla\firefox\profiles\w28ynby2.default\extensions\{DB9127A2-3381-41ec-82B3-1B6ED4C6F29A}\components\IFlashgetXpi.xpt [2008-08-18 00:27:18 | 000,001,622 | ---- | M] () -- C:\Users\user\AppData\Roaming\mozilla\firefox\profiles\w28ynby2.default\searchplugins\ask.xml [2009-05-15 20:17:20 | 000,000,523 | ---- | M] () -- C:\Users\user\AppData\Roaming\mozilla\firefox\profiles\w28ynby2.default\searchplugins\daemon-search.xml [2012-02-15 13:41:15 | 000,001,497 | ---- | M] () -- C:\Users\user\AppData\Roaming\mozilla\firefox\profiles\w28ynby2.default\searchplugins\searchya.xml [2012-12-02 17:19:19 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2010-04-27 19:59:33 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2009-12-23 17:30:07 | 000,000,000 | ---D | M] (flashget3 Extension) -- C:\Program Files\Mozilla Firefox\extensions\{DB9127A2-3381-41ec-82B3-1B6ED4C6F29A} [2008-02-27 21:17:45 | 000,024,576 | ---- | M] (My Global Search) -- C:\Program Files\mozilla firefox\plugins\NPMyGlSh.dll [2011-04-28 19:36:46 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2011-01-17 18:34:07 | 000,002,226 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml [2011-04-28 19:36:46 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2011-04-28 19:36:46 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2011-04-28 19:36:46 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2011-04-28 19:36:46 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2011-04-28 19:36:46 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2006-09-18 22:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (no name) - {1F364306-AA45-47B5-9F9D-39A8B94E7EF1} - No CLSID value found. O2 - BHO: (AskBar BHO) - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com) O2 - BHO: (Ironsource LTD Helper Object) - {25927741-5E5B-4D27-8D8B-9188FE64373F} - C:\Program Files\Ironsource\searchya\1.5.13.0\bh\searchya.dll (Montera Technologeis LTD) O2 - BHO: (CescrtHlpr Object) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.15.10\bh\BabylonToolbar.dll (Babylon BHO) O2 - BHO: (no name) - {37B85A21-692B-4205-9CAD-2626E4993404} - No CLSID value found. O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (DealPly) - {A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} - C:\Program Files\DealPly\DealPlyIE.dll (DealPly Technologies Ltd) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.7529.1424\swg.dll (Google Inc.) O2 - BHO: (Complitly) - {D27FC31C-6E3D-4305-8D53-ACDAEFA5F862} - C:\Users\user\AppData\Roaming\Complitly\Complitly.dll (SimplyGen) O3 - HKLM\..\Toolbar: (Ask Toolbar) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com) O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKLM\..\Toolbar: (SearchYa Toolbar) - {33AA308B-B565-4376-AC66-59EE9B6AD13E} - C:\Program Files\Ironsource\searchya\1.5.13.0\searchyaTlbr.dll (Montera Technologeis LTD) O3 - HKLM\..\Toolbar: (no name) - {37B85A29-692B-4205-9CAD-2626E4993404} - No CLSID value found. O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.15.10\BabylonToolbarTlbr.dll (Babylon Ltd.) O3 - HKU\S-1-5-21-174478317-2899634280-2739803742-1000\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll () O4 - HKLM..\Run: [00TCrdMain] C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe (TOSHIBA Corporation) O4 - HKLM..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe (Apple Inc.) O4 - HKLM..\Run: [BabylonToolbar] C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.15.10\BabylonToolbarsrv.exe (Babylon Ltd.) O4 - HKLM..\Run: [Camera Assistant Software] C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe (Chicony) O4 - HKLM..\Run: [HSON] C:\Program Files\TOSHIBA\TBS\HSON.exe (TOSHIBA Corporation) O4 - HKLM..\Run: [HWSetup] \HWSetup.exe hwSetUP File not found O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation) O4 - HKLM..\Run: [KeNotify] C:\Program Files\TOSHIBA\Utilities\KeNotify.exe () O4 - HKLM..\Run: [NDSTray.exe] NDSTray.exe File not found O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG) O4 - HKLM..\Run: [nod32kui] C:\Program Files\Eset\nod32kui.exe (Eset ) O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor) O4 - HKLM..\Run: [SmoothView] C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe (TOSHIBA Corporation) O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe (Sun Microsystems, Inc.) O4 - HKLM..\Run: [SVPWUTIL] C:\Program Files\TOSHIBA\Utilities\SVPWUTIL.exe (TOSHIBA) O4 - HKLM..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe (Synaptics, Inc.) O4 - HKLM..\Run: [topi] C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe (TOSHIBA) O4 - HKLM..\Run: [Toshiba Registration] C:\Program Files\TOSHIBA\Registration\ToshibaRegistration.exe (Toshiba) O4 - HKLM..\Run: [TPwrMain] C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe (TOSHIBA Corporation) O4 - HKLM..\Run: [UpdateReminder] C:\Program Files\Eset\UpdateReminder.exe (ESET, spol. s r.o.) O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation) O4 - HKU\S-1-5-21-174478317-2899634280-2739803742-1000..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG) O4 - HKU\S-1-5-21-174478317-2899634280-2739803742-1000..\Run: [TOSCDSPD] TOSCDSPD.EXE File not found O4 - Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\The Matrix_ Path of Neo Registration.lnk = File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O8 - Extra context menu item: &Pobierz wszystko przez FlashGet - C:\Program Files\FlashGet Network\FlashGet universal\ComDlls\Bhoall.htm File not found O8 - Extra context menu item: &Pobrane przez FlashGet - C:\Program Files\FlashGet Network\FlashGet universal\ComDlls\Bholink.htm File not found O8 - Extra context menu item: 使用快车3下载 - C:\Users\user\AppData\Roaming\FlashGetBHO\GetUrl.htm () O8 - Extra context menu item: 使用快车3下载全部链接 - C:\Users\user\AppData\Roaming\FlashGetBHO\GetAllUrl.htm () O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\npjpi160_03.dll (Sun Microsystems, Inc.) O9 - Extra Button: eBay - {76577871-04EC-495E-A12B-91F7C3600AFA} - http://rover.ebay.com/rover/1/4908-44618-9400-3/4 File not found O9 - Extra Button: Amazon.co.uk - {8A918C1D-E123-4E36-B562-5C1519E434CE} - http://www.amazon.co.uk/exec/obidos/redirect-home?tag=Toshibaukbholink-21&site=home File not found O9 - Extra Button: eBay - {C08CAF1D-C0A3-40D5-9970-06D067EAC017} - http://www.webtip.ch/cgi-bin/toshiba/tracker_url.pl?PL File not found O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\System32\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\System32\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\System32\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\System32\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\System32\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\System32\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\System32\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\System32\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\System32\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\System32\imon.dll (Eset ) O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\Windows\System32\imon.dll (Eset ) O13 - gopher Prefix: missing O15 - HKU\S-1-5-21-174478317-2899634280-2739803742-1000\..Trusted Domains: kuaiche.com ([software] http in Trusted sites) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 1.6.0_03) O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 1.6.0_03) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 1.6.0_03) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.100 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{283A7950-B61F-464C-88AF-9BD74BBD82EE}: DhcpNameServer = 192.168.1.100 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A5AFDFFA-5BAF-408F-BACA-E929266B753E}: NameServer = 195.114.161.61,195.116.181.131 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Users\user\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg O24 - Desktop BackupWallPaper: C:\Users\user\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg O29 - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2012-08-25 21:35:35 | 000,000,000 | ---D | M] - C:\Autodesk -- [ NTFS ] O33 - MountPoints2\{82a3d0a9-efdb-11dd-ba19-001b38b41092}\Shell\AutoRun\command - "" = D:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\ine32.exe O33 - MountPoints2\{82a3d0a9-efdb-11dd-ba19-001b38b41092}\Shell\open\command - "" = D:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\ine32.exe O33 - MountPoints2\{902f4772-b8a0-11de-8439-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{902f4772-b8a0-11de-8439-806e6f6e6963}\Shell\AutoRun\command - "" = G:\AutoRun.exe O33 - MountPoints2\{a49f3824-27e1-11e1-ba14-00037abb693b}\Shell\AutoRun\command - "" = G:\RunClubSanDisk.exe O33 - MountPoints2\{affb4683-e46d-11dc-b16f-001b38b41092}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL bouxON.exe O33 - MountPoints2\{baf2ae5f-e44e-11dc-83c8-001b38b41092}\Shell\AutoRun\command - "" = start start.bat O33 - MountPoints2\{d802b39e-c3fa-11de-8111-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{d802b39e-c3fa-11de-8111-806e6f6e6963}\Shell\AutoRun\command - "" = G:\AutoRun.exe O33 - MountPoints2\{eb016bbd-b7e0-11de-8342-00037abb693b}\Shell - "" = AutoRun O33 - MountPoints2\{eb016bbd-b7e0-11de-8342-00037abb693b}\Shell\AutoRun\command - "" = G:\AutoRun.exe O33 - MountPoints2\{eb016be5-b7e0-11de-8342-00037abb693b}\Shell - "" = AutoRun O33 - MountPoints2\{eb016be5-b7e0-11de-8342-00037abb693b}\Shell\AutoRun\command - "" = G:\AutoRun.exe O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-12-02 16:19:31 | 000,344,064 | ---- | C] (Корпорация Майкрософт) -- C:\Users\user\wgsdgsdgdsgsd.exe [2012-11-15 13:42:22 | 000,000,000 | ---D | C] -- C:\Users\user\Desktop\Licencjat [2012-11-05 14:05:14 | 000,000,000 | ---D | C] -- C:\Users\user\Desktop\K&M [2011-04-12 19:57:37 | 001,898,096 | ---- | C] (Badoo) -- C:\Users\user\badoo.desktop.installer-1.3.12.exe [2011-03-29 17:05:10 | 008,893,621 | ---- | C] (Vitzo Limited ) -- C:\Users\user\VDownloaderSetup32807_[www.programosy.pl].exe [2011-03-29 17:04:07 | 007,020,216 | ---- | C] (ultraget.com ) -- C:\Users\user\ultraget-free.exe [2010-08-12 22:46:30 | 001,443,880 | ---- | C] (Ross-Tech, LLC) -- C:\Users\user\VCDS-Lite-1.002-Installer.exe [5 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ] [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-12-02 17:23:33 | 003,670,016 | -HS- | M] () -- C:\Users\user\ntuser.dat [2012-12-02 17:08:41 | 001,477,588 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI [2012-12-02 17:08:41 | 000,664,342 | ---- | M] () -- C:\Windows\System32\perfh015.dat [2012-12-02 17:08:41 | 000,589,472 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2012-12-02 17:08:41 | 000,127,580 | ---- | M] () -- C:\Windows\System32\perfc015.dat [2012-12-02 17:08:41 | 000,101,484 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2012-12-02 17:04:33 | 000,065,536 | ---- | M] () -- C:\Windows\System32\Ikeext.etl [2012-12-02 17:04:26 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012-12-02 17:02:26 | 095,023,320 | ---- | M] () -- C:\ProgramData\dsgsdgdsgdsgw.pad [2012-12-02 17:00:19 | 000,000,416 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{AF6111BD-501A-47AE-A8A0-BB679436017B}.job [2012-12-02 16:57:49 | 000,000,069 | ---- | M] () -- C:\Windows\NeroDigital.ini [2012-12-02 16:57:32 | 000,001,028 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2012-12-02 16:57:30 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2012-12-02 16:57:30 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2012-12-02 16:57:20 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2012-12-02 16:19:40 | 000,000,887 | ---- | M] () -- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\runctf.lnk [2012-12-02 16:19:31 | 000,344,064 | ---- | M] (Корпорация Майкрософт) -- C:\Users\user\wgsdgsdgdsgsd.exe [2012-12-01 14:09:41 | 000,065,536 | -HS- | M] () -- C:\Users\user\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TM.blf [2012-12-01 14:09:40 | 000,524,288 | -HS- | M] () -- C:\Users\user\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms [2012-12-01 13:43:00 | 000,001,032 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2012-12-01 12:26:40 | 000,936,530 | ---- | M] () -- C:\Users\user\Desktop\SAM_3574.JPG [2012-12-01 12:08:24 | 000,027,136 | ---- | M] () -- C:\Users\user\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-11-30 18:54:29 | 000,000,012 | ---- | M] () -- C:\ProgramData\ReminderNextRun [2012-11-29 21:57:33 | 002,952,342 | -H-- | M] () -- C:\Users\user\AppData\Local\IconCache.db [2012-11-29 11:11:42 | 000,002,379 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk [2012-11-28 18:41:58 | 000,002,651 | ---- | M] () -- C:\Users\user\Desktop\Microsoft Office Word 2003.lnk [2012-11-13 14:31:22 | 012,550,241 | ---- | M] () -- C:\Users\user\Desktop\Gummy Bear _ Gumi Miś -.flv [5 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ] [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-12-02 16:19:40 | 000,000,887 | ---- | C] () -- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\runctf.lnk [2012-12-02 16:19:34 | 095,023,320 | ---- | C] () -- C:\ProgramData\dsgsdgdsgdsgw.pad [2012-12-01 12:26:41 | 000,936,530 | ---- | C] () -- C:\Users\user\Desktop\SAM_3574.JPG [2012-11-13 14:27:29 | 012,550,241 | ---- | C] () -- C:\Users\user\Desktop\Gummy Bear _ Gumi Miś -.flv [2012-10-29 11:58:14 | 000,000,145 | ---- | C] () -- C:\Windows\BRVIDEO.INI [2012-10-29 11:58:14 | 000,000,023 | ---- | C] () -- C:\Windows\Brownie.ini [2012-10-29 11:58:14 | 000,000,000 | ---- | C] () -- C:\Windows\brmx2001.ini [2012-10-29 11:58:02 | 000,000,395 | ---- | C] () -- C:\Windows\BRWMARK.INI [2012-10-29 11:58:02 | 000,000,114 | ---- | C] () -- C:\Windows\System32\brlmw03a.ini [2012-10-29 11:58:02 | 000,000,034 | ---- | C] () -- C:\Windows\System32\BD2030.DAT [2012-10-29 11:57:57 | 000,008,981 | ---- | C] () -- C:\Windows\HL-2030.INI [2012-05-15 12:52:25 | 001,663,197 | ---- | C] () -- C:\Users\user\20120513104.jpg [2012-05-15 12:51:57 | 000,569,273 | ---- | C] () -- C:\Users\user\20120513105.jpg [2012-05-15 12:51:29 | 000,905,654 | ---- | C] () -- C:\Users\user\20120513106.jpg [2012-04-28 21:34:33 | 000,027,107 | ---- | C] () -- C:\Users\user\Egzamin!!!!.rtf [2012-04-28 21:01:26 | 000,000,680 | ---- | C] () -- C:\Users\user\AppData\Local\d3d9caps.dat [2012-02-20 19:10:28 | 000,143,360 | ---- | C] () -- C:\Windows\System32\Tipage4.dll [2011-11-09 22:39:44 | 000,059,904 | ---- | C] () -- C:\Windows\System32\OpenVideo.dll [2011-11-09 22:39:32 | 000,054,784 | ---- | C] () -- C:\Windows\System32\OVDecode.dll [2011-09-27 17:40:34 | 000,001,719 | ---- | C] () -- C:\Users\user\McAfee Security Scan Plus.lnk [2011-09-18 10:08:59 | 004,227,943 | ---- | C] () -- C:\Users\user\Veegas Tlen by ADEE007(01).mp3 [2011-09-18 10:08:06 | 003,462,869 | ---- | C] () -- C:\Users\user\sexualna- KorGG Pa 50 by ADEE.mp3 [2011-09-18 10:06:54 | 005,161,994 | ---- | C] () -- C:\Users\user\Baflo - Cover by ADEE.mp3 [2011-09-16 14:40:20 | 000,003,429 | ---- | C] () -- C:\Users\user\745.mp3 [2011-08-09 18:22:07 | 008,978,135 | ---- | C] () -- C:\Users\user\Elena Gheorghe - Midnight Sun (Original Extended Mix) www.eNutka.net.mp3 [2011-08-09 14:17:15 | 004,878,419 | ---- | C] () -- C:\Users\user\Metalica - Whiskey In The Jar [zwrzuc.pl].mp3 [2011-07-27 12:11:54 | 008,731,968 | ---- | C] () -- C:\Users\user\Przeżyj to sam_Vegas&ModelMT.mp3 [2011-07-20 17:39:00 | 000,000,012 | ---- | C] () -- C:\ProgramData\ReminderNextRun [2011-07-15 18:55:40 | 047,628,328 | ---- | C] () -- C:\Users\user\czarne oczy dziewczyno lepsze.wav [2011-07-15 13:07:54 | 047,628,328 | ---- | C] () -- C:\Users\user\czarne oczy dziewczyno MIRAGE www cover-studio pl.wav [2011-05-07 09:47:20 | 000,023,580 | ---- | C] () -- C:\Users\user\AppData\Roaming\UserTile.png [2011-04-17 11:45:06 | 005,673,127 | ---- | C] () -- C:\Users\user\02-blue_cafe-buena.mp3 [2011-04-10 16:27:03 | 010,800,193 | ---- | C] () -- C:\Users\user\czarne oczy dziewczyno MIRAGE www cover-studio pl.mp3 [2011-03-29 17:08:30 | 000,000,891 | ---- | C] () -- C:\Users\user\Przyspiesz Komputer.lnk [2011-03-29 17:08:03 | 000,444,283 | ---- | C] () -- C:\Program Files\Common Files\WinPcapNmap.exe [2011-03-29 17:08:03 | 000,000,184 | ---- | C] () -- C:\Users\user\QuickStores.url [2011-03-22 17:49:01 | 020,898,796 | ---- | C] () -- C:\Users\user\Cool Edit Pro v2.00.rar [2011-03-18 19:54:13 | 006,510,630 | ---- | C] () -- C:\Users\user\[by_lukia]Vip - Hej dziewczyno[www.odjazdowamuza.prv.pl].mp3 [2011-03-17 21:57:59 | 001,902,425 | ---- | C] () -- C:\Users\user\Program do zmiany tonacji.zip [2011-03-05 13:31:09 | 003,251,349 | ---- | C] () -- C:\Users\user\Hej_Rock_n_rolli(1).mp3 [2011-02-17 11:12:43 | 004,699,013 | ---- | C] () -- C:\Users\user\PMP1000_P0566_M_PL.pdf [2011-01-29 19:34:42 | 000,000,044 | ---- | C] () -- C:\Users\user\P-1 0 T1.00 1 drosselach te oczy twe.wav [2011-01-29 19:33:21 | 047,821,868 | ---- | C] () -- C:\Users\user\drosselach te oczy twe.wav [2011-01-28 14:20:55 | 000,010,641 | ---- | C] () -- C:\Users\user\_brak_tematu_.zip [2011-01-28 13:55:34 | 000,014,836 | ---- | C] () -- C:\Users\user\hmp.zip [2011-01-18 23:13:06 | 000,818,066 | ---- | C] () -- C:\Users\user\YoGenVocalRemover.zip [2011-01-18 23:07:37 | 020,280,855 | ---- | C] () -- C:\Users\user\cepsetup.exe [2011-01-18 22:41:19 | 009,693,186 | ---- | C] () -- C:\Users\user\ggg.mp3 [2011-01-18 22:38:08 | 000,860,626 | ---- | C] () -- C:\Users\user\wave_to_mp3.zip [2011-01-17 18:27:15 | 000,000,974 | ---- | C] () -- C:\Users\user\TimeFactory.lnk [2011-01-17 18:23:11 | 001,898,439 | ---- | C] () -- C:\Users\user\Time Factory v1.61.zip [2011-01-05 23:02:59 | 000,377,853 | ---- | C] () -- C:\Users\user\NokiaFREE_v310_Nokia_unlock_codes_calculator.zip [2010-12-03 08:24:12 | 000,160,881 | ---- | C] () -- C:\Users\user\twoja f@ktura.pdf [2010-11-30 13:08:59 | 000,563,851 | ---- | C] () -- C:\Users\user\Psychologia Rozwojowa - Wykład - Rozwój społeczny.PDF [2010-11-28 21:20:25 | 202,402,724 | ---- | C] () -- C:\Users\user\Nowy folder.rar [2010-11-08 16:47:56 | 066,144,126 | ---- | C] () -- C:\Users\user\SOCJOLOGIA.rar [2010-10-22 10:41:24 | 019,820,544 | ---- | C] () -- C:\Users\user\Tim Berg - Bromance (Avicii's Arena Mix).mp3.mp3 [2010-10-22 10:28:38 | 000,032,447 | ---- | C] () -- C:\Users\user\AppData\Roaming\f.exe [2010-10-18 18:35:06 | 015,285,737 | ---- | C] () -- C:\Users\user\GW8.rar [2010-10-03 20:15:56 | 000,107,236 | ---- | C] () -- C:\Users\user\Do Albumu.jpg [2010-09-08 11:25:43 | 001,379,061 | ---- | C] () -- C:\Users\user\DSC00151.JPG [2010-06-07 15:46:33 | 000,000,939 | ---- | C] () -- C:\Users\user\StlConv3 — skrót.lnk [2010-04-30 07:36:15 | 000,001,892 | ---- | C] () -- C:\Users\user\Adobe Reader 9.lnk [2010-02-27 10:06:13 | 000,618,010 | ---- | C] () -- C:\Users\user\driverusb.rar [2010-02-27 10:03:47 | 009,386,394 | ---- | C] () -- C:\Users\user\polski_vag.zip [2010-02-19 13:43:15 | 002,040,614 | ---- | C] () -- C:\Users\user\Śmieszne dzwonki i smsy.rar [2010-01-12 14:09:02 | 000,106,993 | ---- | C] () -- C:\Users\user\FlashGet_2_x.zip [2009-10-31 16:02:28 | 157,734,956 | ---- | C] () -- C:\Users\user\Traktor DJ Studio 3.0.0.41+KeyGen.zip [2009-10-13 16:06:43 | 000,000,805 | ---- | C] () -- C:\Users\user\PLAY ONLINE.lnk [2009-07-29 21:58:48 | 000,152,716 | ---- | C] () -- C:\Users\user\P7295873.JPG [2009-07-25 13:06:31 | 000,032,892 | ---- | C] () -- C:\Users\user\IMG_1865hehe.jpg [2009-07-13 11:09:35 | 000,242,989 | ---- | C] () -- C:\Users\user\Jam.jpg [2009-04-07 17:27:27 | 001,909,068 | ---- | C] () -- C:\Users\user\Peja - Tak Bardzo Chce (allmp3.pl).mp3 [2009-03-19 17:22:02 | 000,216,196 | ---- | C] () -- C:\Users\user\100_0485qqqq.jpg [2009-03-18 17:56:52 | 000,137,724 | ---- | C] () -- C:\Users\user\100_0420ee.jpg [2009-03-18 17:52:17 | 000,212,184 | ---- | C] () -- C:\Users\user\100_0415 gg.jpg [2009-03-16 18:17:07 | 000,004,096 | -H-- | C] () -- C:\Users\user\AppData\Local\keyfile3.drm [2009-01-23 17:24:01 | 000,001,804 | ---- | C] () -- C:\Users\user\Pomocnik Policjanta.lnk [2008-10-22 21:59:51 | 000,121,293 | ---- | C] () -- C:\Users\user\0449624907.jpg [2008-10-17 09:49:42 | 003,570,239 | ---- | C] () -- C:\Users\user\skalar-us---jeszcze-jedna-noc www.discomax.ovh.mp3 [2008-10-16 22:08:37 | 000,043,516 | ---- | C] () -- C:\Users\user\rrrrrrrrr.jpg [2008-10-16 16:21:33 | 000,213,949 | ---- | C] () -- C:\Users\user\sosos.jpg [2008-10-16 16:19:32 | 000,042,817 | ---- | C] () -- C:\Users\user\Zdjęcia-0005D.jpg [2008-10-14 20:14:53 | 000,001,406 | ---- | C] () -- C:\Users\user\Try Mastermind from DivX.lnk [2008-10-14 20:14:31 | 000,001,854 | ---- | C] () -- C:\Users\user\DivX Player 2.1.lnk [2008-10-05 17:45:52 | 000,014,119 | ---- | C] () -- C:\Users\user\Zdjęcia-0003.jpg [2008-08-31 08:25:40 | 002,952,342 | -H-- | C] () -- C:\Users\user\AppData\Local\IconCache.db [2008-08-17 15:33:17 | 000,000,552 | ---- | C] () -- C:\Users\user\AppData\Local\d3d8caps.dat [2008-06-30 07:47:06 | 003,713,694 | ---- | C] () -- C:\Users\user\_Nowe Disco Polo-Boys-Ale Numer.mp3 [2008-03-23 09:39:06 | 004,359,881 | ---- | C] () -- C:\Users\user\219115.mp3 [2008-03-03 08:59:53 | 000,000,012 | ---- | C] () -- C:\Users\user\intlname.ols [2008-02-27 21:17:45 | 000,001,296 | ---- | C] () -- C:\Users\user\Ściągania BearShare.lnk [2008-02-27 20:27:12 | 000,000,266 | RHS- | C] () -- C:\ProgramData\ntuser.pol [2008-02-26 15:13:44 | 000,002,428 | ---- | C] () -- C:\Users\user\Nero Home.lnk [2008-02-26 14:40:33 | 000,001,438 | ---- | C] () -- C:\Users\user\AppData\Roaming\wklnhst.dat [2008-02-26 14:30:31 | 000,027,136 | ---- | C] () -- C:\Users\user\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2008-02-26 10:31:15 | 000,001,669 | ---- | C] () -- C:\Users\user\TOSHIBA DVD PLAYER.lnk [2008-02-26 10:26:47 | 000,128,200 | ---- | C] () -- C:\Users\user\AppData\Local\GDIPFONTCACHEV1.DAT [2008-02-26 10:26:35 | 000,000,020 | -HS- | C] () -- C:\Users\user\ntuser.ini [2008-02-26 10:26:34 | 000,524,288 | -HS- | C] () -- C:\Users\user\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000002.regtrans-ms [2008-02-26 10:26:34 | 000,524,288 | -HS- | C] () -- C:\Users\user\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms [2008-02-26 10:26:34 | 000,065,536 | -HS- | C] () -- C:\Users\user\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TM.blf [2008-02-26 10:26:31 | 003,670,016 | -HS- | C] () -- C:\Users\user\ntuser.dat [2007-07-13 10:15:08 | 000,001,633 | ---- | C] () -- C:\Users\user\TOSHIBA Assist.lnk [2007-04-24 10:03:25 | 000,002,606 | ---- | C] () -- C:\Users\user\Podręcznik użytkownika A200.lnk [2007-04-24 10:03:25 | 000,002,586 | ---- | C] () -- C:\Users\user\Podręcznik użytkownika P200.lnk [color=#E56717]========== ZeroAccess Check ==========[/color] [2006-11-02 13:54:22 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2008-01-18 22:36:12 | 011,580,416 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2008-01-18 22:34:22 | 000,614,400 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = %systemroot%\system32\wbem\wbemess.dll -- [2008-01-18 22:36:50 | 000,347,648 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [color=#E56717]========== LOP Check ==========[/color] [2010-04-30 13:33:09 | 000,000,000 | -HSD | M] -- C:\Users\user\AppData\Roaming\.# [2008-11-03 09:48:42 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\.wyzo [2011-09-16 14:42:14 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Acoustica [2012-10-29 21:58:00 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\AIMP [2012-08-29 10:49:44 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Autodesk [2010-11-21 15:31:04 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\BITS [2012-02-15 13:42:21 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Complitly [2009-05-15 20:19:07 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\DAEMON Tools [2010-10-28 16:07:06 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\DAEMON Tools Lite [2009-10-19 17:05:55 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\DAEMON Tools Pro [2010-04-30 07:14:05 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1 [2009-12-23 17:29:38 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\FlashGet [2010-01-12 14:02:30 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\FlashGetBHO [2012-02-15 15:59:22 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\flightgear.org [2008-02-27 18:50:02 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Gadu-Gadu [2008-08-28 07:54:15 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Leadertech [2011-03-29 17:07:50 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\OpenCandy [2011-05-07 09:47:20 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\PeerNetworking [2008-02-26 14:40:35 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Template [2009-01-05 15:15:35 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Toshiba [2008-02-28 18:33:00 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Ulead Systems [2012-01-02 15:59:58 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\uTorrent [2011-09-27 22:33:43 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\VDownloader [color=#E56717]========== Purity Check ==========[/color] < End of report >