OTL logfile created on: 2013-01-27 14:37:36 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = F:\!!!
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
1,93 Gb Total Physical Memory | 1,54 Gb Available Physical Memory | 80,00% Memory free
4,09 Gb Paging File | 3,88 Gb Available in Paging File | 94,79% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 111,57 Gb Total Space | 46,17 Gb Free Space | 41,38% Space Free | Partition Type: NTFS
Drive D: | 111,55 Gb Total Space | 110,21 Gb Free Space | 98,80% Space Free | Partition Type: NTFS
Drive F: | 29,86 Gb Total Space | 13,60 Gb Free Space | 45,54% Space Free | Partition Type: FAT32
 
Computer Name: RODZINA-PC | User Name: Rodzina | Logged in as Administrator.
Boot Mode: SafeMode | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2013-01-27 14:32:26 | 000,602,112 | ---- | M] (OldTimer Tools) -- F:\!!!\OTL.exe
PRC - [2012-09-12 17:25:22 | 000,020,472 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\MsMpEng.exe
PRC - [2008-01-21 03:23:50 | 000,318,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cmd.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV - [2013-01-10 20:40:46 | 000,251,400 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012-12-18 15:28:08 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) [Auto | Stopped] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012-11-07 12:33:54 | 000,312,176 | ---- | M] () [Auto | Stopped] -- C:\Program Files\Przyspiesz Komputer\PCSUService.exe -- (PCSUService)
SRV - [2012-09-20 13:28:48 | 030,785,672 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service)
SRV - [2012-09-12 17:25:24 | 000,287,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
SRV - [2012-09-12 17:25:22 | 000,020,472 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV - [2010-01-09 11:37:20 | 000,049,152 | ---- | M] (Panasonic System Networks Co., Ltd.) [Auto | Stopped] -- C:\Program Files\Panasonic\LocalCom\LMSRVNT.EXE -- (Panasonic Local Printer Service)
SRV - [2009-10-14 15:44:38 | 000,090,112 | ---- | M] (France Telecom SA) [Auto | Stopped] -- C:\Program Files\Common Files\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe -- (FTRTSVC)
SRV - [2009-04-30 22:13:16 | 003,484,672 | ---- | M] () [Auto | Stopped] -- C:\Program Files\Acer\Acer Bio Protection\BASVC.exe -- (IGBASVC)
SRV - [2008-10-16 16:26:20 | 000,860,160 | ---- | M] (Intel(R) Corporation) [Auto | Stopped] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng)
SRV - [2008-10-16 15:54:34 | 000,466,944 | ---- | M] (Intel(R) Corporation) [Auto | Stopped] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc)
SRV - [2008-03-21 12:22:52 | 000,024,576 | ---- | M] () [Auto | Stopped] -- C:\Program Files\Acer\Empowering Technology\Service\ETService.exe -- (ETService)
SRV - [2008-03-04 22:38:34 | 000,500,784 | ---- | M] (Egis Incorporated) [Auto | Stopped] -- C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe -- (eDataSecurity Service)
SRV - [2008-01-21 03:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2008-01-16 11:04:36 | 000,030,312 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe -- (BcmSqlStartupSvc)
SRV - [2007-12-06 15:15:28 | 000,110,592 | ---- | M] () [Auto | Stopped] -- C:\Acer\Mobility Center\MobilityService.exe -- (MobilityService)
SRV - [2007-07-24 10:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2)
SRV - [2007-02-13 01:43:44 | 000,065,536 | ---- | M] (O2Micro International) [Auto | Stopped] -- C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe -- (o2flash)
SRV - [2007-01-04 18:48:50 | 000,112,152 | ---- | M] (InterVideo) [Auto | Stopped] -- C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe -- (IviRegMgr)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\Drivers\GemCCID.sys -- (GemCCID)
DRV - [2012-08-30 22:03:50 | 000,099,272 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\NisDrvWFP.sys -- (NisDrv)
DRV - [2009-08-04 12:04:28 | 000,103,040 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbfake.sys -- (hwusbfake)
DRV - [2009-08-04 12:04:28 | 000,102,784 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2009-04-30 22:13:10 | 000,043,184 | ---- | M] (Alfa Corporation) [File_System | Boot | Running] -- C:\Windows\System32\drivers\AlfaFF.sys -- (AlfaFF)
DRV - [2009-04-11 05:38:59 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbccid.sys -- (USBCCID)
DRV - [2008-11-17 06:40:22 | 003,668,480 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\NETw5v32.sys -- (NETw5v32)
DRV - [2008-07-07 23:29:14 | 000,106,112 | ---- | M] (Option N.V.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Gt51Ip.sys -- (GT72NDISIPXP)
DRV - [2008-07-07 20:56:38 | 000,058,880 | ---- | M] (Option N.V.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\gt72ubus.sys -- (GT72UBUS)
DRV - [2008-06-12 18:28:56 | 000,043,608 | ---- | M] (O2Micro ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\o2sd.sys -- (O2SDRDR)
DRV - [2008-06-05 02:54:22 | 000,113,664 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\IntcHdmi.sys -- (IntcHdmiAddService)
DRV - [2008-06-05 01:38:58 | 000,008,064 | ---- | M] (Option N.V.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\gtptser.sys -- (GTPTSER)
DRV - [2008-05-13 21:48:04 | 000,051,288 | ---- | M] (O2Micro ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\o2media.sys -- (O2MDRDR)
DRV - [2007-12-26 07:23:10 | 000,017,968 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TpChoice.sys -- (TpChoice)
DRV - [2007-04-17 19:09:28 | 000,011,032 | ---- | M] (InterVideo) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\regi.sys -- (regi)
DRV - [2007-01-26 07:32:18 | 000,069,632 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\int15.sys -- (int15)
DRV - [2007-01-04 12:48:04 | 000,104,344 | ---- | M] (Analog Devices Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\e4usbaw.sys -- (e4usbaw)
DRV - [2007-01-04 12:47:48 | 000,069,656 | ---- | M] (Analog Deivces) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\e4ldr.sys -- (E4LOADER)
DRV - [2006-11-29 01:44:52 | 000,008,192 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\XAudio.sys -- (XAudio)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://pl.intl.acer.yahoo.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://pl.intl.acer.yahoo.com
IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-3780983921-1248882302-876831346-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
IE - HKU\S-1-5-21-3780983921-1248882302-876831346-1003\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-3780983921-1248882302-876831346-1003\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKU\S-1-5-21-3780983921-1248882302-876831346-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-3780983921-1248882302-876831346-1003\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7ADSA_pl
IE - HKU\S-1-5-21-3780983921-1248882302-876831346-1003\..\SearchScopes\{DD092F1A-4A68-4244-9F75-5E5A0004A916}: "URL" = http://search.yahoo.com/search?fr=mcafee&p={SearchTerms}
IE - HKU\S-1-5-21-3780983921-1248882302-876831346-1003\..\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4}: "URL" = http://uk.search.yahoo.com/search?p={searchTerms}&fr=chr-acer
IE - HKU\S-1-5-21-3780983921-1248882302-876831346-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0:  File not found
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 2.0.0.23\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2012-07-18 02:29:23 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 2.0.0.23\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2013-01-19 18:18:16 | 000,000,000 | ---D | M]
 
[2012-10-22 20:17:33 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Rodzina\AppData\Roaming\mozilla\Extensions
[2012-10-22 20:16:39 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012-10-11 03:58:06 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2012-10-11 03:58:06 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2012-10-11 03:58:06 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2012-10-11 03:58:06 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2012-10-11 03:58:06 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2012-10-11 03:58:06 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - homepage: http://www.google.com
CHR - default_search_provider:  ()
CHR - default_search_provider: search_url = 
CHR - default_search_provider: suggest_url = 
CHR - homepage: http://home.sweetim.com/?st=6&barid={4979D926-59DE-434E-85FA-3D55F6B7B2D9}
 
O1 HOSTS File: ([2006-09-18 22:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (PC Speed Up Extension) - {11111111-1111-1111-1111-110111491187} - C:\Program Files\PC Speed Up Extension\PC Speed Up Extension.dll (Speedchecker)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.)
O3 - HKU\S-1-5-21-3780983921-1248882302-876831346-1003\..\Toolbar\ShellBrowser: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.)
O4 - HKLM..\Run: [BCSSync] C:\Program Files\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation)
O4 - HKLM..\Run: [ePower_DMC] C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe (Acer Inc.)
O4 - HKLM..\Run: [eRecoveryService]  File not found
O4 - HKLM..\Run: [LManager] C:\Program Files\Launch Manager\LManager.exe (Dritek System Inc.)
O4 - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Panasonic Device Manager for Multi-Function Station software] C:\Program Files\Panasonic\MFStation\PCCMFSDM.exe (                                 )
O4 - HKLM..\Run: [Panasonic PCFAX for Multi-Function Station software] C:\Program Files\Panasonic\MFStation\KmPcFax.exe (Panasonic System Networks Co.,Ltd.)
O4 - HKLM..\Run: [PLFSetI] C:\Windows\PLFSetI.exe ()
O4 - HKLM..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" File not found
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKLM..\Run: [ZPdtWzdVitaKey MC3000] C:\Program Files\Acer\Acer Bio Protection\PdtWzd.exe (Arachnoid Biometrics Identification Group Corp.)
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-3780983921-1248882302-876831346-1003..\Run: [PCSpeedUp] C:\Program Files\Przyspiesz Komputer\PCSUNotifier.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableCAD = 1
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Wyślij obraz do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Wyślij stronę do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: Quick-Launching Area - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Program Files\Acer\Acer Bio Protection\PwdBank.exe ()
O9 - Extra 'Tools' menuitem : Quick-Launching Area - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Program Files\Acer\Acer Bio Protection\PwdBank.exe ()
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab (Java Plug-in 1.5.0_06)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{83379A45-B15D-4FCF-B974-477AB12EA519}: NameServer = 62.233.233.233 87.204.204.204
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{CEA7D3BF-D8FF-4C67-80D2-1E52F99EC23D}: DhcpNameServer = 10.0.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{ECB699F3-DBA1-49EA-ADF1-CE105AB1C5EA}: DhcpNameServer = 192.168.0.1
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKU\S-1-5-21-3780983921-1248882302-876831346-1003 Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKU\S-1-5-21-3780983921-1248882302-876831346-1003 Winlogon: Shell - (C:\Users\Rodzina\AppData\Roaming\skype.dat) - C:\Users\Rodzina\AppData\Roaming\skype.dat ()
O20 - Winlogon\Notify\AWinNotifyVitaKey MC3000: DllName - (C:\Program Files\Acer\Acer Bio Protection\WinNotify.dll) - C:\Program Files\Acer\Acer Bio Protection\WinNotify.dll (Arachnoid Biometrics Identification Group Corp.)
O20 - Winlogon\Notify\spba: DllName - (C:\Program Files\Common Files\SPBA\homefus2.dll) - C:\Program Files\Common Files\SPBA\homefus2.dll (UPEK Inc.)
O24 - Desktop WallPaper: C:\Users\Rodzina\Desktop\Różne i Foto\FOtki Ania w pracy\Dysk D 034 tło.jpg
O24 - Desktop BackupWallPaper: C:\Users\Rodzina\Desktop\Różne i Foto\FOtki Ania w pracy\Dysk D 034 tło.jpg
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O31 - SafeBoot: UseAlternatShell - 1
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006-09-18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{0a03dd84-bf7b-11df-99b3-94927782b2f8}\Shell - "" = AutoRun
O33 - MountPoints2\{0a03dd84-bf7b-11df-99b3-94927782b2f8}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{1840040e-3e79-11e0-949b-9e1d19d48e28}\Shell - "" = AutoRun
O33 - MountPoints2\{1840040e-3e79-11e0-949b-9e1d19d48e28}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{3a7388a2-b3e8-11de-8c6e-a93411e0f599}\Shell - "" = Autorun
O33 - MountPoints2\{3a7388a2-b3e8-11de-8c6e-a93411e0f599}\Shell\AutoRun\command - "" = setup.exe
O33 - MountPoints2\{c2e32011-9953-11df-9334-c4cb2a06145a}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\Recycled\ctfmon.exe
O33 - MountPoints2\{c2e32011-9953-11df-9334-c4cb2a06145a}\Shell\Open(&0)\command - "" = F:\Recycled\ctfmon.exe
O33 - MountPoints2\{c4f9249b-939d-11de-8629-a47cce97115c}\Shell - "" = AutoRun
O33 - MountPoints2\{c4f9249b-939d-11de-8629-a47cce97115c}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a
O33 - MountPoints2\{cb52dd34-75d3-11de-aa39-00f1d000f1d0}\Shell - "" = AutoRun
O33 - MountPoints2\{cb52dd34-75d3-11de-aa39-00f1d000f1d0}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a
O33 - MountPoints2\{f35af616-58c6-11e0-86a3-9afad6804147}\Shell - "" = AutoRun
O33 - MountPoints2\{f35af616-58c6-11e0-86a3-9afad6804147}\Shell\AutoRun\command - "" = F:\MicroLauncher.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2013-01-22 08:26:17 | 000,000,000 | ---D | C] -- C:\Users\Rodzina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ofensa
[2013-01-22 08:25:51 | 000,000,000 | ---D | C] -- C:\Compensa SA
[2013-01-17 21:11:54 | 000,000,000 | ---D | C] -- C:\Users\Rodzina\Desktop\PRACA
[2013-01-15 21:24:00 | 000,000,000 | ---D | C] -- C:\Users\Rodzina\Desktop\NIEMCY
[2013-01-15 11:21:29 | 000,000,000 | ---D | C] -- C:\Users\Rodzina\Desktop\Andrzej R
[2013-01-09 20:44:33 | 002,048,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2013-01-09 20:24:29 | 000,000,000 | ---D | C] -- C:\Users\Rodzina\Desktop\Gimnastyka
[2013-01-09 16:29:46 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncrypt.dll
[2013-01-03 21:18:49 | 000,000,000 | ---D | C] -- C:\Users\Rodzina\Desktop\ITC
[2013-01-02 22:44:19 | 000,000,000 | ---D | C] -- C:\Users\Rodzina\AppData\Local\PC Speed Up Extension
[2013-01-02 22:44:12 | 000,000,000 | ---D | C] -- C:\Program Files\PC Speed Up Extension
[2013-01-02 22:43:50 | 000,000,000 | ---D | C] -- C:\Users\Rodzina\Documents\PCSpeedUp
[2013-01-02 22:43:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Przyspiesz Komputer
[2013-01-02 22:43:26 | 000,000,000 | ---D | C] -- C:\Program Files\Przyspiesz Komputer
[2013-01-02 19:49:46 | 000,895,936 | ---- | C] (Oracle Corporation) -- C:\Users\Rodzina\Desktop\JavaSetup7u10.exe.dau34l4.partial
[2012-12-29 16:53:07 | 000,293,376 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2012-12-29 16:53:07 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2013-01-27 14:42:29 | 000,811,722 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2013-01-27 14:42:29 | 000,731,630 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013-01-27 14:42:29 | 000,189,764 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2013-01-27 14:42:29 | 000,156,822 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013-01-27 14:36:07 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013-01-27 14:16:43 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2013-01-27 14:16:20 | 000,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2013-01-27 14:16:20 | 000,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2013-01-27 14:10:09 | 000,000,004 | ---- | M] () -- C:\Users\Rodzina\AppData\Roaming\skype.ini
[2013-01-27 14:06:49 | 000,001,032 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013-01-27 14:05:41 | 000,000,000 | ---- | M] () -- C:\Windows\System32\LogConfigTemp.xml
[2013-01-24 11:03:02 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013-01-24 10:54:01 | 000,001,036 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013-01-23 18:35:07 | 000,000,352 | ---- | M] () -- C:\Windows\tasks\PC SpeedUp Service Deactivator.job
[2013-01-22 08:26:17 | 000,000,684 | ---- | M] () -- C:\Users\Rodzina\Desktop\System Ofensa.lnk
[2013-01-10 20:40:44 | 000,697,864 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2013-01-10 20:40:44 | 000,074,248 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2013-01-10 19:56:00 | 000,376,672 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2013-01-10 13:29:20 | 000,199,445 | ---- | M] () -- C:\Users\Rodzina\Desktop\Zarobki.pdf
[2013-01-08 23:27:30 | 254,570,833 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2013-01-02 22:43:29 | 000,000,865 | ---- | M] () -- C:\Users\Rodzina\Desktop\Przyspiesz Komputer.lnk
[2013-01-02 19:50:11 | 000,895,936 | ---- | M] (Oracle Corporation) -- C:\Users\Rodzina\Desktop\JavaSetup7u10.exe.dau34l4.partial
[2013-01-02 19:14:19 | 000,004,494 | -HS- | M] () -- C:\ProgramData\KGyGaAvL.sys
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2013-01-24 11:13:15 | 000,000,004 | ---- | C] () -- C:\Users\Rodzina\AppData\Roaming\skype.ini
[2013-01-22 08:26:16 | 000,000,684 | ---- | C] () -- C:\Users\Rodzina\Desktop\System Ofensa.lnk
[2013-01-10 13:29:13 | 000,199,445 | ---- | C] () -- C:\Users\Rodzina\Desktop\Zarobki.pdf
[2013-01-08 23:27:30 | 254,570,833 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2013-01-05 19:29:32 | 001,029,130 | ---- | C] () -- C:\Users\Rodzina\Desktop\100_2478.JPG
[2013-01-02 22:43:31 | 000,000,352 | ---- | C] () -- C:\Windows\tasks\PC SpeedUp Service Deactivator.job
[2013-01-02 22:43:29 | 000,000,865 | ---- | C] () -- C:\Users\Rodzina\Desktop\Przyspiesz Komputer.lnk
[2012-12-10 09:29:10 | 095,023,320 | ---- | C] () -- C:\ProgramData\dsgsdgdsgdsgw.pad
[2012-10-11 17:54:43 | 000,000,680 | ---- | C] () -- C:\Users\Rodzina\AppData\Local\d3d9caps.dat
[2012-07-15 15:59:41 | 000,000,135 | ---- | C] () -- C:\Windows\AutoKMS.ini
[2012-02-02 15:57:12 | 000,000,149 | ---- | C] () -- C:\Windows\ricdb.ini
[2012-01-11 19:13:01 | 000,044,032 | ---- | C] () -- C:\Users\Rodzina\AppData\Roaming\skype.dat
[2011-06-08 22:46:38 | 000,000,233 | ---- | C] () -- C:\Windows\PanaFLB881.ini
[2011-06-02 01:58:46 | 000,167,592 | ---- | C] () -- C:\Windows\hpwins12.dat
[2011-06-02 01:57:51 | 000,009,842 | ---- | C] () -- C:\Windows\hpwscr12.dat
[2011-06-02 01:57:51 | 000,000,981 | ---- | C] () -- C:\Windows\hpwmdl12.dat
[2011-05-19 07:41:05 | 000,022,122 | ---- | C] () -- C:\Users\Rodzina\AppData\Local\kalk_hipo_euro_default.xml
[2011-05-19 07:36:42 | 000,008,738 | ---- | C] () -- C:\Users\Rodzina\AppData\Local\kalk_hipo_euro_parametry.par
[2011-02-11 18:40:40 | 000,004,096 | ---- | C] ( ) -- C:\Windows\System32\IGFXDEVLib.dll
[2010-11-09 12:16:43 | 000,023,888 | ---- | C] () -- C:\Users\Rodzina\AppData\Roaming\UserTile.png
[2009-10-20 22:35:55 | 000,000,008 | RHS- | C] () -- C:\ProgramData\7C3E158E3C.sys
[2009-10-08 10:32:20 | 000,000,095 | ---- | C] () -- C:\Users\Rodzina\AppData\Local\fusioncache.dat
[2009-09-22 10:10:25 | 000,986,161 | ---- | C] () -- C:\Users\Rodzina\STA73252.JPG
[2009-09-22 10:10:25 | 000,982,548 | ---- | C] () -- C:\Users\Rodzina\STA73254.JPG
[2009-09-22 10:10:25 | 000,977,573 | ---- | C] () -- C:\Users\Rodzina\STA73253.JPG
[2009-09-22 10:10:25 | 000,973,617 | ---- | C] () -- C:\Users\Rodzina\STA73251.JPG
[2009-09-22 10:10:25 | 000,966,963 | ---- | C] () -- C:\Users\Rodzina\STA73255.JPG
[2009-09-22 10:10:25 | 000,952,713 | ---- | C] () -- C:\Users\Rodzina\STA73250.JPG
[2009-05-05 07:33:57 | 000,020,480 | ---- | C] () -- C:\Users\Rodzina\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009-05-01 08:42:38 | 000,004,494 | -HS- | C] () -- C:\ProgramData\KGyGaAvL.sys
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2006-11-02 13:54:22 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012-06-08 18:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009-04-11 07:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009-04-11 07:28:25 | 000,347,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2012-01-23 20:36:59 | 000,000,000 | ---D | M] -- C:\Users\Rodzina\AppData\Roaming\Agencja Ubezpieczeniowa
[2012-02-29 23:43:32 | 000,000,000 | ---D | M] -- C:\Users\Rodzina\AppData\Roaming\auupdates
[2012-03-21 12:18:33 | 000,000,000 | ---D | M] -- C:\Users\Rodzina\AppData\Roaming\e-pity
[2009-08-26 10:33:47 | 000,000,000 | ---D | M] -- C:\Users\Rodzina\AppData\Roaming\ESET
[2009-04-30 23:34:04 | 000,000,000 | ---D | M] -- C:\Users\Rodzina\AppData\Roaming\eSobi
[2011-04-18 15:37:28 | 000,000,000 | ---D | M] -- C:\Users\Rodzina\AppData\Roaming\Fighters
[2009-05-01 08:42:51 | 000,000,000 | ---D | M] -- C:\Users\Rodzina\AppData\Roaming\InterVideo
[2009-08-26 07:34:09 | 000,000,000 | ---D | M] -- C:\Users\Rodzina\AppData\Roaming\Logs
[2009-11-09 12:38:40 | 000,000,000 | ---D | M] -- C:\Users\Rodzina\AppData\Roaming\Notepad++
[2011-06-08 22:54:08 | 000,000,000 | ---D | M] -- C:\Users\Rodzina\AppData\Roaming\Panasonic
[2010-11-09 12:16:42 | 000,000,000 | ---D | M] -- C:\Users\Rodzina\AppData\Roaming\PeerNetworking
[2012-04-13 22:08:35 | 000,000,000 | ---D | M] -- C:\Users\Rodzina\AppData\Roaming\PegazNET
[2009-09-23 13:36:00 | 000,000,000 | ---D | M] -- C:\Users\Rodzina\AppData\Roaming\Thunderbird
 
[color=#E56717]========== Purity Check ==========[/color]
 
 

< End of report >