OTL logfile created on: 2011-01-17 16:46:33 - Run 4
OTL by OldTimer - Version 3.2.20.2     Folder = C:\Documents and Settings\Victor\My Documents\Downloads
Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
1 022,00 Mb Total Physical Memory | 185,00 Mb Available Physical Memory | 18,00% Memory free
2,00 Gb Paging File | 1,00 Gb Available in Paging File | 59,00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 102,28 Gb Total Space | 78,31 Gb Free Space | 76,56% Space Free | Partition Type: NTFS
Drive D: | 8,48 Gb Total Space | 0,16 Gb Free Space | 1,83% Space Free | Partition Type: FAT32
 
Computer Name: PC145233194931 | User Name: Victor | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2011-01-17 16:44:24 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Victor\My Documents\Downloads\OTL.exe
PRC - [2011-01-08 04:35:52 | 000,991,800 | ---- | M] (Google Inc.) -- C:\Documents and Settings\Victor\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
PRC - [2010-12-16 11:37:30 | 000,267,944 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe
PRC - [2010-12-16 06:19:28 | 012,984,928 | ---- | M] (GG Network S.A.) -- C:\Program Files\Gadu-Gadu 10\gg.exe
PRC - [2010-12-09 20:28:24 | 001,226,608 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
PRC - [2010-08-02 16:10:00 | 000,135,336 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe
PRC - [2010-08-02 16:09:55 | 000,281,768 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
PRC - [2010-01-14 22:11:00 | 000,076,968 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
PRC - [2009-03-05 16:07:20 | 002,260,480 | RHS- | M] (Safer-Networking Ltd.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
PRC - [2008-04-14 01:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007-07-06 08:40:38 | 000,405,504 | ---- | M] (Fine Point Technologies, Inc.) -- C:\Program Files\DialNet\WinPPPoverEthernet.exe
PRC - [2007-07-04 16:27:24 | 000,135,168 | ---- | M] (Fine Point Technologies, Inc.) -- C:\Program Files\DialNet\WrOS.exe
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - [2011-01-17 16:44:24 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Victor\My Documents\Downloads\OTL.exe
MOD - [2010-08-23 17:12:02 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [Disabled | Stopped] --  -- (HidServ)
SRV - [2010-12-16 11:37:30 | 000,267,944 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2010-08-02 16:10:00 | 000,135,336 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2007-07-04 16:27:24 | 000,135,168 | ---- | M] (Fine Point Technologies, Inc.) [Auto | Running] -- C:\Program Files\DialNet\WrOS.exe -- (WinPPPoverEthernet)
SRV - [2006-06-12 12:27:28 | 000,126,976 | ---- | M] (Hewlett-Packard Development Company, L.P.) [On_Demand | Stopped] -- C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe -- (AddFiltr)
SRV - [2005-10-06 17:46:38 | 000,856,064 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Media Connect 2\wmccds.exe -- (WMConnectCDS)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2010-12-21 18:59:40 | 000,135,096 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2010-11-27 18:07:18 | 000,061,960 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2010-06-17 15:27:22 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2010-06-17 15:27:12 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2009-06-22 12:48:44 | 000,091,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mqac.sys -- (MQAC)
DRV - [2008-05-08 15:02:52 | 000,203,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rmcast.sys -- (RMCAST)
DRV - [2008-04-13 19:36:39 | 000,043,008 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\amdagp.sys -- (amdagp)
DRV - [2008-04-13 19:36:39 | 000,040,960 | ---- | M] (Silicon Integrated Systems Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\sisagp.sys -- (sisagp)
DRV - [2008-04-13 17:36:05 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2007-07-04 16:27:24 | 000,065,604 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\WrKPoETNic2000.sys -- (WRSWanDD)
DRV - [2007-07-04 16:27:24 | 000,052,214 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Program Files\DialNet\WrKPoET2000.sys -- (WrKPoET2000)
DRV - [2007-07-04 16:27:24 | 000,052,214 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\WrKPoET2000.sys -- (TopWinPoETDriver)
DRV - [2007-07-04 16:27:22 | 000,030,336 | ---- | M] (Politecnico di Torino) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\fpd.sys -- (FPD)
DRV - [2007-06-18 16:12:04 | 000,016,768 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HpqKbFiltr.sys -- (HpqKbFiltr)
DRV - [2006-09-28 20:23:34 | 001,709,696 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NETw3x32.sys -- (NETw3x32) Sterownik karty Intel(R)
DRV - [2006-09-27 17:10:00 | 003,694,656 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2006-07-26 22:44:42 | 000,581,632 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\CHDAud.sys -- (HdAudAddService)
DRV - [2006-07-06 10:28:58 | 000,047,744 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\snp2uvc.sys -- (SNP2UVC) USB2.0 PC Camera (SNP2UVC)
DRV - [2006-06-28 09:54:00 | 000,009,472 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\CPQBttn.sys -- (HBtnKey)
DRV - [2006-06-17 05:40:56 | 000,193,120 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SynTP.sys -- (SynTP)
DRV - [2006-05-12 13:21:22 | 000,401,664 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btaudio.sys -- (btaudio)
DRV - [2006-05-12 13:19:04 | 001,342,602 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL)
DRV - [2006-05-12 13:17:18 | 000,030,363 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btport.sys -- (BTDriver)
DRV - [2006-05-12 13:17:10 | 000,030,189 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwmodem.sys -- (btwmodem)
DRV - [2006-05-12 13:16:44 | 000,057,320 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB)
DRV - [2006-05-12 13:13:46 | 000,148,168 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwdndis.sys -- (BTWDNDIS)
DRV - [2006-04-20 17:03:20 | 000,995,712 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_DPV.sys -- (HSF_DPV)
DRV - [2006-04-20 17:02:40 | 000,208,000 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSFHWAZL.sys -- (HSFHWAZL)
DRV - [2006-04-20 17:02:36 | 000,727,296 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf)
DRV - [2006-04-11 12:07:48 | 000,179,200 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\e1e5132.sys -- (e1express) Intel(R)
DRV - [2005-12-22 17:02:22 | 000,051,840 | ---- | M] (REDC) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2005-11-16 20:28:32 | 000,028,928 | ---- | M] (REDC) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2005-11-01 18:08:00 | 000,308,992 | ---- | M] (REDC) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rixdptsk.sys -- (rismxdp)
DRV - [2005-10-13 10:07:12 | 000,874,240 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\iaStor.sys -- (iaStor)
DRV - [2005-09-19 13:24:20 | 000,005,760 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\EabUsb.sys -- (eabusb)
DRV - [2004-08-04 07:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Realtek RTL8139(A/B/C)
DRV - [2001-08-17 21:07:44 | 000,019,072 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\sparrow.sys -- (Sparrow)
DRV - [2001-08-17 21:07:42 | 000,030,688 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\sym_u3.sys -- (sym_u3)
DRV - [2001-08-17 21:07:40 | 000,028,384 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\sym_hi.sys -- (sym_hi)
DRV - [2001-08-17 21:07:36 | 000,032,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\symc8xx.sys -- (symc8xx)
DRV - [2001-08-17 21:07:34 | 000,016,256 | ---- | M] (Symbios Logic Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\symc810.sys -- (symc810)
DRV - [2001-08-17 20:52:22 | 000,036,736 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\ultra.sys -- (ultra)
DRV - [2001-08-17 20:52:20 | 000,045,312 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\ql12160.sys -- (ql12160)
DRV - [2001-08-17 20:52:20 | 000,040,320 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\ql1080.sys -- (ql1080)
DRV - [2001-08-17 20:52:18 | 000,049,024 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\ql1280.sys -- (ql1280)
DRV - [2001-08-17 20:52:16 | 000,179,584 | ---- | M] (Mylex Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\dac2w2k.sys -- (dac2w2k)
DRV - [2001-08-17 20:52:12 | 000,017,280 | ---- | M] (American Megatrends Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\mraid35x.sys -- (mraid35x)
DRV - [2001-08-17 20:52:00 | 000,026,496 | ---- | M] (Advanced System Products, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\asc.sys -- (asc)
DRV - [2001-08-17 20:51:58 | 000,014,848 | ---- | M] (Advanced System Products, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\asc3550.sys -- (asc3550)
DRV - [2001-08-17 20:51:56 | 000,005,248 | ---- | M] (Acer Laboratories Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\aliide.sys -- (AliIde)
DRV - [2001-08-17 20:51:54 | 000,006,656 | ---- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\cmdide.sys -- (CmdIde)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-21-2892962287-3909793390-2519683295-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.hp.com
IE - HKU\S-1-5-21-2892962287-3909793390-2519683295-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..extensions.enabledItems: {e2fda1a4-762b-4020-b5ad-a41df1933103}:1.0b2
FF - prefs.js..extensions.enabledItems: en-GB@dictionaries.addons.mozilla.org:1.19.1
FF - prefs.js..extensions.enabledItems: de-DE@dictionaries.addons.mozilla.org:2.0.2
FF - prefs.js..extensions.enabledItems: dictionary-switcher-tb@design-noir.de:1.1.5
FF - prefs.js..extensions.enabledItems: quickfolders@curious.be:2.2
FF - prefs.js..extensions.enabledItems: {a300a000-5e21-4ee0-a115-9ec8f4eaa92b}:0.3.5
FF - prefs.js..extensions.enabledItems: ru@dictionaries.addons.mozilla.org:0.4.4
FF - prefs.js..extensions.enabledItems: mintrayr@tn123.ath.cx:0.8.1
FF - prefs.js..extensions.enabledItems: LeopardMailDefaultAqua@reo-2007:3.2.6
 
FF - HKLM\software\mozilla\Firefox\extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video [2010-12-09 22:51:23 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\extensions\\{6904342A-8307-11DF-A508-4AE2DFD72085}: C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa [2010-12-09 22:51:24 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.7\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2011-01-17 12:58:20 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.7\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2010-12-09 22:51:23 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
 
[2010-11-23 22:40:25 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Victor\Application Data\mozilla\Extensions
[2010-11-23 22:40:25 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Victor\Application Data\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2010-11-23 22:53:31 | 000,000,000 | ---D | M] (Remove Duplicate Messages (Alternate)) -- C:\DOCUMENTS AND SETTINGS\VICTOR\APPLICATION DATA\THUNDERBIRD\PROFILES\RXRKFKXU.DEFAULT\EXTENSIONS\{A300A000-5E21-4EE0-A115-9EC8F4EAA92B}
[2010-11-23 22:53:32 | 000,000,000 | ---D | M] (Lightning) -- C:\DOCUMENTS AND SETTINGS\VICTOR\APPLICATION DATA\THUNDERBIRD\PROFILES\RXRKFKXU.DEFAULT\EXTENSIONS\{E2FDA1A4-762B-4020-B5AD-A41DF1933103}
[2010-11-23 22:53:32 | 000,000,000 | ---D | M] (German Dictionary) -- C:\DOCUMENTS AND SETTINGS\VICTOR\APPLICATION DATA\THUNDERBIRD\PROFILES\RXRKFKXU.DEFAULT\EXTENSIONS\DE-DE@DICTIONARIES.ADDONS.MOZILLA.ORG
[2010-11-23 22:53:32 | 000,000,000 | ---D | M] (Dictionary Switcher) -- C:\DOCUMENTS AND SETTINGS\VICTOR\APPLICATION DATA\THUNDERBIRD\PROFILES\RXRKFKXU.DEFAULT\EXTENSIONS\DICTIONARY-SWITCHER-TB@DESIGN-NOIR.DE
[2010-12-10 09:26:45 | 000,000,000 | ---D | M] (British English Dictionary) -- C:\DOCUMENTS AND SETTINGS\VICTOR\APPLICATION DATA\THUNDERBIRD\PROFILES\RXRKFKXU.DEFAULT\EXTENSIONS\EN-GB@DICTIONARIES.ADDONS.MOZILLA.ORG
[2010-12-23 13:47:45 | 000,000,000 | ---D | M] (MinimizeToTray revived (MinTrayR)) -- C:\DOCUMENTS AND SETTINGS\VICTOR\APPLICATION DATA\THUNDERBIRD\PROFILES\RXRKFKXU.DEFAULT\EXTENSIONS\MINTRAYR@TN123.ATH.CX
[2010-12-23 13:47:45 | 000,000,000 | ---D | M] ("QuickFolders") -- C:\DOCUMENTS AND SETTINGS\VICTOR\APPLICATION DATA\THUNDERBIRD\PROFILES\RXRKFKXU.DEFAULT\EXTENSIONS\QUICKFOLDERS@CURIOUS.BE
[2010-11-23 22:53:31 | 000,000,000 | ---D | M] (Russian spellchecking dictionary) -- C:\DOCUMENTS AND SETTINGS\VICTOR\APPLICATION DATA\THUNDERBIRD\PROFILES\RXRKFKXU.DEFAULT\EXTENSIONS\RU@DICTIONARIES.ADDONS.MOZILLA.ORG
 
O1 HOSTS File: ([2010-12-17 18:51:53 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (DivX HiQ) - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O3 - HKU\S-1-5-21-2892962287-3909793390-2519683295-1005\..\Toolbar\WebBrowser: (no name) - {C4069E3A-68F1-403E-B40E-20066696354B} - No CLSID value found.
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [a-winpoet-service] C:\Program Files\DialNet\winpppoverethernet.exe (Fine Point Technologies, Inc.)
O4 - HKLM..\Run: [Cpqset] C:\Program Files\Hewlett-Packard\Default Settings\Cpqset.exe ()
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [High Definition Audio Property Page Shortcut] C:\WINDOWS\System32\CHDAudPropShortcut.exe (Windows (R) Server 2003 DDK provider)
O4 - HKLM..\Run: [MsmqIntCert] C:\WINDOWS\System32\mqrt.dll (Microsoft Corporation)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [RecGuard] C:\WINDOWS\SMINST\Recguard.exe ()
O4 - HKU\S-1-5-21-2892962287-3909793390-2519683295-1005..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallVisualStyle = C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles (Microsoft)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallTheme = C:\WINDOWS\Resources\Themes\Royale.theme ()
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-2892962287-3909793390-2519683295-1005\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2892962287-3909793390-2519683295-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-2892962287-3909793390-2519683295-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-2892962287-3909793390-2519683295-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Wyślij do interfejsu &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\Victor\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Victor\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2001-07-27 13:07:38 | 000,000,000 | -HS- | M] () - D:\AUTOEXEC.BAT -- [ FAT32 ]
O32 - AutoRun File - [2004-04-30 05:01:14 | 000,000,053 | -HS- | M] () - D:\AUTORUN.FCB -- [ FAT32 ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011-01-17 16:11:22 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Victor\Recent
[2011-01-17 12:54:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Silverlight
[2011-01-17 12:54:21 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight
[2011-01-09 14:05:12 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\NtmsData
[2011-01-07 14:24:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Victor\.gstreamer-0.10
[2011-01-04 16:00:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Victor\Start Menu\Programs\IrfanView
[2011-01-04 16:00:52 | 000,000,000 | ---D | C] -- C:\Program Files\IrfanView
[2011-01-04 12:31:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\OpenFM
[2011-01-04 12:31:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Victor\Application Data\OpenFM
[2010-12-19 12:11:53 | 002,120,176 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxsfs.dll
[2010-12-19 12:11:53 | 000,133,616 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxafs.dll
[2010-12-19 12:11:53 | 000,126,448 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxinsi64.exe
[2010-12-19 12:11:53 | 000,123,888 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxcpyi64.exe
[2010-12-19 12:11:53 | 000,072,176 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxhpinst.exe
[2010-12-19 12:11:53 | 000,068,592 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxinsa64.exe
[2010-12-19 12:11:53 | 000,068,080 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxcpya64.exe
[2010-12-19 12:11:53 | 000,009,200 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\cdralw2k.sys
[2010-12-19 12:11:53 | 000,009,072 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\cdr4_xp.sys
[2010-11-24 20:25:34 | 000,053,248 | ---- | C] ( ) -- C:\WINDOWS\csnp2uvc.dll
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2011-01-17 16:37:01 | 000,001,036 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011-01-17 14:00:00 | 000,000,476 | ---- | M] () -- C:\WINDOWS\tasks\At4.job
[2011-01-17 10:10:00 | 000,000,476 | ---- | M] () -- C:\WINDOWS\tasks\At1.job
[2011-01-17 09:47:36 | 000,051,048 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2011-01-17 09:47:32 | 000,001,032 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011-01-17 09:44:33 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011-01-17 09:44:30 | 1071,697,920 | -HS- | M] () -- C:\hiberfil.sys
[2011-01-16 20:40:00 | 000,000,476 | ---- | M] () -- C:\WINDOWS\tasks\At2.job
[2011-01-16 20:19:02 | 000,002,267 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Skype.lnk
[2011-01-16 20:03:00 | 000,000,476 | ---- | M] () -- C:\WINDOWS\tasks\At3.job
[2011-01-14 16:20:42 | 000,002,293 | ---- | M] () -- C:\Documents and Settings\Victor\Desktop\Google Chrome.lnk
[2011-01-14 16:20:42 | 000,002,271 | ---- | M] () -- C:\Documents and Settings\Victor\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2011-01-14 16:13:11 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011-01-13 13:23:45 | 005,447,446 | ---- | M] () -- C:\Documents and Settings\Victor\Desktop\Alexander Serov - Ya lublju tebja do slez.mp3
[2011-01-13 12:11:40 | 000,607,165 | ---- | M] () -- C:\Documents and Settings\Victor\My Documents\zdjęcie0065.jpg
[2011-01-10 13:04:51 | 000,003,584 | ---- | M] () -- C:\Documents and Settings\Victor\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-01-06 20:07:22 | 000,000,708 | ---- | M] () -- C:\WINDOWS\tasks\hpwebreg_xxxxxxxxxx.job
[2011-01-04 17:41:59 | 000,145,408 | ---- | M] () -- C:\Documents and Settings\Victor\Desktop\UCTE_Operation_Handbook_Policy_5_pl.pdf
[2011-01-04 17:41:30 | 000,177,152 | ---- | M] () -- C:\Documents and Settings\Victor\Desktop\UCTE_Operation_Handbook_P3.pdf
[2011-01-04 16:00:53 | 000,000,685 | ---- | M] () -- C:\Documents and Settings\Victor\Desktop\IrfanView.lnk
[2010-12-31 14:48:26 | 003,254,343 | ---- | M] () -- C:\Documents and Settings\Victor\My Documents\IMG_0069.JPG
[2010-12-24 15:37:36 | 004,164,162 | ---- | M] () -- C:\Documents and Settings\Victor\My Documents\IMG_0068.JPG
[2010-12-23 00:41:22 | 000,104,671 | ---- | M] () -- C:\Documents and Settings\Victor\My Documents\bialy-czarny-chce-miec-faceta-wanna-have-guy-ddp-koszulki-dzieciece_design.png
[2010-12-22 23:46:38 | 000,025,274 | ---- | M] () -- C:\Documents and Settings\Victor\My Documents\zyrafa.jpg
[2010-12-21 18:59:40 | 000,135,096 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011-01-13 13:23:24 | 005,447,446 | ---- | C] () -- C:\Documents and Settings\Victor\Desktop\Alexander Serov - Ya lublju tebja do slez.mp3
[2011-01-13 12:11:25 | 000,607,165 | ---- | C] () -- C:\Documents and Settings\Victor\My Documents\zdjęcie0065.jpg
[2011-01-10 13:04:51 | 000,003,584 | ---- | C] () -- C:\Documents and Settings\Victor\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-01-04 17:42:00 | 000,145,408 | ---- | C] () -- C:\Documents and Settings\Victor\Desktop\UCTE_Operation_Handbook_Policy_5_pl.pdf
[2011-01-04 17:41:36 | 000,177,152 | ---- | C] () -- C:\Documents and Settings\Victor\Desktop\UCTE_Operation_Handbook_P3.pdf
[2011-01-04 16:00:53 | 000,000,685 | ---- | C] () -- C:\Documents and Settings\Victor\Desktop\IrfanView.lnk
[2010-12-31 14:53:46 | 003,254,343 | ---- | C] () -- C:\Documents and Settings\Victor\My Documents\IMG_0069.JPG
[2010-12-31 14:53:23 | 004,164,162 | ---- | C] () -- C:\Documents and Settings\Victor\My Documents\IMG_0068.JPG
[2010-12-23 00:41:24 | 000,104,671 | ---- | C] () -- C:\Documents and Settings\Victor\My Documents\bialy-czarny-chce-miec-faceta-wanna-have-guy-ddp-koszulki-dzieciece_design.png
[2010-12-22 23:46:44 | 000,025,274 | ---- | C] () -- C:\Documents and Settings\Victor\My Documents\zyrafa.jpg
[2010-12-03 23:24:33 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Victor\Application Data\wklnhst.dat
[2010-11-23 19:51:27 | 000,065,604 | ---- | C] () -- C:\WINDOWS\System32\drivers\WrKPoETNic2000.sys
[2010-11-23 19:51:27 | 000,052,214 | ---- | C] () -- C:\WINDOWS\System32\drivers\WrKPoET2000.sys
[2010-11-23 19:47:22 | 000,000,129 | ---- | C] () -- C:\Documents and Settings\Victor\Local Settings\Application Data\fusioncache.dat
[2010-11-23 19:47:22 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Victor\Local Settings\Application Data\DSwitch.txt
[2010-11-23 19:47:22 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Victor\Local Settings\Application Data\AtStart.txt
[2010-11-23 19:47:21 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Victor\Local Settings\Application Data\QSwitch.txt
[2006-10-27 07:36:53 | 000,029,006 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2006-07-20 06:58:00 | 001,662,976 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2006-07-20 06:58:00 | 001,470,464 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2006-07-20 06:58:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2006-07-20 06:58:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2006-07-20 06:58:00 | 000,098,304 | ---- | C] () -- C:\WINDOWS\System32\nvapi.dll
[2006-07-06 11:28:58 | 000,047,744 | ---- | C] () -- C:\WINDOWS\System32\drivers\snp2uvc.sys
[2006-06-14 17:25:00 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2006-06-14 16:58:14 | 000,000,368 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\hpzinstall.log
[2006-06-14 16:55:34 | 000,000,059 | ---- | C] () -- C:\WINDOWS\WININIT.INI
[2006-06-14 16:12:36 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2006-05-12 13:23:22 | 000,090,112 | ---- | C] () -- C:\WINDOWS\System32\btprn2k.dll
[2005-08-05 21:01:54 | 000,239,104 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2005-05-06 19:06:32 | 000,016,480 | ---- | C] () -- C:\WINDOWS\System32\rixdicon.dll
[2001-11-14 13:56:00 | 001,802,240 | ---- | C] () -- C:\WINDOWS\System32\lcppn21.dll
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2010-11-24 10:38:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ESET
[2010-11-23 21:16:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Gadu-Gadu 10
[2011-01-11 18:49:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\OpenFM
[2010-12-05 13:21:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Victor\Application Data\becker
[2010-11-24 10:39:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Victor\Application Data\ESET
[2010-11-24 17:47:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Victor\Application Data\foobar2000
[2010-11-23 21:16:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Victor\Application Data\Gadu-Gadu 10
[2010-12-05 13:16:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Victor\Application Data\mybecker.com
[2011-01-04 12:31:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Victor\Application Data\OpenFM
[2010-11-27 15:52:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Victor\Application Data\OpenOffice.org
[2010-12-03 23:24:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Victor\Application Data\Template
[2010-11-23 22:40:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Victor\Application Data\Thunderbird
[2011-01-17 10:10:00 | 000,000,476 | ---- | M] () -- C:\WINDOWS\Tasks\At1.job
[2011-01-16 20:40:00 | 000,000,476 | ---- | M] () -- C:\WINDOWS\Tasks\At2.job
[2011-01-16 20:03:00 | 000,000,476 | ---- | M] () -- C:\WINDOWS\Tasks\At3.job
[2011-01-17 14:00:00 | 000,000,476 | ---- | M] () -- C:\WINDOWS\Tasks\At4.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 

< End of report >